Franz Pletz
188526da3d
prometheus.blackboxExporter service: add CAP_NET_RAW
...
The blackbox-exporter for prometheus needs CAP_NET_RAW for sending icmp
probes.
2017-02-15 09:35:27 +01:00
Bjørn Forsman
f9cb2b5640
nixos/security.wrappers: use literalExample in documentation
...
It's much more readable when the example attrset is pretty printed
instead of written as one line.
2017-02-15 09:08:41 +01:00
Bjørn Forsman
a45821e7a8
nixos/cron: unbreak since new security.wrapper
2017-02-15 08:30:58 +01:00
Bjørn Forsman
aaac02f6c4
nixos/atd: unbreak after new security.wrappers
...
* convert list -> attrset
* 'atd' doesn't exist, 'at' does
2017-02-15 08:25:59 +01:00
Bjørn Forsman
b1bfe9d3db
nixos: hint about security.setuidOwners/Programs -> security.wrappers
...
Let users know about the option rename / change during nixos-rebuild
with a useful message instead of an error (with no way forward).
2017-02-15 07:25:33 +01:00
Bjørn Forsman
34c1b74421
nixos/virtualbox: unbreak wrt. new security.wrappers
...
The new option takes an attrset, not a list.
2017-02-15 07:25:33 +01:00
Bjørn Forsman
448acd8e5e
nixos: remove remaining reference to setuidPrograms
...
The option doesn't exist anymore.
2017-02-15 07:25:33 +01:00
Ian-Woo Kim
b7a24e0a2b
nixos-container: added test for port forwarding ( nixos/tests/containers-portforward.nix )
2017-02-15 05:12:46 +01:00
Ian-Woo Kim
5ca0f72472
nixos-container: break lines in description of forwardPorts.
2017-02-15 05:12:46 +01:00
Ian-Woo Kim
4f0b663c2e
nixos-container: hostPort -> forwardPort and forwardPort is now a list of (protocol,hostPort,containerPort).
2017-02-15 05:12:46 +01:00
Ian-Woo Kim
0bfc631de2
nixos-container: support multiple port forwarding. change type of hostPort from 'string' to 'listOf str'
2017-02-15 05:12:46 +01:00
Ian-Woo Kim
8684285251
nixos-container: introduce hostPort in declarative container options.
2017-02-15 05:12:46 +01:00
Ian-Woo Kim
a238c8a575
nixos-container: add --port option for nixos-container (forward network ports to systemd-nspawn container)
2017-02-15 05:12:46 +01:00
Parnell Springmeyer
1f83f1c878
security-wrapper: Wrap <para> tags in a <note> tag
2017-02-14 21:30:04 -06:00
Graham Christensen
7483ba0932
Revert "nix-daemon: default useSandbox to true"
...
This reverts commit d0a086770a
.
2017-02-14 14:13:39 -05:00
Graham Christensen
3be1388963
Merge pull request #22767 from grahamc/sandbox-by-default
...
nix-daemon: default useSandbox to true
2017-02-14 13:57:44 -05:00
Eelco Dolstra
14c47bd546
Merge pull request #22758 from dezgeg/pr-nixos-rebuild
...
nixos-rebuild: Don't rebuild nixos-rebuild when --fast is used
2017-02-14 16:35:43 +01:00
Parnell Springmeyer
69794e333a
Using para tags for manual formatting
2017-02-14 08:53:30 -06:00
Parnell Springmeyer
794b3721bc
Syntax wibble
2017-02-14 08:42:08 -06:00
Parnell Springmeyer
e856d6efe8
Default should be to set owner and group to root on setcap wrappers too
2017-02-14 08:40:12 -06:00
Parnell Springmeyer
c01689f8da
Fixing ref to old-wrappersDir
2017-02-14 08:33:07 -06:00
Parnell Springmeyer
f8b8c353ff
Simplifying the wrapper program derivation
2017-02-14 08:27:40 -06:00
Parnell Springmeyer
fb6d13c01a
Addressing feedback and fixing a bug
2017-02-14 07:38:45 -06:00
Parnell Springmeyer
467bb3f674
/run/wrapper is not a filesystem, no need to skip it
2017-02-14 07:32:24 -06:00
Parnell Springmeyer
ba499e3aa0
Removing unused module option old-wrapperDir
2017-02-14 07:30:21 -06:00
Parnell Springmeyer
a27f35993d
Derp, correctly write the source program's path
2017-02-13 18:28:13 -06:00
Parnell Springmeyer
cca2e11556
Resurrecting the single-wrapper read from sibling .real file behavior
2017-02-13 18:03:06 -06:00
Parnell Springmeyer
9e36a58649
Merging against upstream master
2017-02-13 17:16:28 -06:00
Graham Christensen
d0a086770a
nix-daemon: default useSandbox to true
2017-02-13 18:06:01 -05:00
Rickard Nilsson
cda4a4dcfc
nixos/grafana: Don't print password warning if no password has been set
2017-02-13 23:11:40 +01:00
Robin Gloster
7e5424ac09
php: default to php71
2017-02-13 22:48:45 +01:00
Tuomas Tynkkynen
2000f0941e
nixos-rebuild: Don't build nixos-rebuild with --fast
2017-02-13 21:52:32 +02:00
Tuomas Tynkkynen
23fee8bfbd
nixos-rebuild: Support passing e.g. '-j8'
...
