Commit Graph

5820 Commits

Author SHA1 Message Date
Robin Stumm
093e3eb20d ceph: enable dashboard in nixos test 2023-01-20 23:59:26 +01:00
Yarny0
53729841e8 nixos/tests/cups-pdf: fix test with socket-activated cups
The cups-pdf vm test previously waited for the
activation of `cups.service` before testing anything.
This method fails since

47d9e7d3d7

as cups auto-stops if it is not used,
causing the test framework to complain
that `cups.service` will never start.

The commit at hand alters the test so it
simply waits for `multi-user.target`.
We could also switch to `cups.socket`,
but `multi-user.target` seems to be more robust
concerning future changes in the cups mechanisms.
2023-01-20 21:53:34 +01:00
Guillaume Girol
cb73862665 Revert "nixos/nginx: validate syntax of config file at build time"
This reverts commit a768871934.

This is too fragile, it breaks at least on:
* ssl dh params
* hostnames in proxypass and upstreams are resolved in the sandbox
2023-01-20 20:10:19 +01:00
Michele Guerini Rocco
10222e1e37
Merge pull request #211295 from rnhmjoj/pr-nixos-install
nixos-install: remove root requirement for bind mount
2023-01-20 18:34:38 +01:00
Thomas Watson
ddc5d34f61 nixos/tests/systemd-boot: only patch systemd-boot during update test
The update test patches the systemd-boot binary to report a known
version then tests that this is the version updated from. The previous
patch would also search the kernel and initrd binaries, which would
cause sed to write out a temporary file that might cause the disk
to run out of space and the test to fail.

Only attempt to patch binaries which contain systemd-boot (usually
`BOOT<arch>.EFI` and `systemd-boot<arch>.efi` to avoid this problem.
As a bonus, this reduces test time by 20-30%.
2023-01-19 23:52:35 -06:00
Thomas Watson
d12040e858 nixos/tests/systemd-boot: fix update test
At some point many months ago, the systemd-boot update script stopped
outputting parentheses around the version being upgraded from, causing
the test to fail. Remove the parentheses from the expected message to
fix the test.
2023-01-19 22:45:41 -06:00
Artturi
257f9de9b6
Merge pull request #211574 from Artturin/remacreintol
treewide: remove accidentally introduced -l
2023-01-20 01:52:14 +02:00
rnhmjoj
b139c467e9
Revert "Revert "nixos/tests/installer: test relative paths in initrd secrets""
This reverts commit 8d45d82c71.

The tests shold pass now that systemd-boot handles failures in initrd
for older boot entries.
2023-01-19 20:50:59 +01:00
Artturin
e59b23d062 treewide: remove accidentally introduced -l
they were all removed in
c2b898da76
but these changes were made before that and merged after it
2023-01-19 15:07:45 +02:00
Vladimír Čunát
8d45d82c71
Revert "nixos/tests/installer: test relative paths in initrd secrets"
This reverts commit 9bb888c9f8 from PR #210812.
We first need to fix nixosTests.installer.simpleUefiSystemdBoot
2023-01-19 10:25:22 +01:00
Vladimír Čunát
2b988c76fd
Revert "nixosTests.installer: bump memorySize"
This reverts commit 309ed272be.
The bump caused nixosTests.installer.luksroot hang, e.g. see
https://hydra.nixos.org/build/205951019
(I don't know why.)

The OOM issues were avoided by 6dccdc4585 (newer but merged earlier)
2023-01-18 11:45:48 +01:00
Ryan Lahfa
eb6d457115
Merge pull request #209246 from e1mo/dokuwiki/package-overriding
dokuwiki: Combine mechanism for plugins and templates
2023-01-18 00:51:18 +01:00
Florian Klink
24b4189619
Merge pull request #207468 from schnusch/systemd-user-tmpfiles-rules
nixos: systemd: add systemd.user.tmpfiles.rules, systemd.user.tmpfiles.users.<name>.rules
2023-01-17 14:39:44 +01:00
schnusch
34ad8447c3 nixos: systemd: add systemd.user.tmpfiles 2023-01-17 12:19:40 +01:00
Nick Cao
2b3c8ae88a
Merge pull request #209767 from 0x4A6F/master-coturn-tests
test/coturn: add some sanity-checks
2023-01-17 10:34:51 +08:00
Nick Cao
8f34f01185
Merge pull request #194343 from oxalica/fix/swap-btrfs
nixos/swap: fix creation on BTRFS and refactor assertions
2023-01-17 08:35:15 +08:00
Michele Guerini Rocco
594b94b4c3
Merge pull request #210812 from rnhmjoj/pr-initrd-secrets
boot.initrd.secrets fixes
2023-01-17 00:48:58 +01:00
oxalica
eecb6c2bd8 nixos/tests/swap-file-btrfs: init 2023-01-17 06:56:55 +08:00
Nick Cao
a90e324332
Merge pull request #210785 from fgaz/mindustry/nixos-test
nixosTests.mindustry: init; mindustry: use SRI hashes
2023-01-16 16:21:06 +08:00
rnhmjoj
9bb888c9f8
nixos/tests/installer: test relative paths in initrd secrets 2023-01-16 02:31:02 +01:00
rnhmjoj
928181b5f3
nixos/tests/installer: add full disk encryption test
This tests a common full disk encryption setup:
https://gist.github.com/ladinu/bfebdd90a5afd45dec811296016b2a3f
2023-01-16 02:31:01 +01:00
Artturi
ee5e15cf2d
Merge pull request #208614 from LeSuisse/grub2-CVE-2022-2601-CVE-2022-3775 2023-01-15 23:23:33 +02:00
Maximilian Bosch
8528a0b512
Merge pull request #210897 from K900/kernels-20230115
Kernels for 2023-01-15
2023-01-15 20:58:06 +01:00
Ryan Lahfa
e2ac17f781
Merge pull request #207466 from Patryk27/fix/174065
nixos: add --specialisation to nixos-rebuild
2023-01-15 18:52:09 +01:00
Ryan Lahfa
503c288f4e
Merge pull request #207567 from Stunkymonkey/photoprism-module-init
nixos/photoprism: init module
2023-01-15 18:36:13 +01:00
Patryk Wychowaniec
2c55eba8f4
nixos: add --specialisation to nixos-rebuild
This commit fixes a papercut in nixos-rebuild where people wanting to
switch to a specialisation (or test one) were forced to manually figure
out the specialisation's path and run its activation script - since now,
there's a dedicated option to do just that.

