2
0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-30 01:23:03 +00:00
Commit Graph

64 Commits

Author SHA1 Message Date
seth
db9b566c4f
flatpak: 1.14.2 -> 1.14.4
this release fixes two CVEs (CVE-2023-28101 and CVE-2023-28100), as well
as bringing in bug fixes from 1.14.3.
2023-04-09 16:21:21 -04:00
Daniel Hancock
2dd58d6487 flatpak: 1.14.1 → 1.14.2 2023-02-12 18:16:08 +08:00
Guillaume Girol
33afbf39f6 treewide: switch to nativeCheckInputs
checkInputs used to be added to nativeBuildInputs. Now we have
nativeCheckInputs to do that instead. Doing this treewide change allows
to keep hashes identical to before the introduction of
nativeCheckInputs.
2023-01-21 12:00:00 +00:00
Jan Tojnar
d70098ec63 flatpak: 1.14.0 → 1.14.1
https://github.com/flatpak/flatpak/releases/tag/1.14.1

SUMMARY: total=50; passed=38; skipped=0; failed=12; user=1229.5s; system=929.6s; maxrss=441956
FAIL: flatpak/test-bundle@system.wrap.test (Child process exited with code 1)
FAIL: flatpak/test-bundle@user.wrap.test (Child process exited with code 1)
FAIL: flatpak/test-prune.sh.test (Child process exited with code 1)
FAIL: flatpak/test-run@system,nodeltas.wrap.test (Child process exited with code 1)
FAIL: flatpak/test-bundle@system-norevokefs.wrap.test (Child process exited with code 1)
FAIL: flatpak/test-run@system-norevokefs,nodeltas.wrap.test (Child process exited with code 1)
FAIL: flatpak/test-run@system-norevokefs,deltas.wrap.test (Child process exited with code 1)
FAIL: flatpak/test-run@user,deltas.wrap.test (Child process exited with code 1)
FAIL: flatpak/test-run@system,deltas.wrap.test (Child process exited with code 1)
FAIL: flatpak/test-history.sh.test (Child process exited with code 1)
FAIL: flatpak/test-seccomp.sh.test (Child process exited with code 1)
FAIL: flatpak/test-run@user,nodeltas.wrap.test (Child process exited with code 1)
2022-12-15 14:44:00 +01:00
Bobby Rong
d80a32db1e flatpak: 1.12.7 → 1.14.0
https://github.com/flatpak/flatpak/compare/1.12.7...1.14.0

Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
2022-10-11 18:52:33 +02:00
Jan Tojnar
a69e7fd7f4 flatpak: clean up icon validation
Merge the two patches and prevent symlinking `/usr` subdirs and binding `/run/current-system` paths. The `wrapGAppsHook` already sets the `GDK_PIXBUF_MODULE_FILE` environment variable pointing to a hermetic store path.

When we re-exec the wrapped program (obtained from `/proc/self/exe`) in a sandbox, we need to pass the environment variable through.

Also introduce a test for the icon validator to prevent future breakage.

Expose the patch in passthru so that we can re-use it in xdg-desktop-portal.
2022-10-11 18:52:32 +02:00
R. Ryantm
f7ad253271 flatpak: 1.12.6 -> 1.12.7 2022-03-26 18:01:41 +01:00
Jan Tojnar
49c6568a8f flatpak: 1.12.4 → 1.12.6
https://github.com/flatpak/flatpak/releases/tag/1.12.5
https://github.com/flatpak/flatpak/releases/tag/1.12.6
2022-02-22 21:54:38 +01:00
Jan Tojnar
2da5ce4ab3 Merge branch 'staging-next' into staging
; Conflicts:
;	pkgs/development/python-modules/fakeredis/default.nix
2022-01-28 14:05:11 +01:00
Thomas Gerbet
725d843cc8 flatpak: 1.12.2 -> 1.12.4
Fixes CVE-2021-43860 and CVE-2022-21682

Changes:
https://github.com/flatpak/flatpak/releases/tag/1.12.4
https://github.com/flatpak/flatpak/releases/tag/1.12.3

