Martin Weinelt
104455784c
Merge pull request #219791 from emilylange/nixos-caddy
...
nixos/caddy: change `acmeCA` default to `null`, omit empty `bind` directive
2023-06-12 22:40:54 +02:00
Valentin Gagarin
dc1a594b3e
Merge pull request #237237 from pennae/epubstub
2023-06-12 22:24:38 +02:00
Martin Weinelt
eb6e16e3c5
Merge pull request #236875 from mweinelt/wyoming_piper_whisper
...
wyoming-piper: init at 0.0.3, wyoming-faster-whisper: ini at 0.0.3
2023-06-12 21:02:18 +02:00
Will Fancher
5709754a1d
Merge pull request #237336 from zi3m5f/fix-systemd-nspawn-machineid-option
...
systemd-nspawn: fix spelling of MachineID option and add module test
2023-06-12 13:12:59 -04:00
Martin Weinelt
f213f33f15
nixos/wyoming/faster-whisper: init
2023-06-12 18:44:44 +02:00
Martin Weinelt
7f17f8da9f
nixos/wyoming/piper: init
2023-06-12 18:44:44 +02:00
pennae
3edc20aa55
nixos/doc: stub out epub manual
...
epub manuals are holding back the transition away from docbook, and
cursory research does not suggest that they are used very much. it's
still very early in the 23.11 release cycle, so if we're going to find
out just how many people do use the epub manuals it should be now.
this need not be the end of epub manuals. nixos-render-docs could be
extended to also export epubs, but that has not been done yet since it's
going to be some effort with unknown real-world usefulness.
2023-06-12 17:50:19 +02:00
Robert Hensing
7e63eed145
Merge pull request #237282 from isker/patch-3
...
nixos/nix-daemon: fix URL for nix.conf
2023-06-12 17:01:15 +02:00
Colin
bd77d4ae46
nixos/lemmy: support nginx
2023-06-12 09:59:11 -04:00
Robert Hensing
ed551f4ecf
Merge pull request #237218 from hercules-ci/fix-nixos-generate-config-system
...
nixos-generate-config: Fix generated hostPlatform.system
2023-06-12 12:26:56 +02:00
zi3m5f
f86645566d
nixos/tests/systemd-nspawn-configfile: init
...
Test for presence of all specified options in the generated .nspawn
config file.
Additionally test for absence of misspelled and fixed option MachineID.
2023-06-12 12:08:39 +02:00
zi3m5f
67f5dcfd94
nixos/nspawn: fix spelling of systemd.nspawn MachineID option
...
This changes option systemd.nspawn.execConfig.MachineId to MachineID.
See man page systemd.nspawn(5)
2023-06-12 12:08:15 +02:00
Ryan Lahfa
3897d52760
Merge pull request #236134 from Tom-Hubrecht/pixelfed
...
nixos/pixelfed: Fix missing permissions for nginx serving files
2023-06-12 11:59:31 +02:00
Ian Kerins
2f20e0e131
nixos/nix-daemon: fix URL for nix.conf
...
The existing URL no longer takes you somewhere useful.
2023-06-11 23:17:50 -04:00
Martin Weinelt
3cd3713412
Merge pull request #237169 from mweinelt/evcc-0.118.0
...
evcc: 0.117.4 -> 0.118.0
2023-06-12 01:14:43 +02:00
Martin Weinelt
fe2f291e17
Merge pull request #236757 from max-privatevoid/pam-kanidm
...
nixos/pam: support Kanidm
2023-06-11 20:22:00 +02:00
Robert Hensing
1350e522fa
nixos-generate-config: Fix generated hostPlatform.system
...
While the intent of the code was correct, the system string can not be used
in the substituteAll function.
