Joachim F
027cb61088
Merge pull request #16891 from joachifm/grsec-doc
...
manual: add chapter on Grsecurity/PaX
2016-07-24 12:48:27 +02:00
Daiderd Jordan
eab1ec23f0
Merge pull request #17194 from Profpatsch/document-container-root
...
nixos/manual: document you need root for container
2016-07-24 12:01:47 +02:00
Emery Hemingway
90ee01cd3d
nixos: disable DHCP on ZeroTier interfaces
2016-07-23 21:04:42 +02:00
Nathan Bijnens
bb528e714d
Fix #9759 SSMTP sendmail wrapper - cfg instead of full path
2016-07-23 20:58:58 +02:00
Joachim Fasting
edbaba6d3c
nixos release notes: document changes to grsecurity/PaX
2016-07-23 19:09:47 +02:00
Joachim Fasting
190890cdac
nixos manual: add chapter on grsecurity/PaX
...
Explain the "what", "why", and "how" of grsecurity/PaX
on NixOS.
2016-07-23 19:09:43 +02:00
Nathan Bijnens
cf3867a5ef
Fix #9759 SSMTP sendmail wrapper
2016-07-23 18:00:10 +02:00
Profpatsch
2f074321c7
nixos/manual: document you need root for container
2016-07-23 06:21:56 +02:00
ben smith
c38e6a2a60
mysql: fix replication tests ( #17174 )
...
Eliminate race condition in replication test
Remove replication configuration from standalone test
Improve mysql command syntax consistency
2016-07-23 00:37:05 +02:00
Shawn Warren
9886c80daa
Add gocd agent and server service packages ( #16273 )
...
GoCD is an open source continuous delivery server specializing in advanced workflow
modeling and visualization. Update maintainers list to include swarren83. Update
module list to include gocd agent and server module. Update packages list to include
gocd agent and server package. Update version, revision and checksum for GoCD
release 16.5.0.
2016-07-23 00:29:18 +02:00
Moritz Ulrich
f8ea8c7197
tt-rss: Fix evaluation by disabling nginx-options.
...
The nginx.virtualHosts option isn't merged yet. We can re-enable these
features when https://github.com/NixOS/nixpkgs/pull/15862 is merged.
2016-07-22 09:54:25 +02:00
Rok Garbas
d73c115aa4
Merge pull request #16132 from zohl/tt-rss
...
tt-rss service: init at 16.3
2016-07-21 20:48:18 +02:00
Al Zohali
98e419c0e2
tt-rss service: init at 16.3
2016-07-21 20:46:35 +03:00
Eelco Dolstra
a78ecb0d33
Remove nixos.tests.boot.biosUsb.* as release blockers
...
These have a high random failure rate, blocking channel updates. Issue
2016-07-21 11:44:55 +02:00
Michele Guerini Rocco
267e362fbc
syncthing: Allow the user service to be enabled with systemctl ( #17136 )
2016-07-21 04:49:58 +02:00
ben smith
e641974f06
MySQL Replication (that actually works) ( #7198 )
...
Improves replication functionality by:
* adding slaveHost on the 'master' role
* adds slave user to master with replication only permissions
2016-07-21 02:15:55 +02:00
Rok Garbas
db7b4fb073
Merge pull request #6846 from wizeman/u/zfs-auto-snap-flags
...
nixos: ZFS auto-snapshot improvements
2016-07-21 01:53:11 +02:00
davidak
83bdc8e858
caddy service: add options to change ACME certificate authority ( #16969 )
...
and agree to let's encrypt subscriber agreement
2016-07-21 01:51:09 +02:00
cransom
4a9b640f37
smokeping: init at 2.6.11 ( #17090 )
...
Includes a module for service setup and a test
to verify functionality of both service and pkg.