Security advisories:
https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j
https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx
2022-01-27 13:57:07 -08:00
c0bw3b
7f881b8c63 p11-kit: 0.24.0 -> 0.24.1
* move binaries into bin output
* install Bash shell completions
* provides man pages
2022-01-22 12:10:25 +01:00
Andrey Petrov
3c3fc76c13 flatpak: 1.10.2 -> 1.12.2
Changes:
- https://github.com/flatpak/flatpak/releases/tag/1.11.1
- https://github.com/flatpak/flatpak/releases/tag/1.11.2
- https://github.com/flatpak/flatpak/releases/tag/1.11.3
- https://github.com/flatpak/flatpak/releases/tag/1.12.0
- https://github.com/flatpak/flatpak/releases/tag/1.12.1
- https://github.com/flatpak/flatpak/releases/tag/1.12.2

Security advisories:
- https://github.com/flatpak/flatpak/security/advisories/GHSA-67h7-w3jq-vh4q

Note that 1.11.x releases were release-candidates for 1.12.
2021-10-17 15:16:23 -04:00
Jan Tojnar
7e98527206
Merge pull request from jtojnar/flatpak-spawn-path
flatpak: attempt to fix flatpak-spawn --clear-env
2021-04-06 22:57:34 +02:00
Jan Tojnar
1ca880a228 flatpak: fix flatpak-spawn --clear-env
Chromium Flatpak package uses flatpak-spawn command for sandboxing
the child processes. The command comes from flatpak-xdg-utils, which is
presumably included in Flatpak runtimes. The command then calls Spawn
method of the portal.

The portal supports running commands in a clear environment when passed
FLATPAK_SPAWN_FLAGS_CLEAR_ENV flag. Unfortunately, that also clears PATH,
which is probably what prevents `flatpak` command itself from being found.

There is a relevant TODO note in the code:
https://github.com/flatpak/flatpak/blob/1.10.2/portal/flatpak-portal.c#L995-L999

For now, let’s hardcode the path to the binary.
2021-04-06 19:16:34 +02:00
Sandro Jäckel
3453b89f4b
lzma: deprecate alias 2021-04-04 19:49:52 +02:00
Sandro Jäckel
33a395f195
yacc: deprecate alias
and add a new line after the alphabetically sorting to please my inner monk
2021-04-04 03:18:58 +02:00
Jan Tojnar
f026133110
flatpak: 1.10.1 -> 1.10.2 2021-03-11 15:29:53 +01:00
Jan Tojnar
31c95c1f79
flatpak: 1.8.2 → 1.10.1
Changes:
- https://github.com/flatpak/flatpak/releases/tag/1.9.1
- https://github.com/flatpak/flatpak/releases/tag/1.9.2
- https://github.com/flatpak/flatpak/releases/tag/1.8.4
- https://github.com/flatpak/flatpak/releases/tag/1.9.3
- https://github.com/flatpak/flatpak/releases/tag/1.8.5
- https://github.com/flatpak/flatpak/releases/tag/1.10.0
- https://github.com/flatpak/flatpak/releases/tag/1.10.1

Security advisories:
- https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2

Also:
- Clarify license.
- Re-enable zstd compression (seems to be fixed now).
- Stop introducing GTK to scope through wrapGAppsHook.
- Clean up the DTDs and build tools we managed to fix upstream.
2021-02-01 23:18:32 +01:00
Ben Siraphob
66e44425c6 pkgs/development/libraries: stdenv.lib -> lib 2021-01-21 19:11:02 -08:00
Jan Tojnar
595e61d837
flatpak: 1.8.1 → 1.8.2
https://github.com/flatpak/flatpak/releases/tag/1.8.2
2020-09-12 15:01:25 +02:00
Jan Tojnar
98710d2552
flatpak: 1.6.3 → 1.8.1
Changes:
* https://github.com/flatpak/flatpak/releases/tag/1.7.1
* https://github.com/flatpak/flatpak/releases/tag/1.7.2
* https://github.com/flatpak/flatpak/releases/tag/1.7.3
* https://github.com/flatpak/flatpak/releases/tag/1.8.0
* https://github.com/flatpak/flatpak/releases/tag/1.8.1