Where there is no space between '-j' and the number.
2017-02-13 21:52:30 +02:00
Graham Christensen
1d2548772e
Merge pull request #22724 from grahamc/pam-oath-fixup
...
pam_oath: require OATH and pam_unix credentials to be valid
2017-02-13 09:36:35 -05:00
Robin Gloster
af9f44dd57
grub: fix capitalisation
...
Missed this occurence while renaming the option
2017-02-13 14:55:36 +01:00
symphorien
0b87efacb1
grub: add grub.useOSProber option ( #22558 )
2017-02-13 14:53:15 +01:00
Linus Heckemann
b4cd251c54
Manual: document users.users.<name>.hashedPassword
2017-02-13 13:54:40 +01:00
Eelco Dolstra
a4ec1841da
VM tests: veryloose -> cache=loose
2017-02-13 12:18:10 +01:00
Rob Vermaas
af3732b6c6
Azure: switch back to qemu 2.2.0 for generating image. Seems to work best.
...
(cherry picked from commit 2da8a5dac8
)
2017-02-13 09:55:03 +00:00
Rob Vermaas
eff0752dbc
Use default qemu for azure image generation, and use option to enforce sizing of image to be compliant with Azure/HyperV.
...
(cherry picked from commit e16db5666a
)
2017-02-13 08:54:41 +00:00
Dan Peebles
e63d15f173
ecs-agent NixOS module: enable docker
2017-02-13 04:06:31 +00:00
Dan Peebles
e928cb1c63
ssm-agent NixOS module: init
2017-02-13 04:01:38 +00:00
Franz Pletz
76a3c30471
network-interfaces service: fix bindsTo deps for masters
...
Previously, netdev units for network interfaces defined in the nixos
configurations would bindTo the systemd device unit of the interface if
not in a container.
In situations where you switch to a new nixos configration with changes
to network-setup.service (like nameservers) and have stacked interfaces
like vlans on a bond, it would fail to propagate restarts to the netdevs
correctly resulting with broken networking. The bond would be present
but no vlan interfaces rendering the machine unreachable.
My fear is that the udev events fail to propagate correctly while a systemd
transaction that is also restarting the triggered netdev service is running.
This commit changes this behaviour so netdev services bindTo other netdev
services if present and otherwise fall back to the previous behaviour.
We also noticed that stacked interfaces would sometimes seemingly be stopped
in the wrong order. For instance in the above example, the bond interface
would be deleted before the vlan interfaces resulting in the vlan interfaces
not being present when their service is being stopped. This would cause the
systemd transaction to fail and thus break networking. Their postStop hooks
are now allowed to fail as we have reached the desired state.
2017-02-13 01:57:25 +01:00
Graham Christensen
84d4e4277c
Merge pull request #22723 from benley/fix-sessions-with-sddm
...
Fix sessions with sddm.
2017-02-12 19:01:15 -05:00
Franz Pletz
f5a82e4714
gitlab service: fix database creation
...
Providing custom a username and database name was broken. They were
hardcoded to "gitlab".
2017-02-13 00:57:22 +01:00
Graham Christensen
96d767de62
pam_oath: require OATH and pam_unix credentials to be valid
2017-02-12 18:27:11 -05:00
Graham Christensen
59e77daf5b
nixos tests: make getTTYText smart about tty size
2017-02-12 18:27:06 -05:00
Karn Kallio
8a1fcaf5bd
Fix sessions with sddm.
2017-02-12 18:19:20 -05:00
Vladimír Čunát
31eba21d1d
virtualbox: force xorg-server-1.18 for now
...
This is getting a little hacky, but hopefully it won't break anything.
2017-02-12 21:07:49 +01:00
Philipp Gesang
3dad33227f
xen: update domU config for pvgrub2
...
fix #22709
Recent pvgrub (from Grub built with “--with-platform=xen”) understands
the Grub2 configuration format. Grub legacy configuration (menu.lst) is
ignored.
2017-02-12 20:53:54 +01:00
georgewhewell
94b28a8072
fix systemd.services.kube-proxy to use correct extraOpts
2017-02-12 15:06:59 +00:00
Bjørn Forsman
824d82fa0f
nixos/geoip-updater: new service
...
The GeoIP databases from MaxMind have no stable URLs and change every
month (or so). Our current method of packaging these database in Nix and
playing catch-up with ever-changing file hashes is a bad idea. For
instance, it makes it impossible to realize old NixOS configurations.
This patch adds a NixOS service that periodically updates the GeoIP
databases in /var/lib/geoip-databases. Moving NixOS modules over can be
done in later patches.
