mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-19 20:21:14 +00:00
Code Issues Wiki Activity
384781 commits 300 branches 124 tags 6.2 GiB
Commit graph

27665 commits

Author SHA1 Message Date
Jörg Thalheim 8d9afe3d3b
doc: rework notable changes 2022-05-25 23:26:44 +02:00
Jörg Thalheim 9cbb75f315
doc: fix docker/maddy in changelog 2022-05-25 21:56:28 +02:00
Jörg Thalheim 5936d939ce
doc: sort service list 2022-05-25 21:47:34 +02:00
Jörg Thalheim 9ae4a910e4
nixos/timetagger: drop non-evaluating service files 
The file was not included in the module list and also does not evaluate.
 2022-05-25 21:24:48 +02:00
Jörg Thalheim 78f5129aa6
doc: add missing new services to release-notes 2022-05-25 21:24:47 +02:00
Sandro 7fa8d8b2e2
Merge pull request #153481 from Tchekda/submit/bird-lg 2022-05-25 18:20:58 +02:00
Robert Hensing 75bc6da237 make-options-doc: Filter options after transformOptions 
This allows the user-supplied function to change the visibility
of options.
 2022-05-25 12:50:07 +02:00
Adam Joseph c0085404bd lib/systems/inspect.nix: remove isPowerPC 
Very confusingly, the `isPowerPC` predicate in
`lib/systems/inspect.nix` does *not* match `powerpc64le`!

This is because `isPowerPC` is defined as

  isPowerPC      = { cpu = cpuTypes.powerpc; };

Where `cpuTypes.powerpc` is:

  { bits = 32; significantByte = bigEndian; family = "power"; };

This means that the `isPowerPC` predicate actually only matches the
subset of machines marketed under this name which happen to be 32-bit
and running in big-endian mode which is equivalent to:

  with stdenv.hostPlatform; isPower && isBigEndian && is32bit

This seems like a sharp edge that people could easily cut themselves
on.  In fact, that has already happened: in
`linux/kernel/common-config.nix` there is a test which will always
fail:

  (stdenv.hostPlatform.isPowerPC && stdenv.hostPlatform.is64bit)

A more subtle case of the strict isPowerPC being used instead of the
moreg general isPower accidentally are the GHC expressions:

  Update pkgs/development/compilers/ghc/8.10.7.nix
  Update pkgs/development/compilers/ghc/8.8.4.nix
  Update pkgs/development/compilers/ghc/9.2.2.nix
  Update pkgs/development/compilers/ghc/9.0.2.nix
  Update pkgs/development/compilers/ghc/head.nix

Since the remaining legitimate use sites of isPowerPC are so few, remove
the isPowerPC predicate completely. The alternative expression above is
noted in the release notes as an alternative.

