Commit Graph

45313 Commits

Author SHA1 Message Date
Peder Bergebakken Sundt
465201822e
nixos/mihomo: fix option type and test (#345891) 2024-10-19 06:58:41 +02:00
Maximilian Bosch
c5b89642bf
Merge: nixos/nextcloud: fix shellcheck findings with enableStrictShellChecks enabled (#349558) 2024-10-18 23:57:53 +02:00
Sandro
f0bc4f6bbf
nixos-firewall-tool: add nftables support (#324615) 2024-10-18 23:57:39 +02:00
nicoo
6c62fbf539 nixos/sshd: warn if no authorized keys, and no authentication method other than pubkeys, were configured 2024-10-18 20:23:02 +00:00
nicoo
1f08575e3a nixos/sshd: Disable authorizedKeysInHomedir if stateVersion >= 24.11
Co-authored-by: Valentin Gagarin <valentin@gagarin.work>
2024-10-18 20:21:12 +00:00
Stanisław Pitucha
87c458e3ce
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled (#349557) 2024-10-19 06:22:18 +11:00
jmir1
858b5c6762 nixos/ddclient: Fix ip command with usev4 and usev6 2024-10-18 20:32:16 +02:00
Sandro
d72c0ce546
nixos/nextcloud-notify_push: fix connecting to mysql via socket (#348114) 2024-10-18 20:25:32 +02:00
Gary Guo
9d662d95ee
nixosTests.firewall: add tests for nixos-firewall-tool
Co-authored-by: Rvfg <i@rvf6.com>
2024-10-18 20:17:01 +02:00
Gary Guo
cabbab19e2
nixos-firewall-tool: add nftables support
Co-authored-by: Rvfg <i@rvf6.com>
2024-10-18 20:16:27 +02:00
K900
e1bc488872
nixos/plasma6: fix shellcheck findings with enableStrictShellChecks e… (#349580) 2024-10-18 20:09:15 +03:00
Tomo
4f89295d80
{nodePackages,vimPlugins}.coc-metals: drop (#349105) 2024-10-18 09:53:32 -07:00
Christina Sørensen
d218858bb1
nixos/wakapi: add database options; gate db creation behind database.createLocally (#341176) 2024-10-18 18:04:46 +02:00
Sandro Jäckel
fc31cfea42
nixos/plasma6: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-18 17:29:23 +02:00
Justinas Stankevicius
957fc1302f teleport_14: remove 2024-10-18 17:24:12 +03:00
Paul Meyer
5ee88754b8
docs/release-notes: document deprecations in Go ecosystem (#349482) 2024-10-18 14:59:02 +02:00
Atemu
dddcb35140
nixos/jupyter: set user primary group (#349415) 2024-10-18 12:05:43 +02:00
r-vdp
c9160efd81
nixos/kmonad: init 2024-10-18 11:47:26 +02:00
Rasmus Précenth
00e1112f9b
nixos/docker-registry: fix extraConfig docs
Co-authored-by: teutat3s <10206665+teutat3s@users.noreply.github.com>
2024-10-18 11:45:18 +02:00
Robert Hensing
01eb8df5f1
Rename macos-builder.nix -> nix-builder-vm.nix (#347255) 2024-10-18 11:26:20 +02:00
Paul Meyer
1ddf2d83e3 docs/release-notes: document deprecations in Go ecosystem
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-18 11:11:16 +02:00
Vladimír Čunát
a8f84a9dff
nixos/kresd: add link to upstream doc (#311915) 2024-10-18 10:22:18 +02:00
Atemu
267847014a
nixos/immich: do not set services.redis.servers.immich.user (#345126) 2024-10-18 10:19:46 +02:00
Jacek Galowicz
d3a7fdf5b8
nixos/test-instrumentation: forward journald to correct tty also in systemd initrd (#349479) 2024-10-18 10:16:22 +02:00
nikstur
ea9b0daeee nixos/test-instrumentation: forward journald to correct tty also in systemd initrd
This is a follow up for #339730 where forwarding was correctly setup for
stage 2 but not for stage 1 if it is using systemd.
2024-10-18 10:08:29 +02:00
Jack Wilsdon
df03b32278 nixos/jupyter: set user primary group 2024-10-17 23:44:53 +01:00
Will Fancher
594ac9011f
nixos/systemd-initrd: add missing kmod-blacklist src (#348505) 2024-10-17 15:46:51 -04:00
David McFarland
cd286b21e4
resolvconf: use correct output files when used with dnsmasq (#349320) 2024-10-17 16:44:18 -03:00
David McFarland
403604ca66 resolvconf: use correct output files when used with dnsmasq 2024-10-17 14:20:57 -03:00
scrufulufugus
969102bd11 system76-scheduler: migrate to pkgs/by-name format 2024-10-17 18:22:34 +02:00
scrufulufugus
1d4df7adcc system76-scheduler: Move out of kernel category
system76-scheduler: add alias at old location
2024-10-17 18:22:34 +02:00
scrufulufugus
a1c03ab062 system76-power: Move out of kernel category
system76-power: add alias at old location
2024-10-17 18:22:34 +02:00
Paul Meyer
71c64f8ecc initrd: drop effectless modification of kmod-blacklist
The perl snippet as been added years ago. I assume the intention was to
remove the `## file: iwlwifi.conf` section up to the next `## file:`,
but as there is no file following, the snippet currently does nothing.
We should be fine to remove it.