I tried adding MD5 check, but not all databases have them, so i skipped
it. We are downloading over HTTPS though, it should be good. I also
tried adding zip support, but the first zip file I extracted had a
different filename inside than the archive name, which breaks an
assumption in this service, so I skipped that too.
Changes v9 -> v10:
- Pass "--max-time" to curl to set upper bound on downloads (ensures
no indefinite hanging if there's problem with networking).
Timeout for network connectivity check: 60s.
Timeout for geoip database (each): 15m.
Changes v8 -> v9:
- Mention the random timer delay in the documentation for the
'interval' option.
Changes v7 -> v8:
- Add "RemainAfterExit=true" for the setup service, so it won't be
restarted needlessly. (Thanks @danbst!)
Changes v6 -> v7:
- Add --skip-existing flag to geoip-updater, which skips updating
existing database files. Pass that flag when we run the service on
boot (and on any NixOS configuration change).
(IMHO, this is somewhat a workaround for systemd persistent timers
not being triggered immediately when a timer has never expired
before. But it does have the nice side effect of ensuring that the
installed databases always correspond to the configured ones, since
the service is now always run after configuration changes.)
Changes v5 -> v6:
- Update database files atomically (per DB)
- If a database is removed from the configuration, it'll be removed
from /var/lib/geoip-databases too (on next run).
- Add NixOS module assertion so that if user inputs non- .gz or .xz
file there will be a build time error instead of runtime.
- Run updater as user "nobody" instead of "root".
- Rename NixOS service from "geoip-databases" to "geoip-updater".
- Drop RemainAfterExit, or else the timer won't trigger the unit.
- Bring back "curl --fail", or else we won't catch and log curl
failures.
Changes v4 -> v5:
- Add "GeoLite2-City.mmdb.gz" to default database list.
Changes v3 -> v4:
- Remove unneeded geoip-updater-setup.service after adding
'wantedBy = [ "multi-user.target" ]' directly to
geoip-updater.service
- Drop unneeded "Service" name from service descriptions.
Changes v2 -> v3:
- Network may be down when starting from a cold boot, so try a few
times. Possibly, if using systemd-networkd, it'll pass on the first
try. But with default DHCP on NixOS, the service is started before
hostnames can be resolved and thus we need a few extra seconds.
- Add error handling and mark service as failed if fatal error.
- Add proper syslog log levels.
- Add RandomizedDelaySec=3600 to the timer to not put high load on the
MaxMind servers. Suggested by @Mic92.
- Set RemainAfterExit on geoip-updater.service instead of
geoip-updater-setup.service. (The latter is only a proxy that pulls
in the former service).
Changes v1 -> v2:
From Данило Глинський (Danylo Hlynskyi) <abcz2.uprola@gmail.com>:
nixos/geoip-databases: add `databases` option and fix initial setup
There were two great issues when using this service:
- When you just enable service, databases aren't downloaded, they are
downloaded when timer triggers. Fixed this with automatic download on
first system activation.
- When there is no internet, updater outputs nothing to logs, which is
IMO misbehavior. Fixed this with removing `--fail` option, better be
explicit here.
2017-02-12 15:07:34 +01:00
Tuomas Tynkkynen
9e04b57dde
nixos top-level: Add 'dtbs' symlink when kernel uses device trees
...
Currently e.g. extlinux-conf-builder.sh uses
`readlink -m "$toplevel/kernel/../dtbs"` to figure out the directory.
That is obscenely ugly.
2017-02-12 15:47:49 +02:00
Graham Christensen
4f34e030a5
Merge pull request #22677 from grahamc/drop-kdm-kde4-modules
...
Drop kdm and kde4 modules
2017-02-12 08:36:33 -05:00
Vladimír Čunát
3348905cde
xorg-server: major bump 1.18.4 -> 1.19.1
...
I encountered no problems with it. Nvidia binary drivers are tested,
and AMD ones now both set `abiCompat` to use older server versions.
2017-02-12 13:24:44 +01:00
Ricardo M. Correia
123cbd40c2
raspberryPi boot loader: don't remove xx-initrd files
...
The Raspberry Pi boot loader was deleting all xx-initrd text files
(which simply contain the path to the actual initrd files) just after
having created them. The code was actually trying to delete real,
obsolete initrd files, which are named <hash>-initrd-initrd (after path
cleaning), but the glob was catching the other files as well.
2017-02-12 02:48:57 +02:00
Ricardo M. Correia
c19b17d14f
raspberryPi boot loader: fix booting Raspberry Pi 3
...
The Raspberry Pi 3 seems to need the .DTB file when booting the kernel,
so we must copy it to /boot when installing a new kernel.
2017-02-12 02:48:57 +02:00
Graham Christensen
b1a05a0865
nixos: drop references to kde4
...
Excluding modules/programs/environment.nix for PATHand QT_PLUGIN_PATH to allow the programs to continue running.
