1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-18 03:30:45 +00:00
Commit graph

44468 commits

Author SHA1 Message Date
Masum Reza e677e7056c
waybar: include the systemd user unit (#340874) 2024-09-22 00:29:40 +05:30
Jörg Thalheim 927b67cdc0
nixos/tools: continue cleanup (#343466) 2024-09-21 18:32:05 +02:00
Weijia Wang 1b1e09e8d3
zutty: init at 0.16-unstable-2024-08-18 (#336255) 2024-09-21 17:36:18 +02:00
h7x4 f88d5e23d9
nixos/bacula: add system-bacula.slice (#338739) 2024-09-21 17:07:20 +02:00
h7x4 b12aa4265c
nixos/ups: add system-ups.slice (#338556) 2024-09-21 17:05:26 +02:00
K900 1f9fc918ce treewide: use pkgs.nixos-enter instead of config.system.build.nixos-enter 2024-09-21 16:13:36 +03:00
K900 5dcbab6b74 nixos/tools: continue cleanup
- remove with lib
- shuffle some things around for readability
- add separate options for each tool
2024-09-21 16:10:32 +03:00
Maximilian Bosch 789562caae
Merge: nixos/tests: add postgresql wal2json test (#315095) 2024-09-21 13:27:22 +02:00
Masum Reza 3f3cc85de3
nixos/nautilus-open-any-terminal: only set NAUTILUS_4_EXTENSION_DIR in non GNOME environment (#343447) 2024-09-21 16:43:30 +05:30
Sandro a2fe2c872a
tailscale: only autoconnect after backend is up (#338210) 2024-09-21 11:27:18 +02:00
linsui c9f8285f05 nixos/nautilus-open-any-terminal: only set NAUTILUS_4_EXTENSION_DIR in non GNOME environment 2024-09-21 16:28:55 +08:00
Daniel Nagy 991fd5f462 nixos/yggdrasil: add nagy as maintainer 2024-09-21 06:30:54 +00:00
Daniel Nagy cb7635612e nixos/yggdrasil: remove with lib; 2024-09-21 06:30:54 +00:00
Nick Cao a1d92660c6
hydra: 0-unstable-2024-09-15 -> 0-unstable-2024-09-20 (#338902) 2024-09-20 18:35:44 -04:00
Ryan Horiguchi c26ca03c4d nixos/dnsmasq: remove deprecated option "extraConfig" 2024-09-20 22:44:16 +02:00
Ryan Lahfa fed418aaf1
add support for building fully dm-verity protected images with systemd-repart (#343252) 2024-09-20 19:59:50 +02:00
Quag 3115573f29 zutty: init at 0.16-unstable-2024-08-18 2024-09-20 19:24:35 +02:00
Adam C. Stephens d6ef7833cc
lxc/incus LTS upgrades: 6.0.1 -> 6.0.2 (#343058) 2024-09-20 12:42:44 -04:00
WilliButz 56d038e17d
nixos/tests/appliance-repart-image-verity-store: init
This test should illustrate how to build a verity-protected NixOS image
with systemd-repart, using the opinionated image.repart.verityStore module.
2024-09-20 17:35:49 +02:00
WilliButz 942588c686
nixos/repart-verity-store: init
This module provides some abstraction for a multi-stage build to create
a dm-verity protected NixOS repart image.

The opinionated approach realized by this module is to first create an
immutable, verity-protected nix store partition, then embed the root
hash of the corresponding verity hash partition in a UKI, that is then
injected into the ESP of the resulting image.
The UKI can then precisely identify the corresponding data from which
the entire system is bootstrapped.

The module comes with a script that checks the UKI used in the final
image corresponds to the intermediate image created in the first step.
This is necessary to notice incompatible substitutions of
non-reproducible store paths, for example when working with distributed
builds, or when offline-signing the UKI.
2024-09-20 17:35:49 +02:00
Cosima Neidahl eee25622ff
nixosTests.terminal-emulators: Fix lomiri-terminal-app test after mesa change (#341573) 2024-09-20 13:42:57 +02:00
Moritz Sanft 5ee6467bd3
nixos: add support for dm-verity
Co-authored-by: nikstur <nikstur@outlook.com>
Co-authored-by: WilliButz <willibutz@posteo.de>
2024-09-20 13:03:10 +02:00
Robert Hensing d12ed107be
nixos/nixpkgs: fix assertion text & show def files (#343212) 2024-09-20 11:53:58 +02:00
Matt Sturgeon 6d9dfef94f
nixos/nixpkgs: show definition files in config assertion 2024-09-20 10:42:45 +01:00
Matt Sturgeon 1bd4da1848
nixos/nixpkgs: fix config assertion text
The assertion message should include the `nixpkgs.config` value, however
it currently includes the entire `nixpkgs.config` _option_.