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-17 16:23:01 +02:00
Emily
c77ab7deae
forgejo: 8.0.3 -> 9.0.0 (#346873) 2024-10-17 15:34:39 +02:00
Jörg Thalheim
7da0a62f4c
nixosTests.nix-upgrade: fix failing test (#346702) 2024-10-17 15:29:47 +02:00
Brendan Taylor
04e39de6eb nixos/immich: do not set services.redis.servers.immich.user
the redis module expects a user and group to exist with this name.
previously if there was no group with the same name as
`services.immich.user` the immich redis server would fail to start.

instead we can use the redis module's default behaviour: it will
create a user & group named "redis-immich".
2024-10-17 07:19:02 -06:00
Marie Ramlow
ec4f809cd5 forgejo: 8.0.3 -> 9.0.0
Forgejo v9 is now licensed under GPL-3.0-or-later.
Release notes: https://codeberg.org/forgejo/forgejo/milestone/7235
2024-10-17 13:31:38 +02:00
Atemu
644c36174b
nixos/redis: add option services.redis.servers.*.group (#345327) 2024-10-17 10:39:48 +02:00
Leona Maroni
edd292c18b
nixos/dokuwiki,nixos/wordpress,nixos/invoiceplane: Remove deprecated isCoercibleToString (#292801) 2024-10-17 09:32:14 +02:00
Tomo
666d3bd33d {nodePackages,vimPlugins}.coc-metals: drop
Upstream deprecated it:
https://github.com/scalameta/coc-metals

Upstream recommends vimPlugins.nvim-metals instead.