2017-02-11 14:01:13 -05:00
Graham Christensen
3cec7d10df
kdm: drop service
2017-02-11 13:55:09 -05:00
Graham Christensen
c09004fba0
Merge pull request #22642 from grahamc/kde4-deprecate
...
kde4, kdm: mark services as deprecated
2017-02-11 10:17:15 -05:00
Vladimír Čunát
d4bf624f96
nixos manual: add grub option to avoid #21830
...
Close #22659 . vcunat edited this slightly.
2017-02-11 12:47:15 +01:00
Tuomas Tynkkynen
607be4d88e
sd-image-*: Copy all RPi firmware files
...
Turns out all variants of start.elf and fixup.dat are needed (depending
on what's in config.txt). I was under the mistaken impression that you
were supposed to rename one of the variants to switch using them, but
nope.
2017-02-11 12:23:16 +02:00
Franz Pletz
3fd44e2912
network-interfaces service: add metric option for defaultGateways
2017-02-11 04:53:56 +01:00
Graham Christensen
d9ab783f58
nixos manual: correct reference to sddm
2017-02-10 22:52:08 -05:00
davidak
d4766e789b
caddy: set file descriptor limit to 8192, fixes #22454
...
the value is recommended for production use
a warning is produced when not set
2017-02-11 01:44:29 +01:00
Graham Christensen
564e0c120b
kde4, kdm: mark services as deprecated
2017-02-10 17:35:52 -05:00
Profpatsch
ed8a0d8e5e
modules/searx: add package option ( #22636 )
...
The user should be able to specify a patched version of searx.
2017-02-10 22:44:10 +01:00
Eelco Dolstra
1b1138d3e7
Merge pull request #22610 from grahamc/switch-to-kde5-by-default
...
nixos: update default cases from KDM/KDE4 to SDDM/KDE5
2017-02-10 22:06:21 +01:00
Nikolay Amiantov
442b4d65c3
Merge pull request #22304 from abbradar/nvidia
...
Refactor NVidia drivers
2017-02-10 23:53:34 +03:00
Dan Peebles
3809938208
ecs-agent module: remove debug print
...
Whoops :)
2017-02-10 15:16:17 -05:00
Tuomas Tynkkynen
a14ef4ad52
open-vm-tools: 10.0.7 -> 10.1.0
...
Also add an option to disable all the X11 stuff.
2017-02-10 20:12:00 +02:00
Dan Peebles
a0ebb1497f
ecs-agent NixOS module: init
...
A very simple skeleton for now that doesn't attempt to model any of
the agent configuration, but we can grow it later. Tested and works
on an EC2 instance with ECS.
2017-02-10 05:37:38 +00:00
Graham Christensen
b12564cc1b
nixos: update default cases from KDM/KDE4 to SDDM/KDE5
2017-02-09 21:52:00 -05:00
afranchuk
a5e041ac08
libreswan service: make EnvironmentFile optional ( #22591 )
...
Recent versions of libreswan seem to omit this file, but it may be added/changed in the future. It is silly to have the service fail because a file is missing that only enriches the environment.
2017-02-10 00:53:44 +01:00
Joachim F
ca8fb930b1
Merge pull request #22356 from Ekleog/redsocks
...
Redsocks
2017-02-09 22:39:43 +01:00
Edward Tjörnhammar
2f5fdaefec
nixos, doc: dictd dbs move
2017-02-09 22:23:11 +01:00
Edward Tjörnhammar
3c9d73f100
nixos, doc: named nylons
2017-02-09 21:18:57 +01:00
Vladimír Čunát
378662bbba
Merge #22491 : Add documentation for Xfce
2017-02-09 18:39:36 +01:00
Vladimír Čunát
a0505989c9
Xfce docs nitpicks
...
- fix validity
- XFCE -> Xfce, as that seems to be upstream preference
2017-02-09 18:38:01 +01:00
Léo Gaspard
7a32b96697
redsocks module: initialize
...
redsocks module: use separate user for redsocks daemon
2017-02-09 18:01:14 +01:00
Daniel Peebles
7439fe083f
Merge pull request #22297 from nand0p/buildbot-0.9.3
...
buildbot: 0.9.0.post1 -> 0.9.3
2017-02-09 11:15:03 -05:00
Joachim Fasting
28b5cc7dca
grsecurity test: adapt to changes in tinycc outputs
2017-02-09 16:23:04 +01:00
Franz Pletz
65a1762a9b
nginx module: make acme group overrideable easily
2017-02-08 23:50:59 +01:00
Nikolay Amiantov
5ff9a2a2cb
kbd service: don't restart systemd-vconsole-setup
...
Fixes #22470 . Also remove non-relevant comment (we don't deviate from upstream
systemd unit anymore).
2017-02-08 21:50:33 +03:00
Nikolay Amiantov
6f7811143d
systemd service: don't install systemd-hwdb-update
2017-02-08 21:42:07 +03:00
Nikolay Amiantov
504774e223
release notes: mention JRE changes and jre_headless
2017-02-08 21:36:22 +03:00
Andrew Cann
3082647e74
trezord: init at 1.2.0 ( #22054 )
2017-02-08 17:18:22 +01:00
Graham Christensen
7db1f727f3
moodle: Remove due to continued security issues.