See https://github.com/NixOS/nixpkgs/issues/237216
2023-06-11 19:28:51 +02:00
Max
7575e488de
nixos/tests/kanidm: test posix user creation and login
2023-06-11 17:17:43 +02:00
Max
847a7f1102
nixos/kanidm: auto-restart kanidm-unixd-tasks
2023-06-11 17:17:42 +02:00
Max
34a4165674
nixos/pam: support Kanidm
2023-06-11 17:17:42 +02:00
Martin Weinelt
9c1e60ba7d
evcc: 0.117.4 -> 0.118.0
...
https://github.com/evcc-io/evcc/releases/tag/0.118.0
Use a more approriate charger state.
2023-06-11 12:41:53 +02:00
Marillindië
e394dc22f9
xray: allow binding lower ports
...
Set CapabilityBoundingSet, AmbientCapabilities and NoNewPrivileges as described in XTLS/xray-install.
2023-06-11 09:03:50 +01:00
Winston (Winny) Weinert
d15e598bd5
rl-2305: fix typo in openjdk version note
2023-06-10 16:40:05 -05:00
Robert Hensing
493b08c410
Merge pull request #237063 from roberth/fix-systemd-boot-test
...
nixos: Fix systemd-boot test
2023-06-10 19:10:05 +02:00
Robert Hensing
5eb2425c0e
Merge pull request #237069 from roberth/fix-nixos-tests-nixos-rebuild-specialisations
...
nixosTests.nixos-rebuild-specialisations: Fix
2023-06-10 18:54:53 +02:00
Robert Hensing
0c3f416096
nixosTests.nixos-rebuild-specialisations: Fix
2023-06-10 18:25:04 +02:00
Ryan Lahfa
6262a46ba8
Merge pull request #234034 from NixOS/qemu/direct-boot
...
nixos/qemu-vm: introduce `virtualisation.directBoot`
2023-06-10 18:12:56 +02:00
Robert Hensing
a54e7d299b
nixosTests.systemd-boot.switch-test: Fix warnings
2023-06-10 17:51:44 +02:00
Robert Hensing
0d55eebcf5
nixosTests.systemd-boot.switch-test: Fix test
...
... by making the alternate configs available in machine's store.
2023-06-10 17:51:06 +02:00
IndeedNotJames
93b9fc8ac0
nixos/caddy: omit empty bind
directive when listenAddresses
is empty
...
context: https://caddy.community/t/random-502-errors-when-proxying-to-application-with-self-signed-certificate/19657/6
2023-06-10 13:59:15 +02:00
IndeedNotJames
3f93ec5814
nixos/caddy: change acmeCA
default to null
...
The nixos/caddy module is somewhat old by now
and has undergone quite some refactors.
This specific module option (originally named
`ca`) used to make a bit more sense when
Caddy did not have multiple ACME CAs as
fallback (LE & ZeroSSL) by configured by
default yet (ZeroSSL came with v2.3.0).
I also rephrased the description slightly,
to mention Caddy's automatic issuer fallback
and a note which this option maps to in the
Caddyfile, to provide a bit more context and
a more up-to-date recommendation.
Specifically that "fine-grained configuration"
section comes from a time when this module did
some custom tls/issuer config json merging
with the templated Caddyfile using `jq`.
The "The URL to the ACME CA's directory"
section is a word-for-word copy from the
official Caddy docs, which also include a link
to LE's docs to the referenced staging
endpoint. So I added that as well.
2023-06-10 13:59:10 +02:00
Will Fancher
90d69b1634
Merge pull request #236388 from ElvishJerricco/sd-s1-networkd-stop-on-switch-root
...
systemd stage 1 networking: Stop systemd-networkd on switch-root
2023-06-10 00:35:56 -04:00
Martin Weinelt
0983c18e6a
nixos/go2rtc: add support for v4l2 video sources
...
Capturing from /dev/video* requires being member of the video group.
2023-06-09 20:20:38 +02:00
Sergey Ivanov
bbc56fd1c7
gnunet: fix systemd service config ( #151269 )
...
