Commit Graph

33800 Commits

Author SHA1 Message Date
Martin Weinelt
104455784c
Merge pull request #219791 from emilylange/nixos-caddy
nixos/caddy: change `acmeCA` default to `null`, omit empty `bind` directive
2023-06-12 22:40:54 +02:00
Valentin Gagarin
dc1a594b3e
Merge pull request #237237 from pennae/epubstub 2023-06-12 22:24:38 +02:00
Martin Weinelt
eb6e16e3c5
Merge pull request #236875 from mweinelt/wyoming_piper_whisper
wyoming-piper: init at 0.0.3, wyoming-faster-whisper: ini at 0.0.3
2023-06-12 21:02:18 +02:00
Will Fancher
5709754a1d
Merge pull request #237336 from zi3m5f/fix-systemd-nspawn-machineid-option
systemd-nspawn: fix spelling of MachineID option and add module test
2023-06-12 13:12:59 -04:00
Martin Weinelt
f213f33f15
nixos/wyoming/faster-whisper: init 2023-06-12 18:44:44 +02:00
Martin Weinelt
7f17f8da9f
nixos/wyoming/piper: init 2023-06-12 18:44:44 +02:00
pennae
3edc20aa55 nixos/doc: stub out epub manual
epub manuals are holding back the transition away from docbook, and
cursory research does not suggest that they are used very much. it's
still very early in the 23.11 release cycle, so if we're going to find
out just how many people do use the epub manuals it should be now.

this need not be the end of epub manuals. nixos-render-docs could be
extended to also export epubs, but that has not been done yet since it's
going to be some effort with unknown real-world usefulness.
2023-06-12 17:50:19 +02:00
Robert Hensing
7e63eed145
Merge pull request #237282 from isker/patch-3
nixos/nix-daemon: fix URL for nix.conf
2023-06-12 17:01:15 +02:00
Colin
bd77d4ae46 nixos/lemmy: support nginx 2023-06-12 09:59:11 -04:00
Robert Hensing
ed551f4ecf
Merge pull request #237218 from hercules-ci/fix-nixos-generate-config-system
nixos-generate-config: Fix generated hostPlatform.system
2023-06-12 12:26:56 +02:00
zi3m5f
f86645566d nixos/tests/systemd-nspawn-configfile: init
Test for presence of all specified options in the generated .nspawn
config file.
Additionally test for absence of misspelled and fixed option MachineID.
2023-06-12 12:08:39 +02:00
zi3m5f
67f5dcfd94 nixos/nspawn: fix spelling of systemd.nspawn MachineID option
This changes option systemd.nspawn.execConfig.MachineId to MachineID.
See man page systemd.nspawn(5)
2023-06-12 12:08:15 +02:00
Ryan Lahfa
3897d52760
Merge pull request #236134 from Tom-Hubrecht/pixelfed
nixos/pixelfed: Fix missing permissions for nginx serving files
2023-06-12 11:59:31 +02:00
Ian Kerins
2f20e0e131
nixos/nix-daemon: fix URL for nix.conf
The existing URL no longer takes you somewhere useful.
2023-06-11 23:17:50 -04:00
Martin Weinelt
3cd3713412
Merge pull request #237169 from mweinelt/evcc-0.118.0
evcc: 0.117.4 -> 0.118.0
2023-06-12 01:14:43 +02:00
Martin Weinelt
fe2f291e17
Merge pull request #236757 from max-privatevoid/pam-kanidm
nixos/pam: support Kanidm
2023-06-11 20:22:00 +02:00
Robert Hensing
1350e522fa nixos-generate-config: Fix generated hostPlatform.system
While the intent of the code was correct, the system string can not be used
in the substituteAll function.

See https://github.com/NixOS/nixpkgs/issues/237216
2023-06-11 19:28:51 +02:00
Max
7575e488de nixos/tests/kanidm: test posix user creation and login 2023-06-11 17:17:43 +02:00
Max
847a7f1102 nixos/kanidm: auto-restart kanidm-unixd-tasks 2023-06-11 17:17:42 +02:00
Max
34a4165674 nixos/pam: support Kanidm 2023-06-11 17:17:42 +02:00
Martin Weinelt
9c1e60ba7d
evcc: 0.117.4 -> 0.118.0
https://github.com/evcc-io/evcc/releases/tag/0.118.0

Use a more approriate charger state.
2023-06-11 12:41:53 +02:00
Marillindië
e394dc22f9 xray: allow binding lower ports
Set CapabilityBoundingSet, AmbientCapabilities and NoNewPrivileges as described in XTLS/xray-install.
2023-06-11 09:03:50 +01:00
Winston (Winny) Weinert
d15e598bd5 rl-2305: fix typo in openjdk version note 2023-06-10 16:40:05 -05:00
Robert Hensing
493b08c410
Merge pull request #237063 from roberth/fix-systemd-boot-test
nixos: Fix systemd-boot test
2023-06-10 19:10:05 +02:00
Robert Hensing
5eb2425c0e
Merge pull request #237069 from roberth/fix-nixos-tests-nixos-rebuild-specialisations
nixosTests.nixos-rebuild-specialisations: Fix
2023-06-10 18:54:53 +02:00
Robert Hensing
0c3f416096 nixosTests.nixos-rebuild-specialisations: Fix 2023-06-10 18:25:04 +02:00
Ryan Lahfa
6262a46ba8
Merge pull request #234034 from NixOS/qemu/direct-boot
nixos/qemu-vm: introduce `virtualisation.directBoot`
2023-06-10 18:12:56 +02:00
Robert Hensing
a54e7d299b nixosTests.systemd-boot.switch-test: Fix warnings 2023-06-10 17:51:44 +02:00
Robert Hensing
0d55eebcf5 nixosTests.systemd-boot.switch-test: Fix test
... by making the alternate configs available in machine's store.
2023-06-10 17:51:06 +02:00
IndeedNotJames
93b9fc8ac0
nixos/caddy: omit empty bind directive when listenAddresses is empty
context: https://caddy.community/t/random-502-errors-when-proxying-to-application-with-self-signed-certificate/19657/6
2023-06-10 13:59:15 +02:00
IndeedNotJames
3f93ec5814
nixos/caddy: change acmeCA default to null
The nixos/caddy module is somewhat old by now
and has undergone quite some refactors.
This specific module option (originally named
`ca`) used to make a bit more sense when
Caddy did not have multiple ACME CAs as
fallback (LE & ZeroSSL) by configured by
default yet (ZeroSSL came with v2.3.0).