Co-authored-by: sternenseemann <sternenseemann@systemli.org>
 2022-05-25 09:45:42 +02:00
Elis Hirwing 868e519238
php: Upgrade from PHP 8.0 to 8.1 as default PHP 2022-05-24 19:24:49 +02:00
Eric Bailey 3798f3c168
kops: 1.23.1 -> 1.23.2 (#174165) 
Also update 22.05 release notes, which still mentioned 1.22.4 as the default.
 2022-05-24 13:57:45 +02:00
Anselm Schüler 446d2cb021 nixos/nvidia: add hardware.nvidia.forceFullCompositionPipeline 2022-05-24 11:46:50 +02:00
sternenseemann 392b95da61
Merge pull request #140271 from sternenseemann/executable-cross 
stdenv.mkDerivation: be less strict about check execution for cross
 2022-05-24 01:14:36 +02:00
Sandro 49d6b4aa34
Merge pull request #173512 from SuperSandro2000/gnupg-pinentry 
nixos/gnupg: default to a reasonable pinentry program on headless sys…
 2022-05-23 21:29:16 +02:00
sternenseemann 1f8bae43e4 nixos/doc/rl-2211.section.md: changes w.r.t. cross check execution 2022-05-23 21:25:04 +02:00
Janne Heß 953b5d19bc
manual: Fix the 22.11 changelog 2022-05-23 21:13:37 +02:00
Maximilian Bosch 2b7e06e0b6
Merge pull request #174145 from alarsyo/nextcloud24-php8 
nixos/nextcloud: use PHP 8 avoiding broken 2FA app
 2022-05-23 20:23:11 +02:00
Janne Heß bfdfe12c78
22.11 is Raccoon 2022-05-23 20:08:07 +02:00
Janne Heß 3673f148b3
Merge remote-tracking branch 'origin/staging-next' 
* origin/staging-next: (62 commits)
  Re-Revert "lua: fix on darwin by using makeBinaryWrapper (#172749)"
  openldap: fix cross-compilation
  makeBinaryWrapper: fix codesign on aarch64-darwin
  python3Packages.ldap: fix linking with openldap 2.5+
  Revert "lua: fix on darwin by using makeBinaryWrapper (#172749)"
  wine: enable parallel build again
  pkgsi686Linux.gdb: fix formatting for 32-bit systems
  gtk4: Fix incorrect merge
  nixos/openldap: use upstream unit defaults
  openldap: update maintainers
  openldap: 2.4.58 -> 2.6.2
  Revert "Add mingwW64-llvm cross-system."
  lua: fix on darwin by using makeBinaryWrapper (#172749)
  python310Packages.python-mimeparse: execute tests
  pandas: fix darwin build
  gtk3: 3.24.33 -> 3.24.33-2022-03-11
  gtk4: patch fixing g-c-c crashes
  e2fsprogs: patch for CVE-2022-1304
  firefox-unwrapped: fix cross compilation
  rustc: expose correct llvmPackages for cross compile
  ...
 2022-05-23 19:56:59 +02:00
Janne Heß c1c368194e
release-notes: Fix the first lines for 22.05 
They had the wrong order
 2022-05-23 19:19:13 +02:00
Antoine Martin f3f0b60006 nixos/nextcloud: use PHP 8 avoiding broken 2FA app 2022-05-23 18:39:39 +02:00
Vladimír Čunát c70995bae3
Merge #173996: nixosTests.custom-ca: fix meta evaluation 2022-05-23 17:52:11 +02:00
sternenseemann c2738707de
Merge pull request #168316 from sternenseemann/supported-no-hydra 
lib.systems: remove supported, replace with flakeExposed
 2022-05-23 17:08:22 +02:00
Martin Weinelt 6d8f8a7b46
Merge pull request #174090 from helsinki-systems/fix/plymouth 
nixos/plymouth: Fix non-systemd initrd boot
 2022-05-23 17:08:02 +02:00
sternenseemann 168b926435 lib.systems: remove supported, replace with flakeExposed 
Since the list only gates the platforms the nixpkgs flake exposes
packages to build on, the `hydra` label made little sense. It was also
only used for this purpose, so the `tier*` attributes were largely
unnecessary.

To reflect the intention more accurately, we expose
`lib.systems.flakeExposed` and use it to gate flake.nix's system list.
 2022-05-23 15:27:30 +02:00
Janne Heß 9d7aff488a
Merge pull request #174061 from helsinki-systems/fix/nixos-test-mysql-backup 
nixosTests.mysql-backup: fix
 2022-05-23 14:10:06 +02:00
github-actions[bot] f51499324c
Merge master into staging-next 2022-05-23 12:01:25 +00:00
pennae 023e25264c
Merge pull request #172983 from pennae/mosquitto-bind-interface 
nixos/mosquitto: add bind_interface listener option, fix assertion messages
 2022-05-23 10:53:08 +00:00
Janne Heß e9bdd5fa74
Merge pull request #168168 from fedeinthemix/home-mode 
nixos/users-group: Add 'homeMode' option.
 2022-05-23 12:27:49 +02:00
Florian Klink 2403723108
Merge pull request #172652 from klemensn/systemd-optional-system-units 
nixos/systemd: Package only built component units
 2022-05-23 11:35:01 +02:00
Janne Heß 2cc4bf9427
nixos/plymouth: Fix non-systemd initrd boot 2022-05-23 11:17:21 +02:00
Federico Beffa 572ff94f55 nixos/users-group: make homeMode respect is_dry and create home directly with right permissions 2022-05-23 07:47:11 +02:00
Jared Baur 5463b86d03
nixos/users: Fix typo 2022-05-22 22:13:39 -07:00
ajs124 b67500724f nixosTests.mysql-backup: fix 2022-05-23 02:39:33 +02:00
github-actions[bot] ba5122823c
Merge master into staging-next 2022-05-23 00:02:36 +00:00
linj d5a9c1dd08 nixos/nvidia: remove a useless option 
According to the doc[1], NVreg_DynamicPowerManagement is a kernel
module parameter, which it is already set as. So it should not be set
as an xorg option.

[1]: https://download.nvidia.com/XFree86/Linux-x86_64/515.43.04/README/dynamicpowermanagement.html#DriverSettingsfe624
 2022-05-23 05:11:26 +08:00
linj 97a855ca0e nixos/nvidia: only apply workarounds for finegrained when needed 
Accoriding to the doc[1], these workarounds is no needed for kernel
5.5 and newer.

