Commit Graph

31647 Commits

Author SHA1 Message Date
Gavin John
454883d85b nixos/envision: init module 2024-07-03 15:12:06 +00:00
OTABI Tomoya
3ca8ba2a73
Merge pull request #324114 from NyCodeGHG/renovate-unix-socket
nixos/renovate: allow AF_UNIX access
2024-07-03 22:40:17 +09:00
github-actions[bot]
0983fe3e50
Merge master into staging-next 2024-07-03 12:01:17 +00:00
Alexandre Badez
e37b07ffba nixos/snapper: fix timeline options type 2024-07-03 13:52:34 +02:00
Alexandre Badez
0c80191081 nixos/snapper: add maintainer 2024-07-03 13:52:34 +02:00
Tomas Kala
6930dd3dee nixos/blocky: Add an option for the package to be used
Previously, the blocky package was hardcoded to the one in pkgs. This
change allows to set it, so the user can configure the blocky service to
run blocky from nixpkgs-unstable, for example.
2024-07-03 13:42:34 +02:00
Jonas Chevalier
f2506eaef6
Merge pull request #324102 from johannwagner/fix/cloud-init-fixes
nixos/cloud-init: Bug fix and enhancements
2024-07-03 13:25:09 +02:00
Martin Weinelt
84164bf098
Merge pull request #318659 from mweinelt/fastly-exporter
nixos/prometheus-fastly-exporter: unwrap execstart
2024-07-03 12:40:10 +02:00
github-actions[bot]
d33a11464d
Merge master into staging-next 2024-07-03 06:01:11 +00:00
Aleksana
2240a1aa31
Merge pull request #324163 from SuperSandro2000/271914
nixos/kmscon: fix eval
2024-07-03 12:38:01 +08:00
github-actions[bot]
d77a3adc09
Merge master into staging-next 2024-07-03 00:02:45 +00:00
Weijia Wang
9c1cfad9a0
Merge pull request #307910 from r-ryantm/auto-update/pixelfed
pixelfed: 0.11.13 -> 0.12.1
2024-07-03 00:55:55 +02:00
Sandro Jäckel
6868a97e5e
nixos/kmscon: fix eval 2024-07-03 00:01:12 +02:00
Ryan Lahfa
d387fafe2f
Merge pull request #324101 from hexchen/drop-hexchen
maintainers: remove myself
2024-07-02 23:38:02 +02:00
Weijia Wang
f5a7e092f3 Merge branch 'master' into staging-next 2024-07-02 22:22:02 +02:00
Thomas Gerbet
8ddb1bb721
Merge pull request #318599 from pacien/nixos-fcgiwrap-isolation
nixos/fcgiwrap: refactor to fix permissions
2024-07-02 21:52:33 +02:00
Sandro
15705830ce
Merge pull request #321061 from SomeoneSerge/prosody-logs
nixos/prosody: provide an (internal) escape hatch for overriding the …
2024-07-02 20:36:07 +02:00
Sandro
230c213fae
Merge pull request #314767 from Guanran928/mihomo
nixos/mihomo: add assertion for configFile
2024-07-02 20:27:36 +02:00
Sandro
bd4241bcc8
Merge pull request #297826 from anthonyroussel/update-tomcat_connectors
apacheHttpdPackages.mod_jk: 1.2.48 -> 1.2.49, rename from tomcat_connectors
2024-07-02 20:26:13 +02:00
Sandro
4f90cfd2f9
Merge pull request #313984 from yayayayaka/gitlab-17.0.1
gitlab: 16.11.5 -> 17.1.1
2024-07-02 20:12:42 +02:00
Marie Ramlow
787354f63c nixos/renovate: allow AF_UNIX access
renovate can update nix dependencies, which results in nix trying to communicate with the nix-daemon over a unix socket.
2024-07-02 20:09:12 +02:00
K900
c7268baf73 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-02 20:59:57 +03:00
K900
caff135cb1
Merge pull request #323419 from Ma27/bump-grafana
grafana: 11.0.0 -> 11.1.0
2024-07-02 20:59:21 +03:00
Felix Bühler
4b015946c9
Merge pull request #307459 from Stunkymonkey/freshrss-extensions
freshrss-extensions: init
2024-07-02 19:43:22 +02:00
hexchen
2104f810b0 decklink, blackmagic-desktop-video: drop package and module
I am the singular maintainer for these packages. They are difficult to
maintain and are going to start to bitrot pretty much as soon as BMD
releases new software versions. Therefore, I am not only removing myself
as the maintainer but dropping them entirely.
2024-07-02 17:26:03 +00:00
Johann Wagner
49d137a967 nixos/cloud-init: Allow additional packages in cloud-init module 2024-07-02 19:19:56 +02:00
Johann Wagner
33c55024dc nixos/cloud-init: Allow systemd.network to be enabled if cloud-init.network is disabled 2024-07-02 19:12:30 +02:00
Florian Sesser
828eb8c574 Gitlab-Runner: Add --post-get-sources-script
`--post-get-sources-script` has been added a while ago.  This
makes it available via the nix configuration.

