Eelco Dolstra
efa8fc2b0a
Paranoia
2015-01-15 18:37:55 +01:00
Eelco Dolstra
3ca275d7ba
NixOS containers: Create /root with 700 permission
...
Systemd-nspawn creates /root with 755 permission if it doesn't exist,
which is bad. So we have to create it ourselves before calling
systemd-nspawn.
2015-01-15 17:51:43 +01:00
Rob Vermaas
df7923fa82
Merge pull request #5515 from oconnorr/master
...
GCE updates to ntp server and to fetch all ssh keys
2015-01-14 13:19:38 +01:00
mokasin
dd6dfde575
Add auto-start option to containers.
2015-01-12 18:26:22 +01:00
Russell O'Connor
d1a58ef7c6
google-compute-image.nix: Try to download all SSH host keys from metadata server.
2015-01-06 12:06:54 -05:00
Russell O'Connor
3251948029
Generate SSH host public key from the private key.
2015-01-05 15:20:55 -05:00
Russell O'Connor
d1cbbff1e3
Call wget directly in fetch-ssh-keys service.
2015-01-05 15:20:55 -05:00
Russell O'Connor
6382e16014
google-compute-image.nix: unconditionally clean up /root/key.pub /root/authorized-keys-metadata
2015-01-05 15:18:02 -05:00
Russell O'Connor
b19ab1f046
google-comute-image.nix: set umask 077 when downloading private keys from the metadata server.
2015-01-05 15:01:49 -05:00
Russell O'Connor
e548a4330d
google-compute-image.nix: use internal google NTP server.
2015-01-05 12:45:23 -05:00
Rob Vermaas
ea9530b5c7
Fix GCE image build.
...
(cherry picked from commit 98af87cd4a
)
2015-01-05 09:35:35 +01:00
Tobias Geerinckx-Rice
c64257b8e5
Fix user-facing typos (mainly in descriptions)
2014-12-30 03:31:03 +01:00
Mathijs Kwik
6e728a42ec
virtualisation.qemuNetworkingOptions -> virtualisation.qemu.networkingOptions
2014-12-19 11:59:00 +01:00
Mathijs Kwik
6cdacdd4a2
nixos/qemu-vm: make networking options configurable
2014-12-19 08:52:06 +01:00
Jaka Hudoklin
4be1089781
nixos: move kubernetes & fleet to services/cluster
2014-12-11 23:32:37 +01:00
Jaka Hudoklin
deb28cf0b1
nixos: container tarball release
...
- Create container nixos profile
- Create lxc-container nixos config using container nixos profile
- Docker nixos image, use nixos profile for its base config
2014-12-11 23:17:27 +01:00
Jaka Hudoklin
c821f239a3
nixos/fleet: fix typo
2014-12-08 13:30:45 +01:00
Jaka Hudoklin
743b47579b
nixos/fleet: enable etcd and docker by default
2014-12-08 13:07:12 +01:00
Jaka Hudoklin
b7092dc95c
nixos: add fleet module
2014-12-07 21:52:52 +01:00
Domen Kožar
55cf272c19
fixes #5198
2014-12-02 12:59:14 +01:00
Jaka Hudoklin
40d73c5eb7
nixos/docker: fix module, add simple test
2014-12-01 17:20:35 +01:00
Jaka Hudoklin
2b261c1edf
nixos: add kubernetes module
2014-11-29 02:27:17 +01:00
aszlig
444987193e
nixos: Rename virtualbox to virtualboxGuest.
...
Especially new users could be confused by this, so we're now marking
services.virtualbox.enable as obsolete and defaulting to
services.virtualboxGuest.enable instead. I believe this now makes it
clear, that this option is for guest additions only.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-27 18:42:22 +01:00
Aristid Breitkreuz
5ff169f4d7
containers: remove obsolete comment
2014-11-23 12:30:03 +01:00
Vladimír Čunát
b4af993c3f
Merge branch 'master' into staging
...
Conflicts (simple):
pkgs/development/lisp-modules/clwrapper/setup-hook.sh
2014-11-14 14:28:23 +01:00
Michael Raskin
232f6bb4d2
Merge pull request #4929 from abbradar/prl-tools
...
Add packages and support for Parallel Guest Tools
2014-11-13 00:22:42 +03:00
Michael Raskin
efe5eb4709
Merge pull request #4573 from fpletz/feature/lxc-configuration
...
Add support for global LXC config files
2014-11-13 00:14:46 +03:00
Nikolay Amiantov
32e18bc722
nixos/parallels-guest: add options
2014-11-12 01:26:23 +03:00
Luca Bruno
83221f3886
Merge branch 'master' into staging
...