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2023-06-09 16:33:51 +00:00
Raito Bezarius
610f60231f
nixos/qemu-vm: introduce virtualisation.directBoot
...
As with many things, we have scenarios where we don't want to boot on a
disk / bootloader and also we don't want to boot directly.
Sometimes, we want to boot through an OptionROM of our NIC, e.g. netboot
scenarios or let the firmware decide something, e.g. UEFI PXE (or even
UEFI OptionROM!).
This is composed of:
- `directBoot.enable`: whether to direct boot or not
- `directBoot.initrd`: enable overriding the
`config.system.build.initialRamdisk` defaults, useful for
netbootRamdisk for example.
This makes it possible.
2023-06-09 14:51:18 +02:00
ajs124
bcb903cce8
nixos/tests/lvm2/thinpool: fix xfs creation on older kernels
2023-06-09 13:44:48 +02:00
ajs124
3bf06829ff
nixos/tests/lvm2: also build for new LTS kernel
2023-06-09 13:44:32 +02:00
Pol Dellaiera
f0fc9fe22d
Merge pull request #236567 from l0b0/fix-activate-lints
...
nixos/modules: Fix ShellCheck lints
2023-06-08 18:42:38 +02:00
Ryan Lahfa
a384c9b01d
Merge pull request #234030 from NixOS/cleanup-overlay-mounts
...
nixosTests: fix tests that relies on an empty rootfs using a bootloader
2023-06-08 18:20:23 +02:00
Raito Bezarius
89952f7bb6
nixosTests.luks: mount the host Nix store
...
Same rationale as in caf6f41e2e
.
2023-06-08 16:56:07 +02:00
Raito Bezarius
ff3936e14b
nixos/tests/lvm2/systemd-stage-1: mount the host Nix store
...
Same rationale as in caf6f41e2e
.
2023-06-08 16:56:04 +02:00
Raito Bezarius
59891e405d
nixosTests.systemd-initrd-networkd-ssh: bootDevice -> rootDevice
...
Missed deprecation fixup during the bootDisk PR.
2023-06-08 16:56:01 +02:00
Raito Bezarius
c1f0de6e20
nixosTests.systemd-initrd-luks-keyfile: mount the host Nix store
...
Same rationale as caf6f41e2e
.
2023-06-08 16:55:58 +02:00
Raito Bezarius
bbfedea0a1
nixosTests.systemd-initrd-luks-password: mount the host Nix store
...
Same rationale as caf6f41e2e
.
2023-06-08 16:55:55 +02:00
Raito Bezarius
efe64826c9
nixosTests.systemd-initrd-luks-tpm2: mount the host Nix store
...
Same rationale as caf6f41e2e
.
2023-06-08 16:55:52 +02:00
Raito Bezarius
e190364fd7
nixosTests.systemd-initrd-networkd-ssh: mount the host Nix store
...
Same rationale as caf6f41e2e
.
2023-06-08 16:55:49 +02:00
Raito Bezarius
db811f12eb
nixosTests.systemd-initrd-swraid: mount the host Nix store
...
Same rationale as caf6f41e2e
.
2023-06-08 16:55:45 +02:00
Raito Bezarius
de7f3cb2fa
nixosTests.systemd-initrd-luks-fido2: mount the host Nix store
...
Same rationale as caf6f41e2e
.
2023-06-08 16:55:29 +02:00
Raito Bezarius
955a77e1c4
nixosTests.systemd-initrd-btrfs-raid: mount the host Nix store
...
Same rationale as caf6f41e2e
.
2023-06-08 16:55:25 +02:00
Raito Bezarius
caf6f41e2e
nixosTests.initrd-luks-empty-passphrase: mount the host nix store
...
This is necessary because this test relies on switching the root fs to an empty one which
does not have a Nix store available in stage 1, therefore, we have to make this test
host-store only.
A better fix in the long term is to evaluate whether this is worth to enable a proper
Nix store image for it with EROFS?
2023-06-08 16:55:04 +02:00