Commit Graph

5707 Commits

Author SHA1 Message Date
github-actions[bot]
d7993cebbc
Merge staging-next into staging 2024-06-05 12:01:43 +00:00
Thomas Gerbet
ef6fea2d86 openssh: move Kerberos support into a dedicated package
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
2024-06-05 19:45:31 +10:00
Jörg Thalheim
9028937bc4
Merge pull request #317347 from Prince213/doc-bootspec
nixos/activation/bootspec: misc fixes
2024-06-05 09:56:54 +02:00
Pol Dellaiera
133aa44c38
Merge pull request #317286 from drupol/open-webui-add-more-env
nixos/{ollama,open-webui}: minor service update
2024-06-05 09:12:28 +02:00
Pol Dellaiera
8ea262601a
nixos/open-webui: add release note entry 2024-06-05 08:05:18 +02:00
Sizhe Zhao
5209c84957
nixos/activation/bootspec: fix style 2024-06-05 11:14:36 +08:00
Sizhe Zhao
4f05b8e213
nixos/activation/bootspec: rephrase 2024-06-05 11:13:43 +08:00
Sizhe Zhao
3a4753867d
nixos/activation/bootspec: no longer experimental 2024-06-05 11:09:55 +08:00
Sizhe Zhao
0aaccaa596
nixos/activation/bootspec: now enabled by default 2024-06-05 11:06:03 +08:00
github-actions[bot]
1e2381cfc5
Merge staging-next into staging 2024-06-05 00:02:59 +00:00
kirillrdy
dfee75c298
Merge pull request #309121 from jlbribeiro/pkgs/zx-8.0.2
zx: 7.2.3 -> 8.1.2
2024-06-05 06:07:55 +10:00
Arian van Putten
f8439331dc doc/release-notes: Add note about backwards compatibility in ACME module
Co-authored-by: Stéphan Kochen <git@stephank.nl>
2024-06-04 20:23:30 +02:00
Thomas Gerbet
71ac0e5f22
Merge pull request #317024 from risicle/ris-zerocallusedregs-default-relnotes
nixos/doc/rl-2411: `zerocallusedregs` hardening flag enabled by default
2024-06-04 12:55:27 +02:00
José Ribeiro
6fc5c63584
doc(rl-24.11): zx v8 breaking changes 2024-06-03 22:16:55 +01:00
Robert Scott
35b3c16331 nixos/doc/rl-2411: zerocallusedregs hardening flag enabled by default 2024-06-03 22:02:18 +01:00
Sandro
617a79dd10
doc/release-notes: repalce security.pam.enableSSHAgentAuth with security.pam.sshAgentAuth.enable 2024-06-03 13:34:00 +02:00
Sandro
6f02edec1a
Merge pull request #316358 from majewsky/portunus-remove-libxcrypt-legacy 2024-06-02 23:10:26 +02:00
Vassilis Palassopoulos
f41fc204d6 doc/release-notes: fix option that enables Plasma 6 2024-06-02 13:48:33 +03:00
Aleksana
5a7bf1479a
Merge pull request #316270 from wegank/release-notes-3
doc/release-notes: update info on gnome 46
2024-06-01 16:33:46 +08:00
Stefan Majewsky
d11d18df30 portunus: remove libxcrypt-legacy usage 2024-06-01 10:28:21 +02:00
Silvan Mosberger
72ca766b70
Merge pull request #316207 from infinisil/release-notes-lib 2024-06-01 08:58:07 +02:00
Weijia Wang
6fd5c54452 doc/release-notes: update info on gnome 46 2024-06-01 00:05:54 +02:00
Weijia Wang
d95b1060ca
Release NixOS 24.05 2024-05-31 20:17:44 +02:00
Silvan Mosberger
2906c69534 doc/release-notes: Add section on lib 2024-05-31 18:37:30 +02:00
Martin Weinelt
85cdd3a849
Merge pull request #316026 from wegank/release-notes-2
doc/release-notes: highlight desktop environment updates
2024-05-31 10:24:10 +02:00
Weijia Wang
8c58b05881 doc/release-notes: highlight desktop environment updates 2024-05-31 02:13:24 +02:00
Yt
6606ce9c0c
Merge pull request #273101 from onny/invoiceplane-settings2
nixos/invoiceplane: Remove deprecated extraConfig
2024-05-31 00:04:34 +00:00
euxane
0174aa1c56 nixos/stalwart-mail: rocksdb as default storage
This sets RocksDB as the default storage backend for `stateVersion` >=
24.11. For previous `stateVersion`s, the structured data and blobs
remain on SQLite and the filesystem respectively.

