Commit Graph

30697 Commits

Author SHA1 Message Date
Thomas Watson
af25692214 nixos/stage-1: Examine binaries for libraries in a consistent order
To reduce size, stage 1 (the initrd) is populated by copying specific
binaries in, then copying the libraries specifically needed by those
binaries. `patchelf` is then used to make the binaries search in the
directory where these libraries are copied to instead of their original
store paths.

Some filesystems (e.g. ZFS) do not guarantee that copying the same files
in the same order into a given directory will result in `find` returning
them in any particular order (though the order appears consistent so
long as the directory is not modified).

Therefore, when the binaries are scanned for libraries to copy in, they
might be scanned in a different order each time the derivation is built.
If two binaries need two different libraries with the same name, then a
different instance of the library might be copied in first, changing the
derivation contents and breaking reproducibility.

This turns out to be the case with `libudev.so.1` from both `systemd`
(needed by e.g. `mdadm`) and `systemdMinimal` (needed by e.g.
`dmsetup`). This issue is fixed by sorting the list of binaries to be
scanned instead of relying on filesystem order so that the same instance
always gets seen and copied first.

Both before this change (at least on ext4) and after this change
(without any options that affect stage 1), this is the `libudev.so.1`
from `systemdMinimal` by way of `dmsetup`. Whether this is appropriate
and how much the two different systemd configurations and udev libraries
need to be involved is a topic left for future work.
2022-12-20 08:24:19 +01:00
Sandro
bf46d7b626
Merge pull request #172084 from priegger/prometheus-statsd-exporter 2022-12-19 23:16:02 +01:00
Olaf Tomalka
813a0ef809 lighthouse: fix validator service not setting arguments properly 2022-12-19 16:41:43 -05:00
Sandro
ac210fc15c
Merge pull request #206441 from SuperSandro2000/msmtp 2022-12-19 22:28:07 +01:00
Sandro
ace7950a79
Merge pull request #206454 from SuperSandro2000/libextractor 2022-12-19 22:27:31 +01:00
Guillaume Girol
92dbac3199
Merge pull request #205561 from symphorien/nginx-conf-validate
nixos/nginx: validate config at build time
2022-12-19 19:52:33 +00:00
Jörg Thalheim
9bf4ec6909
Merge pull request #206645 from Mic92/nix-ld
nixos/nix-ld: set NIX_LD by default
2022-12-19 16:26:02 +00:00
Jörg Thalheim
4ce47012a6 nixos/nix-ld: set NIX_LD by default 2022-12-19 17:06:41 +01:00
Artturi
1c387ed1a6
Merge pull request #206709 from SuperSandro2000/mandb-misc
nixos/man-db: use nativeBuildInputs
2022-12-19 17:55:46 +02:00
Jonas Heinrich
a9e3b1c0f2 nixos/usbmuxd: Ability to change package 2022-12-19 08:14:07 -05:00
Franz Pletz
6f8f1b0454
Merge pull request #205865 from DeeUnderscore/fix/grafana-socket 2022-12-19 12:04:22 +01:00
Anderson Torres
c7499150c2
Merge pull request #206698 from linsui/firefox
nixos/firefox: add languagePacks config
2022-12-18 19:01:45 -03:00
figsoda
a6a225e33c
Merge pull request #206722 from SuperSandro2000/sourcehut-nix
nixos/sourcehut: resolve deprecated setting
2022-12-18 13:55:43 -05:00
Valentin Gagarin
f782da699e
Merge pull request #206646 from figsoda/typos 2022-12-18 18:27:57 +01:00
figsoda
d48c2fd1ca
nixos/pgpkeyserver-lite: fix typo
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2022-12-18 11:35:23 -05:00
Sandro Jäckel
92c94a946f
nixos/sourcehut: resolve deprecated setting 2022-12-18 16:53:49 +01:00
Sandro Jäckel
a6fa6abb15
nixos/man-db: use nativeBuildInputs 2022-12-18 14:19:36 +01:00
linsui
8153ba84ca nixos/firefox: add languagePacks config 2022-12-18 20:48:49 +08:00
