Commit Graph

44672 Commits

Author SHA1 Message Date
7c6f434c
c87aad4296
Add Collabora Online (#330708) 2024-09-27 08:33:57 +00:00
K900
1e15add1c2
xwaylandvideobridge refactor + default in Plasma (#344808) 2024-09-27 10:03:24 +03:00
K900
307dda84c0 nixos/nixos-containers: partially revert aa4570ca05
Word splitting is actually intentional here, as both of those variables
can (and often do) contain multiple flags.
2024-09-27 10:00:58 +03:00
oddlama
d229011025 nixos/influxdb2: fix service startup reliablility 2024-09-27 08:14:27 +02:00
Gaute Ravndal
e9860fa6a9 nixos/snapper: use more precise type definition 2024-09-27 07:40:06 +02:00
K900
e23ad5ca0e nixos/plasma6: install xwaylandvideobridge by default 2024-09-27 08:16:56 +03:00
K900
15200e9966 nixos/plasma6: install baloo-widgets by default
Needed for indexer metadata in Dolphin.
2024-09-27 08:05:05 +03:00
Artturin
716f0a7327
nixos/firefox: add autoConfigFiles (#321254) 2024-09-27 05:20:08 +03:00
Pyrox
e2c5983f40
nixos/gotenberg: Fix coredumps on service start 2024-09-26 21:37:41 -04:00
Weijia Wang
63ab048916 nixos/geth: add holesky testnet 2024-09-27 01:17:21 +02:00
Leona Maroni
7f35330bd8
nixos/nixos-containers: fix shellcheck errors in systemd scripts (#340483) 2024-09-26 23:05:35 +02:00
Jörg Thalheim
ad2f0dd5b9
nixos/doc/rl-2411: sort incompatibilites by impact (#344677) 2024-09-26 22:37:39 +02:00
Gaute Ravndal
6ce7db1126 nixos/snapper: fix timeline option types
These can be either an integer or a range.

Range options are necessary for `FREE_LIMIT` to take effect when used in
conjunction with `TIMELINE_LIMIT_*`.
2024-09-26 21:55:23 +02:00
r-vdp
aa4570ca05
nixos/nixos-containers: fix shellcheck errors in systemd scripts 2024-09-26 21:54:07 +02:00
Eman Resu
3f56777cf8 doc: 24.11: move most impactful incompatibilities to the top
Apply suggestions from code review

Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2024-09-26 15:11:19 -04:00
Jörg Thalheim
44312de8c2
nixVersions.nix_2_18: 2.18.7 -> 2.18.8 (#344714) 2024-09-26 20:59:11 +02:00
seth
0aed7f0d24 nixVersions.nix_2_18: 2.18.7 -> 2.18.8
Diff: https://github.com/NixOS/nix/compare/2.18.7...2.18.8
Fixes https://github.com/NixOS/nix/security/advisories/GHSA-6fjr-mq49-mm2c
2024-09-26 20:53:55 +02:00
Martin Weinelt
e04b941dfb
nixos/printing: add option to disable browsed daemon (#344702) 2024-09-26 20:44:57 +02:00
Thomas Gerbet
981a63b005 nixos/printing: add option to disable browsed daemon
It is currently tied to `services.avahi.enable` which might not be
desirable.

With this change it is possible to disable the service with
`services.printing.browsed.enable = false`
2024-09-26 20:11:14 +02:00
Peder Bergebakken Sundt
c7f9378f34 nixos/README.md: add guideline to link to nixos tests from packages 2024-09-26 19:55:43 +02:00
K900
42dd305751
nixos/plasma6: install xdg-desktop-portal-gtk (#344681) 2024-09-26 19:21:22 +03:00
Marin
0d822ccdbc tailscaled: after NetworkManager-wait-online
The wait will only be enabled on machines with NetworkManager enabled.