This means the type, declarations, definitions, etc were all printed.
2024-09-20 10:42:05 +01:00
Weijia Wang 98a31cdb8d
wordpress: 6.6.1 -> 6.6.2 (#343013) 2024-09-20 10:17:04 +02:00
zowoq 2ff3fa0e87 nixos/hydra: set a default for hydra-compress-logs service
follow up from 0c454e9317
2024-09-20 17:36:22 +10:00
K900 685d691da1
nixos/tools: start cleanup (#343075) 2024-09-20 10:08:12 +03:00
K900 51b47621ac nixos-install: move to pkgs/by-name 2024-09-20 08:44:37 +03:00
K900 825f6ffa9e nixos-enter: move to pkgs/by-name 2024-09-20 08:44:37 +03:00
K900 8353a681b5 nixos-build-vms: move to pkgs/by-name 2024-09-20 08:44:36 +03:00
Sandro 97ca40d3ca
turn-rs: init at 3.1.0 (#338928) 2024-09-19 22:53:28 +02:00
Weijia Wang d582ac052d nixos/wordpress: fix tests 2024-09-19 22:25:37 +02:00
Bjørn Forsman b03e47330b
smartmontools: build with systemdLibs on linux (#342407) 2024-09-19 20:49:26 +02:00
h7x4 490abc3b8c
hedgedoc: correct typo in deprecation notice (#343083) 2024-09-19 20:38:46 +02:00
Andrew Kvalheim 818d2a60a8 hedgedoc: correct typo in deprecation notice
Continues #244941
2024-09-19 11:05:05 -07:00
K900 d2e6b8dac6 nixos/tests/wpa_supplicant: explicitly set channel
mac80211_hwsim can't emulate ACS, so explicitly choose a channel.
2024-09-19 20:47:18 +03:00
Felipe Silva 51344369d5 doc: 24.11: document isync version bump 2024-09-19 19:14:55 +02:00
K900 1bf0ffb22e nixos-rebuild: inline get-version-suffix script
It has no other consumers anyway. Also saves some work.
2024-09-19 20:05:58 +03:00
Michele Guerini Rocco ebdd7ce69d
Revert "nixos/wireless: link config to /etc by default" (#343039) 2024-09-19 18:38:39 +02:00
Adam Stephens ee30c817cb
incus-lts: 6.0.1 -> 6.0.2
https://discuss.linuxcontainers.org/t/incus-6-0-2-lts-has-been-released/21633
2024-09-19 12:17:17 -04:00
Peder Bergebakken Sundt 9f0fb06ceb
nixos/ttyd: allow caFile=null when enableSSL=true (#340554) 2024-09-19 17:30:29 +02:00
Bjørn Forsman 86a6ef5f15 nixos/prometheus-smartctl-exporter: fix NVMe scanning
smartctl_exporter already runs with SupplementaryGroups "disk", which
gives full access to SATA drives, but NVMe devices are owned by
root:root, resulting in no access:

  [...] msg="Smartctl open device: /dev/nvme0 failed: Permission denied"

This patch introduces a "smartctl-exporter-access" supplementary
group, and an udev rule with setfacl to give the exporter access to NVMe
drives, without changing the base root:root ownership.

Fixes https://github.com/NixOS/nixpkgs/issues/210041
2024-09-19 17:28:30 +02:00
Josh Hoffer 4080d35d2b nixos/udev: only restart when udev rules change
Only restart `systemd-udevd.service` if udev rules in `/etc/udev/rules`
actually changed. The paths of `services.udev.packages` may change
frequently but the resulting udev rules built by `udevRulesFor`
likely change less often.

This has the added benefit of not adding `services.udev.packages` to
the system closure if they are only used for their udev rules
(issue #308937).
2024-09-19 17:26:01 +02:00
rnhmjoj 7efc956510
Revert "nixos/wireless: link config to /etc by default"
This reverts commit 89eb93dc3f.

It broken setups where /etc/wpa_supplicant.conf is configured
imperatively and reloading of the service on configuration changes.
2024-09-19 16:36:34 +02:00
K900 b3b9bdd901 Revert "nix: nix_2_18 -> nix_2_24"
This reverts commit 2e702d07bb.

Segfaults during evaluation in yet-to-be-determined circumstances.
Investigation is ongoing, reverting for now to be safe.

Upstream issue: https://github.com/NixOS/nix/issues/11547
2024-09-19 17:17:16 +03:00
K900 fb38235766 Revert "nixos/nix-fallback-paths: 2.24.2 -> 2.24.6"
This reverts commit ac849e5658.

Nix 2.24 segfaults semi-randomly during evaluation on specific configs (?).
This commit prepares for another revert, putting the default back to 2.18.

Upstream issue: https://github.com/NixOS/nix/issues/11547
2024-09-19 17:17:10 +03:00
Arian van Putten 5a7ae8f7de
amazon-ssm-agent: add the system's software to the path (#342947) 2024-09-19 10:37:59 +02:00
h7x4 a79863f0e1
nixos/services.tarsnap: fix escapeSystemdPath (#342911) 2024-09-19 09:21:02 +02:00
h7x4 dcf1beb438
nixos/authelia: complete level enum (#342619) 2024-09-19 09:17:30 +02:00