Commit Graph

40461 Commits

Author SHA1 Message Date
Thomas Gerbet
ecd2d35be0
Merge pull request #305742 from tomfitzhenry/ssh-no-pam
nixos/ssh: expose UsePAM and PrintMotd as options
2024-04-24 09:40:24 +02:00
Marie Ramlow
86913e049d gauge: add wrapper
Adds a wrapper to the gauge package, which allows installing plugins declaratively with nix.
2024-04-24 09:22:38 +02:00
Lin Jian
8c6ccd9a8f
Merge pull request #305370 from stuebinm/docs-remove-emacs-docbook-section
nixos/emacs: remove docbook section in the documentation
2024-04-24 08:48:42 +08:00
stuebinm
5996290676 nixos/emacs: remove docbook section in emacs documentation
Since with the completion of the docbook migration) it seems unclear
what relevance editing xml in generall and docbook in particular with
Emacs still has to NixOS at all, and people interested in the topic
will presumably look to other resources elsewhere (e.g. to the nXML
mode's actual documenation).
2024-04-23 23:18:33 +02:00
Someone
7035968845
Merge pull request #290979 from ereslibre/cdi-add-nvidia-docker-1-directories
CDI: Add `mount-nvidia-binaries` and `mount-nvidia-docker-1-directories` options
2024-04-23 19:55:41 +00:00
Adam C. Stephens
d274696071
Merge pull request #306239 from mweinelt/incus-vtpm
nixos/incus: add support for software TPMs
2024-04-23 09:24:21 -04:00
Tom Fitzhenry
3fd9ef4b40 nixos/ssh: allow PrintMotd to be enabled 2024-04-23 22:53:09 +10:00
Tom Fitzhenry
2e51a2fd03 nixos/ssh: allow UsePAM to be disabled 2024-04-23 22:40:58 +10:00
Tom Fitzhenry
41911ed9d2 tests/openssh: tidy up tests
This test renames server_allowedusers to server-allowed-users.

As a side-effect, since IPs are allocated to machines in alphabetical order,
the IP assigned to server-lazy-socket changed, so the corresponding test had
its IP updated.
2024-04-23 22:39:02 +10:00
Rafael Fernández López
de3ce5ffa7 nixos/nvidia-container-toolkit: add mount-nvidia-executables and mount-nvidia-docker-1-directories options
- `mount-nvidia-binaries`: this option allows users to avoid mounting
nvidia binaries on the container.

- `mount-nvidia-docker-1-directories`: this option allows users to
avoid mounting `/usr/local/nvidia/lib{,64}` on containers.
2024-04-23 12:31:45 +02:00
Rafael Fernández López
471ff2c33c nixos/nvidia-container-toolkit: rename from virtualisation.containers.cdi.dynamic.nvidia.enable
Add the NixOS option `hardware.nvidia-container-toolkit-cdi-generator.enable`.

This enables the ability to expose GPU's in containers for container
runtimes that support the Container Device Interface (CDI)

Remove `cdi.static` and `cdi.dynamic.nvidia.enable` attributes.
2024-04-23 12:26:00 +02:00
Jörg Thalheim
0b4cb020ff
Merge pull request #306076 from mrgiles/mediawiki_explicit_admin_username
mediawiki: update passwordfile description field
2024-04-23 12:16:29 +02:00
Martin Weinelt
8541ec6d85
nixos/incus: add support for software TPMs
Was previously broken due to a missing runtime dependency.

> Error: Failed to start device "vtpm": Failed to validate environment: Required tool 'swtpm' is missing
2024-04-23 12:04:14 +02:00
Florian Klink
5a2d4496d3
Merge pull request #297726 from r-vdp/systemd-unit-names
systemd: add a name option to all systemd units
2024-04-23 12:58:51 +03:00
Kyle Carberry
68a917dc64
nixos/coder: fix broken service by referencing proper env (#305993) 2024-04-23 06:06:25 -03:00
Paul Meyer
ceead2d7e4 azure-cli: document extensions in description, fix release notes
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-04-22 16:03:54 -07:00
Jacek Generowicz
e683bf0c60
First update to release notes (#305965)
* Change spelling: freeform -> free-form