This is a backwards-compatible change which doesn't affect the existing
behavior, which - to be fair - might still be considered sus by some
people, the painful scenario here being:

- you boot into specialisation `foo`,
- you run `nixos-rebuild switch`,
- whoops, you're no longer at specialisation `foo`, but you're rather
  brought back to the base system.

(it's especially painful for cases where specialisation is used to load
extra drivers, e.g. Nvidia, since then launching `nixos-rebuild switch`,
while forgetting that you're inside a specialisation, can cause some
parts of your system to get accidentally unloaded.)

I've tried to mitigate that by improving specialisations so that they
create a dedicated file somewhere in `/run/current-system` containing
the specialisation's name (which `nixos-rebuild` could then use as the
default value for `--specialisation`), but I haven't been able to come
up with anything working (plus it would be a breaking change then).

Closes https://github.com/NixOS/nixpkgs/issues/174065
2023-01-15 18:16:49 +01:00
Felix Buehler
0214f02419 nixos/photoprism: add test 2023-01-15 18:02:46 +01:00
Ryan Lahfa
df1262baae
Merge pull request #210927 from JulienMalka/Ntfy-test-fix
nixos/ntfy-sh: Fixed nixos test
2023-01-15 17:06:50 +01:00
Matthieu Coudron
cf10d7aef8
services.openssh: support freeform settings (#193757)
* services.openssh: support freeform settings

Keep "extraConfig" but introduces "settings".

Also renames several options

(mkRenamedOptionModule [ "services" "openssh" "kbdInteractiveAuthentication" ] [  "services" "openssh" "settings" "KbdInteractiveAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "passwordAuthentication" ] [  "services" "openssh" "settings" "PasswordAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "useDns" ] [  "services" "openssh" "settings" "UseDns" ])
(mkRenamedOptionModule [ "services" "openssh" "permitRootLogin" ] [  "services" "openssh" "settings" "PermitRootLogin" ])

