Commit Graph

349513 Commits

Author SHA1 Message Date
Martin Weinelt
12c26aca1f
prometheus.exporters.smartctl: Fix autodiscovery
When no devices are given the exporter tries to autodiscover available
disks. The previous DevicePolicy was however preventing the exporter
from accessing any device at all, since only explicitly mentioned ones
were allowed.

This commit adds an allow rule for several device classes that I could
find on my machines, that gets set when no devices are explicitly
configured.

There is an existing problem with nvme devices, that expose a character
device at `/dev/nvme0`, and a (namespaced) block device at
`/dev/nvme0n1`. The character device does not come with permissions that
we could give to the exporter without further impacting the hardening.

  crw------- 1 root root 247, 0 27. Jan 03:10 /dev/nvme0
  brw-rw---- 1 root disk 259, 0 27. Jan 03:10 /dev/nvme0n1

The autodiscovery only finds the character device, which the exporter
unfortunately does not have access to.

However a simple udev rule can be used to resolve this:

  services.udev.extraRules = ''
    SUBSYSTEM=="nvme", KERNEL=="nvme[0-9]*", GROUP="disk"
  '';

Unfortunately I'm not fully aware of the security implications this
change carries and we should question upstream (systemd) why they did
not include such a rule.
The disk group has no members on any of my machines.