Vincent Bernat
fc39b5ecc8 nginx: make global redirect vhost option accept exceptions
By moving the return into a location directive, one can provide
exceptions by adding locations. This is similar to what the forceSSL
option does.
2022-12-18 12:21:27 +01:00
figsoda
6bb0dbf91f nixos: fix typos 2022-12-17 19:31:14 -05:00
Robert Hensing
cf150c53f1
Merge pull request #200724 from JonathanLorimer/allow-configuration-of-roles
services.postgresql: Allow configuration of user roles in ensureUser
2022-12-18 00:40:57 +01:00
Julien Moutinho
15046139d5 nixos/mmsd: init 2022-12-17 17:36:43 +01:00
Naïm Favier
723eb8d9b8
Merge pull request #205479 from IzumiRaine/borgbackup-patterns 2022-12-17 17:00:02 +01:00
Naïm Favier
a23134f464
Merge pull request #205311 from LoveIsGrief/nixos-rebuild-I-option-documentation 2022-12-17 16:58:23 +01:00
Ryan Lahfa
af6ea430f4
Merge pull request #201119 from Enzime/remove-tailscale-warning
nixos/tailscale: Add `useRoutingFeatures` option
2022-12-17 15:44:07 +01:00
Michael Hoang
68e514ed1c nixos/tailscale: Add useRoutingFeatures option 2022-12-17 22:38:14 +11:00
Vladimír Čunát
0ba3487fc6
Merge #205270: staging-next 2022-12-09 2022-12-17 10:11:16 +01:00
Jörg Thalheim
2b7fb2fe8e
Merge pull request #204785 from corngood/vaapi-docs
nixos/doc/manual: add chapter on VA-API
2022-12-17 08:53:27 +00:00
Jörg Thalheim
668a2b2f33
Merge pull request #172237 from DeterminateSystems/bootspec-rfc
Support external bootloader backends (RFC-0125)
2022-12-17 08:35:53 +00:00
github-actions[bot]
05ca3d8285
Merge master into staging-next 2022-12-17 06:01:30 +00:00
AndersonTorres
4a194173b0 nixos/katriawm: add module 2022-12-17 00:13:39 -03:00
AndersonTorres
4ee04d0f1a module-list: put in ascii-betical ordering 2022-12-17 00:13:38 -03:00
Raito Bezarius
aac4134f43 nixos/tests/bootspec: add EFI support for GRUB test 2022-12-16 17:15:59 -08:00
github-actions[bot]
30b97b0e83
Merge master into staging-next 2022-12-17 00:02:17 +00:00
Sandro
d154d50e2c
Merge pull request #200856 from aacebedo/aacebedo/streamdeck-ui_package_option 2022-12-17 00:46:28 +01:00
Ryan Lahfa
4428f9f5e9
Merge pull request #198239 from jacobgreenleaf/jacobg-borg-inhibit
nixos/borgbackup: Add option for inhibiting sleep
2022-12-17 00:45:10 +01:00
Ryan Lahfa
810e9ccfda
Merge pull request #200720 from kaldonir/dynamic-motd
pam: Allow backing the MOTD with a file
2022-12-17 00:35:08 +01:00
Sandro
528a316b31
Merge pull request #205246 from Frostman/unpoller-2.4.0 2022-12-16 22:51:06 +01:00
Sandro
c338bf3244
Merge pull request #205712 from devusb/atuin-server 2022-12-16 22:38:35 +01:00
Sandro Jäckel
c01a28d021
nixos/no-x-libs: add libextractor 2022-12-16 22:06:00 +01:00
Vladimír Čunát
5bfe30aafa
Merge branch 'master' into staging-next 2022-12-16 21:58:10 +01:00
Sandro Jäckel
debcf570c6
nixos/no-x-libs: add msmtp 2022-12-16 20:16:10 +01:00
Nikolay Korotkiy
4e2ce56d6f
Merge pull request #206419 from peperunas/miniflux-package
miniflux: Add package option
2022-12-16 23:11:12 +04:00
github-actions[bot]
ac36665726
Merge master into staging-next 2022-12-16 18:01:38 +00:00
Bernardo Meurer
bf4294b338
Merge pull request #203872 from mikepii/roon-server-id-dir 2022-12-16 14:37:06 -03:00
Frank Moda
e27e857def nixos/cloudflared: guard config with enable flag 2022-12-16 11:30:44 -05:00
Giulio De Pasquale
b2742248e8
miniflux: Add package option 2022-12-16 16:11:40 +01:00
Manuel Bärenz
3479b87182
nixosTests.mastodon: Put script in separate file 2022-12-16 16:19:41 +03:00
Izorkin
883a56c0cc
nixos/tests/mastodon: add test with external services 2022-12-16 16:19:41 +03:00
Izorkin
8e14bf10c2
nixos/mastodon: update database configuration 2022-12-16 16:19:39 +03:00