* updated doc
* regen doc
2023-01-15 16:32:46 +01:00
K900
6dccdc4585
Merge pull request #210930 from pennae/installer-test-no-docs
nixosTests.installer.*: disable documentation
2023-01-15 18:25:41 +03:00
pennae
a88a515653 nixosTests.installer.*: disable documentation
building the manual takes a pretty long time and sufficient memory to
cause hydra failures: https://hydra.nixos.org/build/205689097#tabs-buildsteps
2023-01-15 16:06:07 +01:00
Julien Malka
d40d0ce7e6
nixos/ntfy-sh: Fixed nixos test 2023-01-15 15:59:30 +01:00
K900
33b60cca17 linux/hardened/patches/6.1: init at 6.1.6-hardened1 2023-01-15 15:23:24 +03:00
Francesco Gazzetta
cbe58afca0 nixosTests.mindustry: init 2023-01-15 13:11:37 +01:00
github-actions[bot]
4712ed9439
Merge master into staging-next 2023-01-14 00:02:26 +00:00
Robert Hensing
e973da60cd
Merge pull request #200225 from pacien/nixos-qemu-vm-restrictnetwork
nixos/qemu-vm: add option "restrictNetwork"
2023-01-13 21:47:21 +01:00
github-actions[bot]
49722fd14a
Merge master into staging-next 2023-01-13 18:01:34 +00:00
Sandro
ba33f29792
Merge pull request #210434 from Stunkymonkey/test-acme-server-phases 2023-01-13 17:59:06 +01:00
Robert Schütz
0a9df042f2
Merge pull request #207595 from wahjava/update-vaultwarden
vaultwarden: 1.26.0 -> 1.27.0
2023-01-13 05:24:14 -08:00
Felix Buehler
fec6e19fd1 nixos/tests/acme/generate-certs: deprecate phases 2023-01-12 22:56:46 +01:00
pacien
b25e0e8ebc nixos/tests: add qemu-vm-restrictnetwork test 2023-01-12 19:50:27 +01:00
Rhys Davies
eb4891d2d3 nixos/vaultwarden: fix test 2023-01-12 01:48:12 -08:00
github-actions[bot]
166b049bd9
Merge master into staging-next 2023-01-11 06:01:29 +00:00
Yaya
3cd1bd5888 nixos/tests/gitlab: Fix a regression introduced in 15.7.0
```
{"message":{"password":["must not contain commonly used combinations of
words and letters"]}}
```
2023-01-10 22:53:33 -05:00
Martin Weinelt
c1e6c6af69 Merge remote-tracking branch 'origin/master' into staging-next 2023-01-11 03:51:33 +01:00
Robert Obryk
9dbdb05924 nixos/restic: add exclude parameter
This provides an easy way to specify exclude patterns in config. It was
already possible via extraBackupOptions; this change creates a simpler,
similar to other backup services, way to specify them.
2023-01-11 00:06:13 +01:00
Robert Obryk
2a46ef4fff nixos/tests/restic: test that restoring works
This commit also moves the indicator files out of the directory that's
being backed up, so that the directory remains static throughout the
backup operation.
2023-01-11 00:06:13 +01:00
Artturin
309ed272be nixosTests.installer: bump memorySize
Without it the tests sometimes fail because the OOM killer is triggered.
https://hydra.nixos.org/build/204713462
2023-01-10 18:45:34 +02:00
linsui
a2e21c76c7 rename config.qt5 -> config.qt 2023-01-10 20:50:15 +08:00
Artturi
27c1ec2ecf
Merge pull request #209816 from Artturin/deprecate-top-level-platform-aliases 2023-01-09 22:15:50 +02:00
Artturin
2eeb34c273 treewide: {build,host,target}Platform -> stdenv.{build,host,target}Platform 2023-01-09 21:13:22 +02:00
github-actions[bot]
33aa224777
Merge master into staging-next 2023-01-09 18:01:24 +00:00
Naïm Favier
b8ee437596
Merge pull request #208643 from ncfavier/installer-test-tmp 2023-01-09 13:20:02 +01:00
github-actions[bot]
99dd0da8dc
Merge master into staging-next 2023-01-09 06:01:08 +00:00
Bobby Rong
21b9c3cee5
Merge pull request #209709 from bobby285271/init/nixosTests.mate
nixos/tests/mate: init
2023-01-09 12:38:19 +08:00
Martin Weinelt
56103f5f70
nixos/tests/evcc: Ignore ERROR level messages
The version checker fails with an ERROR message, so asserting on that
isn't useful for us since 0.110.2.
2023-01-09 02:34:55 +01:00
Bobby Rong
76c0fad164
nixos/tests/mate: init 2023-01-08 23:57:34 +08:00
Martin Weinelt
4d65509504 Merge remote-tracking branch 'origin/master' into staging-next 2023-01-08 16:34:30 +01:00
K900
337d358300 nixos/n8n: disable telemetry by default
Originally intended to just speed up the tests, but probably a good idea in general.
2023-01-08 14:43:53 +03:00
github-actions[bot]
4bf238a8fb
Merge master into staging-next 2023-01-08 00:02:31 +00:00
Felix Bühler
a4eb1b11bc
Merge pull request #209254 from Stunkymonkey/freshrss-srv-pgsql
nixos/freshrss: fix permissions and add database test
2023-01-07 19:13:30 +01:00
github-actions[bot]
3b3114f45d
Merge master into staging-next 2023-01-07 18:01:08 +00:00
Thiago Kenji Okada
c2fdf2d137
Merge pull request #209191 from wegank/mongodb-more-drops
mongodb-4_0: drop
2023-01-07 13:04:34 +00:00
github-actions[bot]
76d33189ba
Merge master into staging-next 2023-01-07 12:01:24 +00:00
github-actions[bot]
0789ea69b1
Merge master into staging-next 2023-01-07 00:02:25 +00:00
Moritz 'e1mo' Fromm
ee41b6b457
dokuwiki: Combine mechanism for plugins and templates
Copy templates and plugins into Dokuwiki instead of linking to address
template compatibility. As noted by @sinavir[^1], (some) templates would
fail due to relative PHP imports.

[^1]: https://github.com/NixOS/nixpkgs/pull/208299#issuecomment-1370413116
2023-01-06 23:52:49 +01:00
Moritz 'e1mo' Fromm
8d4251f491
nixos/dokuwiki: Add e1mo as maintainer 2023-01-06 23:40:09 +01:00
Moritz 'e1mo' Fromm
236d90fde0
nixos/dokuwiki: Overhaul for structured settings
Added the RFC42-style added the posibility to use
`services.dokuwiki.sites.<name>.settings' instead of passing a plain
string to `<name>.extraConfig`. ´<name>.pluginsConfig` now also accepts
structured configuration.
2023-01-06 22:02:37 +01:00
Felix Buehler
0e2787884e nixos/freshrss: fix permissions and add database test 2023-01-06 21:16:50 +01:00
Moritz 'e1mo' Fromm
055100611d
nixos/dokuwiki: Simplify plugin fetching examples
Also replaced apache httpd referenced with ones to caddy
2023-01-06 15:12:47 +01:00
Moritz 'e1mo' Fromm
da9185d964
nixosTests.dokuwiki: Deduplicate node configuration
Also added two "quality of life" tests to ensure customisations to the
dokuiwki package are not being discarded and both webserver
configurations handle rewriting correctly.
2023-01-06 14:51:34 +01:00
Weijia Wang
7afa7286f7 mongodb-4_0: drop 2023-01-05 21:21:33 +01:00
github-actions[bot]
4acd5a978b
Merge staging-next into staging 2023-01-05 12:01:57 +00:00
Colin Arnott
de49ddabae
nixosTests.wordpress: iterate over versions
As a follow up to f9d1f80045, we should
add the ability to test explicit versions of the wordpress derivation.
Since we are currently only supporting wordpress6_1 in unstable, this
change is a noop.