See https://about.gitlab.com/blog/2023/03/27/changes-to-the-preclonescript/
2024-07-02 14:46:48 +00:00
Florian Sesser
42a2c268f6 preCloneScript is now preGetSourcesScript
The --pre-clone-script service configuration has been deprecated (https://docs.gitlab.com/ee/update/deprecations.html#deprecation-and-planned-removal-for-ci_pre_clone_script-variable-on-gitlab-saas) and replaced by --pre-get-sources-script (https://about.gitlab.com/blog/2023/03/27/changes-to-the-preclonescript/).
2024-07-02 13:23:30 +00:00
github-actions[bot]
f1dc7c9537
Merge master into staging-next 2024-07-02 12:01:23 +00:00
Florian Klink
0ef1870535
Merge pull request #323996 from hercules-ci/journald.conf-link
nixos/journald: Link to journald manpage
2024-07-02 14:49:24 +03:00
Cat
ed1b6699c0
nixos/syncthing: implement folder type (#308832)
* Syncthing: implemented folder type

* Syncthing: fix syntax (via @johnhamelink )

This commit should be rebased/squashed into the previous one if ofborg cleares it!

Co-authored-by: John Hamelink <me@johnhame.link>

---------

Co-authored-by: John Hamelink <me@johnhame.link>
2024-07-02 19:49:03 +08:00
Robert Hensing
7b1af67486 nixos/journald: Link to journald manpage
This creates a link to https://www.freedesktop.org/software/systemd/man/latest/journald.conf.html,
thanks to `doc/manpage-urls.json`.
2024-07-02 12:09:07 +02:00
Martin Weinelt
7b8429bbc4
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/jaxtyping/default.nix
2024-07-02 12:08:49 +02:00
Mynacol
af072cfb55 nixos/nextcloud: Remove --preserve-env in sudo
This helps supporting sudo-rs, which currently does not implement the
--preserve-env flag and probably won't so in the foreseeable future [1].

The replacement just sets both environment variables behind the sudo
invocation with env, as sudo-rs also doesn't implement env var lists.

The OC_PASS variable is dropped, as it is seemingly unused and would
leak through this approach through /proc.

[1] https://github.com/memorysafety/sudo-rs/issues/129
2024-07-02 11:29:35 +02:00
Jonas Heinrich
c0b4d43442
Merge pull request #314525 from onny/stalwart-openfirewall
nixos/stalwart-mail: add openFirewall option
2024-07-02 10:00:46 +02:00
Jan Tojnar
0f56e32213
Merge pull request #319659 from jtojnar/gnome-extract
Move various packages out of gnome scope
2024-07-02 08:03:53 +02:00
K900
665f1d6183 Merge remote-tracking branch 'origin/master' into staging-next 2024-07-02 08:32:46 +03:00
ckie
7d34b64eca maintainers: remove ckie
well, we failed. we have not saved nix together[0], and today's show of
utter incompetence[1] has pushed me over the edge along with many others[2]

it's been good. a lot of PRs. a lot of endless reviews.
some new friends, some old friends converted :P

cya in the next world, cuties <3

[0] https://save-nix-together.org/
[1] https://discourse.nixos.org/t/nca-member-jonringer-joint-announcement/48231
[2] https://github.com/NixOS/nixpkgs/issues?q=label%3A%228.has%3A+maintainer-list+%28update%29%22+remove+in%3Atitle+created%3A%3C2024-07-10
2024-07-02 02:40:02 +02:00
Janik H.
76cd1d2211 maintainers: drop janik
I guess my time has come as well...

With this commit, I'm not just dropping my maintainer entry, but I'm also
resigning from my duties as a board observer and NixCon project lead.
I also terminated my Summer of Nix contract today.
I'll also stop hosting the local NixOS meetup.

The only "project" I'll finish under the NixOS Foundation umbrella is
Google Summer of Code because the mentees aren't even remotely
responsible for why I'm leaving, and it would be unfair to leave them
hanging.

I'm grateful for all the things I was able to learn, for all the experiences
I could gather, and for all the friends I made along the way.
NixOS is what makes computers bearable for me, so I'll go and work on
some fork (*something something* you always meet twice in life).
2024-07-02 02:36:42 +02:00
Jasper Woudenberg
71e88077ca maintainers: remove jwoudenberg 2024-07-02 01:35:17 +02:00
Marcus Ramberg
a449a2a14a
Merge pull request #321079 from res0Nanz/master
nixos/cloudflared: fix links in doc
2024-07-01 23:39:57 +02:00
Felix Buehler
bb33682f3a nixos/freshrss: add extensions 2024-07-01 23:38:56 +02:00
Guillaume Girol
3b82fcc6c3
Merge pull request #318826 from NorfairKing/borgbackup-requiremount
borgbackup: Use RequiresMountsFor to require that the repo is mounted
2024-07-01 22:03:55 +02:00
Maximilian Bosch
c2586ca239 nixos/nextcloud: warn about unsafe path transitions
Closes #294588
It _may_ also be an answer to #169733.

See explanation from upstream[1] for further details.

