Commit Graph

88011 Commits

Author SHA1 Message Date
Tuomas Tynkkynen
9deb6cfff1 xaos: Broken on i686
http://hydra.nixos.org/build/38238044
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
9c0a090afe colm: Broken on i686
http://hydra.nixos.org/build/38072668
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
1db43e0c18 rtags: Broken on i686
http://hydra.nixos.org/build/38304790
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
fdde95e096 msieve: Broken on i686
http://hydra.nixos.org/build/38236222
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
a15da44ab0 libe: Broken on i686
http://hydra.nixos.org/build/38264907/nixlog/1/raw
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
9a5427f667 klibc: Broken on i686 2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
0498573573 drumstick: Broken on i686
http://hydra.nixos.org/build/38323068
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
f87f37c1ee bwa: Broken on i686
http://hydra.nixos.org/build/38236956
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
fcc3a1b41d bazel: Broken on i686
http://hydra.nixos.org/build/38314298
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
3c513ebc13 assimp: Broken on Darwin
http://hydra.nixos.org/build/38315116
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
088bcf4ec4 kernel config: Fix 3.10, 3.12, 3.14 builds 2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
44f462bf4d generate-config.pl: Be more verbose about missing options
For instance, the current 3.10 kernel build fails at the end with:

unused option: BRCMFMAC_PCIE
unused option: FW_LOADER_USER_HELPER_FALLBACK
unused option: KEXEC_FILE
unused option: RANDOMIZE_BASE

However, it's not obvious that only the _last_ one is actually fatal to
the build. After this change it's at least somewhat better:

warning: unused option: BRCMFMAC_PCIE
warning: unused option: FW_LOADER_USER_HELPER_FALLBACK
warning: unused option: KEXEC_FILE
error: unused option: RANDOMIZE_BASE
2016-08-06 17:06:45 +03:00
obadz
20f009d56d chromium: split the sandbox into a seperate output (take 2)
Fixup of 231ed9e
2016-08-06 14:42:13 +01:00
Aycan iRiCAN
983ab7be1e haskellPackages.hans: fixed major version bugs (#17555) 2016-08-06 14:29:01 +03:00
obadz
231ed9edd9 chromium: split the sandbox into a separate output
Related to #17460 and 66d5edf
Triggers a rebuild of Chromium
2016-08-06 10:29:56 +01:00
obadz
66d5edf654 chromium: add nixos module security.chromiumSuidSandbox
Closes #17460

Changed the wrapper derivation to produce a second output containing the sandbox.
Add a launch wrapper to try and locate the sandbox (either in /var/setuid-wrappers or in /nix/store).
This launch wrapper also sheds libredirect.so from LD_PRELOAD as Chromium does not tolerate it.

Does not trigger a Chromium rebuild.

cc @cleverca22 @joachifm @jasom
2016-08-06 10:27:47 +01:00
cmfwyp
41b8c6d5a9
dejavu-fonts: simplify build process
Unicode data and fc-lang are only necessary to generate the status
files and coverage information, which are not used, or indeed even
generated with full-ttf.
2016-08-06 10:24:43 +02:00
cmfwyp
b4c8ea9536
dejavu-fonts: 2.35 -> 2.37
Release 2.36 adds and fixes a number of glyphes, and adds the
Tex Gyre DejaVu Math font, a companion font to DejaVu Serif for
typesetting mathematics.

Release 2.37 fixes an issue with condensed typefaces.

The sources are now fetched from GitHub, since the development was
moved from SourceForge to GitHub.
2016-08-06 10:24:43 +02:00
Frederik Rietdijk
356509ad45 pythonPackages.notebook: 4.2.1 -> 4.2.2 2016-08-06 08:36:59 +02:00
Gabriel Ebner
22088b4b25 nixos/x11: make nvidia driver work again
The nvidia driver module directly sets the services.xserver.drivers
option, while still having nvidia/nvidiaBeta/... etc. in the
videoDrivers option.
2016-08-06 07:26:25 +02:00
Joachim F
af8b7d3a28 Merge pull request #17526 from RamKromberg/fix/wavpack
wavpack: 4.75.0 -> 4.80.0
2016-08-06 00:59:08 +02:00
Joachim F
dece583a94 Merge pull request #17484 from srp/nixos-container-terminate
nixos-container: add 'terminate' command which 'destroy' now uses
2016-08-05 23:03:38 +02:00
Robin Gloster
f4e1041e31 Merge pull request #17503 from peterhoeg/ssh
ssh module: ignore exit code when socket activated
2016-08-05 19:58:06 +02:00
Joachim F
f044035a9e Merge pull request #17470 from layus/synaptics-conflict
Warn for conflict between synaptics and libinput
2016-08-05 19:26:07 +02:00
Robin Gloster
fae6264d3a Merge pull request #17533 from wizeman/u/upd-containers
ocamlPackages.containers: 0.16 -> 0.18
2016-08-05 19:15:01 +02:00
Michal Rus
7281740c2e
linux: enable DRM_GMA600 and DRM_GMA3600
Adds basic support for Intel GMA3600/3650 (Intel Cedar Trail) platforms
and support for GMA600 (Intel Moorestown/Oaktrail) platforms with LVDS
ports via the gma500_gfx module.