2017-02-08 09:10:45 -05:00
Nikolay Amiantov
2fd2fcf54d
linuxPackages.nvidia_x11: refactor, build more from source
...
* Use libglvnd;
* Compile nvidia-settings, nvidia-persistenced from source;
* Generalize builder.
2017-02-08 16:57:46 +03:00
Antoine Eiche
9d30099b7f
nixos/systemd: set r-x group permissions on /var/log/journal
...
This allows services such as systemd-journal-gateway to access the
systemd journal.
Closes #22288
2017-02-08 16:06:14 +03:00
Franz Pletz
626540e32e
Merge pull request #22524 from wizeman/u/chrony-impr
...
nixos.chrony: add extraFlags config option
2017-02-07 21:50:58 +01:00
Vladimír Čunát
ce9d30e734
Merge #22241 : amdgpu-pro: 16.50 -> 16.60
2017-02-07 20:49:58 +01:00
Peter Simons
bfd7fe8ba5
nixos: fix taskserver module to evaluate properly when keys are managed manually
2017-02-07 18:35:41 +01:00
Ricardo M. Correia
9293f86bf2
nixos.chrony: remove generatecommandkey option
...
It's deprecated and no longer used.
2017-02-07 18:01:58 +01:00
Ricardo M. Correia
e3fce56047
nixos.chrony: add extraFlags config option
2017-02-07 18:01:57 +01:00
Matthias Beyer
de592483d1
Add xfce documentation
2017-02-07 17:55:40 +01:00
Jörg Thalheim
3aff6c07ab
Merge pull request #22518 from wizeman/u/fix-chrony-conf
...
nixos.chrony: pass config file directly to daemon
2017-02-07 17:17:17 +01:00
Fernando J Pando
34b5c9a4de
buildbot: 0.9.0.post1 -> 0.9.3
...
- Fixes unneeded patching
- Adds worker to build inputs now needed for tests
- Replaces enableworker option with worker configuration module
- Openssh required for tests
- Fixes worker hardcoded paths
- Tested on Nixos Unstable
2017-02-07 11:14:42 -05:00
Svein Ove Aas
e362a3d5c9
nginx: Format the config file
2017-02-07 16:19:11 +01:00
Ricardo M. Correia
af4e6f155e
nixos.chrony: pass config file directly to daemon
...
This fixes an issue where `nixops deploy` wouldn't restart the chrony
service when the chrony configuration changed, because it wouldn't
detect that `/etc/chrony.conf` was a dependency of the chrony service.
2017-02-07 13:48:58 +01:00
aszlig
cd10e3c4ff
nixos/tests/chromium: Run tests as normal user
...
The tests have failed because Chromium has started up displaying the
following error message in a dialog window:
Chromium can not be run as root.
Please start Chromium as a normal user. If you need to run as root for
development, rerun with the --no-sandbox flag.
So let's run as user "alice" and pass all commands using the small
helper function "ru" (to keep it short, it's for "Run as User").
Tested it by running the "stable" test on x86_64-linux.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Reported-by: @globin
2017-02-07 07:36:56 +01:00
aszlig
87cc20eddb
nixos/networkd: Fix eval error for defaultGateway
...
Regression introduced by 0cb487ee04
.
This changed the result for defaultGateway to be a submodule instead of
just a plain string, so instead of using just cfg.defaultGateway we need
to pass cfg.defaultGateway.address now.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @abbradar
2017-02-07 07:05:31 +01:00
David McFarland
905627c7c5
xorg-server: fglrxCompat -> abiCompat
...
Allows it to be used for fglrx (1.17) and amdgpu-pro (1.18)
2017-02-06 23:16:21 -04:00
Shea Levy
714fdb425a
firewall: Fix check for rpfilter on manual-config kernels
2017-02-06 16:43:23 -05:00
Matthias Beyer
bf56d17b2c
fixup! Add documentation for XFCE
2017-02-06 09:17:52 +01:00
Matthias Beyer
4b5a230d1d
Add documentation for XFCE
2017-02-06 09:10:05 +01:00
Nikolay Amiantov
9beeee2717
Merge pull request #22431 from abbradar/postfix-local
...
postfix service: don't empty local_recipient_maps
2017-02-06 03:50:05 +03:00
Joachim Schiele
d491728653
httpd: added serviceExpression which extends the serviceType concept -> allows that httpd services can live outside of nixpkgs ( #22269 )
2017-02-06 01:08:58 +01:00
Nikolay Amiantov
52c7e647ab
postfix service: don't empty local_recipient_maps
...
From Postfix documentation:
With this setting, the Postfix SMTP server will not reject mail with "User
unknown in local recipient table". Don't do this on systems that receive mail
directly from the Internet. With today's worms and viruses, Postfix will become
a backscatter source: it accepts mail for non-existent recipients and then
tries to return that mail as "undeliverable" to the often forged sender
address.