Part of #229475
2024-10-16 21:51:52 +00:00
K900
bb72b22c6b
steam (and friends): migrate to by-name, small cleanups all over (#349109) 2024-10-16 23:54:49 +03:00
K900
5c33791df3 steam (and friends): migrate to by-name, small cleanups all over
- rename "steam-original" or "steam" to "steam-unwrapped", as that's what it is
- rename "steam-fhsenv" to "steam", as that's what you actually want
- remove some no-longer-relevant hacks
2024-10-16 23:27:24 +03:00
Ramses
7715240587
nixos/etc-overlay: avoid rebuilding the initrd every time the etc contents change (#340722) 2024-10-16 22:21:13 +02:00
Jacek Galowicz
aca9bcdd68
nixos/test-driver: fix resource cleanup of vlan/qmp objects (#349085) 2024-10-16 22:01:36 +02:00
Felix Bühler
cc42a1be7b
nixos/services.mysql: remove with lib; (#338048) 2024-10-16 21:38:48 +02:00
Robert Schütz
a9dee7c45b
immich: 1.117.0 -> 1.118.1 (#348890) 2024-10-16 12:31:58 -07:00
kirillrdy
b1428c8f9f
nixosTests.timescaledb: fix build, bump postgres version (#348214) 2024-10-17 06:07:54 +11:00
Robert Schütz
e3152f80bf nixos/immich: change default port to 2283
This was always upstream's default but they also change the internal
port, i.e. behind the reverse proxy, to 2283 in
https://github.com/immich-app/immich/pull/13185.
2024-10-16 10:30:34 -07:00
Jörg Thalheim
ef9502a009 nixos/test-driver: fix resource cleanup of vlan/qmp objects
Using __del__ is somewhat unsound resource cleanup in our clase the
logger already closed its logfile and therefor fails with exception
before the rest of the resources can be cleaned up.
2024-10-16 19:46:38 +03:00
Nick Cao
8e125ab277
sing-box: 1.9.7 -> 1.10.0 (#348787) 2024-10-16 12:43:13 -04:00
Adam Stephens
bece21421b
nixos/atticd: wants network-online.target
fixes:

trace: evaluation warning: atticd.service is ordered after 'network-online.target' but doesn't depend on it
2024-10-16 12:36:19 -04:00
r-vdp
a4f7868edf
nixos/etc-overlay: fix VM test for immutable overlay 2024-10-16 17:42:58 +02:00
r-vdp
24bf6e9cb8
nixos/etc-overlay: avoid rebuilding the initrd every time the etc contents change
Before this change, the hash of the etc metadata image was included in
the mount unit that's responsible for mounting this metadata image in the
initrd.
And because this metadata image changes with every change to the etc
contents, the initrd would be rebuild every time as well.
This can lead to a lot of rebuilds (especially when revision info is
included in /etc/os-release) and all these initrd archives use up a lot of
space on the ESP.

With this change, we instead include a symlink to the metadata image in the
top-level directory, in the same way as we already do for things like init and
prepare-root, and we deduce the store path from the init= kernel parameter,
in the same way as we already do to find the path to init and prepare-root.

Doing so avoids rebuilding the initrd all the time.
2024-10-16 17:42:58 +02:00
r-vdp
763dc50b08
nixos/systemd-initrd: pull the logic to find the nixos closure into a separate service 2024-10-16 17:42:50 +02:00
nikstur
e81710fa8b
nixos/userborn: fix username typo (#346773) 2024-10-16 17:00:39 +02:00
hellodword
a476fdb246
nixos/sing-box: test iproute2_table_index and iproute2_rule_index 2024-10-16 14:18:18 +00:00
Matthieu Coudron
6b1ffdb097
{nodePackages,vimPlugins}.coc-python: drop (#348964) 2024-10-16 15:42:47 +02:00
hellodword
edd07654e4
nixos/sing-box: migration of deprecated fields 2024-10-16 13:28:06 +00:00
Friedrich Altheide
53b37c99b4 virtualbox: nixfmt 2024-10-16 13:15:42 +02:00
Aaron Andersen
2ab323a087
nixos/github-runners: Make 'enable' functional (#342996) 2024-10-16 10:18:14 +02:00
Florian Klink
23f0d0153c
nixos/tests/gerrit: Drop dead hook to LFS plugin (#347660) 2024-10-16 08:46:51 +02:00
Tomo
f3929d6b78 {nodePackages,vimPlugins}.coc-python: drop
See notice in the README:
https://github.com/neoclide/coc-python

> WARNING: it's recommended to use coc-pyright if
> you're using python3 or use coc-jedi if you're using jedi,
> the code of coc-python is too hard to maintain!