2016-07-21 01:07:59 +02:00
Rok Garbas
760da3e3f3
nixos: init programs.xonsh
2016-07-21 00:55:36 +02:00
Nikolay Amiantov
3cc54bbad9
Merge pull request #17082 from abbradar/fix-early-kbd
...
Use new early kbd-setting code in initrd and fix layouts from external packages
2016-07-20 23:52:45 +04:00
Bjørn Forsman
78eac466b0
nixos/ddclient: add warning about password being world readable
...
Closes #16885 .
2016-07-19 16:51:42 +02:00
Matthew Justin Bauer
802a700373
virtualbox: fix virtualbox guest additions ( #16964 )
2016-07-19 13:55:44 +02:00
Svein Ove Aas
9a8e0d1c2e
zfs: Force sync on shutdown ( #16903 )
2016-07-19 09:57:13 +02:00
Christian Kauhaus
3530f3f20a
systemd: make ctrl-alt-del target configurable. ( #16911 )
...
We currently only allow upstream's default of "reboot.target" due to the
way the symlinks are initialized. I made this configurable similar to the
default unit.
2016-07-19 09:42:53 +02:00
Eric Merritt
eb92804f91
nixos-containers: init package ( #16959 )
...
This moves nixos-containers into its own package so that it can be
relied upon by other packages/systems. This should make development
using dynamic containers much easier.
2016-07-19 08:13:06 +02:00
Nikolay Amiantov
9cc70b419c
nixos/tests: add hibernation test
2016-07-19 05:20:02 +03:00
Nikolay Amiantov
399db54e35
nixos/qemu: don't recreate extra disks
2016-07-19 05:20:02 +03:00
Franz Pletz
febcd39afa
nixos/grafana: set plugins path, fix image generation
...
Also add options to configure which organization should have anonymous access.
2016-07-19 00:18:12 +02:00
Jiri Marsicek
7d0990b594
pulseaudio module: add extraClientConf option
2016-07-19 00:14:58 +02:00
Nikolay Amiantov
cf64a7ecc0
kbd module: fix keymaps search for loadkeys
2016-07-18 23:46:38 +03:00
Nikolay Amiantov
7bed3d0cb3
nixos stage-1: move keymap handling to kbd module
2016-07-18 23:27:45 +03:00
Nikolay Amiantov
6f89369440
libinput service: add libinput to udev packages
...
See #17054
2016-07-18 17:14:34 +03:00
Nikolay Amiantov
3d69653d6b
plymouth service: stop splash screen before a failure prompt
2016-07-18 13:45:37 +03:00
Nikolay Amiantov
7513a1d2f5
plymouth service: update root fs before stage 2
2016-07-18 13:45:37 +03:00
Nikolay Amiantov
9cab592abd
plymouth service: style fixes
2016-07-18 13:45:37 +03:00
Nikolay Amiantov
86ad25625f
nixos stage-1: add custom pre failure dialog commands
2016-07-18 13:45:37 +03:00
obadz
08fe395074
nixos/tests/installer.nix: add curl on host machine
...
add curl so that rather than seeing the test attempt to download
curl's tarball, we see what it's trying to download.
2016-07-17 21:17:55 +01:00
Nikolay Amiantov
f4ea97ae90
Revert "nixos/tests/installer: Fix matching LUKS prompt"
...
This reverts commit ec072cbc4c
.
See also 193ab8be67
2016-07-17 22:44:54 +03:00
Benno Fünfstück
336786addc
nixos/lightdm: support greeter-less auto login
...
This adds configuration options for automatic login and disabling the
greeter (this should avoid the dependency on gtk).
2016-07-17 18:54:23 +02:00
Benno Fünfstück
8881f940a9
nixos/sddm: options documentation improvements
2016-07-17 18:54:23 +02:00
Benno Fünfstück
be625ad36b
xsession: fix multiple arguments with logToJournal
...
