Vladimír Čunát
39ebb01d6e
Merge branch 'staging', containing closure-size #7701
2016-04-13 09:25:28 +02:00
Joachim Fasting
cba5ccb67b
nixos: fix incorrect rename for input-methods options
...
Hotfix for e6ae05dd8a
2016-04-13 02:32:53 +02:00
joachifm
852c85f547
Merge pull request #14602 from ericsagnes/doc/input-methods
...
input-methods: add documentation
2016-04-12 23:48:14 +02:00
Eelco Dolstra
9153d8ed64
Fix X11 tests broken by the removal of -ac
...
Probably missed a few. Also adding xauth to the system path (it was
already in the closure).
2016-04-12 19:13:47 +02:00
Eelco Dolstra
1541fa351b
X server: Enable local access control
...
For the last ten years we have been passing -ac to the X server, which
is very bad idea.
Fixes #14623 .
2016-04-12 18:39:40 +02:00
Eric Sagnes
e6ae05dd8a
input-method module: fix folder case
2016-04-12 19:50:26 +09:00
Eric Sagnes
de78fe8f2d
manual: add chapter on input methods
2016-04-12 19:50:16 +09:00
Eelco Dolstra
dddb62d3e3
Merge pull request #14178 from the-kenny/systemd-cryptsetup-external-generator
...
Systemd: Allow specifying external generators
2016-04-12 11:26:22 +02:00
Vladimír Čunát
5c04313451
nixos-generate-config: lower priority of nix.maxJobs
...
Fixes #6429 .
2016-04-12 08:09:52 +02:00
Valérian Galliat
26dc7e503d
Shout: fix infinite loop in service configuration
...
Fixes #14594 .
2016-04-11 09:58:52 -04:00
joachifm
9c484f29ce
Merge pull request #14564 from valeriangalliat/shout/config
...
Shout: configure with attrs
2016-04-11 09:56:10 +02:00
joachifm
245f200dd8
Merge pull request #11987 from angus-g/caddy
...
Add Caddy and its NixOS module
2016-04-11 09:20:21 +02:00
aszlig
c1178f171c
nixos/xserver: Use null as default for dpi option
...
Commit 98d9bba
introduced this option as a nullOr type and it actually
checks whether null has been set and only appends -dpi if that's the
case. So let's actually set the default to null instead of 0.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-04-10 17:46:17 +02:00
Valérian Galliat
b0d1eb4579
Shout: configure with attrs
2016-04-10 10:49:32 -04:00
Joachim Fasting
cef2814a4f
nixos: add optional process information hiding
...
This module adds an option `security.hideProcessInformation` that, when
enabled, restricts access to process information such as command-line
arguments to the process owner. The module adds a static group "proc"
whose members are exempt from process information hiding.
Ideally, this feature would be implemented by simply adding the
appropriate mount options to `fileSystems."/proc".fsOptions`, but this
was found to not work in vmtests. To ensure that process information
hiding is enforced, we use a systemd service unit that remounts `/proc`
after `systemd-remount-fs.service` has completed.
To verify the correctness of the feature, simple tests were added to
nixos/tests/misc: the test ensures that unprivileged users cannot see
process information owned by another user, while members of "proc" CAN.
Thanks to @abbradar for feedback and suggestions.
2016-04-10 12:27:06 +02:00
Vladimír Čunát
30f14243c3
Merge branch 'master' into closure-size
...
Comparison to master evaluations on Hydra:
- 1255515 for nixos
- 1255502
for nixpkgs
2016-04-10 11:17:52 +02:00
Franz Pletz
b667040c7c
Merge pull request #14543 from groxxda/fix/minidlna
...
minidlna: logging via journalctl, use systemd runtimedirectory, install manpages
2016-04-10 01:14:48 +02:00
Tuomas Tynkkynen
03c6434756
Merge pull request #14526 from Profpatsch/fish-completions
...
fish: pick up completion files from other packages
2016-04-09 20:08:46 +03:00
joachifm
079c03a2c9
Merge pull request #14539 from colemickens/update-plex
...
Plex: update plex, plexpass; fix plex module to restart
2016-04-09 18:01:58 +02:00
Brandon Edens
98d9bbaec2
Add DPI option to xserver invocation.
2016-04-08 18:53:42 -07:00
Profpatsch
a011083cda
fish: pick up completion files from other packages
...
Some packages bring their own completions in
/share/fish/vendor_completions.d. Now they are picked up by fish from
every path in NIX_PROFILES.
2016-04-09 00:08:48 +02:00
Alexander Ried
72cd570421
minidlna: use journalctl for logging, systemd for runtimedir
2016-04-08 23:04:12 +02:00
Alexander Ried
4d87926795
minidlna: use hostname in DLNA friendly name
2016-04-08 23:04:12 +02:00
Cole Mickens
db9640b032
plex module: restart on failure
2016-04-08 10:55:59 -07:00
Emery Hemingway
c7379b30dc
u9fs service: switch user with systemd
...
Drop the broken fsRoot option.
2016-04-08 16:32:30 +02:00
Moritz Ulrich
e366d8294e
systemd.generators: Generate folders via environment.etc.