If that isn't convincing, the repo was archived on 2020-12-24.

Part of #229475
2024-10-16 05:59:46 +00:00
K900
70cc7b62f2
nixos/murmur: Set UMask to 027 (#348652) 2024-10-16 05:16:09 +03:00
Robert Schütz
fb2d897809
nixos/headscale: don't set deprecated options in config (#347991) 2024-10-15 16:22:18 -07:00
Felix Bühler
e544a67eba
nixos/freshrss: fix phpfpm.pool (#347324) 2024-10-15 22:39:24 +02:00
Azat Bahawi
e2337957df
nixos/zapret: init (#347805) 2024-10-15 20:37:40 +00:00
Felix Singer
501b85f3d5 nixos/tests/gerrit: Drop dead hook to LFS plugin
The URL scheme for downloading plugins has changed a long time ago and
the used URL is dead. Gerrit only throws an error since it can't load
the plugin but it continues to boot. However, instead of maintaining
URLs to 3rdparty plugins, which end up dead anyway, just drop it. The
test should cover Gerrit and not 3rd party plugins.

Also, while on it, drop the setting `plugins.allowRemoteAdmin = true`
since it's not needed.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-15 20:56:22 +02:00
Dmitry Voronin
5a5c04d1ea
nixos/zapret: init 2024-10-15 21:51:53 +03:00
Peder Bergebakken Sundt
13bf1d6259
nixos/resilio: add package option (#346427) 2024-10-15 20:38:41 +02:00
Will Fancher
a6e54f566a
nixos/networkd: support systemd-creds in WireGuard (#346964) 2024-10-15 14:31:27 -04:00
Michele Guerini Rocco
1063a12f60
nixos/tests/networking: test nameservers via DHCP (#348747) 2024-10-15 15:44:48 +02:00
rnhmjoj
127dcca388
nixos/tests/networking: test nameservers via DHCP 2024-10-15 11:53:05 +02:00
Emily
9c2358e722 python3{11,12}Packages.nose: drop
🎉

This package has been deprecated and unmaintained upstream for almost a
decade, has required extensive patching to keep working on new Python
versions, will inevitably break again with Python 3.13 dropping 2to3,
is lacking a maintainer in Nixpkgs, is now unused in the tree, and
has caused us all far too many headaches lately. Let’s put an end
to this!

Shout‐outs to mweinelt and jchv for dealing with this situation
early on, pyrox0, Sigmanificient, and dotlambda for tackling a bunch
of packages, and natsukium for help with reviews. I never thought this
would get finished so quickly. We’ve collectively handled almost
1½ packages per day in the three months since I first opened the
tracking issue, and sometimes helped move the entire ecosystem forward.