[1] https://github.com/systemd/systemd/issues/19618#issuecomment-843273818
2024-07-01 21:20:12 +02:00
github-actions[bot]
1addc8dd4c
Merge master into staging-next 2024-07-01 18:01:14 +00:00
pennae
5c5aaaaaae maintainers: remove pennae
https://discourse.nixos.org/t/nca-jonringer-joint-announcement/48231
https://web.archive.org/web/20240701165505/https://discourse.nixos.org/t/nca-jonringer-joint-announcement/48231

we had little faith in the NCA process, but this is going deep, *deep*
into the territory of wilfully insulting all those had placed even a
modicum of trust in that process.

have you fucking nazi bar.
2024-07-01 18:56:40 +02:00
r-vdp
d1e0f30cb2
Fix SSH in scripted initrd
Co-authored-by: Emily <vcs@emily.moe>
2024-07-01 15:35:55 +02:00
r-vdp
79d8116671
Fix ssh in initrd for systemd-initrd
Broken in https://github.com/NixOS/nixpkgs/pull/323753
2024-07-01 15:35:55 +02:00
Alyssa Ross
629d1dc03e
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/lua-modules/generated-packages.nix
2024-07-01 14:34:32 +02:00
Jonas Heinrich
f45e645e92 nixos/stalwart-mail: add openFirewall option 2024-07-01 14:10:11 +02:00
Jörg Thalheim
c08bd9add4
Merge pull request #307123 from CaptainJawZ/shiori
shiori: 1.5.5 -> 1.7.0
2024-07-01 13:46:24 +02:00
Thiago Kenji Okada
7fb13d1dff
Merge pull request #285299 from loispostula/patch-1
nixos/rtorrent: rpcsock perm should reflect provided options
2024-07-01 10:55:55 +00:00
Someone
9c1849ebd0
Merge pull request #323249 from abysssol/ollama-driver-runpath
ollama: remove dependency on`linuxPackages.nvidia_x11`, use `autoAddDriverRunpath` instead
2024-07-01 10:41:42 +00:00
B4rc1
814ed4b9e5
herbstluftwm: fix unable to be started (#271198)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-07-01 11:11:46 +02:00
abysssol
bf91b72c06 nixos/ollama: remove linuxPackages override
`linuxPackages.nvidia_x11` is no longer used by the `ollama` package.
2024-07-01 04:50:19 -04:00
Jan Tojnar
1369411184 gnome-keyring: Move from gnome scope to top-level
It is on the way out.
2024-07-01 09:35:26 +02:00
Jan Tojnar
71750a5e1d gnome-disk-utility: Move from gnome scope to top-level 2024-07-01 09:35:26 +02:00
Jan Tojnar
e3a06d65ff gnome-themes-extra: Move from gnome scope to top-level
Upstream archived.
2024-07-01 08:26:49 +02:00
Jan Tojnar
6d725135fe gnome-font-viewer: Move from gnome scope to top-level 2024-07-01 08:26:49 +02:00
Jan Tojnar
598a574e08 totem: Move from gnome scope to top-level 2024-07-01 08:26:49 +02:00
Jan Tojnar
2bb2f5742a sushi: Move from gnome scope to top-level 2024-07-01 08:26:49 +02:00
Jan Tojnar
4f71ac5153 gnome-system-monitor: Move from gnome scope to top-level 2024-07-01 08:26:49 +02:00
Jan Tojnar
433464eb6a dconf-editor: Move from gnome scope to top-level 2024-07-01 08:26:48 +02:00
Jan Tojnar
23f2529ffc gpaste: Move from gnome scope to top-level
Not really a GNOME project.
2024-07-01 08:26:48 +02:00
Jan Tojnar
20d5442d8e devhelp: Move from gnome scope to top-level 2024-07-01 08:26:48 +02:00
Jan Tojnar
24f2cf4b4f yelp: Move from gnome scope to top-level 2024-07-01 08:26:48 +02:00
Jan Tojnar
33da2d9416 epiphany: Move from gnome scope to top-level 2024-07-01 08:26:47 +02:00
Jan Tojnar
4380c1aa38 baobab: Move from gnome scope to top-level 2024-07-01 08:26:47 +02:00
Jan Tojnar
b69ed4249d zenity: Move from gnome scope to top-level
It is widely used outside gnome, not much inside.
2024-07-01 08:26:47 +02:00
Jan Tojnar
2adc7d7340 geary: Move from gnome scope to top-level 2024-07-01 08:26:46 +02:00
Jan Tojnar
5c5c20919b adwaita-icon-theme: Move from gnome scope to top-level
It is widely used outside gnome – although it probably should not be.
2024-07-01 08:26:46 +02:00
Jan Tojnar