2017-02-06 01:41:27 +03:00
Joachim F
4459f26ad8
Merge pull request #22175 from dancek/illum
...
illum: init at 0.4
2017-02-05 16:41:30 +01:00
Shea Levy
67ef18d01a
supplicant nixos module: Allow not specifying the configFile path
2017-02-05 06:50:20 -05:00
Nikolay Amiantov
90bc1a8595
Merge pull request #22353 from abbradar/bluetooth
...
Bluetooth improvements
2017-02-05 13:18:48 +03:00
Eelco Dolstra
323031f9ed
Merge pull request #22455 from taku0/hyper-v_installation
...
nixos-generate-config.pl, all-hardware.nix: Add support for Hyper-V
2017-02-05 11:05:06 +01:00
Nikolay Amiantov
6812c7001c
nfs tests: fix nfs server unit name
2017-02-05 12:41:21 +03:00
taku0
8dfa60ce73
nixos-generate-config.pl, all-hardware.nix: Add support for Hyper-V
2017-02-05 18:22:26 +09:00
Joachim Fasting
2628597e76
cjdns service: allow daemon to drop privileges
...
The service can run certain components with reduced privileges, but for
that it needs the setuid capability.
2017-02-05 04:54:26 +01:00
Joachim Fasting
a0338afe5f
cjdns service: allow writing keys to /etc
...
20e81f7c0d
prevented key generation in
`preStart`, leaving the service broken for the case where the user has
no pre-existing key.
Eventually, we ought to store the state elsewhere so that `/etc` can be
read-only but for now we fix this the easy way.
2017-02-05 04:54:18 +01:00
Nikolay Amiantov
9a11dda5fd
nfsd service: don't run exportfs
...
It's run by service already.
2017-02-05 03:17:38 +03:00
Nikolay Amiantov
5b043ea361
nfs service: create state directories
2017-02-05 03:17:38 +03:00
Vladimír Čunát
a2c867fd39
Merge branch 'staging'
2017-02-04 21:02:46 +01:00
Hannu Hartikainen
d91b39b3f9
illum: init at 0.4
2017-02-04 20:22:51 +02:00
Joachim F
17cc22a619
Merge pull request #22225 from bachp/glusterfs-service
...
glusterfs: add service
2017-02-04 15:15:39 +01:00
laMudri
7c27554033
xfce: make xfwm optional
2017-02-04 11:55:01 +00:00
Tim Jaeger
83241c091d
gogs: fix error on push
...
Pushing to gogs only works if the `gogs` user's shell is `bash`. For error and
solution, refer to [this SO thread](http://stackoverflow.com/a/22315659 )
2017-02-04 12:16:37 +01:00
Sarah Brofeldt
ac6606fbf4
bumblebee service: Fix type error when pmMethod = "bbswitch"
2017-02-04 10:44:44 +01:00
rnhmjoj
a3ff62d48c
namecoind: refactor nixos module
2017-02-03 20:06:45 +01:00
rnhmjoj
f7d49037a4
dnschain service: overhaul option interface & implementation
...
Closes https://github.com/NixOS/nixpkgs/pull/22041
2017-02-03 19:49:16 +01:00
Ricardo Ardissone
0bae18fb55
sane service: mention the lp group for printer+scanners
2017-02-03 20:54:04 +03:00
Joachim Fasting
0c31286f75
grsecurity docs: some polish
...
Fix minor formatting issues, excessive punctuation, and also some
improved wording.
2017-02-03 18:47:07 +01:00
Nikolay Amiantov
230c97c944
Merge pull request #22303 from abbradar/nfs4
...
NFS improvements
2017-02-03 20:04:25 +03:00
Guillaume Maudoux
698f178d4e
default nixos config: add firewall options.
...
By showing how to open ports in the firewall and how to disable it, we make users aware that there is a firewall enabled by default.
2017-02-03 16:45:11 +01:00
Vladimír Čunát
2ba076e99c
Merge branch 'master' into staging
...
>11k more build jobs on master, just for Linux :-/
This way staging will never catch up.
2017-02-03 15:32:08 +01:00
Nikolay Amiantov
9eb540b807
qemu-vm module: fix boot.tmpOnTmpfs
...
This option caused systemd to mount /tmp on top of /tmp/{xchg,shared}.
Fixes #21490 .
2017-02-03 15:02:34 +03:00
Vladimír Čunát
adab4cd58b
Merge branch 'master' into staging
2017-02-03 11:47:38 +01:00
Benjamin Staffin
53e6431d61
Merge pull request #22358 from yorickvP/asteriskupd
...
asterisk: add lts version
2017-02-03 02:30:34 -05:00
Nikolay Amiantov
5247140e57
Merge pull request #21875 from abbradar/gateway-interface
...
Allow specifying interface for default gateway
2017-02-03 02:26:31 +03:00
Pascal Bach
ff3f3399ae
filesystems: add support to mount glusterfs
2017-02-02 23:16:52 +01:00
Pascal Bach
19759cfeab
services: add GlusterFS service
...