  ❯ getent group disk
  disk6:
2022-01-27 17:33:27 +01:00
Martin Weinelt
f860b289d4
prometheus.exporters.smartctl: Allow RAWIO
This allows the exporter to perform SCSI commands and interact with hpsa
and cciss devices.
2022-01-27 13:49:25 +01:00
Fabian Affolter
2d34099b4c
Merge pull request #156975 from r-ryantm/auto-update/python3.10-azure-mgmt-resource
python310Packages.azure-mgmt-resource: 20.0.0 -> 20.1.0
2022-01-27 12:50:50 +01:00
Pavol Rusnak
3d3797e30f
Merge pull request #156982 from TredwellGit/electron_13
electron_13: 13.6.7 -> 13.6.8
2022-01-27 12:25:18 +01:00
Mario Rodas
7d4f28ad76
Merge pull request #156912 from r-ryantm/auto-update/typos
typos: 1.3.5 -> 1.3.7
2022-01-27 06:12:02 -05:00
Mario Rodas
42771031d7
Merge pull request #156934 from r-ryantm/auto-update/stripe-cli
stripe-cli: 1.7.9 -> 1.7.10
2022-01-27 06:11:27 -05:00
Mario Rodas
f74ffdfc36
Merge pull request #156792 from r-ryantm/auto-update/gallery_dl
gallery-dl: 1.20.1 -> 1.20.3
2022-01-27 05:58:50 -05:00
markuskowa
49eaf5ac72
Merge pull request #156931 from r-ryantm/auto-update/soapyhackrf
soapyhackrf: 0.3.3 -> 0.3.4
2022-01-27 11:37:55 +01:00
Ninjatrappeur
5669fb82c3
Merge pull request #156102 from rapenne-s/fusionInventory_fix 2022-01-27 11:37:35 +01:00
Fabian Affolter
26d8898eaa
Merge pull request #156784 from dotlambda/pikepdf-4.4.0
python3Packages.pikepdf: 4.3.1 -> 4.4.0
2022-01-27 11:03:36 +01:00
Jan Tojnar
b8f7854694
Merge pull request #156944 from veprbl/pr/tbb_url_fix
tbb: fix pcTemplate url
2022-01-27 10:55:33 +01:00
R. Ryantm
edb1f48511 python310Packages.azure-mgmt-resource: 20.0.0 -> 20.1.0 2022-01-27 09:36:56 +00:00
Fabian Affolter
aaece4c0cf
Merge pull request #156973 from fabaff/bump-ftputil
python3Packages.ftputil: 5.0.2 -> 5.0.3
2022-01-27 10:28:44 +01:00
TredwellGit
7a2cc7b491 electron_13: 13.6.7 -> 13.6.8
https://github.com/electron/electron/releases/tag/v13.6.8
2022-01-27 09:23:38 +00:00
Bobby Rong
a7bf30e87e
Merge pull request #156970 from trofi/mold-updater
mold: add trivial updater
2022-01-27 17:23:13 +08:00
Fabian Affolter
afdec9ed99 python3Packages.ftputil: 5.0.2 -> 5.0.3
- Switch to pytestCheckHook
- Add pythonImportsCheck
- Adjust disabled tests
2022-01-27 10:07:44 +01:00
Fabian Affolter
416d03719c
Merge pull request #156951 from r-ryantm/auto-update/python3.10-ibm-watson
python310Packages.ibm-watson: 5.3.0 -> 5.3.1
2022-01-27 09:55:41 +01:00
Fabian Affolter
504900414e
Merge pull request #156952 from r-ryantm/auto-update/python3.10-minikerberos
python310Packages.minikerberos: 0.2.14 -> 0.2.15
2022-01-27 09:55:24 +01:00
Fabian Affolter
2e5ef3ad57
Merge pull request #156851 from fabaff/fix-fakeredis
python3Packages.fakeredis: add patch to support redis<=4.1.0
2022-01-27 09:54:30 +01:00
Fabian Affolter
620dd50b78
Merge pull request #156922 from r-ryantm/auto-update/sentry-cli
sentry-cli: 1.72.0 -> 1.72.1
2022-01-27 09:52:44 +01:00
Fabian Affolter
90083e2b03
Merge pull request #156954 from r-ryantm/auto-update/python3.10-sendgrid
python310Packages.sendgrid: 6.9.4 -> 6.9.5
2022-01-27 09:51:30 +01:00
Fabian Affolter
f24c40d020
Merge pull request #156963 from r-ryantm/auto-update/python3.10-rokuecp
python310Packages.rokuecp: 0.11.0 -> 0.12.0
2022-01-27 09:51:20 +01:00
Sergei Trofimovich
a1cf620871 mold: add trivial updater 2022-01-27 08:46:07 +00:00
Fabian Affolter
78fb49122e
Merge pull request #156948 from r-ryantm/auto-update/python3.10-pycm
python310Packages.pycm: 3.3 -> 3.4
2022-01-27 09:43:46 +01:00
Lassulus
bf967e3cd0
Merge pull request #156880 from cole-h/doas
doas: 6.8.1 -> 6.8.2
2022-01-27 09:35:03 +01:00
Emery Hemingway
de2b62905d nncp: 8.3.0 -> 8.5.0 2022-01-27 09:33:30 +01:00
Fabian Affolter
d746a9c2d8
python3Packages.ibm-watson: add pythonImportsCheck 2022-01-27 09:30:14 +01:00
Fabian Affolter
2326dc8fd2
python3Packages.minikerberos: disable on older Python releases 2022-01-27 09:26:15 +01:00
R. Ryantm
055eab60b1 python310Packages.rokuecp: 0.11.0 -> 0.12.0 2022-01-27 08:10:08 +00:00
Théo Zimmermann
51d92e5c6e coqPackages_8_15.paramcoq: init at 1.1.3+coq8.15 2022-01-27 08:49:00 +01:00
Théo Zimmermann
4632498895 coqPackages.gaia: mark as compatible with Coq 8.15 2022-01-27 08:49:00 +01:00
Théo Zimmermann
247cc00c9e coqPackages.mathcomp-zify: mark as compatible with Coq 8.15 2022-01-27 08:49:00 +01:00
Théo Zimmermann
eb1b39787f coqPackages_8_15.serapi: init at 8.15.0+0.15.0
And also clean up rc version for Coq 8.15.
2022-01-27 08:11:31 +01:00
R. Ryantm
b78164827a python310Packages.sendgrid: 6.9.4 -> 6.9.5 2022-01-27 06:50:20 +00:00
R. Ryantm
29b39278b9 python310Packages.minikerberos: 0.2.14 -> 0.2.15 2022-01-27 05:55:59 +00:00
R. Ryantm
b3309be934 python310Packages.ibm-watson: 5.3.0 -> 5.3.1 2022-01-27 05:45:29 +00:00
Tom McLaughlin
d01b2cc71b
openssl: remove assert restricting withPerl=false (#156949) 2022-01-27 00:41:18 -05:00
Bobby Rong
67f5d2963f
Merge pull request #156933 from r-ryantm/auto-update/symfony-cli
symfony-cli: 5.2.1 -> 5.2.2
2022-01-27 13:40:38 +08:00
R. Ryantm
4439f916da python310Packages.pycm: 3.3 -> 3.4 2022-01-27 04:33:24 +00:00
Bobby Rong
aa6245a64e
Merge pull request #156887 from r-ryantm/auto-update/zprint
zprint: 1.2.0 -> 1.2.1
2022-01-27 12:31:15 +08:00
Bobby Rong
943e69118e
Merge pull request #156924 from r-ryantm/auto-update/sssd
sssd: 2.6.2 -> 2.6.3
2022-01-27 12:27:17 +08:00
Bobby Rong
7cc38c7dae
Merge pull request #156627 from superherointj/package-fluxcd-0.25.3
fluxcd: 0.24.1 -> 0.25.3
2022-01-27 12:13:45 +08:00
Bobby Rong
784509f662
Merge pull request #156453 from r-ryantm/auto-update/dua
dua: 2.16.0 -> 2.17.0
2022-01-27 11:30:33 +08:00
Dmitry Kalinkin
55888a24cf
tbb: fix pcTemplate url 2022-01-26 22:30:01 -05:00
olegkapitonov
ae5361fa1b
fix MTP support on KDE Plasma and Dolphin (#155405)
* fix MTP support on KDE Plasma and Dolphin

* Update pkgs/applications/kde/kio-extras.nix

Co-authored-by: ElXreno <elxreno@gmail.com>

Co-authored-by: Peter Hoeg <peter@hoeg.com>
Co-authored-by: ElXreno <elxreno@gmail.com>
2022-01-27 11:29:32 +08:00
Bobby Rong
cdc93e847d
Merge pull request #156886 from DeeUnderscore/update/streamlink-3.1.1
streamlink: 3.1.0 -> 3.1.1
2022-01-27 11:19:43 +08:00
Thiago Kenji Okada
6f92939f27
Merge pull request #156918 from ericdallo/bump-graalvm
graalvm11-ce: 21.3.0 -> 22.0.0.2
2022-01-26 23:44:29 -03:00
Bobby Rong
8b7373102c
Merge pull request #156868 from zhaofengli/colmena-0.2.1
colmena: 0.2.0 -> 0.2.1
2022-01-27 10:38:46 +08:00
Eric Dallo
a362925794
graalvm11-ce: 21.3.0 -> 22.0.0.2
graalvm17-ce: 21.3.0 -> 22.0.0.2
2022-01-26 22:59:44 -03:00
R. Ryantm
534dee7daf stripe-cli: 1.7.9 -> 1.7.10 2022-01-27 01:44:56 +00:00