Updates #209051
2023-01-05 06:38:37 +00:00
github-actions[bot]
0c98bf3e85
Merge staging-next into staging 2023-01-05 00:02:56 +00:00
Bjørn Forsman
1b80fc4204 nixos/tests/apcupsd.nix: init
This verifies that https://github.com/NixOS/nixpkgs/issues/208204
("apcupsd: apcaccess does not respect config from services.apcupsd") is
fixed.
2023-01-04 21:45:58 +01:00
github-actions[bot]
47507cf77a
Merge staging-next into staging 2023-01-04 06:01:44 +00:00
zowoq
469aec905b nixos/podman, podman: switch to netavark network stack 2023-01-04 14:25:14 +10:00
github-actions[bot]
e2839320bb
Merge staging-next into staging 2023-01-03 12:01:44 +00:00
Kim Lindberger
ba1e6e5f8c
Merge pull request #184206 from e1mo/e1mo/parsedmarc-new-config
nixos/parsedmarc: follow upstream configuration
2023-01-03 12:26:06 +01:00
github-actions[bot]
03e830eb69
Merge staging-next into staging 2023-01-03 00:02:53 +00:00
Florian Brandes
5b6881f4a0 nixos/paperless-ngx: fix startup order
The nixOS test failed sporadically with a timeout.
This is due to a race condition in the startup  of
the scheduler vs the task-queue.

The scheduler runs the migration scripts in "pre-start" and
celery isn't available, yet. The celery worker (paperless-task-queue)
was already started by systemd but was unable to connect
(as the migration scripts from "pre-start" still ran).

This fix adds the necessary "after" condition in the systemd
worker unit and adds a test to "paperless"

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2023-01-02 15:21:45 +01:00
Jan Tojnar
5810109b42 Merge branch 'staging-next' into staging
- readline6 attribute removed from all-packages.nix in d879125d61
- readline attribute was bumped to readline82 in 50adabdd60
2023-01-02 03:04:32 +01:00
Jörg Thalheim
c8104628f4 nixos/tests/installer/bcachefs: use ocr to type in password 2023-01-01 19:58:17 +01:00
Jörg Thalheim
13b0e42202 nixos/tests/installer: disable zfs for bcachefs tests
we are potentially testing very new kernels here, which are not
supported by zfs yet.
2023-01-01 19:58:17 +01:00
Naïm Favier
19cfb3e48c
nixos/tests/installer: test initrd secrets and nix-build
Both of those things rely on nixos-enter creating `/tmp` under the mount
point.
2023-01-01 17:20:37 +01:00
Naïm Favier
1596c87bdb
Merge pull request #195945 from ncfavier/wg-quick-nftables 2023-01-01 14:13:01 +01:00
Sandro
407160f700
Merge pull request #207382 from wegank/mongodb 2022-12-31 23:07:42 +01:00
Ryan Lahfa
06542b21a0
Merge pull request #205636 from LoveIsGrief/webhook-module
nixos/webhook: add support for a webhook service option
2022-12-31 22:31:38 +01:00
Moritz 'e1mo' Fromm
59c28cab1c
nixos/parsedmarc: follow upstream configuration
> Starting in version 8.0.0, most options from the `imap` section have
been moved to the `mailbox` section.