545822250c rygel: Move from gnome scope to top-level 2024-07-01 08:26:46 +02:00
Jan Tojnar
fedc161645 simple-scan: Move from gnome scope to top-level 2024-07-01 08:26:45 +02:00
Jan Tojnar
f622b52aaa seahorse: Move from gnome scope to top-level 2024-07-01 08:26:45 +02:00
Jan Tojnar
0daa38a8fc gnome-calendar: Move from gnome scope to top-level 2024-07-01 08:26:45 +02:00
Jan Tojnar
66c4983d67 gnome-calculator: Move from gnome scope to top-level 2024-07-01 08:26:45 +02:00
Jan Tojnar
5482d7417b evince: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
85a1179dab file-roller: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
b91d4ead2a gnome-terminal: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
04393cdded nautilus-python: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
2be24442bb nautilus: Move from gnome scope to top-level 2024-07-01 08:26:44 +02:00
Jan Tojnar
e124f51ee1 gnome-user-share: Move from gnome scope to top-level 2024-07-01 08:15:53 +02:00
Someone Serge
12c6d79e72 nixos/prosody: provide an escape hatch for overriding the logging configuration 2024-07-01 01:24:19 +00:00
Martin Weinelt
9b79a05ae1
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/flexcache/default.nix
- pkgs/development/python-modules/flexparser/default.nix
- pkgs/development/python-modules/odp-amsterdam/default.nix
- pkgs/development/python-modules/pint/default.nix
- pkgs/development/python-modules/uncertainties/default.nix
- pkgs/top-level/python-packages.nix
2024-07-01 01:07:21 +02:00
Tom Sydney Kerckhove
edb707e3b5 borgbackup: Use RequiresMountsFor to require that the repo is mounted 2024-06-30 21:33:13 +02:00
Franz Pletz
3d7a9d1e5d
Merge pull request #321981 from fgaz/nixos/smartd/systembus-notify 2024-06-30 19:41:05 +02:00
Lenny
e8c56de827
nixos/tandoor-recipes: enable serving of media files by default
Fixes 404 when tandoor is trying to serve recipe images.
2024-06-30 14:47:21 +00:00
Nick Cao
ffa6fef5ad
Merge pull request #321010 from blitz/virtualbox-kvm
virtualboxKvm: 20240515 -> 20240617
2024-06-30 09:53:43 -04:00
Jörg Thalheim
d6cf181343 nixos/shiori: fix databaseUrl example 2024-06-30 13:41:38 +02:00
Jörg Thalheim
84a8354c58 nixos/shiori: fix BindPaths conditions if databaseUrl is not set 2024-06-30 13:06:11 +02:00
Jörg Thalheim
992f8bf968 nixos/shiori: fix nixos types for paths 2024-06-30 13:06:11 +02:00
Doron Behar
3063d28384
Merge pull request #271914 from kingarrrt/kmscon
kmscon: configure keymap from xserver xkb config
2024-06-30 10:53:15 +03:00
h7x4
f4ebfc297c
Merge pull request #200654 from aacebedo/aacebedo/playerctld
playerctl: add daemon service
2024-06-30 03:41:17 +02:00
tomberek
079457313a
Merge pull request #321930 from jtbx-prs/oink-after-network
nixos/oink: wait for network.target
2024-06-29 20:42:03 -04:00
Arthur Noel
6447fae5d0 kmscon: configure keymap from xserver xkb config 2024-06-30 00:29:16 +01:00
Danilo Reyes
4f021e14a3 shiori: 1.5.5 -> 1.7.0 2024-06-29 15:30:22 -06:00
Eman Lear
6c00b71662
Merge branch 'master' into master 2024-06-30 02:19:21 +08:00
github-actions[bot]
3bb3e89f3b
Merge master into staging-next 2024-06-29 18:01:05 +00:00
Jörg Thalheim
ebfee308fc systemd-boot-builder: use type literals 2024-06-29 19:09:38 +02:00
Jörg Thalheim
6d0be2bec1 systemd-boot-builder: allow exceptions from python naming scheme 2024-06-29 19:09:28 +02:00
Jörg Thalheim
1ae4daa608 systemd-boot-builder: use safe run wrapper
we have a zoo of ways to call subprocesses.
Let's just replace this with one function that has reasonable defaults.
i.e. I catched instances where commands where run in a shell.
2024-06-29 19:09:06 +02:00
Maximilian Bosch
8511063014
grafana: 11.0.0 -> 11.1.0
ChangeLog: https://github.com/grafana/grafana/releases/tag/v11.1.0

