Commit Graph

41437 Commits

Author SHA1 Message Date
Peder Bergebakken Sundt
302b223beb
[Backport release-24.05] nixos/tailscale: document tailscale-autoconnect (#350140) 2024-11-14 01:42:24 +01:00
Sefa Eyeoglu
9256f7c71a
[Backport release-24.05] borgmatic-exporter: init at 0.2.5 (#329180) 2024-11-10 12:48:13 +01:00
Atemu
bb824c634c
[Backport release-24.05] nixos/swapspace: init module (#354217) 2024-11-09 09:51:44 +01:00
phanirithvij
f627c88a50
nixos/swapspace: add tests
Signed-off-by: phanirithvij <phanirithvij2000@gmail.com>
(cherry picked from commit e4c898c807)
2024-11-07 13:23:04 +01:00
phanirithvij
f12598eff2
nixos/swapspace: init module
Signed-off-by: phanirithvij <phanirithvij2000@gmail.com>
Co-authored-by: Luflosi <luflosi@luflosi.de>
(cherry picked from commit 80ea320fe7)
2024-11-07 13:14:06 +01:00
Fabián Heredia Montiel
83312cd55d linux/hardened/patches/6.11: init at v6.11.6-hardened1
(cherry picked from commit 2f31bf4c47)
2024-11-07 08:42:31 +00:00
github-actions[bot]
5c5e9ea1fa
Merge release-24.05 into staging-next-24.05 2024-11-07 00:16:44 +00:00
John Titor
b924b0d1b3 nixos/amdvlk: don't set "amdgpu" xserver driver
Not related and this should never have been in the module in the first place.
Probably got in during a rebase.

(cherry picked from commit 5473874d08)
2024-11-06 11:05:52 +00:00
github-actions[bot]
f66b66f39e
Merge release-24.05 into staging-next-24.05 2024-11-05 00:16:33 +00:00
Doron Behar
5ee495adaa
musescore: 4.4.1 -> 4.4.3 (#353370) 2024-11-04 23:48:28 +02:00
Doron Behar
44cd53a4de nixos.tests.musescore: fix and improve
- Use the print dialog to create a sample score.
- Copy also the sample score from the vm to $out of the test.
- Create a bit more screenshots
- Only use machine.wait_for_window, never machine.wait_for_text which
  requires OCR which is slow.
- Set XDG_RUNTIME_DIR so it won't dump core.
2024-11-04 09:14:48 +02:00
github-actions[bot]
d6eae6eae3
Merge release-24.05 into staging-next-24.05 2024-11-04 00:17:51 +00:00
Sandro
df9782b607
[Backport release-24.05] nixos/mediawiki: check if LocalConfig.php is valid syntax (#325261) 2024-11-03 21:28:07 +01:00
Yureka
e716bbbc22 tree-wide: switch initrd generators back to gnu cpio
Originally, we switched to bsdtar from libarchive to solve a reproducibility issue related to hardlinks

As of gnu cpio 2.14 the --ignore-dirnlink option is introduced and now included in --reproducible, which solves this issue

By switching back, we are in turn solving an issue in libarchive >=3.7.5 erroring out with "Error reading archive -: (null)"

Change-Id: Ib6140d599b6547d8e941b0251ce996e303c41fa6
(cherry picked from commit 0f216e2578)
2024-10-31 15:14:21 +00:00
teutat3s
a7c2804aa9 nixos/sway: workaround idle inhibit not working
in Firefox

Source:
https://www.reddit.com/r/swaywm/comments/1dqud2a/how_to_get_firefox_to_inhibit_idle_when_watching/
> Firefox supports the Wayaland inhibit protocol, but it attempts to use the DBus interfaces first. However, the gtk portal has an issue where it returns success even though the wlr portal/sway doesn't have an implementation for the inhibit method, see #465.