Commits:
https://github.com/flatpak/flatpak/compare/1.6.3...1.7.1
https://github.com/flatpak/flatpak/compare/1.7.1...1.8.1

Notable packaging changes:
* Flatpak now ships a sysusers.d file for allowing systemd to create the required users.
  4df019063b
* Completion support for fish shell
* If an app has filesystem access, the host /lib is accessible as /run/host/lib, etc.
* New filesystem permission "host-etc" and "host-os" give access to system /usr and /etc.
  fe2536b844
* We now always expose the host timezone data, allowing us the expose the host /etc/localtime in a way that works better, fixing several apps that had timezone issues.
  dc4e198766
* We now ship a systemd unit (not installed by default) to automatically detect plugged in usb sticks with sideload repos.
* By default we no longer install the gdm env.d file, as the systemd generators work better
  7c3a85bf43
* Use variant-schema-compiler for some GVariant code
  https://github.com/flatpak/flatpak/pull/3366
* zstd compression for oci deltas:
  bfa71e208a

Additionally:
* Remove glibcLocales which is not used since 1.4 bump because glibc contains a locale archive with C.UTF-8
  1728bc8d22
* Stop using aliases for docbook-xsl-nons and pkg-config packages
* Stop using autoreconfHook, the autogen.sh script contains some extra that are necessary when building from git.
* Increase disk space for installed tests, they were running out.
* Enable building developer documentation.
2020-07-24 19:38:51 +02:00
Jan Tojnar
40ecaf3808
Revert "flatpak: do not use autoreconfHook"
This reverts commit a7e4dba1e9.

Apparently, tarballs do not ship autogen.sh 😿
2020-03-31 02:54:31 +02:00
Jan Tojnar
a7e4dba1e9
flatpak: do not use autoreconfHook
They use custom autogen.sh and running autoreconf is not enough.

This is necessary when running from Git, which I do on almost every update.
2020-03-31 02:16:55 +02:00
zowoq
72aceab6ef flatpak: 1.6.2 -> 1.6.3
https://github.com/flatpak/flatpak/releases/tag/1.6.3
2020-03-31 00:36:54 +10:00
Tor Hedin Brønner
82fc5b2eed
flatpak: prevent cycle with malcontent
The alternative is having malcontent depend on a flatpak without the
malcontent dependency.
2020-03-10 23:30:20 +01:00
worldofpeace
02213fdff2 flatpak: use correct p11-kit output
Fixes 
2020-02-18 12:48:04 -05:00
worldofpeace
6f0cb035c2
Merge pull request from worldofpeace/flatpak-ostree
flatpak: propagate glib and ostree
2020-02-17 19:39:02 -05:00
worldofpeace
26f1d1e81b flatpak: add dev output 2020-02-17 19:14:10 -05:00
zowoq
d744b4f928 flatpak: 1.6.1 -> 1.6.2
https://github.com/flatpak/flatpak/releases/tag/1.6.2
2020-02-18 09:41:31 +10:00
worldofpeace
461ea02544 flatpak: propagate glib and ostree
Pantheon's sideload broke:
```
meson.build:17:0: ERROR: Could not generate cargs for flatpak:
Package ostree-1 was not found in the pkg-config search path.
Perhaps you should add the directory containing `ostree-1.pc'
to the PKG_CONFIG_PATH environment variable
Package 'ostree-1', required by 'flatpak', not found
```