Makes the build more useful:
- Disabled hybrid iso, makes installer tests pass again
- Imagemagick fixes to the "Illegal instruction" thing
2014-11-08 15:56:40 +01:00
Jaka Hudoklin
53667c7b1a
Merge pull request #4870 from bosu/docker-proxy
...
docker: propagate nix.proxy into daemon environment
2014-11-08 13:06:56 +01:00
Boris Sukholitko
0d89afdedd
docker: propagate nix.proxy into daemon environment
2014-11-07 13:46:36 +02:00
Vladimír Čunát
52404a868d
Merge recent master into staging
...
Nixpkgs Hydra: ?compare=1157272
TODO: port e22889064f
Conflicts:
nixos/tests/gnome3_10.nix (auto-solved)
pkgs/applications/video/aegisub/default.nix
pkgs/development/libraries/boost/1.55.nix
2014-11-05 15:00:44 +01:00
aszlig
8e516de3e7
nixos: Fix priorities of initialHashedPassword.
...
Regression introduced in f496c3cbe4
.
Previously when we used security.initialRootPassword, the default
priority for this option was 1001, because it was a default value set by
the option itself.
With the mentioned commit, it is no longer an option default but a
mkDefault, which is priority 1000.
I'm setting this to 150 now, as test-instrumentation.nix is using this
for overriding other options and because I think it still makes it
possible to simple-override it, because if no priority is given, we get
priority 100.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-11-04 05:19:07 +01:00
Eelco Dolstra
f496c3cbe4
Obsolete security.initialPassword
...
You can now set users.extraUsers.root.initialHashedPassword instead.
2014-11-03 12:36:56 +01:00
Franz Pletz
2c321bf296
Add support for global LXC config files
2014-10-18 05:02:39 +02:00
Eelco Dolstra
09dc132e04
Merge remote-tracking branch 'origin/master' into staging
...
Conflicts:
pkgs/development/libraries/poppler/default.nix
2014-10-16 15:16:50 +02:00
Mathnerd314
938f92e8b2
Fix the driver for qemu ("vesa" -> "modesetting")
...
Signed-off-by: Domen Kožar <domen@dev.si>
2014-10-15 12:24:50 +02:00
Rob Vermaas
8523d0e44c
Dohh
...
(cherry picked from commit b7451d91e8
)
2014-10-14 11:43:51 +02:00
Rob Vermaas
028807c3a0
amazon-image.nix: Pass --option build-users-group '' to nix tools to make Amazon generation work with nix-1.8+
...
(cherry picked from commit 654eaeb2ca
)
2014-10-14 11:40:04 +02:00
Eelco Dolstra
91ec6e0d90
Merge remote-tracking branch 'origin/master' into staging
2014-09-18 22:28:35 +02:00
Bjørn Forsman
0bfd27535f
nixos/libvirtd: refresh LXC emulator path on startup
...
This fixes the issue when the LXC emulator binary is garbage collected
and breaks libvirtd containers, because libvirtd XML file still refers
to GC'ed store path.
We already have a fix for QEMU, this commit extends the fix to cover LXC
too.
2014-09-15 23:03:20 +02:00
Vladimír Čunát
d957b4bd78
Merge recent master into staging
...
Hydra nixpkgs: ?compare=1151601
2014-09-13 21:48:29 +02:00
aszlig
d394d095ab
containers: Don't descend into mounts on destroy.
...
This tells the sad tale of @the-kenny who had bind-mounted his home
directory into a container. After doing `nixos-container destroy` he
discovered that his home directory went from "full of precious data" to
"no more data".
We want to avoid having similar sad tales in the future, so this now also
check this in the containers VM test.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-09-11 18:12:35 +02:00
aszlig
859f049d1b
containers: Remove check for var/lib/startup-done.
...
Fixes a leftover from 330fadb706
.
We're using systemd dbus notifications now and this leftover caused the
startup notification to fail.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-09-11 18:12:35 +02:00
Eelco Dolstra
152ae27aac
Merge remote-tracking branch 'origin/systemd-216' into staging
2014-09-08 13:53:33 +02:00
Eelco Dolstra
585983bc95
Merge remote-tracking branch 'origin/staging'
...
Conflicts:
pkgs/applications/version-management/subversion/default.nix
2014-09-08 11:42:09 +02:00
Rob Vermaas
f14d1d76bb
Azure: Fix authorized_keys
2014-09-06 22:54:15 +02:00
Rob Vermaas
e9c1fb0c89
Azure: Mount metadata 'CD' on /metadata
2014-09-06 21:53:10 +02:00
Rob Vermaas
81046b9e5d
Initial configuration + image generation script for Micro$oft Azure. Work in progress for #3986 .
2014-09-06 21:37:46 +02:00
Vladimír Čunát
06fea81c6e
Merge recent master into staging
...
Hydra: ?compare=1150594
2014-09-06 16:52:45 +02:00