Evgeny Egorochkin
6ecf2c3a28
LuksRoot: use generic aes module which loads platform-optimized modules automagically.
2013-01-14 05:12:20 +02:00
Evgeny Egorochkin
0f11519d45
LuksRoot: add more modules to load by default and let users add more or override the list. Added every module
...
mentioned by most popular guides, benchmarks and discussions to make things just work.
2013-01-13 12:44:16 +02:00
Evgeny Egorochkin
8c710b4f23
LuksRoot: mitigate DMA key recovery attacks by default.
2013-01-13 11:04:26 +02:00
aszlig
e844fed9db
Merge pull request #60 from dysinger/virtualbox-guest-additions-vboxsf-group
...
VirtualBox Guest Additions: add vboxsf group (for automatic mounting of shared folders)
2013-01-09 17:02:04 -08:00
aszlig
80a381f521
Revert "xserver: Allow to add extra options ...
...
This reverts commit 1e741f1572b6793b861e2f9820015475ce339ae0 as it is
unnecessary according to @edolstra, because services.xserver.config from another
module will be merged into the configuration.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2013-01-10 01:43:44 +01:00
aszlig
0129717b17
xserver: Allow to set XRandR multi head layout.
...
This is currently only a very simple implementation which just recurses a list
of heads that get chained together to the right of the corresponding previous
item of the list.
If I forgot about something in the already existing configuration options,
please let me know or if this commit is useless or a duplicate, feel free to
revert. But by looking at implementation before this commit, I only see zaphod
and/or quirky xinerama-like configuration options.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2013-01-10 00:54:00 +01:00
aszlig
e4d949ec88
xserver: Allow to add extra options to xorg config.
...
This is especially useful if you want to supply a default XRandR configuration,
where you need multiple "Monitor" sections in order to set properties for
specific CRTCs (if not running in zaphod mode).
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2013-01-09 22:28:09 +01:00
cillianderoiste
0412d6413e
Merge pull request #64 from oxij/master
...
Fix wacom and cherry-pick acpid fix by surr
2013-01-05 12:31:42 -08:00
Alexander Inyukhin
462a9f9fb0
Remove .conf extension from acpid config files
...
This should fix #51
2013-01-05 20:12:08 +00:00
Jan Malakhovski
4e64755b9d
wacom: add USB tablet support
...
To be honest, it's more like "be less discriminating against USB tablets".
USB tablets usually get autodetected, device name is not necessary and defaulting to a serial touchscreen is a clear discrimination.
Unconditionally remapping buttons is generally not a good idea either.
Old defaults transformed into examples.
2013-01-05 19:38:23 +00:00
Mathijs Kwik
a3ee9aac98
efi-boot-stub: enable hook for running (fixup) commands after efibootmgr run
2013-01-01 14:05:08 +01:00
Tim Dysinger
6961f5048d
add vboxsf group (for automatic mounting of shared folders)
2012-12-31 11:00:02 -10:00
Michael Raskin
9b7ce4a1b5
Merge pull request #50 from surr/fixes/tzdata
...
timezone should be taken from recent tzdata rather than glibc
2012-12-29 10:29:21 -08:00
viric
af4db2a79c
Merge pull request #57 from cpages/master
...
Add support for nvidia legacy 304 to xserver
2012-12-29 10:23:10 -08:00
Lluís Batlle i Rossell
ceedc50009
Fixing the fuloong2f system tarball
2012-12-22 18:46:15 +01:00
Lluís Batlle i Rossell
358239348a
making memtest grub entries work again
...
I'm not any good at perl, and I only came up with this after many
slow attempts. Any review welcome.
But until this, memtest was broken, and extraPrepareConfig as well, in grub.
2012-12-16 21:41:47 +01:00
Lluís Batlle i Rossell
3e734ba695
Qemu says 'boot=on' is deprecated, so I try a half-fix here
...
I change the 'build-vm' to use '-boot menu=on', so a menu displays and allows
choosing the 2nd hd. Otherwise, I don't know how to boot from a 2nd hd.
2012-12-16 18:07:13 +01:00
Lluís Batlle i Rossell
dacd7d5a58
Setting iso_new_kernel to use linux 3.7.
...
It was using 3.2, the same kernel as the other isos.
2012-12-16 16:05:50 +01:00
Lluís Batlle i Rossell
cba4d20280
Setting the system utillinux to be utillinuxCurses.
...
The live-dvd was set that way already.
I think some utillinux pieces may be nicer, or have more tools. I don't know
the details though.
2012-12-16 16:03:38 +01:00
Alexander Inyukhin
1ae44e42ed
Use zoneinfo from tzdata
...
This fixes #50
2012-12-15 22:05:32 +04:00
Florian Friesdorf
14483c0bf9
update nixos channel path
2012-12-14 18:24:41 +01:00
Carles Pagès
e312df06f0
Add support for nvidia 304.xx drivers in xserver.
...
Those were already in nixpkgs, but not supported in xserver. Since some time
ago the current 310.xx dropped support for some not so new cards.
2012-12-13 11:36:18 +01:00
Eelco Dolstra
78bd54ca80
Allow setting additional AuthorizedKeysFiles
...