KDM and LightDM (at least with autologin) call the xsession-script with
two arguments: the first is the path of the xsession script itself,
while the second one are the actual arguments. The line to re-exec the
script under systemd-cat only forwarded a single argument, therefore
breaking LightDM and KDM login. This commit fixes the issue by always
forwarding all the arguments.
2016-07-17 18:54:23 +02:00
Nikolay Amiantov
193ab8be67
Revert "nixos stage-1: try to quit plymouth if started on failure"
...
This reverts commit c69c76ca7e
.
This patch was messed up during a rebase -- the commit title doesn't match what
it really does at all (it is actually a broken attempt to get LUKS passphrase
prompts in Plymouth).
2016-07-17 15:03:13 +03:00
aszlig
ec072cbc4c
nixos/tests/installer: Fix matching LUKS prompt
...
The LUKS passphrase prompt has changed from "Enter passphrase" to "Enter
LUKS Passphrase" in c69c76ca7e
, so the OCR
detection of the test fails indefinitely.
Unfortunately, this doesn't fix the test because we have a real problem
here:
Enter LUKS Passphrase:
killall: cryptsetup: no process killed
Enter LUKS Passphrase:
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @abbradar
2016-07-17 11:20:25 +02:00
Michele Guerini Rocco
47f59a51e4
nixos/compton: add user service ( #16652 )
2016-07-17 02:25:38 +02:00
Frederik Rietdijk
24fdb7ce21
Merge pull request #16889 from grahamc/sysstat
...
sysstat: Create systemd service for historical sar data
2016-07-16 19:29:13 +02:00
Thomas Tuegel
b2cf5aabb0
nixos/kde5: add missing Plasma packages
2016-07-16 10:14:50 -05:00
Thomas Tuegel
32c1f05aed
nixos/kde5: install missing frameworks
2016-07-16 10:14:48 -05:00
Thomas Tuegel
d3747a2261
kinit: use a setuid wrapper for start_kdeinit
2016-07-16 10:14:47 -05:00
Thomas Tuegel
888c66f97d
nixos/kde5: disable setuid wrapper for kdeinit
...
We need to pass certain environment variables through the wrapper, but I
don't know how to do that yet. The setuid-root feature serves only to
hide kdeinit from the OOM killer, so this is not critical.
2016-07-16 10:14:46 -05:00
Thomas Tuegel
1cb4aacf18
nixos/kde5: fix paths to setuid programs
2016-07-16 10:14:45 -05:00
Joachim F
ed50ef318b
Merge pull request #15848 from matthewbauer/packagekit
...
Add in PackageKit
2016-07-16 13:29:08 +02:00
Joachim F
8f43f111c0
Merge pull request #15840 from anderspapitto/pulse-jack
...
pulseaudio service: set DISPLAY
2016-07-16 13:26:39 +02:00
Joachim F
86ba20b3d8
Merge pull request #16686 from AndersonTorres/pekwm
...
pekwm: init at 0.1.17
2016-07-16 13:19:00 +02:00
Joachim Fasting
59c9a88a6b
grsecurity module: tweak lockTunables option description
2016-07-16 11:11:35 +02:00
Joachim Fasting
cef7150bc7
grsecurity module: grsecurity is not capitalized mid-sentence
2016-07-16 11:11:35 +02:00
Joachim Fasting
94824303be
grsecurity module: smarter container support
...
Only set tunables required for container support if there are any containers.
2016-07-16 11:11:35 +02:00
Joachim Fasting
c606b9876f
grsecurity module: enforce size overflows by default
...
It is better to make this conditional on whether the configuration contains a
known size overflow that could prevent the system from booting.
2016-07-16 11:11:35 +02:00
obadz
cfc0a5415b
Revert "fontconfig: fix etc priority"
...
This reverts commit 1e53d4a777
.
Closes #16983
cc @vcunat @ericsagnes @dezgeg
2016-07-15 20:44:21 +02:00
Robin Gloster
0749876016
Merge pull request #15957 from mayflower/sonarr_upstream
...
sonarr: init at 2.0.0.4146 + sonarr service
2016-07-15 17:34:18 +02:00
Bjørn Forsman
8c2d888401
jenkins: move $out/{lib => webapps}/jenkins.war
...