This is closer to the suggested upstream configuration for fully local
storage.
2024-05-30 16:22:03 +02:00
Someone
7781c1a927
Merge pull request #303682 from SomeoneSerge/feat/imgui-cmake
imgui: ship vcpkg' (cmake) distribution info
2024-05-29 12:48:33 +00:00
Someone Serge
fdf0e19b73 imgui: mention cmake integration in release notes 2024-05-28 19:58:02 +00:00
Jacek Generowicz
9c6861249c Further tweaks to release notes 2024-05-28 17:28:29 +02:00
Jacek Generowicz
005ef76e9e Consistently use capitalized Nix in plain text 2024-05-28 17:28:29 +02:00
Jacek Generowicz
9708aca853 Various tweaks to release notes 2024-05-28 17:28:29 +02:00
Jacek Generowicz
e36f83eac4 Clean up the curious dwarf-fortress note 2024-05-28 17:28:28 +02:00
Jonas Heinrich
4217b9cd9a nixos/invoiceplane: Remove deprecated extraConfig 2024-05-28 14:07:44 +02:00
Jonas Chevalier
5d6d058646
Merge pull request #308090 from mogeko/service-rke2
nixos/rke2: add rke2 service
2024-05-28 09:36:03 +02:00
Mogeko
a642efcdab
nixos/rke2: add rke2 service
Set assertions to avoid obvious errors.

Eliminate the conflict between default CNI (`cana`) and `NetworkManager`.

Determine whether optional can be used for agent.

Add the option `cisHardening` to enable CIS Hardening.

Set kernel parameters by `boot.kernel.sysctl`.

Using `lib.escapeShellArgs` to make `ExecStart` more resilient to escaping issues.

Using a list of `str` to extra flags.
2024-05-28 12:39:30 +08:00
Franz Pletz
e047b23254
Merge pull request #313844 from superherointj/nginx-libgd-optional 2024-05-27 02:10:55 +02:00
Maximilian Bosch
a5f800ab48
Merge pull request #311701 from Ma27/bump-grafana
grafana: 10.4.2 -> 11.0.0
2024-05-26 20:47:56 +00:00
superherointj
f2a202ff38 nixos/doc/rl-2411: nginx now has gd, geoip as an optional 2024-05-25 12:12:50 -03:00
Jonas Heinrich
3c80361f9a nixos/stalwart-mail: add release notes 2024-05-24 12:25:33 +02:00
Weijia Wang
a64a502cd7
Merge pull request #313251 from lucc/nvimpager
nvimpager: 0.12.0 -> 0.13.0
2024-05-24 10:14:29 +02:00
Pol Dellaiera
d9062cd5f9
Merge pull request #313146 from malteneuss/add-nextjs-ollama-llm-ui
Add nextjs ollama llm UI frontend for Ollama
2024-05-24 06:51:37 +02:00
Malte Neuss
8a05b4f8d4 nixos/nextjs-ollama-llm-ui: init module
NixOS already has good support for the Ollama
backend service. Now we can benefit from
having a convenient web frontend as well for it.
2024-05-23 23:48:55 +02:00
Bobby Rong
e967f2f99c
Merge pull request #313416 from bobby285271/upd/pantheon-tweaks
pantheon-tweaks: 1.1.2 -> 2.0.1
2024-05-23 21:26:59 +08:00
Lucas Hoffmann
eff2e77eee nvimpager: 0.12.0 -> 0.13.0 2024-05-23 14:57:33 +02:00
Jeremy Baxter
20fc095a1c nixos/oink: init module 2024-05-23 10:12:53 +12:00
Jacek Generowicz
028cc4b606
doc/release-notes: more release note edits (#313730)
* Move watchdogd to correct section

* Move FileSender to correct position

* Reword

* Add TODO querying meaning of dwarf-fortress note

* Remove comments suggesting random item placement

* Add comments asking to maintain alphabetical order
2024-05-22 18:57:12 +02:00
Weijia Wang
f7da007372 doc/release-notes: update codename 2024-05-22 18:48:39 +02:00
Weijia Wang
4a817d2083 24.05 is Vicuña 2024-05-22 18:15:34 +02:00