Commit Graph

242435 Commits

Author SHA1 Message Date
Jörg Thalheim
60d30e13f7
Update nixos/doc/manual/installation/installing.xml
Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
2020-09-06 19:44:30 +01:00
Jörg Thalheim
a5872edf2f
nixos/installer: enable sshd by default
Right now the UX for installing NixOS on a headless system is very bad.
To enable sshd without physical steps users have to have either physical
access or need to be very knowledge-able to figure out how to modify the
installation image by hand to put an `sshd.service` symlink in the
right directory in /nix/store. This is in particular a problem on ARM
SBCs (single board computer) but also other hardware where network is
the only meaningful way to access the hardware.

This commit enables sshd by default. This does not give anyone access to
the NixOS installer since by default. There is no user with a non-empty
password or key. It makes it easy however to add ssh keys to the
installation image (usb stick, sd-card on arm boards) by simply mounting
it and adding a keys to `/root/.ssh/authorized_keys`.
Importantly this should not require nix/nixos on the machine that
prepare the installation device and even feasiable on non-linux systems
by using ext4 third party drivers.

Potential new threats: Since this enables sshd by default a
potential bug in openssh could lead to remote code execution. Openssh
has a very good track-record over the last 20 years, which makes it
far more likely that Linux itself would have a remote code execution
vulnerability. It is trusted by millions of servers on many operating
systems to be exposed to the internet by default.

Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
2020-09-06 20:26:08 +02:00
Robert Scott
24e513bcf0
Merge pull request #96409 from sikmir/tippecanoe
tippecanoe: 1.35.0 -> 1.36.0
2020-09-06 19:18:34 +01:00
R. RyanTM
7dce8e2171 python27Packages.pydub: 0.24.0 -> 0.24.1 2020-09-06 10:31:19 -07:00
Vincent Laporte
d4f6c94d34 ocamlPackages.labltk: init at 8.06.9 for OCaml 4.11 2020-09-06 19:09:37 +02:00
R. RyanTM
a5121f73e3 catch2: 2.12.2 -> 2.12.3 2020-09-06 18:53:20 +02:00
R. RyanTM
cd435ce7d3 opencl-clhpp: 2.0.11 -> 2.0.12 2020-09-06 18:52:54 +02:00
R. RyanTM
c39f775f20 icingaweb2: 2.8.0 -> 2.8.1 2020-09-06 18:52:22 +02:00
Gabriel Ebner
37379c0215
Merge pull request #97285 from gebner/cura471 2020-09-06 18:52:08 +02:00
R. RyanTM
1311343c40 fx_cast_bridge: 0.0.6 -> 0.0.7 2020-09-06 18:51:17 +02:00
R. RyanTM
f151fd87d7 sysvinit: 2.96 -> 2.97 2020-09-06 18:50:48 +02:00
R. RyanTM
6c2059b334 qwt6_qt4: 6.1.4 -> 6.1.5 2020-09-06 18:50:24 +02:00
R. RyanTM
2c58c24ef8 wimlib: 1.13.1 -> 1.13.2 2020-09-06 18:50:08 +02:00
R. RyanTM
f06b103ef9 eventstat: 0.04.09 -> 0.04.10 2020-09-06 18:49:52 +02:00
R. RyanTM
1876163f16
bazel-kazel: 0.0.12 -> 0.1.0 (#97074) 2020-09-06 09:39:58 -07:00
edef
a6a6659e56
Merge pull request #33283 from fahadsadah/dpauxchardev
kernel config: CONFIG_DRM_DP_AUX_CHARDEV
2020-09-06 16:34:11 +00:00
Wael Nasreddine
92cff610d0
pgformatter: 4.3 -> 4.4 (#96920) 2020-09-06 09:32:54 -07:00
Florian Klink
d7046947e5
Merge pull request #91121 from m1cr0man/master
Restructure acme module
2020-09-06 18:26:22 +02:00
Daniël de Kok
2dd41576fb
Merge pull request #97238 from hannesweisbach/macos-tbb
tbb: fix library install name on macOS
2020-09-06 18:04:08 +02:00
Michael Weiss
ebd2e632d6
gns3-{gui,server}: 2.2.12 -> 2.2.13 2020-09-06 16:18:57 +02:00
WORLDofPEACE
84f11a01ff
Merge pull request #97287 from TethysSvensson/fetchurl-chromium
chromium: Unblock nixos-unstable by using the correct argument to fet…
2020-09-06 10:04:43 -04:00
Philipp Bartsch
50285e244e fractal: add gtk support to gstreamer
Closes #96618