Resolves #14727 Closes #17519
2016-08-05 19:07:40 +02:00
Robin Gloster
7599964915 Merge pull request #17518 from juliendehos/gtksourceviewmm
gtksourceviewmm: init at 3.18.0
2016-08-05 19:05:10 +02:00
Robin Gloster
19158a60cf Merge pull request #17541 from womfoo/bump/wraith-1.4.7
wraith: 1.4.6 -> 1.4.7, fixes build
2016-08-05 19:04:02 +02:00
Robin Gloster
71606efc71 Merge pull request #17537 from NeQuissimus/ohmyzsh20160801
oh-my-zsh: 2016-07-15 -> 2016-08-01
2016-08-05 19:02:00 +02:00
Gabriel Ebner
5e6ac5fcf3 nixos/x11: output sections for modesetting driver
See #17487.
2016-08-05 18:31:04 +02:00
Kranium Gikos Mendoza
9470b28743 wraith: 1.4.6 -> 1.4.7 2016-08-06 00:05:40 +08:00
Joachim F
632f9060f1 Merge pull request #17363 from MatrixAI/zsh-helpdir
zsh: Added HELPDIR variable for interactive shells
2016-08-05 16:45:28 +02:00
Joachim F
b7a4ef1a87 Merge pull request #17492 from k0ral/webkit
webkitgtk: 2.10.4 -> 2.10.9
2016-08-05 16:40:00 +02:00
Tim Steinbach
43fd03a6df oh-my-zsh: 2016-07-15 -> 2016-08-01 2016-08-05 09:53:48 -04:00
Ricardo M. Correia
e5db1995a6 ocamlPackages.containers: 0.16 -> 0.18 2016-08-05 14:35:17 +02:00
Ram Kromberg
76c2988e33 wavpack: 4.75.0 -> 4.80.0 2016-08-05 13:54:56 +03:00
Domen Kožar
1664279f0e Add nix-repl as release blocker
This would have blocked the channel in recent curl bump.
2016-08-05 12:08:44 +02:00
obadz
d6528a1b7f chromium: fixup commit 33557ac
Helps with #17460

@cleverca22 saw calls to SetuidSandboxHost::GetSandboxBinaryPath so we
patch this function instead.

cc @joachifm
2016-08-05 10:55:48 +01:00
Rok Garbas
3823033107 Revert "curl: 7.47.1 -> 7.50.0" (#17528) 2016-08-05 11:03:51 +02:00
Rok Garbas
9c6fccf29a Revert "curl: 7.50.0 -> 7.50.1" (#17525) 2016-08-05 10:52:30 +02:00
Julien Dehos
d46d0c4bb1 gtksourceviewmm: init at 3.18.0 2016-08-05 09:53:45 +02:00
Aneesh Agrawal
5e3eb476f5 neovim: remove unused glib dependency (#17499)
As far as I can tell, neovim has never required glib to build.
The neovim libtermkey does include a demo-glib.c example, but that is
optional.
2016-08-05 09:33:05 +02:00
Kranium Gikos Mendoza
4b62054f4c curl: 7.50.0 -> 7.50.1 (#17486) 2016-08-05 05:00:53 +02:00
Franz Pletz
2d6b7aa545 linux: enable some useful networking options
All options are enabled by default on Debian and some other
distributions, so these should be safe.
2016-08-05 04:07:31 +02:00
Franz Pletz
a3f6ca6d17 collectd: 5.5.1 -> 5.5.2 (security)
Fixes CVE-2016-6254.
2016-08-05 04:07:31 +02:00
Franz Pletz
6cf7e8d2ed libreswan: 3.17 -> 3.18 (security)
Fixes CVE-2016-5391, see

  https://libreswan.org/security/CVE-2016-5391/CVE-2016-5391.txt
2016-08-05 04:07:31 +02:00
Franz Pletz
792f96fbc7 Merge pull request #17489 from mayflower/pkg/gitlab-8-10
gitlab: 8.5.12 -> 8.10.3, update module
2016-08-04 23:35:22 +02:00
Tuomas Tynkkynen
2ea72fa9c8 nixos/luksroot: Reference correct output of openssl 2016-08-04 23:12:39 +03:00
Tuomas Tynkkynen
0eb827918d xorg.libpciaccess: Not supported on Darwin
http://hydra.nixos.org/build/38160825/nixlog/1/raw
2016-08-04 23:11:45 +03:00
obadz
33557acb36 chromium: add ability to control which sandbox is used
First step towards addressing #17460

In order to be able to run the SUID sandbox, which is good for security
and required to run Chromium with any kind of reasonable sandboxing when
using grsecurity kernels, we want to be able to control where the
sandbox comes from in the Chromium wrapper. This commit patches the
appropriate bit of source and adds the same old sandbox to the wrapper
(so it should be a no-op)
2016-08-04 20:37:35 +01:00