(cherry picked from commit 7e7a06994f)
2024-10-24 14:18:59 +00:00
Peder Bergebakken Sundt
6497e4e4b3 nixos/tailscale: document tailscale-autoconnect
(cherry picked from commit 233d422887)
2024-10-21 04:33:28 +00:00
Peder Bergebakken Sundt
b9562c824b
[Backport release-24.05] nixos/resilio: add package option (#348854) 2024-10-18 20:10:15 +02:00
Oliver Schmidt
746bbd84c7 tests/mysql: properly specify percona packages
(cherry picked from commit db92bb514af90fb03a17342c1dbe1407fa365053)
2024-10-15 22:18:32 +02:00
Peder Bergebakken Sundt
6429b7b322 nixos/resilio: add package option
(cherry picked from commit f0ad87bdd7)
2024-10-15 18:39:11 +00:00
Nick Cao
cabf81a26f
nixos/keycloak: raise memory size in tests to 2047M
(cherry picked from commit 937d3964c9)
2024-10-10 19:32:05 -04:00
Nick Cao
3e133804e4
nixos/keycloak: link $out/lib to KC_HOME_DIR to fix loading optimized app image
Reference: https://www.keycloak.org/docs/latest/upgrading/index.html#additional-validations-on-the-optimized-startup-option
2024-10-10 19:32:05 -04:00
Marin
ffc03d2b46 tailscaled: after NetworkManager-wait-online
The wait will only be enabled on machines with NetworkManager enabled.

Closes #180175

(cherry picked from commit 0d822ccdbc)
2024-10-05 11:34:47 +00:00
Jonas Heinrich
17f958406c
nextcloud30: init at 30.0.0
(cherry picked from commit 1b121c1ea2)
2024-10-01 13:37:24 +02:00
⛧-440729 [sophie]
ced0da1e7e nixos/invidious: add options for configuring inv-sig-helper 2024-09-28 19:56:22 +02:00
Bjørn Forsman
7da1d417b3 nixos/influxdb2: wait until service is ready
Factor out part of the provisioning script into a
wait-until-service-is-ready script, and put it unconditionally in
front of ExecStartPost=, so that services that depend on influxdb2 are
not started until influxdb2 responds to requests.

Fixes https://github.com/NixOS/nixpkgs/issues/317017 ("Scrutiny tries to start before influxdb has started")

(cherry picked from commit 732d36522f)
2024-09-27 08:39:32 +02:00
Martin Weinelt
33fbc56f4d
[Backport release-24.05] nixos/printing: add option to disable browsed daemon (#344711) 2024-09-26 21:59:12 +02:00
seth
f1c0a9cab4 nixVersions.nix_2_18: 2.18.7 -> 2.18.8
Diff: https://github.com/NixOS/nix/compare/2.18.7...2.18.8
Fixes https://github.com/NixOS/nix/security/advisories/GHSA-6fjr-mq49-mm2c

(cherry picked from commit 0aed7f0d24)
2024-09-26 18:59:45 +00:00
Thomas Gerbet
48db5e72f2 nixos/printing: add option to disable browsed daemon
It is currently tied to `services.avahi.enable` which might not be
desirable.

With this change it is possible to disable the service with
`services.printing.browsed.enable = false`

(cherry picked from commit 981a63b005)
2024-09-26 18:45:28 +00:00
Adam C. Stephens
37df9bcf93
[Backport release-24.05] lxc/incus LTS upgrades: 6.0.1 -> 6.0.2 (#344337) 2024-09-25 13:19:57 -04:00
Franz Pletz
0f1657cd03
[Backport release-24.05] nixos/prometheus-smartctl-exporter: fix NVMe scanning (#343049) 2024-09-25 18:37:56 +02:00
Adam Stephens
5a084d21e8
incus-lts: 6.0.1 -> 6.0.2
https://discuss.linuxcontainers.org/t/incus-6-0-2-lts-has-been-released/21633
(cherry picked from commit ee30c817cb)
2024-09-24 22:19:00 -04:00
Rémi NICOLE
830f6d4a19
[Backport release-24.05] nixos/sssd: fix KCM to use new krb5 settings (#327930) 2024-09-24 14:32:50 +00:00
Arian van Putten
7faae2f631
[Backport release-24.05] amazon-ssm-agent: add the system's software to the path (#343104) 2024-09-24 10:33:01 +02:00
Arian van Putten
edfcc0c97b
[Backport release-24.05] amazon-init: include the general system's software and wrappers in PATH (#343105) 2024-09-24 10:32:20 +02:00
Jörg Thalheim
b34eac728a [release-24.05]: update nix-fallback-paths 2024-09-22 15:58:28 +02:00
Graham Christensen
b1d27e1322 amazon-init: include the general system's software and wrappers in PATH
It is surprising that software which was installed by the user at AMI
generation time isn't available to a script run over user data by
default.