Closes #180175
2024-09-26 12:12:46 -04:00
Atemu
3bacd4d90b
nixos/doc, nixosTests.zfs: remove latestCompatibleLinuxPackages (#344649) 2024-09-26 18:05:26 +02:00
K900
c4c3b41d4a nixos/plasma6: install xdg-desktop-portal-gtk
As recommended by upstream, for flatpak apps and some others.
2024-09-26 18:57:53 +03:00
Robert Schütz
c5d95d4999
immich: some improvements (#344237) 2024-09-26 07:14:52 -07:00
Brendan Taylor
8debc8df79 nixos/immich: add option database.port 2024-09-26 08:06:59 -06:00
Franz Pletz
aa79f54998
nixos/iso-image: avoid collision between GRUB2 versions (#343992) 2024-09-26 15:53:43 +02:00
Franz Pletz
879c75e68c
nixos/tailscale: add authKeyParameters (#338505) 2024-09-26 15:43:59 +02:00
Adam Stephens
52335fc1b0
openvswitch: init simple bridge test and add incus test 2024-09-26 09:26:10 -04:00
Atemu
eb538d1047 nixos/doc: remove section on latestCompatibleLinuxPackages 2024-09-26 15:06:45 +02:00
Atemu
9c0a988e11 nixosTests.zfs: remove latestCompatibleLinuxPackages usage 2024-09-26 15:06:19 +02:00
Franz Pletz
e1635a35b9
nixos/nginx: add option typesHashMaxSize (#341072) 2024-09-26 14:42:26 +02:00
Lucas Chaim
9e6338ffaf nixos/tailscale: add authKeyParameters
Adds `config.services.tailscale.authKeyParameters`
2024-09-26 07:28:19 -03:00
Izorkin
9343e69f8f
nixos/tests/nginx-mime: add check optimal size of types_hash 2024-09-26 10:51:59 +03:00
K900
26afe129f5
nixos/graphics: fix typo (#344551) 2024-09-26 08:18:28 +03:00
Bjørn Forsman
732d36522f nixos/influxdb2: wait until service is ready
Factor out part of the provisioning script into a
wait-until-service-is-ready script, and put it unconditionally in
front of ExecStartPost=, so that services that depend on influxdb2 are
not started until influxdb2 responds to requests.

Fixes https://github.com/NixOS/nixpkgs/issues/317017 ("Scrutiny tries to start before influxdb has started")
2024-09-26 06:54:54 +02:00
Will Fancher
ea2838e1ce
nixos/qemu-vm: Ensure 9pnet_virtio module is loaded for shared dirs (#343574) 2024-09-25 23:11:08 -04:00
Lin Jian
11f1d318f6
nixos/graphics: fix typo
Searching hardware.*.extraPackages on search.nixos.org[1] shows there
is only hardware.graphics.extraPackages.

[1]: https://search.nixos.org/options?channel=unstable&from=0&size=50&sort=relevance&type=packages&query=hardware.*.extraPackages
2024-09-26 09:08:43 +08:00
Will Fancher
4e54d10912 nixos/qemu-vm: Ensure 9pnet_virtio module is loaded for shared dirs
When `diskImage = null`, the root fs is a tmpfs instead of
`/dev/vda`. Thus, it doesn't have to wait for virtio modules to load
before being mounted. The root fs is a dependency of shared
directories by nature of being their parent directory. Without
depending on `/dev/vda`, these shared directories may attempt to mount
without virtio modules being loaded.
2024-09-25 17:37:34 -04:00
Will Fancher
1f34534920
Systemd tpm fixes (#343307) 2024-09-25 17:17:57 -04:00
Izorkin
d856c0374d
nixos/nginx: add option typesHashMaxSize 2024-09-25 20:57:13 +03:00
Artturin
ecd4ea0ab2
nixos/auto-upgrade: correct typo in assertion message (#295125) 2024-09-25 20:41:02 +03:00
Patrick Collins
448240f6e2
nixos/nfsd: fix typo that breaks services.nfs.settings (#342200)
Currently will always fail when nfs.server.hostName is specified alongside nfs.settings.
2024-09-25 20:33:23 +03:00
Artturin
f1901cf0b0
nixos/cupsd: typo (#330884) 2024-09-25 20:27:19 +03:00
Robert James Hernandez
57b9f12728 nixos/scion: init scion ip gateway config in test
create a scion-ip-gateway between scion04 and scion05
2024-09-25 19:08:33 +02:00
Robert James Hernandez
6c527bf0fb nixos/scion: init scion-ip-gateway module 2024-09-25 19:08:33 +02:00
Robert James Hernandez
828ce9b123 nixos/scion: breakout bootstrap.sh in freestanding 2024-09-25 19:08:33 +02:00
Sandro
6ac83e9406
nixos/mailman: configure web frontend with postfix when enablePostfix… (#333295) 2024-09-25 18:33:50 +02:00
Franz Pletz
2ae5404ed9
scion: vmTest should fail if certs expire (#342107) 2024-09-25 17:16:46 +02:00
Bruno BELANYI
b2512bb043
nixos/stirling-pdf: add missing dependency ghostscript (#344331) 2024-09-25 14:09:00 +01:00
Daniel Sidhion
15ddcc64cd
nixos/tigerbeetle: add docs on upgrading, add more systemd hardening (#332899) 2024-09-24 23:56:38 -07:00
DCsunset
68d108bb04 nixos/stirling-pdf: add missing dependency ghostscript 2024-09-25 01:01:33 +00:00
Artturin
e0464e4788 treewide: replace stdenv.is with stdenv.hostPlatform.is
In preparation for the deprecation of `stdenv.isX`.