This service is only limited in configuration options.
But it is sufficient to run glusterd and configure it using the gluster command
2017-02-02 23:16:52 +01:00
Daiderd Jordan
f87fb85259
Merge pull request #22376 from LumiGuide/wordpress-4.7.2
...
wordpress: 4.7.1 -> 4.7.2 (Security fix)
2017-02-02 19:30:36 +01:00
Daniel Peebles
ff8a21e03c
Merge pull request #22348 from nand0p/hologram-module
...
hologram: 8d86e3f -> d20d1c3
2017-02-02 17:42:07 +01:00
Fernando J Pando
1d85e0bbab
hologram: 8d86e3f -> d20d1c3
...
- Updates dependencies
- Adds configuration module
- Tested on Nixos Unstable
2017-02-02 11:31:42 -05:00
Bas van Dijk
5cc75352f8
wordpress: 4.7.1 -> 4.7.2
...
See: https://make.wordpress.org/core/2017/02/01/disclosure-of-additional-security-fix-in-wordpress-4-7-2/
2017-02-02 16:41:32 +01:00
Yorick van Pelt
1b47bc9477
service.asterisk: add package option
2017-02-02 15:16:00 +01:00
Nikolay Amiantov
4feb0a998a
manual: mention needed options for IPv6
2017-02-02 01:53:00 +03:00
Nikolay Amiantov
0cb487ee04
network-interfaces service: add defaultGateway{,6}.interface
2017-02-02 01:53:00 +03:00
Nikolay Amiantov
4abcef2ba1
bluez service: use upstream units
2017-02-02 00:52:54 +03:00
Nikolay Amiantov
8ef14f80e3
systemd service: add aliases option
2017-02-02 00:52:54 +03:00
Tristan Helmich
24f3abdafb
Revert "Make services.xserver.xkbDir conflict free when overriden."
...
This reverts commit 82bcfef109
.
cc @nbp
Fixes #22290 , #22352 .
Signed-off-by: Franz Pletz <fpletz@fnordicwalking.de>
2017-02-01 22:37:04 +01:00
Nikolay Amiantov
c34cfa21d4
Merge pull request #22343 from abbradar/dbus-etc
...
dbus service: use /etc/dbus-1 for configuration
2017-02-01 23:00:07 +03:00
Nikolay Amiantov
e0e9fddf56
nfsd service: use upstream systemd units
...
* Use /etc/nfs.conf as the recommended upstream way to configure services.
* Move server options to nfsd module.
2017-02-01 19:47:33 +03:00
Eelco Dolstra
9d6a55aefd
~/.nixpkgs -> ~/.config/nixpkgs
...
The former is still respected as a fallback for config.nix for
backwards compatibility (but not for overlays because they're a new
feature).
2017-02-01 16:07:55 +01:00
Vladimír Čunát
a2e7770b51
Merge branch 'master' into staging
...
There have been some larger security rebuilds on master.
2017-02-01 15:56:35 +01:00
Nikolay Amiantov
72b3746266
dbus service: remove {system,session}.conf from config dir
...
They are already included by dbus from /run/current-system/sw/share/dbus-1.
2017-02-01 15:37:24 +03:00
Nikolay Amiantov
39344a36d3
dbus service: use /etc/dbus-1 for configuration
...
Also use upstream systemd units.
2017-02-01 15:03:22 +03:00
Franz Pletz
f96c3f1844
Merge pull request #22180 from mguentner/offline_ipfs
...
services: ipfs: separate system units, add offline mode
2017-02-01 03:41:31 +01:00
Nikolay Amiantov
876a6d7f03
rpcbind service: use upstream systemd unit
2017-02-01 02:45:19 +03:00
Peter Simons
10349e72b9
nixos: drop unused 'haskellPackages' option from ihaskell service
...
Closes https://github.com/NixOS/nixpkgs/issues/19039 .
2017-01-31 22:38:01 +01:00
Damien Cassou
58dc8e3024
Remove myself from maintainers
2017-01-31 11:00:14 +01:00
Vladimír Čunát
01751a9447
Merge #22309 : vim: allow building with gtk3
2017-01-31 09:41:24 +01:00
Aneesh Agrawal
68b4a1f669
nixos: Respect nixpkgs.overlays ( #22221 )
2017-01-31 09:38:02 +01:00
Benjamin Staffin
e01c15d433
nixos: if gnome3 is installed, build gvim for gtk3 too
2017-01-31 02:36:35 -05:00
Nikolay Amiantov
8d379ddfef
opengl service: use option for XDG_DATA_DIRS
2017-01-31 04:38:09 +03:00
Nikolay Amiantov
98b0195dde
video services: don't install OpenCL files to /etc
...
They shouldn't be needed now that we search them in /run/opengl-driver.