As pointed out by @danbst, the tomcat NixOS module expects packages
listed in services.tomcat.webapps to either be direct .war file paths or
have .war files inside a "webapps" directory.
Commit 4075c10a59
("jenkins: move .war file from $out to $out/lib/jenkins.war") broke
jenkins + tomcat. Fix it by moving jenkins.war to $out/webapps/.
2016-07-15 17:18:44 +02:00
Tristan Helmich
ed466b7fef
sonarr service: initial service
2016-07-15 16:18:37 +02:00
Bjørn Forsman
4075c10a59
jenkins: move .war file from $out to $out/lib/jenkins.war
...
Fixes #14137 , also known as:
$ nix-shell -p jenkins
bash: source: /nix/store/ln1yw6c2v8bb2cjqfr1z5aqcssw054wa-jenkins-2.3:
cannot execute binary file
[nix-shell exited with error]
The problem is that jenkins.war is not installed inside the directory
$out, but rather _as the file_ $out. Fix it by moving the file to
$out/lib/jenkins.war.
While at it, move buildCommand so that the "meta" section is at the end
of the expression (standard style), and quote shell variables.
2016-07-15 15:12:52 +02:00
Frederik Rietdijk
cfb4a19f51
Merge pull request #16967 from davidak/caddy-fix
...
caddy service: fix nix store output path
2016-07-15 12:26:18 +02:00
Eelco Dolstra
55eb18d212
Add some more info to the nixos-version manpage
2016-07-15 12:02:39 +02:00
Luca Bruno
4b8c31d981
gnome3: enable X libinput by default
...
See https://bugzilla.gnome.org/show_bug.cgi?id=764257#c12
2016-07-14 22:06:18 +01:00
davidak
d2164cfcda
caddy service: fix nix store output path
...
systemd[11376]: caddy.service: Failed at step EXEC spawning /nix/store/ghpcwj6paccc92l1gk7ykb6gf2i2w6fi-go1.6-caddy-0.8.3/bin/caddy: No such file or directory
2016-07-14 22:04:55 +02:00
Vladimír Čunát
1b5ac05845
Merge branch 'staging'
...
Includes security fixes in gd and libarchive.
2016-07-14 15:51:28 +02:00
obadz
de80d0544c
ecryptfs: add test to release-combined.nix
2016-07-14 11:52:50 +02:00
obadz
f76a8fbbac
ecryptfs: add test to release ( #16910 )
...
Would have caught regression #16766
2016-07-13 14:57:13 +02:00
davidak
d97a107426
nixos-version: fix syntax error and add -h ( #16906 )
...
* nixos-version: fix syntax error
* nixos-version: add -h parameter
2016-07-13 09:11:32 +02:00
Nikolay Amiantov
d9aafc885f
Merge branch 'early-kbd' into staging
2016-07-13 03:56:07 +03:00
Nikolay Amiantov
1848bfc92d
Merge branch 'plymouth' into staging
2016-07-13 03:54:38 +03:00
obadz
d781bf94c1
ecryptfs: test bug from #16766
2016-07-13 02:00:22 +02:00
obadz
ab6fc29719
ecryptfs: add nixos/tests/ecryptfs.nix
2016-07-13 01:48:41 +02:00
Graham Christensen
d3d7f43f76
sysstat: Create systemd service for historical sar data
...
Every period, sa1 collects and stores data.
Every 24 hours, sa2 aggregates the previous day's data in to a
report.
Timers and unit configurations were lifted from Fedora's default
units.
2016-07-12 16:19:40 -05:00
Vladimír Čunát
40785f0dac
Merge branch 'master' into staging
...