These shorthands are not conducive to cross-compilation because they
hide the platforms.

Darwin might get cross-compilation for which the continued usage of `stdenv.isDarwin` will get in the way

One example of why this is bad and especially affects compiler packages
https://www.github.com/NixOS/nixpkgs/pull/343059

There are too many files to go through manually but a treewide should
get users thinking when they see a `hostPlatform.isX` in a place where it
doesn't make sense.

```
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv.is" "stdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenv'.is" "stdenv'.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "clangStdenv.is" "clangStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "gccStdenv.is" "gccStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "stdenvNoCC.is" "stdenvNoCC.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "inherit (stdenv) is" "inherit (stdenv.hostPlatform) is"
fd --type f "\.nix" | xargs sd --fixed-strings "buildStdenv.is" "buildStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "effectiveStdenv.is" "effectiveStdenv.hostPlatform.is"
fd --type f "\.nix" | xargs sd --fixed-strings "originalStdenv.is" "originalStdenv.hostPlatform.is"
```
2024-09-25 00:04:37 +03:00
Martin Weinelt
aaa7fb5840
nixos/{pretix,pretalx}: set up log rotation (#343982) 2024-09-24 22:48:17 +02:00
Philip Taron
a829e3a287
nixos/services.snapserver: fix regression introduced in #339099 by renaming local function (#344243) 2024-09-24 13:37:17 -07:00
Maximilian Bosch
2a0f7e30e8
Merge: Revert "nixos/profiles/base: install vim w/nix-syntax plugin" (#343800) 2024-09-24 22:31:02 +02:00
Robert Schütz
eb28b94bd1
nixos/iptsd: Touch was renamed to Touchscreen in v3 (#344036) 2024-09-24 09:59:14 -07:00
Robert Schütz
7cdda564e0 nixos/immich: override machine-learning with cfg.package
Otherwise they could use different versions:

    nix-repl> (immich.overrideAttrs { version = "0"; }).machine-learning.version
    "1.115.0"
2024-09-24 09:53:24 -07:00
Philip Taron
48d6e1118b
nixos/services.snapserver: fix regression introduced in #339099 by renaming local function 2024-09-24 09:08:43 -07:00
K900
17e1a5cf5d nixos/doc: add release note for DT matching changes
See #341883.
2024-09-24 14:19:54 +03:00
Alois Wohlschlager
3616cfb8d9 replaceDependencies: add support for ca-derivations
Unlike regular input-addressed or fixed-output derivations, floating and
deferred derivations do not have their store path available at evaluation time,
so their outPath is a placeholder. The following changes are needed for
replaceDependencies to continue working:
* Detect the placeholder and retrieve the store path using another IFD hack
  when collecting the rewrite plan.
* Try to obtain the derivation name needed for replaceDirectDependencies from
  the derivation arguments if a placeholder is detected.
* Move the length mismatch detection to build time, since the placeholder has a
  fixed length which is unrelated to the store path.
2024-09-24 12:20:15 +02:00
Alois Wohlschlager
59ca239d1a replaceDirectDependencies: split off from replaceDependencies
This allows both swapping out and reusing the rewrite machinery.
2024-09-24 12:20:15 +02:00
Alois Wohlschlager
fee5c7e1c2 replaceDependencies: add tests
The tests cannot be directly built by Hydra, because replaceDependencies relies
on IFD. Instead, they are put inside a NixOS test where they are built on the
guest.
2024-09-24 12:20:15 +02:00
Alois Wohlschlager
63d6a7037c nixos/top-level: wire up cutoffPackages for replaceDependencies
Move replaceRuntimeDependencies to the replaceDependencies namespace,
where the structure is more consistent with the replaceDependencies
function. This makes space for wiring up cutoffPackages as an option
too.