Closes: #326513
2024-10-15 09:34:36 +01:00
Yaya
209b7f634b nixosTests.snipe-it: fix test 2024-10-15 09:11:35 +02:00
Felix Singer
13f6e2d85f nixos/murmur: Set UMask to 027
Group only needs limited access, while other users don't need access at
all. So set the UMask to 027.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2024-10-15 02:43:42 +02:00
Masum Reza
18760e4c99
{nixos/gpu-screen-recorder,gpu-screen-recorder{-,gtk}}: update to 4.1.11, remove cap_sys_nice (#339874) 2024-10-15 02:16:59 +05:30
Someone
a9b63f037b
nvidia-container-toolkit: add "nvidia" to services.xserver.videoDrivers (#344174) 2024-10-14 19:58:35 +00:00
Pol Dellaiera
242832e023
nixos/nix-fallback-paths: 2.24.8 -> 2.24.9 (#348411) 2024-10-14 21:10:40 +02:00
Artturin
431d0a19ef
xdg-desktop-portal: Fix installedTests (#344743) 2024-10-14 21:36:39 +03:00
Sandro Jäckel
db12279890
nixos/go-camo: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-14 18:21:30 +02:00
Sandro Jäckel
1ada7c1d36
nixos/nextcloud: fix shellcheck findings with enableStrictShellChecks enabled 2024-10-14 18:20:25 +02:00
Arian van Putten
f167bdaab9
Make arianvp codeowner of aws (#348499) 2024-10-14 16:16:56 +02:00
Michele Guerini Rocco
35618d0b14
nixos/dhcpcd: fix race between namespace setup and resolvconf (#348305) 2024-10-14 15:44:32 +02:00
Adam C. Stephens
86420f4ee8
nixos/atticd: init module (#347749) 2024-10-14 09:33:35 -04:00
Martin Weinelt
f4226b78df
knot-dns: 3.4.0 -> 3.4.1 (#348476) 2024-10-14 14:20:26 +02:00
Richard Steinmetz
b9ca8498aa nixos/nextcloud-notify_push: fix connecting to mysql via socket 2024-10-14 13:30:05 +02:00
Arian van Putten
0890727868 nixos/ec2-data: Make arianvp maintainer 2024-10-14 12:44:16 +02:00
Maximilian Bosch
782b08ba3d
Merge: percona: update packages, init 8.4 (#346027) 2024-10-14 12:40:48 +02:00
Paul Meyer
2f6e0c8de3 nixos/systemd-initrd: add missing kmod-blacklist src
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-14 11:34:27 +02:00
OTABI Tomoya
8f8f0badb3
buildPython*: Deprecate and remove (buildPython* { ... }).override (#333670) 2024-10-14 17:56:43 +09:00
Vladimír Čunát
46954f61c6
nixos/knotd: extend SystemCallFilter
It was breaking knot-dns.tests.knot
New knotd uses fchown to cover cases where user changes during startup.
In typical Linux cases the user is kept the same and there are
capabilities instead, but the syscall still happens and got caught here.
2024-10-14 10:26:46 +02:00
Markus Kowalewski
812640f38a
nixos/saunafs: add module + test (#347337) 2024-10-14 09:24:51 +02:00
Vladimír Čunát
a3c0b3b215
Revert "nixos/tests/networking: test nameservers via DHCP"
This reverts commit bad5251e87.

https://github.com/NixOS/nixpkgs/pull/348305#issuecomment-2410165312
Should've known that commit starting with `bad` will be no good.
Fixes nixosTests.networking.networkd.dhcpSimple
https://hydra.nixos.org/build/274843085/nixlog/8/tail
2024-10-14 08:48:30 +02:00
rnhmjoj
52e2e7027d
dhcpcd: fix race between namespace setup and resolvconf
systemd requires paths in `ReadWritePaths=` to exist before setting up
the service sandbox, so dhcpcd should be ordered after resolvconf.
Making resolvconf a oneshot service ensure `After=resolvconf.service`
works correctly.
2024-10-14 08:02:46 +02:00
Pol Dellaiera
56cbea0d2e
snapweb: init at 0.8.0 (#347536) 2024-10-14 07:14:23 +02:00
zowoq
a87bc99783 nixos/nix-fallback-paths: 2.24.8 -> 2.24.9
https://releases.nixos.org/nix/nix-2.24.9/fallback-paths.nix
2024-10-14 13:00:57 +10:00
Felix Buehler
de810c5163 nixos/freshrss: update de parameters 2024-10-13 23:07:46 +02:00
Oliver Schmidt
6d0da9a167 tests/mysql: properly specify percona packages 2024-10-13 23:04:24 +02:00
Oliver Schmidt
4b5141e018 percona: deprecate innovation/lts release flavours
Percona upstream has decided not to create releases or each MySQL
innovation upstream release, but just for LTS releases.
https://www.percona.com/blog/no-mysql-9-x-innovation-releases-from-percona/
2024-10-13 23:04:24 +02:00
Oliver Schmidt
8315d06e99 percona: release notes for 8.4 LTS release 2024-10-13 18:15:49 +02:00