* Rejoin nginx message split by bacula

* Fix typos and trivial rewording

* Move package/service names to start of notes

* Switch package/service names to code font

* Reword some release notes

* Update nixos/doc/manual/release-notes/rl-2405.section.md

Co-authored-by: Jonathan Ringer <jonringer@users.noreply.github.com>

---------

Co-authored-by: Jonathan Ringer <jonringer@users.noreply.github.com>
2024-04-22 11:50:31 -07:00
Marcelo Giles
ac259c3a59
mediawiki: update passwordfile description field 2024-04-22 11:02:52 -07:00
Maximilian Bosch
e8e9c5c3b1
Merge pull request #305837 from Ma27/roundcube-php83
nixos/roundcube: use php 8.3
2024-04-22 13:43:17 +00:00
Sandro Jäckel
8db512dae8 nixos/nginx: update ciphers list 2024-04-22 23:08:14 +10:00
Weijia Wang
5cb9d83fb8
Merge pull request #305826 from KamilaBorowska/maintainers-remove-kamilaborowska
maintainers: remove KamilaBorowska
2024-04-22 04:02:28 +02:00
Robert Schütz
926d688d04
Merge pull request #300556 from dotlambda/python3Packages.recurring-ical-events
python312Packages.recurring-ical-events: 2.1.3 -> 2.2.0
2024-04-22 01:48:51 +00:00
Emily
d5b37040b5
Merge pull request #305842 from Ma27/fix-manual-build
nixos: fix manual build
2024-04-22 00:43:17 +02:00
Ryan Hendrickson
61153af068
Merge pull request #298983 from illustris/mysql
nixos/systemd-lib: fix restart/reloadTriggers when passing paths
2024-04-21 17:45:16 -04:00
Maximilian Bosch
2ee96a1738
nixos: fix manual build
`mdDoc` is deprecated!
2024-04-21 23:28:46 +02:00
Maximilian Bosch
7bb471b3e8
nixos/roundcube: use php 8.3
Upstream claims that 1.6 works fine with PHP 8.3[1]. Also PHP 8.1 is in
the security-only phase already, so we'll need to change sooner or later
anyways.

[1] https://github.com/roundcube/roundcubemail/issues/9339
2024-04-21 23:18:41 +02:00
Pol Dellaiera
95d8be4d3c
Merge pull request #301514 from r-vdp/nftables-rpfilter-extra-rules
nixos/firewall-nftables: allow adding additional rules to the rpfilter chain
2024-04-21 23:02:01 +02:00
Sandro
9edb990e0e
Merge pull request #295261 from SuperSandro2000/pretalx-media
nixos/pretalx: fix /media/ nginx location block
2024-04-21 22:45:17 +02:00
Kamila Borowska
0d3b34f45a maintainers: remove KamilaBorowska 2024-04-21 22:26:12 +02:00
Jörg Thalheim
d285a49ffa
Merge pull request #305637 from schra/fix-grub-device
digital-ocean: revert "make it easier to use disko"
2024-04-21 22:22:58 +02:00
Sandro
04a3a2a8fe
Merge pull request #260962 from lunik1/inadyn-module
nixos/inadyn: init
2024-04-21 21:38:22 +02:00
Basti
19081514c2
Merge pull request #304608 from tmuehlbacher/fix-fzf-bash-completions
nixos/fzf: fix bash with `fuzzyCompletion`
2024-04-21 18:37:01 +00:00
Thomas Mühlbacher
dd64d62858 nixos/fzf: fix bash with fuzzyCompletion
put all of fzf initialization after the bash-completions initialization
in bashrc, as the upstream project suggests in
https://github.com/junegunn/fzf/issues/72

Fixes: #303195
2024-04-21 20:33:03 +02:00
Sandro
a3739c2563
Merge pull request #303224 from 0z13/oauth2_proxy-add-issuer-url
nixos/oauth2_proxy: add oidc-issuer-url flag
2024-04-21 19:49:59 +02:00
pennae
67dfd15302
Merge pull request #305767 from emilylange/nixos-manual-abort-on-warn
nixos/manual: apply `documentation.nixos.options.warningsAreErrors` to nix eval as well
2024-04-21 18:56:54 +02:00
Julien Malka
7a85b7bc35
Merge pull request #304334 from JulienMalka/limesurvey-package
nixos/limesurvey: allow package to be customized
2024-04-21 18:53:26 +02:00
emilylange
2872e10333
nixos/manual: apply cfg.warningsAreErrors to nix eval as well
This change makes `baseOptionsJSON` (`lazy-option.json`) take
our existing `documentation.nixos.options.warningsAreErrors` option into
account to then set the `NIX_ABORT_ON_WARN` environment variable within
its build sandbox accordingly.