By default, the system's initrd is excluded. The replacement process does not
work properly anyway due to the structure of the initrd (the files being copied
into it, and it being compressed). In the worst case (which has been observed
to actually occur in practice), a store path makes it into the incompressible
parts of the archive, checksums are broken, and the system won't boot.
2024-09-24 12:20:15 +02:00
Alois Wohlschlager
d3abae8dee nixos/top-level: improve replaceRuntimeDependencies
Instead of iterating over all replacements and applying them one by one,
use the newly introduced replaceDependencies function to apply them all
at once for replaceRuntimeDependencies. The advantages are twofold in
case there are multiple replacements:
* Performance is significantly improved, because there is only one pass
  over the closure to be made.
* Correctness is improved, because replaceDependencies also replaces
  dependencies of the replacements themselves if applicable.

Fixes: https://github.com/NixOS/nixpkgs/issues/4336
2024-09-24 12:20:15 +02:00
Yt
d026e3fa1a
immich: init at 1.115.0; nixos/immich: init module (#324127) 2024-09-24 05:56:12 -04:00
K900
e9a78e0285 nixos/installer/tools: only enable tools if nix is enabled
This restores the old behavior of being able to remove
everything nix-related with just `nix.enable = false`.

Fixes #344083.
2024-09-24 08:19:36 +03:00
Aleksana
f56dcfffb6
doc: 24.11: fix taskwarrior typo (#343217) 2024-09-24 11:27:23 +08:00
Jan van Brügge
9d834dc4ec
nixos/tests/immich: init tests 2024-09-23 22:38:03 +02:00
Jan van Brügge
cedcd9f4f0
nixos/immich: init module 2024-09-23 22:38:02 +02:00
Robert Schütz
030f88a326 nixos/iptsd: Touch was renamed to Touchscreen in v3 2024-09-23 12:31:51 -07:00
Simon Hauser
32cc042368
mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3 (#334878)
* mariadb: 10.5.26, 10.6.19, 10.11.9, 11.4.3

* nixos/tests/automysqlbackup: nixfmt

* nixos/automysqlbackup: fix tests

* nixos/tests/mariadb-galera: nixfmt

* nixos/tests/mariadb-galera: fix test failing with new default IPv6 configuration
2024-09-23 20:00:19 +02:00
Luflosi
d979b45371
nixos/iso-image: avoid collision between GRUB2 versions
4b836fb680 added `pkgs.grub2_efi` to `environment.systemPackages` so that it would be in the Nix store and available for install. But `pkgs.grub2` is already in the list. This causes the various paths of the two GRUB2 versions to collide. To fix this, put `pkgs.grub2_efi` into `system.extraDependencies` instead. This should achieve the same effect of adding the second GRUB2 version to the Nix store without the paths colliding in the environment.

To reproduce the problem, execute `nix-build nixos -I nixos-config=nixos/modules/installer/cd-dvd/iso-image.nix -A config.system.build.isoImage` and look for messages like
```
warning: collision between `/nix/store/9jk1p9n5dl431lcm4w9p6x6x8a00dm0q-grub-2.12/bin/grub-install' and `/nix/store/809l0i6aydg4zhn3kqf723brjyp2qm8h-grub-2.12/bin/grub-install'
```
2024-09-23 17:59:26 +02:00
Martin Weinelt
9b9ca77050
nixos/logrotate: harden systemd unit (#339050) 2024-09-23 17:49:29 +02:00
Jörg Thalheim
15f80d9120
Improve assertions for etc.overlay and systemd-sysusers (#332516) 2024-09-23 17:01:30 +02:00
Martin Weinelt
1d8c946fdb
nixos/pretalx: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:58:52 +02:00
Martin Weinelt
9a85a7e2ce
nixos/pretix: enable log rotation
This limits the amount of logs we store by default to 3 months.
2024-09-23 16:57:31 +02:00
Jörg Thalheim
5edd6d6ef2
nixosTests.k3s.{single-node,multi-node}: enable check-config for aarch64 (#343296) 2024-09-23 16:44:27 +02:00
Daniel Nagy
201d35822e
nixos/nar-serve: remove with lib; (#343472) 2024-09-23 15:40:56 +02:00
tilpner
0c24185366 nixos: set system.stateVersion from the nixpkgs release, not version
The nixpkgs/nixos version includes a suffix like "pre-git" or
"pre676716.6f16e67b4921", which does not match the conventional
"XX.YY" format of system.stateVersion.

