Martin Weinelt
12c26aca1f
prometheus.exporters.smartctl: Fix autodiscovery
...
When no devices are given the exporter tries to autodiscover available
disks. The previous DevicePolicy was however preventing the exporter
from accessing any device at all, since only explicitly mentioned ones
were allowed.
This commit adds an allow rule for several device classes that I could
find on my machines, that gets set when no devices are explicitly
configured.
There is an existing problem with nvme devices, that expose a character
device at `/dev/nvme0`, and a (namespaced) block device at
`/dev/nvme0n1`. The character device does not come with permissions that
we could give to the exporter without further impacting the hardening.
crw------- 1 root root 247, 0 27. Jan 03:10 /dev/nvme0
brw-rw---- 1 root disk 259, 0 27. Jan 03:10 /dev/nvme0n1
The autodiscovery only finds the character device, which the exporter
unfortunately does not have access to.
However a simple udev rule can be used to resolve this:
services.udev.extraRules = ''
SUBSYSTEM=="nvme", KERNEL=="nvme[0-9]*", GROUP="disk"
'';
Unfortunately I'm not fully aware of the security implications this
change carries and we should question upstream (systemd) why they did
not include such a rule.
The disk group has no members on any of my machines.
❯ getent group disk
disk❌ 6:
2022-01-27 17:33:27 +01:00
Martin Weinelt
f860b289d4
prometheus.exporters.smartctl: Allow RAWIO
...
This allows the exporter to perform SCSI commands and interact with hpsa
and cciss devices.
2022-01-27 13:49:25 +01:00
Fabian Affolter
2d34099b4c
Merge pull request #156975 from r-ryantm/auto-update/python3.10-azure-mgmt-resource
...
python310Packages.azure-mgmt-resource: 20.0.0 -> 20.1.0
2022-01-27 12:50:50 +01:00
Pavol Rusnak
3d3797e30f
Merge pull request #156982 from TredwellGit/electron_13
...
electron_13: 13.6.7 -> 13.6.8
2022-01-27 12:25:18 +01:00
Mario Rodas
7d4f28ad76
Merge pull request #156912 from r-ryantm/auto-update/typos
...
typos: 1.3.5 -> 1.3.7
2022-01-27 06:12:02 -05:00
Mario Rodas
42771031d7
Merge pull request #156934 from r-ryantm/auto-update/stripe-cli
...
stripe-cli: 1.7.9 -> 1.7.10
2022-01-27 06:11:27 -05:00
Mario Rodas
f74ffdfc36
Merge pull request #156792 from r-ryantm/auto-update/gallery_dl
...
gallery-dl: 1.20.1 -> 1.20.3
2022-01-27 05:58:50 -05:00
markuskowa
49eaf5ac72
Merge pull request #156931 from r-ryantm/auto-update/soapyhackrf
...
soapyhackrf: 0.3.3 -> 0.3.4
2022-01-27 11:37:55 +01:00
Ninjatrappeur
5669fb82c3
Merge pull request #156102 from rapenne-s/fusionInventory_fix
2022-01-27 11:37:35 +01:00
Fabian Affolter
26d8898eaa
Merge pull request #156784 from dotlambda/pikepdf-4.4.0
...
python3Packages.pikepdf: 4.3.1 -> 4.4.0
2022-01-27 11:03:36 +01:00
Jan Tojnar
b8f7854694
Merge pull request #156944 from veprbl/pr/tbb_url_fix
...
tbb: fix pcTemplate url
2022-01-27 10:55:33 +01:00
R. Ryantm
edb1f48511
python310Packages.azure-mgmt-resource: 20.0.0 -> 20.1.0
2022-01-27 09:36:56 +00:00
Fabian Affolter
aaece4c0cf
Merge pull request #156973 from fabaff/bump-ftputil
...
python3Packages.ftputil: 5.0.2 -> 5.0.3
2022-01-27 10:28:44 +01:00
TredwellGit
7a2cc7b491
electron_13: 13.6.7 -> 13.6.8
...
https://github.com/electron/electron/releases/tag/v13.6.8
2022-01-27 09:23:38 +00:00
Bobby Rong
a7bf30e87e
Merge pull request #156970 from trofi/mold-updater
...
mold: add trivial updater
2022-01-27 17:23:13 +08:00
Fabian Affolter
afdec9ed99
python3Packages.ftputil: 5.0.2 -> 5.0.3
...
- Switch to pytestCheckHook
- Add pythonImportsCheck
- Adjust disabled tests
2022-01-27 10:07:44 +01:00
Fabian Affolter
416d03719c
Merge pull request #156951 from r-ryantm/auto-update/python3.10-ibm-watson
...
python310Packages.ibm-watson: 5.3.0 -> 5.3.1
2022-01-27 09:55:41 +01:00
Fabian Affolter
504900414e
Merge pull request #156952 from r-ryantm/auto-update/python3.10-minikerberos
...
python310Packages.minikerberos: 0.2.14 -> 0.2.15
2022-01-27 09:55:24 +01:00
Fabian Affolter
2e5ef3ad57
Merge pull request #156851 from fabaff/fix-fakeredis
...
python3Packages.fakeredis: add patch to support redis<=4.1.0
2022-01-27 09:54:30 +01:00
Fabian Affolter
620dd50b78
Merge pull request #156922 from r-ryantm/auto-update/sentry-cli
...
sentry-cli: 1.72.0 -> 1.72.1
2022-01-27 09:52:44 +01:00
Fabian Affolter
90083e2b03
Merge pull request #156954 from r-ryantm/auto-update/python3.10-sendgrid
...