6b2131f0e8
2022-12-31 16:42:41 +01:00
Raito Bezarius
e6597c8ac5 garage: mark 0.7.3 as EOL 2022-12-30 15:12:45 +01:00
Raito Bezarius
1db2175e7a nixos/garage: provide multiple versions to provide an upgrade path when using NixOS service
- Add mention to release notes 23.05
- Introduce Garage v0.8
- Protect against unexpected upgrade with stateVersion
- Test matrix over 0.7 × 0.8
2022-12-30 15:12:44 +01:00
Ryan Lahfa
30307eba48
Merge pull request #207453 from p-h/ulogd
ulogd: init at 2.0.8
2022-12-30 14:13:53 +01:00
Bobby Rong
de07c59526
Merge pull request #208060 from chpatrick/fix-gnome-flashback-systemd
gnome.gnome-flashback: fix crash on start due to not finding .desktops
2022-12-30 20:12:51 +08:00
github-actions[bot]
df1fb5ef89
Merge staging-next into staging 2022-12-29 06:01:46 +00:00
Will Fancher
3d7270abd5
Merge pull request #203171 from ElvishJerricco/zfs-fix-requested-credentials
nixos/zfs: Ensure pool has datasets to decrypt
2022-12-29 00:00:29 -05:00
Will Fancher
51809df302 nixos/tests/zfs: Test requestEncryptionCredentials as a list. 2022-12-28 22:45:28 -05:00
Will Fancher
22b6f785a7 nixos/tests/zfs: Represent real world usage better
It's better to utilize the boot process and systemd mechanisms to test
these zfs features, rather than manually simulating the same behavior
with testScript.
2022-12-28 22:42:37 -05:00
Lucas Franceschino
e8e932bc80
nixos/webhook: init 2022-12-29 01:24:46 +01:00
Patrick Chilton
933b978fb9 gnome.gnome-flashback: add VM test 2022-12-29 00:35:21 +01:00
github-actions[bot]
aaaeebad7a
Merge staging-next into staging 2022-12-28 18:01:50 +00:00
Jonas Heinrich
2b6a58a6a5
Merge pull request #208014 from LeSuisse/trafficserver-9.1.4
trafficserver: 9.1.3 -> 9.1.4
2022-12-28 18:53:43 +01:00
Jörg Thalheim
741a0f5a7f envfs: init at 1.0.0 2022-12-28 16:03:49 +01:00
Jörg Thalheim
d165c5dcad
Merge pull request #204254 from raphaelr/initrd-openvpn
nixos/tests/initrd-network-openvpn: fix
2022-12-28 12:36:27 +00:00
Sergei Trofimovich
092d57c076 Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
    pkgs/development/tools/language-servers/ansible-language-server/default.nix
2022-12-28 09:35:37 +00:00
Ryan Lahfa
861c7b189c
Merge pull request #182360 from Yarny0/cups-pdf
cups-pdf(-to-pdf): init
2022-12-28 09:08:49 +01:00
Philippe Hürlimann
bcbedfeefc nixos/ulogd: init
Heavily based on original work by xvuko

Co-authored-by: xvuko <nix@vuko.pl>
2022-12-28 00:17:28 +01:00
Thomas Gerbet
ede90bb8e1 trafficserver: 9.1.3 -> 9.1.4
Fixes CVE-2022-32749 and CVE-2022-40743.

https://raw.githubusercontent.com/apache/trafficserver/9.1.x/CHANGELOG-9.1.4
2022-12-27 21:15:43 +01:00
Mikael Voss
a6f1bae946
nixos/tests/akkoma: init
This test is based in part on nixos/tests/pleroma.
2022-12-27 14:37:01 +01:00
Weijia Wang
06ce75d724 mongodb-3_4, mongodb-3_6: drop 2022-12-27 09:45:53 +01:00
K900
2d3cf010fe
Revert "treewide: use nativeBuildInputs with runCommand instead of inlining" 2022-12-26 21:05:35 +03:00
Naïm Favier
c4bd20a686
nixos/wg-quick: add nftables test 2022-12-26 12:46:45 +01:00
Maciej Krüger
94373a589b
Merge pull request #203011 from duament/firewall-nftables 2022-12-26 00:57:24 +01:00
Sandro
5af3f865e8
Merge pull request #206775 from SuperSandro2000/runCommand-nativeBuildInputs 2022-12-25 21:42:05 +01:00
Jan Tojnar
72c37eddec Merge branch 'staging-next' into staging 2022-12-25 01:30:47 +01:00
Sandro
c8c8ac5cc6
Merge pull request #203449 from yaxitech/azure-quote-provider 2022-12-24 16:19:39 +01:00
Robert Hensing
d35f793cf2
Merge pull request #207563 from hercules-ci/flaky-nixosTests.keymap
Fix flaky `nixosTests.keymap`
2022-12-24 14:53:27 +01:00
Robert Hensing
5624311305 nixosTests.keymap: Remove unnecessary sleep
When test-input-reader runs, it's standard input exists and will
be buffered, so by the time the file exists, the standard input
can already be written to.
I have no reason to believe that a terminal emulator would start
accepting input _after_ launching the command.
I've tested this for hours in a loop without a single failure or
timeout.
2022-12-24 14:06:40 +01:00
Robert Hensing
2b5677caa3 nixosTests.keymap: Reorder test cases to make setup more reliable
I've run this test on repeat for hours, so there's reason to be
hopeful.
2022-12-24 14:06:31 +01:00
Ryan Lahfa
2994edb9e4
Merge pull request #205955 from Izorkin/update-peertube
peertube: 4.3.1 -> 5.0.0
2022-12-23 19:48:00 +01:00
Jacek Galowicz
9938dec682
Merge pull request #170636 from Synthetica9/wait_before_entry
nixos/test-driver: add wait_before_entry
2022-12-23 19:46:23 +01:00
Izorkin
9195f02b49
nixos/peertube: add secretsFile option 2022-12-23 20:47:04 +03:00
Kristoffer Dalby
571780384a
headscale: Update to 0.17.1, conform module to RFC0042
This commit upgrades headscale to the newest version, 0.17.0 and updates
the module with the current breaking config changes.

In addition, the module is rewritten to conform with RFC0042 to try to
prevent some drift between the module and the upstream.

A new maintainer, Misterio77, is added as maintainer.