A few additional changes were necessary:

* Grafana now refuses to listen on non-IP values and aborts with

    Error: ✗ *apiserver.service run error: invalid IP address: localhost

* packages/grafana-e2e doesn't exist anymore, so the build fixes for
  that could be removed.

* Make sure we always compile the binary parts of cypress.

* Grafana tends to set the minimum Go version to the latest Go version
  available now[1].

* The `url` of a datasource was set to `localhost` by default. I don't
  expect anybody to have not set it when needed, also Grafana aborts now
  if `url` is non-empty for a random walk datasource (which broke the VM
  tests).

[1] https://github.com/grafana/grafana/pull/88794#discussion_r1630563467
2024-06-29 19:09:05 +02:00
Jörg Thalheim
5cbf195292 systemd-boot-builder: use regex strings 2024-06-29 19:09:04 +02:00
Jörg Thalheim
f339bdf84c systemd-boot-builder: simplify conditions 2024-06-29 19:09:02 +02:00
Kim Lindberger
b75986fd26
Merge pull request #310642 from arcnmx/keycloak-hostname-strict
nixos/keycloak: relax hostname settings assertion
2024-06-29 17:09:02 +02:00
Nick Cao
690518e966
Merge pull request #321982 from Moraxyc/update-nezha-agent
nezha-agent: 0.17.0 -> 0.17.2
2024-06-29 09:02:54 -04:00
Bjørn Forsman
7db3dc0fa4 nixos/dictd: treat SIGTERM exit status as success
dictd doesn't handle SIGTERM and terminates with code 143 (128 + 15
(SIGTERM) instead of 0. This results in systemd marking the service as
failed when a user stops it (with `systemctl stop dictd`). Fix it by
treating code 143 as success.
2024-06-29 13:40:49 +02:00
K900
bde999c03e Merge branch 'master' into staging-next 2024-06-29 10:13:13 +03:00
Thomas Gerbet
85be596266
Merge pull request #322585 from wegank/limesurvey-security
nixos/limesurvey: drop default encryption key and nonce
2024-06-28 23:43:24 +02:00
Sandro
0cbf178ddb
Merge pull request #322508 from MarcelCoding/hound
hound: convert to use freeform type
2024-06-28 22:57:59 +02:00
Matthew Croughan
d76ad79b4d
nixos/scion: use RuntimeDirectory instead of StateDirectory (#323200)
It was wrong to use StateDirectory to keep the scion-control and
scion-router runtime databases on disk for the next run. I observed that
doing this means a reboot, or power outage can corrupt the temporary
runtime databases for the next service start, leading scion ping and
other functionality to stop working permanently, since those files are
not managed in an atomic manner by the golang code.
2024-06-28 22:16:36 +02:00
Masum Reza
383744754e
Merge pull request #314798 from yomaq/healthchecks-settingsFile
nixos/healthchecks: add settingsFile option
2024-06-29 00:02:35 +05:30
Masum Reza
8808f7d7fc
Merge pull request #278982 from felbinger/master
python311Packages.mozilla-django-oidc: init at 4.0.1; peering-manager: add oidc support
2024-06-28 23:49:34 +05:30
Florian Klink
0ee2243bc8
Merge pull request #322980 from michaelfranzl/fix-nss-libvirt
nixos/virtualisation: increase priority for libvirt NSS modules
2024-06-28 18:15:16 +03:00
Bobby Rong
3901dc7822
Merge pull request #323159 from bobby285271/upd/xfce-colord
nixos/xfce: Enable colord by default
2024-06-28 23:00:08 +08:00
Bobby Rong
6c6614ada8
nixos/xfce: Enable colord by default
Goes with #323010.
2024-06-28 21:42:06 +08:00
Moraxyc
f852b38c42
nixos/nezha-agent: add gpu monitoring option 2024-06-28 16:18:40 +08:00
github-actions[bot]
d3f2171a63
Merge master into staging-next 2024-06-28 06:01:08 +00:00
Artturin
fc5487d05d
Merge pull request #319715 from jmbaur/repart-compression-threads
nixos/systemd-repart: respect NIX_BUILD_CORES for image compression
2024-06-28 04:26:20 +03:00
github-actions[bot]
2f3bfad6d2
Merge master into staging-next 2024-06-28 00:02:11 +00:00
Weijia Wang
daa81ecb2e nixos/limesurvey: drop default encryption key and nonce
Co-authored-by: Thomas Gerbet <thomas@gerbet.me>
2024-06-28 00:34:00 +02:00
Sandro Jäckel
ccd042b969
nixos/hound: set reasonable default for dbpath 2024-06-27 21:59:15 +02:00
Marcel
d7977717ac
nixos/hound: remove with lib; 2024-06-27 21:59:07 +02:00
Marcel
e6979857a3
nixos/hound: convert config to free-form type, add config check 2024-06-27 21:56:18 +02:00
Marcel
73e7708bee
nixos/hound: cleanup services.hound.enable 2024-06-27 21:56:18 +02:00
Silvan Mosberger
c8dec6df38
Merge pull request #322801 from eclairevoyant/discourage-mkpackageoptionmd
lib: deprecate mkPackageOptionMD
2024-06-27 20:15:08 +02:00
github-actions[bot]
1bfaa6d6e1
Merge master into staging-next 2024-06-27 18:01:13 +00:00
Yaya
b4d242907c nixos/gitlab: Add missing state folder 2024-06-27 19:52:03 +02:00
Yaya
59583de9d1 nixos/gitlab: Assert PostgreSQL >= 14.9
Support for PostgreSQL 13 has been removed in GitLab 17.0. [1]
Module users should upgrade their database installation to
PostgreSQL >= 14.9.