[1]: https://download.nvidia.com/XFree86/Linux-x86_64/515.43.04/README/dynamicpowermanagement.html#KnownIssuesAndW6426e
 2022-05-23 05:01:40 +08:00
github-actions[bot] 107b6041bc
Merge master into staging-next 2022-05-22 18:01:20 +00:00
Izorkin 6e8e1faabe
nixos/tests: add nginx-http3 test 2022-05-22 19:29:12 +03:00
Martin Weinelt 05232d19b6
Merge pull request #163220 from fleaz/init-r53_ddns 2022-05-22 17:08:55 +02:00
Vladimír Čunát bf1aabe3c1
nixosTests.custom-ca: fix meta evaluation 
Test case: nix eval -f. nixosTests.custom-ca.firefox.meta
 2022-05-22 15:57:57 +02:00
Benno Bielmeier d156db7d17 nixos/gollum: add option 'no-edit' 2022-05-22 15:06:00 +02:00
Benno Bielmeier 8e7b82be49 nixos/gollum: add option 'user-icons' 2022-05-22 15:06:00 +02:00
Benno Bielmeier 8a770f06a2 gollum: refactor package 
use `bundlerApp` in preference to `stdenv.mkDerivation`
 2022-05-22 15:06:00 +02:00
github-actions[bot] 86ec85655d
Merge master into staging-next 2022-05-22 12:01:28 +00:00
Yureka 821724b184 nixos/gitlab: support 15.x 2022-05-22 13:09:36 +02:00
Jörg Thalheim e2e77bfb9a
Merge pull request #173978 from alyssais/postfix-RemainAfterExit 
nixos/postfix: make postfix-setup RemainAfterExit
 2022-05-22 12:04:04 +01:00
Alyssa Ross 27530ba856
nixos/postfix: make postfix-setup RemainAfterExit 
Otherwise, it wouldn't get restarted when a new system configuration
was activatad, so the Postfix configuration wouldn't be updated.

Fixes: fb2fa1b50f ("nixos/postfix: pull setup into its own unit")
 2022-05-22 10:33:22 +00:00
github-actions[bot] dbef850602
Merge master into staging-next 2022-05-22 00:02:20 +00:00
Francesco Gazzetta 6bb9d0ce3b nixos/zeronet: fix systemd after 2022-05-21 17:46:28 -04:00
Francesco Gazzetta 183e391256 nixos/zeronet: add package option 2022-05-21 17:46:28 -04:00
Guillaume Girol 4f709ea817
Merge pull request #164883 from oxalica/feat/btrbk-no-timer 
nixos/btrbk: allow instances without timers and simplify
 2022-05-21 20:04:54 +00:00
github-actions[bot] 084f3d75e7
Merge master into staging-next 2022-05-21 18:01:06 +00:00
Maximilian Bosch bfa8abf3b0
Merge pull request #170797 from Ma27/mailman 
mailman: refactor package structure
 2022-05-21 19:24:24 +02:00
Maximilian Bosch 33c44a1031
nextcloud22: drop 
Version 22 will be EOLed in July 2022[1] and we shouldn't have
unsupported software in the soon-to-be-released NixOS 22.05, hence
dropping it already.