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
Co-authored-by: Gabriel Fontes <hi@m7.rs>
Co-authored-by: Geoffrey Huntley <ghuntley@ghuntley.com>
2022-12-23 15:47:53 +01:00
Florian Klink
6b1a896570
Merge pull request #205121 from alaviss/homed
nixos: systemd-homed support
2022-12-23 13:09:17 +01:00
Ryan Lahfa
e2e8dfcf44
Merge pull request #207163 from NixOS/rfc0125-improvements
nixos/activation/bootspec: make initrd optional, serialize system, precise extensions' type
2022-12-23 00:43:29 +01:00
Rvfg
a43c7b2a70
nixos/{firewall, nat}: add a nftables based implementation 2022-12-23 00:49:24 +08:00
Cole Helbling
0598d95719 nixos/tests: expose bootspec test
On x86_64-linux only because bootspec is for NixOS (for the moment?),
and NixOS is really only a Linux concept (for the moment?).

Not on aarch64-linux because it fails for whatever reason 🤷
2022-12-22 07:56:09 -08:00
Cole Helbling
21f4afd799 nixos/activation/bootspec: fix document output path
The RFC currently stipulates the document will be available at
`$out/boot.json`.
2022-12-22 07:56:09 -08:00
Ryan Lahfa
0b0726ae0b
Merge pull request #205983 from m1cr0man/acme-test-fix
nixos/acme: Increase number of retries in testing
2022-12-22 02:19:19 +01:00
Raito Bezarius
5dd2e60371 nixos/activation/bootspec: make initrd optional, serialize system, precise extensions' type 2022-12-21 23:28:21 +01:00
Michele Guerini Rocco
5dff7733aa
Merge pull request #203454 from rnhmjoj/pr-cups-socket
nixos/hardware/printers: stop cupsd when unneeded
2022-12-21 23:06:00 +01:00
0x4A6F
2b152c5727
test/coturn: add some sanity-checks 2022-12-20 22:54:01 +01:00
Sandro
9c624f5879
Merge pull request #203117 from sikmir/vmtools
vmTools: update current maintained debian versions
2022-12-20 15:51:50 +01:00
Sandro
bf46d7b626
Merge pull request #172084 from priegger/prometheus-statsd-exporter 2022-12-19 23:16:02 +01:00
Guillaume Girol
92dbac3199
Merge pull request #205561 from symphorien/nginx-conf-validate
nixos/nginx: validate config at build time
2022-12-19 19:52:33 +00:00
Jörg Thalheim
9bf4ec6909
Merge pull request #206645 from Mic92/nix-ld
nixos/nix-ld: set NIX_LD by default
2022-12-19 16:26:02 +00:00
Jörg Thalheim
4ce47012a6 nixos/nix-ld: set NIX_LD by default 2022-12-19 17:06:41 +01:00
Franz Pletz
6f8f1b0454
Merge pull request #205865 from DeeUnderscore/fix/grafana-socket 2022-12-19 12:04:22 +01:00
Sandro Jäckel
26f704b545
treewide: use nativeBuildInputs with runCommand instead of inlining 2022-12-18 23:36:40 +01:00
figsoda
a6a225e33c
Merge pull request #206722 from SuperSandro2000/sourcehut-nix
nixos/sourcehut: resolve deprecated setting
2022-12-18 13:55:43 -05:00
Valentin Gagarin
f782da699e
Merge pull request #206646 from figsoda/typos 2022-12-18 18:27:57 +01:00
Sandro Jäckel
92c94a946f
nixos/sourcehut: resolve deprecated setting 2022-12-18 16:53:49 +01:00
Vincent Bernat
fc39b5ecc8 nginx: make global redirect vhost option accept exceptions
By moving the return into a location directive, one can provide
exceptions by adding locations. This is similar to what the forceSSL
option does.
2022-12-18 12:21:27 +01:00
figsoda
6bb0dbf91f nixos: fix typos 2022-12-17 19:31:14 -05:00
Robert Hensing
cf150c53f1
Merge pull request #200724 from JonathanLorimer/allow-configuration-of-roles
services.postgresql: Allow configuration of user roles in ensureUser
2022-12-18 00:40:57 +01:00
Lucas Savva
c9a5bf4a38
nixos/acme: Increase number of retries in testing
Helps to avoid failures in Hydra when the host server starts
the web server too slowly.
2022-12-17 21:12:13 +00:00
Jörg Thalheim
668a2b2f33
Merge pull request #172237 from DeterminateSystems/bootspec-rfc
Support external bootloader backends (RFC-0125)
2022-12-17 08:35:53 +00:00
Raito Bezarius
aac4134f43 nixos/tests/bootspec: add EFI support for GRUB test 2022-12-16 17:15:59 -08:00
Ryan Lahfa
4428f9f5e9
Merge pull request #198239 from jacobgreenleaf/jacobg-borg-inhibit
nixos/borgbackup: Add option for inhibiting sleep
2022-12-17 00:45:10 +01:00
Sandro
528a316b31
Merge pull request #205246 from Frostman/unpoller-2.4.0 2022-12-16 22:51:06 +01:00
Sandro
c338bf3244
Merge pull request #205712 from devusb/atuin-server 2022-12-16 22:38:35 +01:00
Manuel Bärenz
3479b87182
nixosTests.mastodon: Put script in separate file 2022-12-16 16:19:41 +03:00
Izorkin
883a56c0cc
nixos/tests/mastodon: add test with external services 2022-12-16 16:19:41 +03:00
Naïm Favier
dc644c312f
Merge pull request #206061 from ncfavier/nginx-duplicate-modules 2022-12-16 10:09:19 +01:00
Morgan Helton
a935888d45 nixos/atuin: init module 2022-12-15 21:07:15 -06:00
Naïm Favier
6c61c436cf
nginx: detect duplicate modules
Nginx breaks at runtime when duplicate modules are added. To detect
this, add a `name` key to all modules.