[1]: https://docs.gitlab.com/ee/update/deprecations.html#postgresql-13-no-longer-supported
2024-06-27 19:52:03 +02:00
Someone
35a472db57
Merge pull request #320830 from philiptaron/nixos-nvidia-change-datacenter-defaults
nixos/nvidia: move TOPOLOGY_FILE_PATH and DATABASE_PATH into nvidia-fabricmanager service definition
2024-06-27 15:56:29 +00:00
Martin Weinelt
d50a1e97b1
Merge remote-tracking branch 'origin/master' into staging-next 2024-06-27 16:16:01 +02:00
Robert Hensing
044d202b36
Merge pull request #322886 from fricklerhandwerk/update-nix
nixVersions: bump patch releases
2024-06-27 14:50:13 +02:00
Niklas Hambüchen
1032399f52
Merge pull request #322782 from DCsunset/quickwit-fix
nixos/quickwit: fix service ReadWritePaths
2024-06-27 14:39:11 +02:00
Jonas Heinrich
77e7768849
Merge pull request #322397 from Ma27/bump-nextcloud
nextcloud: drop 27, 28.0.6 -> 28.0.7, 29.0.2 -> 29.0.3
2024-06-27 14:09:29 +02:00
Valentin Gagarin
144ac0d7fc nixVersions: bump patch releases 2024-06-27 13:43:44 +02:00
Masum Reza
891c75c86e
Merge pull request #322591 from JohnRTitor/hyprland-module
nixos/hyprland: set systemd environment PATH only for versions < 0.41.2
2024-06-27 16:34:04 +05:30
Sandro
f6fb5b4f20
Merge pull request #322216 from Pandapip1/patch-3
services/localtimed: Allow configuring packages
2024-06-27 12:58:20 +02:00
matthewcroughan
23c24527dc nixos/scion: add scion package when scion.enable = true 2024-06-27 11:52:04 +02:00
matthewcroughan
973108d3ed nixos/scion: use recursiveUpdate instead of // 2024-06-27 11:51:28 +02:00
éclairevoyant
aeee4fc133
treewide: replace mkPackageOptionMD with mkPackageOption 2024-06-26 23:05:42 -04:00
Jared Baur
560cd874a3
nixos/etc: fix using etc overlay on cross-compiled systems
We need to run tooling from the build platform when generating the EROFS.
2024-06-26 19:50:24 -07:00
DCsunset
05b67b87b7 nixos/quickwit: fix service ReadWritePaths 2024-06-26 20:47:00 -04:00
Pol Dellaiera
908c90cd18
Merge pull request #313606 from drupol/ollama-add-preLoadedModels
nixos/ollama: add `loadModels` config option
2024-06-26 22:56:56 +02:00
Alexandre Acebedo
14422223df
playerctl: add daemon service 2024-06-26 21:33:46 +02:00
Someone
cb69dc5b8d
Merge pull request #256230 from SomeoneSerge/feat/gpu-tests-py
GPU access in the sandbox
2024-06-26 19:16:53 +00:00
Pol Dellaiera
f6727a9e3e nixos/ollama: add loadModels config option
Allows users to download model files upon service startup,
instead of at the first use of the model, improving percieved startup latency.
2024-06-26 15:11:37 -04:00
github-actions[bot]
677389dc9f
Merge master into staging-next 2024-06-26 18:01:17 +00:00
Masum Reza
44f79e5bf0
Merge pull request #321591 from JohnRTitor/gdm-fingerprint-auth
nixos/gdm: allow logging in via fingerprint
2024-06-26 23:08:16 +05:30
John Titor
ff0738b736
nixos/hyprland: set systemd environment PATH for versions < 0.41.2
Importing PATH into the systemd environment is done by default in
Hyprland v0.41.2+ (https://github.com/hyprwm/Hyprland/pull/6640)
We soft deprecate this option here for versions >= 0.41.2.
2024-06-26 23:04:27 +05:30
Sandro
273f6bdff8
Merge pull request #244684 from m-bdf/kmscon-use-upstream-service-file
nixos/kmscon: use upstream service file
2024-06-26 19:29:28 +02:00
nikstur
e05a365dca
Merge pull request #321991 from Mic92/etc-overlay-cross
etc.overlay: fix cross-build
2024-06-26 19:12:15 +02:00
Someone Serge
79a7186f1c cudaPackages: updated convention for gpu/runtime checks
Runtime tests (derivations asking for a relaxed sandbox) are now
expected at p.gpuCheck, p.gpuChecks.<name>, or at
p.tests.<name>.gpuCheck.
2024-06-26 16:00:29 +00:00
github-actions[bot]
cf7e625161
Merge master into staging-next 2024-06-26 12:01:11 +00:00
Artturin
1ecc3cd35b
Merge pull request #322194 from Artturin/polkitaddpackageoption
nixos/polkit: Add package option
2024-06-26 12:42:38 +03:00
Nico Felbinger
c4d2c90da0
nixos/peering-manager: add oidc support
Co-authored-by: Jenny <me@netali.de>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-06-26 07:45:18 +02:00
Someone Serge
ebeb6b9d1d nix-required-mounts: nixfmt 2024-06-26 00:35:45 +00:00
Someone Serge
927b15ed6d nixos/nix-required-mounts: allow passing extra arguments to the hook 2024-06-26 00:35:44 +00:00
Someone Serge
dd70727622 nixos/nix-required-mounts: mount the runtime closures 2024-06-26 00:35:44 +00:00
Someone Serge
3cf5bcfe49 nix-required-mounts: restore the followSymlinks option
This way pkgs.nix-required-mounts is "correct" even before
we override it in the NixOS module
2024-06-26 00:35:44 +00:00
Someone Serge
5560f6a514 nix-required-mounts: guest and host paths may differ 2024-06-26 00:35:43 +00:00
Someone Serge
7418e4fefd programs.nix-required-mounts: presets.cuda -> nvidia-gpu
This hopefully clarifies that the preset configures the hook to expose
"nvidia devices", which includse both the userspace driver and the
device nodes.

The derivations  still declare requiredSystemFeatures = [ "cuda" ] to
explicitly indicate they need to use the CUDA functionality and expect a
libcuda.so and a CUDA-capable device. Ideally, we'd also include the
specific CUDA architectures (sm_86, etc) in feature names.