2016-04-08 14:50:20 +02:00
Moritz Ulrich
88e2cc480f
systemd.generator-packages: Option to specify packages providing generators.
2016-04-08 14:50:20 +02:00
joachifm
6d2df6d578
Merge pull request #14222 from Pleune/fix/iodined-client-mode
...
iodine service: add client mode implimentation
2016-04-08 02:19:32 +02:00
Eelco Dolstra
133e6e1ea6
httpd.service: Support reload
...
This is useful when ACME has generated a new TLS certificate.
2016-04-07 17:53:46 +02:00
Vladimír Čunát
710573ce6d
Merge #12653 : rework default outputs
2016-04-07 16:00:09 +02:00
Vladimír Čunát
9a824f2f1d
treewide: rename extraOutputs{ToLink,ToInstall}
...
This is to get more consistent with `meta.outputsToInstall`.
2016-04-07 15:59:44 +02:00
Vladimír Čunát
2995439003
buildEnv: respect meta.outputsToInstall
...
As a result `systemPackages` now also respect it.
Only nix-env remains and that has a PR filed:
https://github.com/NixOS/nix/pull/815
2016-04-07 15:59:44 +02:00
Thomas Tuegel
4ac323d924
kde5: enable libmtp udev rules
2016-04-07 07:44:26 -05:00
Vladimír Čunát
d1df28f8e5
Merge 'staging' into closure-size
...
This is mainly to get the update of bootstrap tools.
Otherwise there were mysterious segfaults:
https://github.com/NixOS/nixpkgs/pull/7701#issuecomment-203389817
2016-04-07 14:40:51 +02:00
Lluís Batlle i Rossell
e1bcc27f1a
Making trac/ldap handle httpd 2.4.
...
The option authzldapauthoritative had been removed in 2.4
I pushed this into 16.03 instead of master first. My fault.
(cherry picked from commit 516f47efef
)
2016-04-07 11:40:22 +02:00
Angus Gibson
bb6408ba16
caddy service: initial implementation
2016-04-05 23:45:54 +00:00
joachifm
97c8bf61ef
Merge pull request #14474 from MatrixAI/fixed-stage1
...
nixos/stage-1: Removed logCommands conditional for resetting the file descriptors after completion of logging
2016-04-05 22:39:14 +02:00
Roger Qiu
53e8e93939
nixos/stage-1: Removed logCommands conditional for resetting the file descriptors after completion of logging
2016-04-06 00:27:18 +10:00
Eelco Dolstra
ab2855b975
Add 16.03 AMIs
2016-04-05 11:25:12 +02:00
joachifm
4559bff785
Merge pull request #14395 from peterhoeg/pa
...
pulseaudio nixos module: run as systemd user service instead
2016-04-02 22:24:26 +00:00
joachifm
376b57fefe
Merge pull request #14396 from peterhoeg/dbus
...
dbus nixos module: add units for systemd user session
2016-04-02 22:23:42 +00:00
joachifm
687d21e4fd
Merge pull request #14405 from jerith666/crashplan-46-r2
...
Crashplan 46 r2
2016-04-02 22:06:40 +00:00
Matt McHenry
213a8a1e96
crashplan: fix vardir file existence check
2016-04-02 16:43:12 -04:00
Peter Hoeg
ca3f82e258
pulseaudio nixos module: run as systemd user service instead
...
Most of the desktop environments will spawn pulseaudio, but we can instead simply run it as a systemd service instead.
This patch also makes the system wide service run in foreground as recommended by the systemd projects and allows it to use sd_notify to signal ready instead of reading a pid written to a file. It is now also restarted on failure.
The user version has been tested with KDE and works fine there.
The system-wide version runs, but I haven't actually used it and upstream does not recommend running in this mode.
2016-04-02 23:18:22 +08:00
Peter Hoeg
83cb6ec399
dbus nixos module: add units for systemd user session
...
This patch makes dbus launch with any user session instead of
leaving it up to the desktop environment launch script to run it.
It has been tested with KDE, which simply uses the running daemon
instead of launching its own.
This is upstream's recommended way to run dbus.
2016-04-02 23:11:57 +08:00
Eelco Dolstra
f2af8874e8
Revert "initrd: Use modprobe from busybox"
...
This reverts commit 45c218f893
.
Busybox's modprobe causes numerous "Unknown symbol" errors in the
kernel log, even though the modules do appear to load correctly.
2016-04-01 17:39:09 +02:00
joachifm
b9ba6e2f6b
Merge pull request #14297 from elitak/mfi
...
mfi: init at 2.1.11
2016-04-01 14:57:28 +00:00
Eelco Dolstra
3fb1708427
ssh: Fix support for ssh-dss host keys
2016-04-01 15:54:52 +02:00
Arseniy Seroka
882d0b35b8
Merge pull request #14145 from MostAwesomeDude/tahoe
...
services: Add Tahoe-LAFS service.
2016-04-01 15:23:37 +03:00
Eric Litak
0de2d2fbcd
mfi: init at 2.1.11
...
This package has some outdated dependencies, so old versions of mongodb
and v8 had to be re-added as well.
2016-04-01 02:45:11 -07:00