2017-01-31 03:36:25 +03:00
Edward Tjörnhammar
b08524bf01
nixos: nylon, use named instances
2017-01-30 20:32:06 +01:00
Parnell Springmeyer
128bdac94f
Conditionally logging debug messages based on the WRAPPER_DEBUG env var being set (or not)
2017-01-30 12:59:29 -06:00
Parnell Springmeyer
d8ecd5eb0d
Switching to individually generated derivations
2017-01-30 12:26:56 -06:00
Vladimír Čunát
9cd2dbc569
Merge branch 'master' into staging
...
Hopefully this will fix the mass abortion on Hydra;
restarting the jobs didn't help.
2017-01-30 18:39:36 +01:00
Vaibhav Sagar
63f609b1a4
ihaskell: remove service configuration. ( #22268 )
...
See #22047 . This change should be reverted after IHaskell has been
updated to support GHC 8.
2017-01-30 08:38:42 +01:00
Parnell Springmeyer
264db4e309
Set merge + mkIf always surprises me
2017-01-29 17:10:32 -06:00
Parnell Springmeyer
f2f3f1479e
Derp, wrong path name
2017-01-29 16:54:27 -06:00
Parnell Springmeyer
0f728de67e
More migration cleanup + todos for cleanup
2017-01-29 16:52:23 -06:00
Parnell Springmeyer
4856b42ab6
Gotta provide sane defaults! This is what I get for 5AM coding
2017-01-29 16:47:14 -06:00
Parnell Springmeyer
9abe7528e4
Switching locate over to new wrapper API
2017-01-29 11:27:08 -06:00
Edward Tjörnhammar
e324c02aa5
nixos: i2pd, follow redirect
2017-01-29 18:00:58 +01:00
Parnell Springmeyer
6777e6f812
Merging with upstream
2017-01-29 05:54:01 -06:00
Parnell Springmeyer
c5f1f9a3b5
More mistake fixes
2017-01-29 05:45:43 -06:00
Parnell Springmeyer
9f82c9903d
More fixes
2017-01-29 05:44:29 -06:00
Parnell Springmeyer
cfe4351c33
I'm clearly very tired
2017-01-29 05:39:54 -06:00
Parnell Springmeyer
3215bcf445
Beebooboop
2017-01-29 05:39:18 -06:00
Parnell Springmeyer
a3e9d77640
More derp? It's 5am...
2017-01-29 05:36:47 -06:00
Parnell Springmeyer
1cc500ea8e
Syntax wibble
2017-01-29 05:34:50 -06:00
Parnell Springmeyer
628e6a83d0
More derp
2017-01-29 05:33:56 -06:00
Nicolas B. Pierron
82bcfef109
Make services.xserver.xkbDir conflict free when overriden.
2017-01-29 12:24:31 +01:00
Parnell Springmeyer
70b8167d4a
A few more tweaks
2017-01-29 05:05:30 -06:00
Parnell Springmeyer
4aa0923009
Getting rid of the var indirection and using a bin path instead
2017-01-29 04:11:01 -06:00
Parnell Springmeyer
a8cb2afa98
Fixing a bunch of issues
2017-01-29 01:58:12 -06:00
Parnell Springmeyer
af3b9a3d46
More wibbles?
2017-01-29 01:41:39 -06:00
Parnell Springmeyer
48564d1ae5
Another wibble
2017-01-29 01:31:33 -06:00
Parnell Springmeyer
5077699605
Derp derp
2017-01-29 01:27:11 -06:00
Parnell Springmeyer
0707a3eaa2
Qualify with lib
2017-01-29 01:23:10 -06:00
Parnell Springmeyer
8e159b9d1e
Qualify mkOption with lib
2017-01-29 01:22:47 -06:00
Parnell Springmeyer
70ec24093c
Removing dead code
2017-01-29 01:22:19 -06:00
Parnell Springmeyer
82de4c0fad
setcap-wrapper: Syntax wibble
2017-01-29 01:20:02 -06:00
Parnell Springmeyer
7680a40a37
setcap-wrapper: Syntax wibble
2017-01-29 01:16:04 -06:00
Parnell Springmeyer
2f113ee90a
setcap-wrapper: Minor refactor
2017-01-29 01:08:36 -06:00
Parnell Springmeyer
3fe7b1a4c9
setcap-wrapper: Addressing more PR feedback, unifying drvs, and cleaning up a bit
2017-01-29 01:07:12 -06:00
Parnell Springmeyer
e92b8402b0
Addressing PR feedback
2017-01-28 20:48:03 -08:00
Tuomas Tynkkynen
424cfe7686
Merge remote-tracking branch 'upstream/master' into staging
2017-01-29 02:16:29 +02:00
Joachim F
ac1e65c302
Merge pull request #22230 from michaelpj/services/arbtt-fix-wanted-by
...
arbtt: multi-user.target does not exist in user systemd
2017-01-29 00:37:17 +01:00
Michael Peyton Jones
46c0da1818
arbtt: multi-user.target does not exist in user systemd
2017-01-28 14:29:19 +00:00