Derivations that use a co-processor but do not care about the vendor or
even the particular interface may ask for the more generic "opengl",
"vulkan", or "gpu" features. It is then responsibility of the host
declaring the support for this feature to ensure the drivers and
hardware are appropriately set up.
2024-06-26 00:35:43 +00:00
Someone Serge
50d4382114 programs.nix-required-mounts: inherit defaults from the package 2024-06-26 00:35:43 +00:00
Someone Serge
b422dafc89 nix-required-mounts: init 2024-06-26 00:35:42 +00:00
github-actions[bot]
27074b7d07
Merge master into staging-next 2024-06-26 00:02:13 +00:00
Sandro
08605eec2a
Merge pull request #311381 from minijackson/tomcat-port
nixos/tomcat: add 'port' option
2024-06-26 00:53:58 +02:00
Sandro
44b22d8d45
Merge pull request #318185 from tomfitzhenry/initrd-ssh-null-alg
nixos/initrd-ssh: set KexAlgorithms/Ciphers/MACs only if non-null
2024-06-25 23:21:33 +02:00
Sandro
33f83c6252
Merge pull request #316977 from eclairevoyant/fix-mkEnableOption
treewide: fix mkEnableOption usage
2024-06-25 22:42:16 +02:00
Sandro
3176d6fb53
Merge pull request #315144 from mattpolzin/default-nodename-fix
nixos/services.kubernetes.kubelet: handle non-lower case chars in hostname
2024-06-25 22:38:46 +02:00
Sandro
5b0ea759a7
Merge pull request #318347 from caffineehacker/vaultwarden_backup
nixos/vaultwarden: backup all rsa_keys
2024-06-25 22:37:56 +02:00
Sandro
1813936aff
Merge pull request #272895 from xanderio/wg-access-server-0.10.1
wg-access-server: init at 0.12.1
2024-06-25 21:21:19 +02:00
Michael Franzl
cae086d605
nixos/virtualisation: increase priority for libvirt NSS modules
When `services.resolved` is enabled, then `resolve [!UNAVAIL=return]`
is added to `system.nssDatabases.hosts` with priority 501,
which prevents lower-priority NSS modules from running
unless systemd-resolved is not available.

Quoting from `man nss-resolve`:

> To activate the NSS module, add "resolve [!UNAVAIL=return]" to the line
> starting with "hosts:" in /etc/nsswitch.conf. Specifically, it is
> recommended to place "resolve" early in /etc/nsswitch.conf's "hosts:"
> line. It should be before the "files" entry, since systemd-resolved
> supports /etc/hosts internally, but with caching. To the contrary, it
> should be after "mymachines", to give hostnames given to local VMs and
> containers precedence over names received over DNS. Finally, we
> recommend placing "dns" somewhere after "resolve", to fall back to
> nss-dns if systemd-resolved.service is not available.

Note that the man page (just) recommends "early" and means with this
"before the 'files' and 'dns' entries". It does not insist on being
first or excluding other modules.

For this reason, libvirt NSS modules should run before the `resolve`
module. They should come right next to `mymachines` because both are
conceptually very similar -- they resolve local VMs/containers.

Since the data source of the libvirt NSS modules are local
plain text files (see source code of the libvirt NSS module),
no performance impact is expected form this raise of priorities.

Other NSS modules in NixOS also explicitly set their priority, which is
why this change increases consistency.

Fixes #322022
2024-06-25 20:22:14 +02:00
github-actions[bot]
08b5c3c46a
Merge master into staging-next 2024-06-25 18:01:20 +00:00
Jörg Thalheim
12e24e94d3
Merge pull request #321984 from ryze312/fix_localConf
nixos/zerotierone: fix default value for localConf
2024-06-25 17:14:23 +02:00
Robert Rose
a64423c745 nixos/k3s: extend k3s module
This contribution extends the k3s module to
enable the usage of Helm charts and container
images in air-gapped environments. Additionally,
the manifests option allows to specify arbitrary
manifests that are deployed by k3s automatically.
It is now possible to deploy Kubernetes workloads
using the k3s module.
2024-06-25 17:09:12 +02:00
Yaya
6f211d899d nixos/gitlab-runner: Add support runner authentication tokens
Support for *runner registration tokens* is deprecated since GitLab
16.0, has been disabled by default in GitLab 17.0 and will be removed in
GitLab 18.0, as outlined in the [GitLab documentation].

It is possible to [re-enable support for runner registration tokens]
until GitLab 18.0, to prevent the registration workflow from
breaking.

*Runner authentication tokens*, the replacement for registration tokens,
have been available since GitLab 16.0 and are expected to be defined in
the `CI_SERVER_TOKEN` environment variable, instead of the previous
`REGISTRATION_TOKEN` variable.

This commit adds a new option
`services.gitlab-runner.services.<name>.authenticationTokenConfigFile`.
Defining such option next to
`services.gitlab-runner.services.<name>.registrationConfigFile` brings
the following benefits:
- A warning message can be emitted to notify module users about the
  upcoming breaking change with GitLab 17.0, where *runner registration
  tokens* will be disabled by default, potentially disrupting
  operations.
- Some configuration options are no longer supported with *runner
  authentication tokens* since they will be defined when creating a new
  token in the GitLab UI instead. New warning messages can be emitted to
  notify users to remove the affected options from their configuration.
- Once support for *registration tokens* has been removed in GitLab 18,
  we can remove
  `services.gitlab-runner.services.<name>.registrationConfigFile` as
  well and make module users configure an *authentication token*
  instead.