I also rephrased the description slightly,
to mention Caddy's automatic issuer fallback
and a note which this option maps to in the
Caddyfile, to provide a bit more context and
a more up-to-date recommendation.

Specifically that "fine-grained configuration"
section comes from a time when this module did
some custom tls/issuer config json merging
with the templated Caddyfile using `jq`.

The "The URL to the ACME CA's directory"
section is a word-for-word copy from the
official Caddy docs, which also include a link
to LE's docs to the referenced staging
endpoint. So I added that as well.
2023-06-10 13:59:10 +02:00
Will Fancher
90d69b1634
Merge pull request #236388 from ElvishJerricco/sd-s1-networkd-stop-on-switch-root
systemd stage 1 networking: Stop systemd-networkd on switch-root
2023-06-10 00:35:56 -04:00
Martin Weinelt
0983c18e6a
nixos/go2rtc: add support for v4l2 video sources
Capturing from /dev/video* requires being member of the video group.
2023-06-09 20:20:38 +02:00
Sergey Ivanov
bbc56fd1c7
gnunet: fix systemd service config (#151269)
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2023-06-09 16:33:51 +00:00
Raito Bezarius
610f60231f nixos/qemu-vm: introduce virtualisation.directBoot
As with many things, we have scenarios where we don't want to boot on a
disk / bootloader and also we don't want to boot directly.

Sometimes, we want to boot through an OptionROM of our NIC, e.g. netboot
scenarios or let the firmware decide something, e.g. UEFI PXE (or even
UEFI OptionROM!).

This is composed of:

- `directBoot.enable`: whether to direct boot or not
- `directBoot.initrd`: enable overriding the
  `config.system.build.initialRamdisk` defaults, useful for
  netbootRamdisk for example.

This makes it possible.
2023-06-09 14:51:18 +02:00
ajs124
bcb903cce8 nixos/tests/lvm2/thinpool: fix xfs creation on older kernels 2023-06-09 13:44:48 +02:00
ajs124
3bf06829ff nixos/tests/lvm2: also build for new LTS kernel 2023-06-09 13:44:32 +02:00
Pol Dellaiera
f0fc9fe22d
Merge pull request #236567 from l0b0/fix-activate-lints
nixos/modules: Fix ShellCheck lints
2023-06-08 18:42:38 +02:00
Ryan Lahfa
a384c9b01d
Merge pull request #234030 from NixOS/cleanup-overlay-mounts
nixosTests: fix tests that relies on an empty rootfs using a bootloader
2023-06-08 18:20:23 +02:00
Raito Bezarius
89952f7bb6 nixosTests.luks: mount the host Nix store
Same rationale as in caf6f41e2e.
2023-06-08 16:56:07 +02:00
Raito Bezarius
ff3936e14b nixos/tests/lvm2/systemd-stage-1: mount the host Nix store
Same rationale as in caf6f41e2e.
2023-06-08 16:56:04 +02:00
Raito Bezarius
59891e405d nixosTests.systemd-initrd-networkd-ssh: bootDevice -> rootDevice
Missed deprecation fixup during the bootDisk PR.
2023-06-08 16:56:01 +02:00
Raito Bezarius
c1f0de6e20 nixosTests.systemd-initrd-luks-keyfile: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:58 +02:00
Raito Bezarius
bbfedea0a1 nixosTests.systemd-initrd-luks-password: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:55 +02:00
Raito Bezarius
efe64826c9 nixosTests.systemd-initrd-luks-tpm2: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:52 +02:00
Raito Bezarius
e190364fd7 nixosTests.systemd-initrd-networkd-ssh: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:49 +02:00
Raito Bezarius
db811f12eb nixosTests.systemd-initrd-swraid: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:45 +02:00
Raito Bezarius
de7f3cb2fa nixosTests.systemd-initrd-luks-fido2: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:29 +02:00
Raito Bezarius
955a77e1c4 nixosTests.systemd-initrd-btrfs-raid: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:25 +02:00
Raito Bezarius
caf6f41e2e nixosTests.initrd-luks-empty-passphrase: mount the host nix store
This is necessary because this test relies on switching the root fs to an empty one which
does not have a Nix store available in stage 1, therefore, we have to make this test
host-store only.

A better fix in the long term is to evaluate whether this is worth to enable a proper
Nix store image for it with EROFS?
2023-06-08 16:55:04 +02:00