When authoring user data to execute at startup, users will now have
more predictable access to baked-in software instead of an extremely
bare-minimum set currently there.

(cherry picked from commit 76b614be39)
2024-09-19 19:58:28 +00:00
Graham Christensen
e6fb8a4224 amazon-ssm-agent: add the system's software to the path
Follow up to #342584.

Similarly to that PR, it is surprising that software which was installed by the user isn't available to a script run over ssm by default.

When executing commands with ssm, users will now have more predictable access to baked-in software instead of an extremely bare-minimum set currently there.

(cherry picked from commit 7547a1f5f8)
2024-09-19 19:57:51 +00:00
Bjørn Forsman
04ba303d19 nixos/prometheus-smartctl-exporter: fix NVMe scanning
smartctl_exporter already runs with SupplementaryGroups "disk", which
gives full access to SATA drives, but NVMe devices are owned by
root:root, resulting in no access:

  [...] msg="Smartctl open device: /dev/nvme0 failed: Permission denied"

This patch introduces a "smartctl-exporter-access" supplementary
group, and an udev rule with setfacl to give the exporter access to NVMe
drives, without changing the base root:root ownership.

Fixes https://github.com/NixOS/nixpkgs/issues/210041

(cherry picked from commit 86a6ef5f15)
2024-09-19 15:29:32 +00:00
Julien Malka
2198681f51
[Backport release-24.05] nixos/systemd-boot: Fix regression in builder script (#342234) 2024-09-19 14:56:52 +02:00
Robert Hensing
3a458f7c76
[Backport release-24.05] #342778 (#342817) 2024-09-18 17:53:39 +02:00
Robert Hensing
291c95120d nixosTests.nix-serve: Use new entrypoint
This reuses the `pkgs`, so that `pkgs.nixosTests.nix-serve` will
run with the overlays of `pkgs` applied.

(cherry picked from commit 30620e7736)
2024-09-18 16:46:37 +02:00
Jean-François Roche
875e6ad20a nixos/systemd-boot: Fix regression in builder script
Avoid running Python scripts in the root of the package, as this
triggers `os.listdir` on the Nix store directory during import. This
operation can be time-consuming on large store directories
(see issue #283795 for more details).

The issue was initially fixed in #284153 but was reverted in #306339.

Co-authored-by: Sönke Hahn <soenkehahn@gmail.com>
(cherry picked from commit 251b0c958f)
2024-09-16 10:08:29 +02:00
Florian Agbuya
6b25604415 flarum: fix installation and migration logic
(cherry picked from commit 317a52a757)
2024-09-16 07:00:11 +00:00
github-actions[bot]
19adb9847e
[Backport release-24.05] nixos/doc: update Installing section (#342125)
nixos/doc: update `Installing` section (#341995)

Mention how to set a user password right after installation.
Also don't suggest to use `useradd` to add users.

(cherry picked from commit 4c1d53818b)

Co-authored-by: misuzu <bakalolka@gmail.com>
2024-09-15 21:29:17 +02:00
Bjørn Forsman
6ecc647b4e nixos/ups: set env vars in the global environment
This allows using upsdrvctl interactively, which otherwise tries to use
a missing ups.conf in the Nix store, instead of the correct
/etc/nut/ups.conf.

(cherry picked from commit 1cb392fdcd)
2024-09-14 08:59:39 +02:00
Bjørn Forsman
7ea9a39b4d nixos/ups: deduplicate environment variables
No functional change, but more DRY.

(cherry picked from commit 801388a6fa)
2024-09-14 08:59:39 +02:00
Peder Bergebakken Sundt
cd51764d0a
[Backport release-24.05] Syncthing: implemented folder type (#340775) 2024-09-13 02:51:44 +02:00
Adam C. Stephens
c1db88d848
[Backport release-24.05] zfs: 2.2.5 -> 2.2.6 (#340382) 2024-09-10 14:50:44 -04:00
Will Fancher
04c2feca6c nixos/tests/zfs: Fix flake build
(cherry picked from commit 9bd0b5ac05)
2024-09-10 11:29:37 -04:00
h7x4
d63965f14c nixos/doc: move implementation notes for formats.libconfig to docs
(cherry picked from commit bf2adb82b7)
2024-09-10 15:26:46 +00:00