Unifying the format to "XX.YY" allows for (stricter) validation (see #317858),
and the introduction in 3a5ff9a68c was
only concerned with silencing warnings, so the addition of the "pre.*"
suffix into stateVersion was probably unintentional.
2024-09-23 12:18:11 +02:00
Marcel
0556c426ff
nixos/pretix: fix database.host option type (#343917)
Support database configuration using TCP and not only Unix sockets.
2024-09-23 10:52:08 +02:00
Jonas Chevalier
b4dc369186
Fix expandOnBoot=false and rigid path to nix-path-registration (#341071) 2024-09-23 09:59:27 +02:00
linsui
ac3e0dba12 nixos/firefox: format 2024-09-23 15:10:01 +08:00
linsui
4360c170f3 nixos/firefox: add linsui as maintainer 2024-09-23 15:09:34 +08:00
linsui
bcc5fe1d8c nixos/firefox: add autoConfigFiles 2024-09-23 15:06:52 +08:00
figboy9
56f8f810ae nixos/veilid: fix description link 2024-09-23 13:30:38 +09:00
Atemu
b8f89a9b04
nixos/darkhttpd: remove with lib; (#343441) 2024-09-22 22:16:03 +02:00
Geoffrey Thomas
82978a85c6 Revert "nixos/profiles/base: install vim w/nix-syntax plugin"
Adding custom plugins causes the `vim` command to be a wrapper script
running `vim -u ...`, which makes it not load the default ~/.vimrc.
(This is analogous to #177375 about neovim.)

As of Vim 9, the syntax-highlighting portion of the nix plugin is
upstream; the full plugin is only needed for indentation etc. (see also
e261eb152b). So, using regular pkgs.vim
works around this behavior/bug and causes any ~/.vimrc to get loaded,
without regressing the syntax highlighting support that motivated the
change being reverted here.

This reverts commit 0b5a0cbc69.
2024-09-22 15:16:39 -04:00
Emily
457b356b91
nixos/profiles/minimal: set fonts.enableDefaultPackages which was previously set by environment.noXLibs (#341734) 2024-09-22 19:29:40 +01:00
Sandro
d7a90aab71
nixos/profiles/minimal: set fonts.enableDefaultPackages which was previously set by environment.noXLibs 2024-09-22 20:21:16 +02:00
Fernando Rodrigues
09ae981630
24.11-release-notes/nixos/xen: fix wrong indentation inside deprecation warning
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-22 14:29:08 -03:00
Leona Maroni
761ae3237c
dependency-track: init at 4.11.6 (#328669) 2024-09-22 18:49:11 +02:00
Emily
2e00bfd393
nixos: remove environment.noXlibs (#341717) 2024-09-22 16:25:00 +01:00
Maximilian Bosch
179b6bce21
Merge: linux_4_19: drop (#343283) 2024-09-22 16:46:54 +02:00
Alexander Sieg
3b04bffbd5
nixos/dependency-track: add nixos test 2024-09-22 16:38:45 +02:00
Alexander Sieg
5b67f3b831
nixos/dependency-track: init module 2024-09-22 16:38:45 +02:00
Jörg Thalheim
f05d081652
nix: update nix-fallback-paths (#343716) 2024-09-22 15:44:24 +02:00
Aleksana
5c16154521
nixos/davis: fix nginx conf's well-known redirect (#342995) 2024-09-22 21:28:31 +08:00
Jörg Thalheim
8999c869a8 nix: update nix-fallback-paths 2024-09-22 14:44:27 +02:00
Weijia Wang
84cd38f778
globalprotect-openconnect: add core logic and packages for 2.x releases (#316526) 2024-09-22 12:07:33 +02:00