Also remove the outdated modsecurity v2 module and unify `modsecurity`
and `modsecurity-nginx`.
2022-12-16 01:57:14 +01:00
Artturin
05a2dfd674 lib.replaceChars: warn about being a deprecated alias
replaceStrings has been in nix since 2015(nix 1.10)

so it is safe to remove the fallback

d6d5885c15
2022-12-15 22:25:51 +02:00
Martin Weinelt
d37dca5f14
nixos/tests/vaultwarden: Update selenium tests for 2022.10.0
A few form element ids were changed around and a button was renamed.
2022-12-14 15:00:21 +01:00
Franz Pletz
a0b6072547
nixos/grafana: add test case for socket proxy 2022-12-14 14:42:13 +01:00
Franz Pletz
78aaaaaadb
Merge pull request #201505 from r-ryantm/auto-update/ntfy-sh 2022-12-14 12:08:03 +01:00
Franz Pletz
5e11704593
nixos/ntfy-sh: fix & expose nixos test 2022-12-14 11:09:52 +01:00
Martin Weinelt
76e962151a nixos/tests/evcc: Fail when the unit produces fatal log messages 2022-12-11 01:25:13 +01:00
Guillaume Girol
a768871934 nixos/nginx: validate syntax of config file at build time
Shamelessly stolen from nixcloud-webservices:
https://github.com/nixcloud/nixcloud-webservices/blob/master/modules/web/webserver/lib/nginx_check_config.nix

The nixos test testing the behavior of nginx in case of faulty config
would not build with this change (on purpose), so I modified it so that
the failure is not syntactic.
2022-12-10 23:04:57 +01:00
Sergei Lukianov
136b81be7d nixos/tests/prometheuts-exporters.unpoller: fix test script
Unpoller behaviour changed and now it'll not server metrics if no
controller available, so, let's check for not available controller
message instead.
2022-12-09 21:40:36 -08:00
Yarny0
85aeeac28d cups-pdf: add vm test 2022-12-09 22:20:09 +01:00
Leorize
05420f34cf nixos: add systemd-homed support
As a start, it's not very configurable, but works pretty well.
2022-12-09 12:10:51 -06:00
Artturi
8ffe22e286
Merge pull request #203956 from Artturin/addforbiddendependenciesregex
nixos/top-level.nix: add forbiddenDependenciesRegex option
2022-12-09 07:54:00 +02:00
Martin Weinelt
a4f2ca1ef3
Merge pull request #205123 from Frostman/prometheus-smartctl-exporter-0.9.1 2022-12-09 01:58:06 +01:00
Martin Weinelt
c7fbae1289
nixos/tests/prometheus-exporters.smartctl: update test script
We can't actually get metrics for a virtual disk drive so the exporter
fails to start with 0.9.x.

Instead let's just make sure it said that /dev/vda was unavailable.
2022-12-09 01:40:01 +01:00
Robert Hensing
470e6fd1cd
Merge pull request #201902 from ck3mp3r/dockertools-architecture-in-config-200725
Adding ability to set image architecture when creating OCI images using DockerTools
2022-12-08 23:54:50 +01:00
ajs124
3071eef957
Merge pull request #201707 from helsinki-systems/alias-krb5Full
krb5Full: turn into alias
2022-12-08 23:54:02 +01:00
Ryan Lahfa
022c7d777a
Merge pull request #196837 from KoviRobi/dnsmasq-attrsets-config
nixos/dnsmasq: Use attrs instead of plain text config
2022-12-08 23:47:08 +01:00
ajs124
c7930769a7 krb5Full: turn into alias 2022-12-08 23:08:44 +01:00
Raito Bezarius
092e6d39cd nixos/tests/bootspec: init
This will test various scenarios of bootspec generation.
2022-12-08 13:50:04 -08:00
Robert Hensing
cf7b358d69 nixosTests.docker-tools: Fix syntax
This may be unnecessary, but I'm not waiting for the tests again.
2022-12-08 22:29:38 +01:00
Christian Kemper
afe2d0bb8b fix docker inspect image reference 2022-12-08 20:29:10 +01:00
Christian Kemper
f6ae4479ea dockerTools: allowing architecture to be specified
... for buildImage, buildLayeredImage and streamLayeredImage,
adding docs and tests.
2022-12-08 20:29:09 +01:00
Leorize
0cc87ab901 nixos/systemd/userdbd: add method to enable service
This is recommended to enable in conjunction with systemd-homed.
2022-12-08 10:28:41 -06:00
rnhmjoj
4f67365482
nixos/tests/printing: split into service/socket
This splits the tests into two: one where cups.socket is started
normally, the order with socket activation.