Suggested-by: Jan Tojnar <jtojnar@gmail.com>
2020-09-06 15:52:41 +02:00
Peter Hoeg
6e22c6ea6a
Merge pull request #96769 from peterhoeg/m/phpfpm
nixos/phpfpm: always restart service on failure
2020-09-06 21:41:38 +08:00
José Romildo Malaquias
96542ebb19
Merge pull request #96691 from romildo/upd.iconpack-obsidian
iconpack-obsidian: 4.12 -> 4.13
2020-09-06 10:36:15 -03:00
Florian Klink
569fdb2c35
Merge pull request #93424 from helsinki-systems/feat/gitlab-mailroom
nixos/gitlab: Support incoming mail
2020-09-06 15:34:02 +02:00
Andreas Rammhold
8cf4c193b9
Merge pull request #97106 from stigtsp/package/firefox-80.0.1
firefox: 80.0 -> 80.0.1
2020-09-06 15:27:12 +02:00
Tethys Svensson
2927a19be3 chromium: Unblock nixos-unstable by using the correct argument to fetchurl 2020-09-06 14:54:42 +02:00
Mario Rodas
9380c61a19
Merge pull request #97246 from r-ryantm/auto-update/sensu-go-backend
sensu-go-backend: 5.21.1 -> 5.21.2
2020-09-06 07:50:24 -05:00
Mario Rodas
18bfc49f53
Merge pull request #97054 from dali99/add_vcsi
vsci: init at 7.0.12
2020-09-06 07:49:04 -05:00
Mario Rodas
885ce4b411
Merge pull request #97248 from r-ryantm/auto-update/sickgear
sickgear: 0.21.36 -> 0.21.42
2020-09-06 07:48:01 -05:00
Mario Rodas
8a03382c26
Merge pull request #97249 from r-ryantm/auto-update/skaffold
skaffold: 1.13.2 -> 1.14.0
2020-09-06 07:40:16 -05:00
Mario Rodas
f0490fb718
Merge pull request #97223 from 06kellyjac/deno_1.3.3
deno: 1.3.2 -> 1.3.3
2020-09-06 07:37:15 -05:00
Mario Rodas
1c25cb0383
Merge pull request #97033 from pstn/jellyfin-bump
jellyfin: 10.6.3 -> 10.6.4
2020-09-06 07:35:15 -05:00
Robert Scott
39eea33d3a
Merge pull request #93008 from r-ryantm/auto-update/yafaray-core
yafaray-core: 3.4.4 -> 3.5.0
2020-09-06 13:33:08 +01:00
Robert Scott
e523a7096a yafaray-core: restrict to x86_64-linux
fails to build on aarch64 at least
2020-09-06 13:29:12 +01:00
Nikolay Korotkiy
a3bcf4f7cb
tippecanoe: 1.35.0 -> 1.36.0 2020-09-06 15:24:28 +03:00
R. RyanTM
dadab5340f yafaray-core: 3.4.4 -> 3.5.0 2020-09-06 12:59:31 +01:00
Daniël de Kok
0df5508a0e
Merge pull request #97269 from marsam/update-zola
zola: 0.11.0 -> 0.12.0
2020-09-06 13:51:19 +02:00
Kevin Cox
9313f560fd
Merge pull request #96899 from Luflosi/update/kakoune
kakoune: 2020.08.04 -> 2020.09.01
2020-09-06 07:50:42 -04:00
Michael Raskin
2e4f8eb79a
Merge pull request #97038 from Atemu/update/linux_zen
linux_zen: 5.8.1 -> 5.8.7
2020-09-06 11:45:48 +00:00
Gabriel Ebner
955fe4d67b
Merge pull request #96688 from j0hax/octoprint-dashboard 2020-09-06 13:35:38 +02:00
Gabriel Ebner
6841659b94 curaPlugins.octoprint: 3.5.12 -> 3.5.16 2020-09-06 13:32:41 +02:00
Gabriel Ebner
6b4f9a16c4 cura: 4.6.1 -> 4.7.1 2020-09-06 13:32:19 +02:00
Gabriel Ebner
7a0ef553bd curaengine: 4.6.1 -> 4.7.1 2020-09-06 13:32:08 +02:00
Gabriel Ebner
daa77cc74a python3Packages.uranium: 4.6.1 -> 4.7.1 2020-09-06 13:31:56 +02:00
Gabriel Ebner
497ff43da1 python3Packages.libsavitar: 4.6.1 -> 4.7.1 2020-09-06 13:31:39 +02:00
Gabriel Ebner
e60ff5a3d0 python3Packages.libarcus: 4.6.1 -> 4.7.1 2020-09-06 13:31:16 +02:00
Gabriel Ebner
91ad566e18
Merge pull request #96886 from doronbehar/pkg/beets/wv-test-fix
beets: Fix wavpack mediafile test
2020-09-06 12:46:00 +02:00
Robert Scott
45a4fa7dba
Merge pull request #92978 from S-NA/updates/sndio-1.7.0
sndio: 1.6.0 -> 1.7.0
2020-09-06 11:38:32 +01:00
Maximilian Bosch
f01fd49045
Merge pull request #97262 from colemickens/nushell
nushell: enable for aarch64
2020-09-06 11:49:04 +02:00