python310Packages.sendgrid: 6.9.4 -> 6.9.5
2022-01-27 09:51:30 +01:00
Fabian Affolter
f24c40d020
Merge pull request #156963 from r-ryantm/auto-update/python3.10-rokuecp
...
python310Packages.rokuecp: 0.11.0 -> 0.12.0
2022-01-27 09:51:20 +01:00
Sergei Trofimovich
a1cf620871
mold: add trivial updater
2022-01-27 08:46:07 +00:00
Fabian Affolter
78fb49122e
Merge pull request #156948 from r-ryantm/auto-update/python3.10-pycm
...
python310Packages.pycm: 3.3 -> 3.4
2022-01-27 09:43:46 +01:00
Lassulus
bf967e3cd0
Merge pull request #156880 from cole-h/doas
...
doas: 6.8.1 -> 6.8.2
2022-01-27 09:35:03 +01:00
Emery Hemingway
de2b62905d
nncp: 8.3.0 -> 8.5.0
2022-01-27 09:33:30 +01:00
Fabian Affolter
d746a9c2d8
python3Packages.ibm-watson: add pythonImportsCheck
2022-01-27 09:30:14 +01:00
Fabian Affolter
2326dc8fd2
python3Packages.minikerberos: disable on older Python releases
2022-01-27 09:26:15 +01:00
R. Ryantm
055eab60b1
python310Packages.rokuecp: 0.11.0 -> 0.12.0
2022-01-27 08:10:08 +00:00
Théo Zimmermann
51d92e5c6e
coqPackages_8_15.paramcoq: init at 1.1.3+coq8.15
2022-01-27 08:49:00 +01:00
Théo Zimmermann
4632498895
coqPackages.gaia: mark as compatible with Coq 8.15
2022-01-27 08:49:00 +01:00
Théo Zimmermann
247cc00c9e
coqPackages.mathcomp-zify: mark as compatible with Coq 8.15
2022-01-27 08:49:00 +01:00
Théo Zimmermann
eb1b39787f
coqPackages_8_15.serapi: init at 8.15.0+0.15.0
...
And also clean up rc version for Coq 8.15.
2022-01-27 08:11:31 +01:00
R. Ryantm
b78164827a
python310Packages.sendgrid: 6.9.4 -> 6.9.5
2022-01-27 06:50:20 +00:00
R. Ryantm
29b39278b9
python310Packages.minikerberos: 0.2.14 -> 0.2.15
2022-01-27 05:55:59 +00:00
R. Ryantm
b3309be934
python310Packages.ibm-watson: 5.3.0 -> 5.3.1
2022-01-27 05:45:29 +00:00
Tom McLaughlin
d01b2cc71b
openssl: remove assert restricting withPerl=false ( #156949 )
2022-01-27 00:41:18 -05:00
Bobby Rong
67f5d2963f
Merge pull request #156933 from r-ryantm/auto-update/symfony-cli
...
symfony-cli: 5.2.1 -> 5.2.2
2022-01-27 13:40:38 +08:00
R. Ryantm
4439f916da
python310Packages.pycm: 3.3 -> 3.4
2022-01-27 04:33:24 +00:00
Bobby Rong
aa6245a64e
Merge pull request #156887 from r-ryantm/auto-update/zprint
...
zprint: 1.2.0 -> 1.2.1
2022-01-27 12:31:15 +08:00
Bobby Rong
943e69118e
Merge pull request #156924 from r-ryantm/auto-update/sssd
...
sssd: 2.6.2 -> 2.6.3
2022-01-27 12:27:17 +08:00
Bobby Rong
7cc38c7dae
Merge pull request #156627 from superherointj/package-fluxcd-0.25.3
...
fluxcd: 0.24.1 -> 0.25.3
2022-01-27 12:13:45 +08:00
Bobby Rong
784509f662
Merge pull request #156453 from r-ryantm/auto-update/dua
...
dua: 2.16.0 -> 2.17.0
2022-01-27 11:30:33 +08:00
Dmitry Kalinkin
55888a24cf
tbb: fix pcTemplate url
2022-01-26 22:30:01 -05:00
olegkapitonov
ae5361fa1b
fix MTP support on KDE Plasma and Dolphin ( #155405 )
...
* fix MTP support on KDE Plasma and Dolphin
* Update pkgs/applications/kde/kio-extras.nix
Co-authored-by: ElXreno <elxreno@gmail.com>
Co-authored-by: Peter Hoeg <peter@hoeg.com>
Co-authored-by: ElXreno <elxreno@gmail.com>
2022-01-27 11:29:32 +08:00
Bobby Rong
cdc93e847d
Merge pull request #156886 from DeeUnderscore/update/streamlink-3.1.1
...
streamlink: 3.1.0 -> 3.1.1
2022-01-27 11:19:43 +08:00
Thiago Kenji Okada
6f92939f27
Merge pull request #156918 from ericdallo/bump-graalvm
...
graalvm11-ce: 21.3.0 -> 22.0.0.2
2022-01-26 23:44:29 -03:00
Bobby Rong
8b7373102c
Merge pull request #156868 from zhaofengli/colmena-0.2.1
...
colmena: 0.2.0 -> 0.2.1
2022-01-27 10:38:46 +08:00
Eric Dallo
a362925794
graalvm11-ce: 21.3.0 -> 22.0.0.2
...
graalvm17-ce: 21.3.0 -> 22.0.0.2
2022-01-26 22:59:44 -03:00
R. Ryantm
534dee7daf
stripe-cli: 1.7.9 -> 1.7.10
2022-01-27 01:44:56 +00:00