Why? It's almost impossible to follow the test with 4 different
machines printing at the same time. It should also be more efficient
because only two VMs at a time were needed anyway.
2022-12-07 15:57:45 +01:00
Andrei Pampu
acb964a35c nixos/tests/bazarr: remove unfree predicate for unrar 2022-12-07 14:59:49 +01:00
Yureka
a0e889791f nixos/tests/peering-manager: init 2022-12-07 12:54:55 +01:00
Robert Hensing
ab823e3a11 cassandra_4: init 2022-12-06 14:09:38 +01:00
Bjørn Forsman
831fc4f86a nixos/tests/bazarr: remove unneeded timezone workaround
The issue was fixed in bazarr-1.1.3.
2022-12-05 18:51:53 +01:00
Jacob Greenleaf
0111e9547e nixos/borgbackup: Add option for inhibiting sleep
Adds a new option for backup jobs `inhibitsSleep` which prevents
the system from going to sleep while a backup is in progress.
Uses `systemd-inhibit`, which holds a "lock" that prevents the
system from sleeping while the process it invokes is running.

This did require wrapping the existing backup script using
`writeShellScript` so that it could be run by `systemd-inhibit`.
2022-12-04 19:57:41 -08:00
Robert Kovacsics
2c00429560 nixos/dnsmasq: Use attrs instead of plain text config
This should make it easier to configure in multiple places, override
defaults, etc.
2022-12-04 23:08:37 +00:00
Vincent Haupert
dbff3c22c1 nixos/aesmd: add option environment 2022-12-04 20:12:50 +01:00
Andreas Stührk
da0dc8339c nixos/aesmd: add option to configure quote provider library
Changes sgx-psw to append `aesm` to `LD_LIBRARY_PATH`:
- Append instead of prepend to allow for overriding in service config
- As we already add a wrapper to add `aesm` to `LD_LIBRARY_PATH` it is
  not necessary to also set in `LD_LIBRARY_PATH` of the systemd service.

Co-authored-by: Vincent Haupert <mail@vincent-haupert.de>
2022-12-04 20:12:50 +01:00
Maximilian Bosch
331d854662
Merge pull request #203874 from noneucat/fix/grocy/storage
nixos/grocy: fix file uploads
2022-12-04 17:28:07 +01:00
Sandro
e38618a657
Merge pull request #203825 from SuperSandro2000/mastodon-tootctl
Closes https://github.com/NixOS/nixpkgs/issues/199029
2022-12-04 11:29:45 +01:00
Luke Granger-Brown
c7918fed9e nixos/prometheus/unifi-poller: rename to unpoller. 2022-12-03 20:12:54 +00:00
Henri Menke
da053d008f
maintainers: remove and add hmenke 2022-12-03 12:26:58 +01:00
Raphael Robatsch
9f874dd95e nixos/tests/initrd-network-openvpn: fix
- The default cipher is BF-CBC, which openvpn refuses to use by default.
  Switched to AES-256-CBC.
- openvpn does not require an external "ip" executable anymore, and does
  not support the "ipconfig" option by default, so remove that option.
2022-12-03 10:32:38 +01:00
Sandro Jäckel
6e845a8491
nixos/mastodon: replace mastodon-env with a proper wrapper mastodon-tootctl 2022-12-03 02:59:39 +01:00
Artturin
a34d7b67fd nixos/top-level.nix: add forbiddenDependenciesRegex option
useful for making sure that there's no dev outputs in the system
2022-12-02 21:15:24 +02:00
Robert Hensing
146620355f nixosTests.postgresql: Fix attribute name shadowing 2022-12-02 18:15:01 +00:00
Robert Hensing
7bfbf037d7 Merge remote-tracking branch 'upstream/master' into allow-configuration-of-roles 2022-12-02 18:12:14 +00:00
Georg Haas
8d47058b32
nixos/tests/tayga: init 2022-12-01 11:17:39 +01:00
Andy Chun @noneucat
f8f19f84c6 nixos/grocy: add a basic smoke test for file uploads 2022-11-30 22:18:05 -08:00
Mario Rodas
4a057b08c4
Merge pull request #203733 from nagy/freenet-nixos-test
nixosTests.freenet: init
2022-11-30 21:18:55 -05:00
Thomas Gerbet
622f4ee354 php8*: disable PCRE2 JIT SEAlloc to avoid crashes when forking
This is a follow up to #200815 and #184634.

The PCRE2 JIT SEAlloc does not support the `fork()` as announced in
their README [0]:
> If you are enabling JIT under SELinux environment you may also want to add
>  --enable-jit-sealloc, which enables the use of an executable memory allocator
>  that is compatible with SELinux. Warning: this allocator is experimental!
>  It does not support fork() operation and may crash when no disk space is
>  available. This option has no effect if JIT is disabled.

As a result using it in PHP can break apps and tools, it can only be
enabled under very specific context where you have a full picture of
what the PHP code is doing.

This contribution disables again the PCRE2 JIT SEAlloc and extends the
existing PHP/PCRE2 tests to make sure we do not enable it again by
mistake.

[0] https://www.pcre.org/readme.txt
2022-11-30 13:22:39 +01:00