Hydra nixpkgs: ?compare=1282763
2016-07-12 22:00:10 +02:00
Nikolay Amiantov
c69c76ca7e
nixos stage-1: try to quit plymouth if started on failure
2016-07-12 22:22:29 +03:00
Nikolay Amiantov
a2d4235fe1
plymouth service: init
2016-07-12 22:22:29 +03:00
Nikolay Amiantov
d3e3e643cb
nixos stage-1: set extraUtils variable
2016-07-12 22:22:29 +03:00
Nikolay Amiantov
3508918da2
nixos stage-1: replace udevadm in udevRules
2016-07-12 22:22:28 +03:00
Nikolay Amiantov
e02b5ace0b
nixos stage-1: guard udevRules from extra references
2016-07-12 22:22:28 +03:00
Nikolay Amiantov
bd0ab027c1
nixos stage-1: recursively process binaries and libraries
2016-07-12 22:22:28 +03:00
Nikolay Amiantov
90ad879753
nixos stage-1: unconditionally mount /dev/pts
2016-07-12 22:22:28 +03:00
Eelco Dolstra
9aa3e78ab2
Update 16.03 AMIs
2016-07-12 17:26:29 +02:00
Eelco Dolstra
94cc18e9aa
Add AMIs in ap-northeast-2 and ap-south-1
2016-07-12 17:26:25 +02:00
Eelco Dolstra
1e9b8bfb31
Copy AMIs in parallel
2016-07-12 17:26:16 +02:00
Eelco Dolstra
02db7d9821
Create AMIs with Enhanced Networking
...
Fixes #15956 .
2016-07-12 17:25:52 +02:00
Graham Christensen
d9724bcdbf
doc: add man page for nixos-version ( #16869 )
2016-07-12 16:29:13 +02:00
Eric Litak
2b47d24007
factorio: 0.12.35 -> 0.13.8
2016-07-12 05:03:51 -07:00
Bjørn Forsman
2eb8aab42c
nixos/systemd: disable timer units with service
...
A disabled systemd service with a "startAt" attribute, like this:
systemd.services.foo-service = {
enable = false;
startAt = "*-*-* 05:15:00";
...
};
will cause the following errors in the system journal:
systemd[1]: foo-service.timer: Refusing to start, unit to trigger not loaded.
systemd[1]: Failed to start foo-service.timer.
Fix it by not generating the corresponding timer unit when the service
is disabled.
2016-07-11 22:42:47 +02:00
Eric Sagnes
1349cd4e8d
fcitx: refactor ( #16858 )
2016-07-11 17:50:22 +02:00
Eelco Dolstra
44789200f0
Merge pull request #16835 from Jookia/RFC_coredump
...
systemd-coredump: Add systemd service and fix sysctl pattern.
2016-07-11 16:10:20 +02:00
Eelco Dolstra
56badfee94
amazon-image.nix: Add the ena driver
...
This is necessary for Enhanced Networking on x1.* instances.
2016-07-11 14:32:18 +02:00
Damien Cassou
85a895d60f
offlineimap: add nixos module ( #16842 )
2016-07-11 10:37:18 +02:00
Luca Bruno
5a245c24b0
gnome3: make 3.20 the default
2016-07-10 16:17:37 +02:00
Jookia
b187c869f4
systemd-coredump: Add systemd service and fix sysctl pattern.
2016-07-10 18:07:37 +10:00
AndersonTorres
0f6c79d561
pekwm: init at 0.1.17
2016-07-09 22:26:24 -03:00
Tuomas Tynkkynen
931706cdc1
extlinux-conf-builder: Choose whether to use DTBs on per-generation basis
...
Previously, the value from stdenv.platform.kernelDTB was used. That
doesn't work well if both kinds (DTB and non-DTB) of generations exist
in the system profile.
2016-07-10 03:03:51 +03:00
Luca Bruno
977e0c6599
nixos/bash: enable colors during completion
2016-07-09 20:51:31 +01:00