Charon needs this to include the dynamically generated
/root/.vbox-charon-client-key. (We used
users.extraUsers.root.openssh.authorizedKeys.keyFiles for this, but
that no longer works.)
2012-12-11 17:29:34 +01:00
Eelco Dolstra
eda051cff5
Remove abuse of "with"
2012-12-11 17:14:52 +01:00
Rickard Nilsson
68872f81cf
openssh: Change the way authorized keys are added to the system.
...
Instead of the somewhat hacky script that inserted public keys
into the users' .ssh/authorized_keys files, use the AuthorizedKeysFile
configuration directive in sshd_config and generate extra key
files for each user (placed in /etc/authorized_keys.d/).
2012-12-11 17:02:39 +01:00
Eelco Dolstra
13617b803b
Use the binary cache in the installer
...
Also remove "nixos-rebuild pull".
2012-12-08 19:00:06 +01:00
Eelco Dolstra
ef3199f782
Add options for specifying binary caches
...
Cherry-picked a4bcb26b1a
2012-12-08 18:37:40 +01:00
Eelco Dolstra
2b4715d3ef
Installer test: fix nix-push call
...
http://hydra.nixos.org/build/3331147
2012-12-08 18:33:00 +01:00
Evgeny Egorochkin
860cbf7890
scanner support: create scanner group. Users need to be in this group to access scanners.
2012-12-06 02:59:34 +02:00
Evgeny Egorochkin
15a15be2f6
dhcpcd: disable "require dhcp_server_identifier" because of so many non-compliant DHCP servers
2012-12-05 23:55:42 +02:00
Eelco Dolstra
7435db4f89
Get rid of the last uses of mkAlways
...
mkAlways is an insane function, mkMerge is much saner.
2012-11-30 15:07:39 +01:00
Eelco Dolstra
9eb81d2578
Renamed tcpWrapper -> tcp_wrappers
2012-11-29 15:16:30 +01:00
Lluís Batlle i Rossell
04963cf802
system-tarball-pc: fixing the readme inclusion
2012-11-29 11:29:15 +01:00
Lluís Batlle i Rossell
a9e5d1ab50
Changing the kernel parameters for crashump
...
I think that these enable more checks, and make more NMIs happen.
2012-11-29 11:27:33 +01:00
Peter Simons
6b6b245693
sane: update name of the snapshot version of the backends
2012-11-26 16:21:11 +01:00
Rob Vermaas
f0a6911929
Add ec2.metadata (default false) option whether to allow access to EC2 metadata API.
2012-11-21 12:19:38 -05:00
Peter Simons
0f15d75017
Merge pull request #29 from rickynils/shellaliases
...
Generate shell aliases programatically
2012-11-20 12:35:03 -08:00
Rickard Nilsson
eeab59fb87
Merge pull request #33 from rickynils/nslcd
...
Adds the option users.ldap.daemon which, handles NSS and PAM requests by talking to a local nslcd daemon instead of directly to the LDAP server.
2012-11-20 07:42:30 -08:00
Rickard Nilsson
6099451662
Add support for nslcd (nss-pam-ldapd) as users.ldap.daemon option
2012-11-20 16:39:45 +01:00
Rickard Nilsson
611ebeb1d0
Add nslcd (nss-pam-ldapd) uid and gid
2012-11-20 16:39:45 +01:00
Rickard Nilsson
a22c362155
Add option for specifying shell aliases, environment.shellAliases.
2012-11-20 16:33:29 +01:00
Peter Simons
3dda354610
Merge pull request #40 from falsifian/master
...
Change the default value of programs.ssh.forwardX11 to false.
2012-11-18 14:49:45 -08:00
James Cook
3afa5f86c1
Fixed the documentation for programs.ssh.forwardX11 to account for the X11 SECURITY extension.
2012-11-18 11:05:18 -08:00
James Cook
63dc873b85
Merge master.
2012-11-18 10:49:55 -08:00
Rickard Nilsson
02e0d7dbc3
dnsmasq: Add extraConfig option
2012-11-12 18:16:04 +01:00
Shea Levy
2f833bc88d
Remove unnecessary toPath that breaks with recent nixUnstable
2012-11-08 13:04:20 -05:00
Eelco Dolstra
e078117c72
firewall.nix: Don't fail if IPv6 is disabled
2012-11-06 22:55:25 +01:00
aszlig
1c28b86749
pam: Douchebag commit, fix alphabetical order.
...
Yes, I'm going to get back to school and learn the alphabet. I promise!
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2012-11-05 09:41:24 +01:00
aszlig
6e6ee3278c
pam: Add default configuration for GNU screen.
...
This is needed in order to properly lock your screen using the C-a C-x
(lockscreen) command _and_ being back to re-login, because the "other" PAM
service/fallback is to deny authentication.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2012-11-05 09:40:15 +01:00
Lluís Batlle i Rossell
64540fb453
Adding quick instructions in system-tarball-pc to use it as chroot.
...
I also split the readme into a file apart.
2012-11-04 22:13:19 +01:00