Given `documentation.nixos.options.warningsAreErrors` default to true,
our nixpkgs CI check that builds the NixOS manual for each PR, will now
fail when something raises a warning, e.g. as part of the `lib.mdDoc`
deprecation.

This should prevent new PRs with lib.mdDoc from getting merged.

Previously, the manual would build successfully, even if an eval warning
was raised.
2024-04-21 18:01:26 +02:00
Victor Engmark
c11815167f nixos/duosec: Split mkdir mode into chmod command for clarity
As recommended by ShellCheck
<https://github.com/koalaman/shellcheck/wiki/SC2174>.
2024-04-22 01:40:55 +10:00
Weijia Wang
d9ad2e5a1a
Merge pull request #305379 from stuebinm/fcast-receiver-mdDoc
nixos/fcast-receiver: remove uses of lib.mdDoc
2024-04-21 17:19:33 +02:00
Tom Fitzhenry
00ad4eba21 nixos/tests/phosh: check phosh-mobile-settings starts 2024-04-22 00:56:03 +10:00
Michele Guerini Rocco
8b93a430dc
Merge pull request #305689 from rnhmjoj/pr-fix-wpa-secrets
nixos/wireless: correctly handle secrets containing &
2024-04-21 16:07:42 +02:00
Michele Guerini Rocco
23fc571cc3
Merge pull request #305649 from rnhmjoj/pr-fix-wpa-aux
nixos/wireless: create empty config for imperative setup
2024-04-21 16:06:57 +02:00
Preston Hunt
b87790536d nixos/greenclip: restart daemon if it exits 2024-04-21 23:58:10 +10:00
André Schröder
168793f151 digital-ocean: revert "make it easier to use disko"
This reverts parts of commit d87c4e1a72 from @Mic92

After switching from nixos-23.11 to nixos-unstable, I got the following error:

```
$ nixos-rebuild switch --flake nixos/#digitalocean
...
error:
Failed assertions:
- You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.
```

In my nixos config I don't set boot.loader.grub.devices or boot.loader.grub.mirroredBoots explicitly.

It seems like the values are not really defaulted via mkDefault? I am still relatively new to Nix, not sure how to fix this properly, so I am proposing to revert this change.
2024-04-21 11:36:17 +02:00
rnhmjoj
89a1bde018
nixos/wireless: correctly handle secrets containing &
In the replacement arg of gsub() the & symbol is a special character
that need to be escaped. To avoid this, and further issues due to the
variable name possibly being interpreted as a regex, we do a normal
substring replacement.

This fixes issues #279803.
2024-04-21 09:58:26 +02:00
rnhmjoj
4d2f457f6e
nixos/tests/wpa_supplicant: test allowAuxiliaryImperativeNetworks 2024-04-21 09:53:59 +02:00
illustris
7862480ab0
Update nixos/doc/manual/release-notes/rl-2405.section.md
Co-authored-by: Ryan Hendrickson <ryan.hendrickson@alum.mit.edu>
2024-04-21 10:27:33 +05:30
illustris
4a9c962aca
nixos/systemd-lib: fix restart/reloadTriggers when passing paths
When passing a path to restartTriggers or reloadTriggers, X-Restart/Reload-Triggers
will get populated by the absolute path of the file on the machine where the
config is evaluated. This patch corrects this behavior.
2024-04-21 09:40:17 +05:30
rnhmjoj
4fa107f1c9
nixos/wireless: create empty config for imperative setup
If allowAuxiliaryImperativeNetworks is enabled, the wpa_supplicant
daemon complains fails to start if /etc/wpa_supplicant.conf does not
exist. As this can be created using wpa_cli (or similar) later, it
shouldn't matter, so let's create an empty one.

This fixes issues #157537, #299466.
2024-04-21 02:10:32 +02:00
Weijia Wang
20e0c45c7a
Merge pull request #304527 from atorres1985-contrib/earlyoom
earlyoom: 1.7 -> 1.8
2024-04-20 23:06:06 +02:00