https://hydra.nixos.org/build/113077888

ZHF: 
2020-02-17 18:32:35 -05:00
Jan Tojnar
fefc7d8c9c flatpak: 1.4.2 → 1.6.1
* https://github.com/flatpak/flatpak/releases/tag/1.4.3
* https://github.com/flatpak/flatpak/releases/tag/1.5.0
* https://github.com/flatpak/flatpak/releases/tag/1.5.1
* https://github.com/flatpak/flatpak/releases/tag/1.5.2
* https://github.com/flatpak/flatpak/releases/tag/1.6.0
* https://github.com/flatpak/flatpak/releases/tag/1.6.1
2020-02-10 12:55:25 -05:00
Jan Tojnar
9ecb58bfcb flatpak: clean up and add comments 2020-02-10 12:55:22 -05:00
Robin Gloster
5f2b92e3ec
treewide: NIX_*_COMPILE -> string 2019-12-31 00:13:29 +01:00
Jan Tojnar
8cbc862b83
dconf: move to top-level 2019-12-01 01:01:40 +01:00
worldofpeace
40151a94d3 flatpak: add test to passthru 2019-11-07 08:38:31 -05:00
Thomas Tuegel
7e0cf856aa flatpak: Correct D-Bus config directory option 2019-10-13 15:17:05 -04:00
worldofpeace
bdb0ea879a flatpak: Move D-Bus conf file to share/dbus-1/system.d
Since D-Bus 1.9.18 configuration files installed by third-party should
go in share/dbus-1/system.d. The old location is for sysadmin overrides.
2019-09-16 13:59:08 -04:00
worldofpeace
1728bc8d22 flatpak: 1.2.4 -> 1.4.2
* Regenerated all patches for 1.4.2 and resolved
  any conflicts.

* fix-test-paths.patch doesn't copy the whole locale archive
  because we have C.UTF8 now.

* nixos/flatpak creates a Flatpak system helper user
  Change introduced in 1.3.2.

Changes:
See https://github.com/flatpak/flatpak/releases/tag/1.3.1 through
1.4.2.
2019-08-18 04:23:17 -04:00
volth
f3282c8d1e treewide: remove unused variables ()
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Matthew Harm Bekkema
0a5a1259ae
flatpak: Make librsvg dependency explicit 2019-06-15 15:15:01 +10:00
Matthew Harm Bekkema
46e1c7f17a flatpak: Preserve pixbuf path in validate-icon
SVG support isn't built-in to GdkPixBuf, it's provided by an external
module. Therefore, GDK_PIXBUF_MODULE_FILE should be preserved in the
sandbox, otherwise `flatpak-validate-icon --sandbox` won't work on SVG
files.
2019-06-14 21:56:06 +10:00
Frederik Rietdijk
2346182c2c Merge staging-next into staging 2019-04-18 08:26:30 +02:00
worldofpeace
7abeda982a gnome3.gsettings-desktop-schemas -> gsettings-desktop-schemas
gnome3.pomodoro is left out because I don't want to create a conflict.
2019-04-17 13:39:23 -04:00
Tor Hedin Brønner
752e176d67 flatpak: clear GDK_PIXBUF_MODULE_FILE
GDK_PIXBUF_MODULE_FILE is often set to a nix store path not available in a app
sandbox. This can cause some apps to fail launching, simply reset this env var
when running applications.

fixes https://github.com/NixOS/nixpkgs/issues/53441
2019-04-16 04:52:30 +02:00
R. RyanTM
4538f9ee3f flatpak: 1.2.3 -> 1.2.4 ()
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/flatpak/versions
2019-04-08 12:39:13 +02:00
Matthew Harm Bekkema
f2d6e4ab04 flatpak: Fix bubblewrap paths for icon-validator
Otherwise, `flatpak-validate-icon --sandbox` gives error:
  bwrap: Can't find source path /etc/ld.so.cache: No such file or directory
2019-03-19 15:57:43 +11:00
worldofpeace
a5837865c0 flatpak: 1.1.3 -> 1.2.3 2019-02-17 12:14:48 -05:00
Will Dietz
0f3561677a flatpak: dconf 2019-01-16 09:04:05 -06:00
Will Dietz
66c65cbb5a flatpak: 1.1.2 -> 1.1.3 2019-01-16 09:04:03 -06:00
Piotr Bogdan
6910266b01 flatpak: link with pthreads explicitly 2019-01-04 21:44:18 +00:00