This commit changes the option type of
`services.gitlab-runner.services.<name>.registrationConfigFile` to
`with lib.types; nullOr str` to allow configuring an authentication
token in
`services.gitlab-runner.services.<name>.authenticationTokenConfigFile`
instead.

A new assertion will make sure that
`services.gitlab-runner.services.<name>.registrationConfigFile` and
`services.gitlab-runner.services.<name>.authenticationTokenConfigFile`
are mutually exclusive. Setting both at the same time would not make
much sense in this case.

[GitLab documentation]: https://docs.gitlab.com/17.0/ee/ci/runners/new_creation_workflow.html#estimated-time-frame-for-planned-changes
[re-enable support for runner registration tokens]: https://docs.gitlab.com/17.0/ee/ci/runners/new_creation_workflow.html#prevent-your-runner-registration-workflow-from-breaking
2024-06-25 17:06:45 +02:00
Yaya
92a26526b9 nixos/gitlab-runner: Remove global with lib; 2024-06-25 17:06:45 +02:00
Julien Malka
9d1a59b2e2
Merge pull request #322386 from katexochen/jonringer/rm
treewide: remove jonringer as package maintainer and code owner
2024-06-25 17:04:27 +02:00
OPNA2608
60f68545b1 nixos/lomiri: Add calculator 2024-06-25 16:13:41 +02:00
Bobby Rong
1373dd5ac8
Merge pull request #322186 from bobby285271/upd/cinnamon-xapps
Cinnamon updates 2024-06-24
2024-06-25 21:33:27 +08:00
Maximilian Bosch
60657a4591
nextcloud27: remove
Version will be EOL by the end of 2024-06.
2024-06-25 14:08:15 +02:00
Martin Weinelt
de245ec4a5
Merge remote-tracking branch 'origin/master' into staging-next 2024-06-25 13:00:25 +02:00
Moritz Sanft
43990c5428
nixos/prometheus: remove minio exporter 2024-06-25 11:00:01 +02:00
Alexander Sieg
369cfec06d
nixos/wg-access-server: init module 2024-06-25 10:59:30 +02:00
Paul Meyer
fbe8538aa1 treewide: remove jonringer as package maintainer
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-06-25 09:16:56 +02:00
Franz Pletz
e6e4cd92ad
Merge pull request #322211 from NyCodeGHG/update-libvirt
libvirt: 10.0.0 -> 10.4.0, nixos/libvirtd: add ssh proxy option
2024-06-25 05:47:13 +02:00
rewine
9b3299c8cd
Merge pull request #310778 from wineee/dde23
deepin desktop environment: update
2024-06-25 09:52:28 +08:00
Thiago Kenji Okada
30c578e589
Merge pull request #321987 from thiagokokada/rtorrent-add-hardening
nixos/rtorrent: add systemd hardening configuration
2024-06-25 02:34:42 +01:00
Thiago Kenji Okada
406ebf3ad6 nixos/rtorrent: make RuntimeDirectory not world readable 2024-06-24 19:01:17 -03:00
Thiago Kenji Okada
33f1e2ece3 nixos/rtorrent: add systemd hardening configuration 2024-06-24 19:01:16 -03:00
Gavin John
8dcb12dee3 services/localtimed: Add package and geoclue2Package options 2024-06-24 14:36:26 -05:00
Will Fancher
2893f56de0
Merge pull request #319359 from misuzu/clevis-zfs-fix
nixos/clevis: add support for parent encrypted zfs datasets
2024-06-24 14:47:55 -04:00
github-actions[bot]
42ca786b66
Merge master into staging-next 2024-06-24 18:00:57 +00:00
Felix Bühler
e1f89770af
Merge pull request #302909 from Stunkymonkey/vagrant-guest-install-chmod
nixos/vagrant-guest: prefer 'install' over 'chmod'
2024-06-24 19:47:59 +02:00
Marie Ramlow
35b3707f20 nixos/libvirtd: add ssh proxy option 2024-06-24 17:20:05 +02:00
Artturin
b61e0ff19b nixos/polkit: Add package option
Overlaying polkit results in a lot of rebuilds thus it makes sense to
add a package option.

Assists in using the patch needed to fix https://www.github.com/NixOS/nixpkgs/issues/18012
2024-06-24 17:55:41 +03:00
Bobby Rong
510d7c2239
nixos/cinnamon: Don't ship apps that are not shipped in Mint 22
My reasons following Mint are:

1. Geary signed https://stopthemingmy.app, per request we shouldn't pre-ship it under a themed desktop environment.
   See also b7937b4509

2. Hexchat is still gtk2 and is not maintained anymore, Mint encourages switching to Matrix instead.
   See also https://blog.linuxmint.com/?p=4675 ("Joining the Matrix")
2024-06-24 22:30:18 +08:00
github-actions[bot]
88140ced6d
Merge master into staging-next 2024-06-24 12:01:17 +00:00
Pol Dellaiera
f95c186eb9
nixos/private-gpt: remove drupol from maintainers 2024-06-24 09:13:15 +02:00
github-actions[bot]
c1d6d547af
Merge staging-next into staging 2024-06-24 06:01:33 +00:00