[1] https://github.com/nextcloud/server/wiki/Maintenance-and-Release-Schedule
 2022-05-21 18:34:28 +02:00
Jan Tojnar b8b9f52393 Merge branch 'master' into staging-next 
Conflicts:
- pkgs/applications/networking/browsers/firefox/common.nix between 318fae87c0 and f6c5761935.
 2022-05-21 17:52:39 +02:00
Guillaume Girol 5a0577265e nixos/tests/ihatemoney: fix test 
ihm blocks on smtpd accepting the email
 2022-05-21 12:00:00 +00:00
Guillaume Girol 32e45a5c9f nixos/tests/os-prober: fix 
synchronize the list of extraDependencies with the installer test
 2022-05-21 12:00:00 +00:00
Bobby Rong ce084ad5bf
Merge pull request #173842 from bobby285271/pantheon-updates 
nixos/pantheon: install sideload when Flatpak is enabled
 2022-05-21 17:34:41 +08:00
Bobby Rong 646336ee06
nixos/pantheon: install sideload when Flatpak is enabled 
Tested by installing VLC from Flathub, sideload is installed by default on elementary OS.
 2022-05-21 14:05:42 +08:00
Aidan Gauland 80367c8db8
nixos/nextcloud: Remove confusing comment 
There is a comment above the invocation of 'nextcloud-occ app:enable', stating
that the script should not fail if any of the apps cannot be enabled, but there
is nothing in place to suppress errors.  The app:enable command already
continues installing the remaining apps when one fails to install, and we do not
want to suppress errors in the setup script, so this just removes the comment
about not failing.
 2022-05-21 10:36:51 +12:00
Malte Brandy 859c2499fb Merge branch 'master' into haskell-updates 2022-05-20 22:22:38 +02:00
David Tchekachev 0f63bd3ba8
nixos/bird-lg: init 2022-05-20 15:44:00 +03:00
sternenseemann 604120a374
Merge pull request #173576 from sternenseemann/xmonad-tests 
[haskell-updates] release-haskell.nix: include nixos tests for xmonad
 2022-05-20 11:48:23 +02:00
Janne Heß cd139069fd
Merge pull request #173668 from mweinelt/slapd-notify 
nixos/openldap: use upstream unit defaults
 2022-05-20 10:20:13 +02:00
github-actions[bot] ce95d139b7
Merge master into staging-next 2022-05-20 06:01:19 +00:00
Bobby Rong cee75cb765
Merge pull request #173459 from bobby285271/pantheon-updates 
Pantheon 7 updates 2022-05-18
 2022-05-20 13:12:39 +08:00
github-actions[bot] 75906ed245
Merge master into staging-next 2022-05-20 00:02:29 +00:00
Maximilian Bosch aea3ec632d
mailman: split python env for web and mailman 2022-05-20 01:36:48 +02:00
Maximilian Bosch 72a14ea563
mailman: refactor package structure 
* Removed unused `.package`-option.
* Added explicit postgresql support.
* Create a new meta-package for mailman to make sure each component has
  the **same** python and packages can be downgraded if needed (e.g.
  psycopg2 or sqlalchemy) without interfering with `pythonPackages` in any way.
* Document why certain python overrides are needed.

Closes #170035
Closes #158424
 2022-05-20 01:21:20 +02:00
Izorkin 0b1340f57b
nixos/peertube: use redis.servers 2022-05-19 23:52:50 +03:00
Martin Weinelt 885d4e047b
nixos/openldap: use upstream unit defaults 
OpenLDAP since version 2.5.4¹ supports sd_notify, so we should make use
of it.

Also updates the unit description and documentation with the values
upstream provides.

Starts slapd only after reaching `network-online.target`, which ensures
binding to specific ip addresses is possible, since `network.target`
only guarantees interfaces exist, but not that addressing is finished.

[1] https://bugs.openldap.org/show_bug.cgi?id=8707
 2022-05-19 22:31:26 +02:00
Jörg Thalheim e56ae50ed9
Merge pull request #173109 from Mic92/upterm 
nixos/upterm: additional hardening
 2022-05-19 20:16:13 +01:00
Robert Hensing 90344e9f40
Merge pull request #171163 from hercules-ci/nixpkgs-config-doc 
Add generated `nixpkgs.config` doc to Nixpkgs manual
 2022-05-19 20:51:38 +02:00
github-actions[bot] b833efbcd7
Merge master into staging-next 2022-05-19 18:06:51 +00:00
sternenseemann f181d591ce
Merge pull request #173623 from xaverdh/xmonad-fix-example 
nixos/xmonad: adjust to reflect v0.17.0 update of xmonad
 2022-05-19 19:18:55 +02:00
Dominik Xaver Hörl 065085b340 rl-2205: mention changes to the xmonad haskell module 2022-05-19 18:11:39 +02:00
Dominik Xaver Hörl 34a1ff28e0 nixos/xmonad: adjust example to reflect v0.17.0 update of xmonad 2022-05-19 18:10:55 +02:00
Silvan Mosberger f224a4f1b3
Merge pull request #76315 from nek0/restya-board-config-fix2 
restya-board: further fix for functionality
 2022-05-19 16:04:41 +02:00
Niklas Hambüchen 23aee34b6f
Merge pull request #171264 from NixOS/nebula-always-restart 
nixos/nebula: Always restart
 2022-05-19 14:05:49 +02:00
github-actions[bot] bd83e4cf98
Merge master into staging-next 2022-05-19 12:01:54 +00:00
Vladimír Čunát 90e10f361f
Merge #172668: installation-cd: add more guest tools to NixOS graphical installation base 2022-05-19 12:12:10 +02:00
Anillc 6958412083
nixos/frr: add extraOptions option 
Support passing options to daemons. For example, bgpd needs '-M rpki' to
enable rpki functions.
 2022-05-19 16:02:47 +08:00
sternenseemann 0520dda5ec nixos/tests/xmonad: adjust to XMonad 0.17 2022-05-19 09:15:12 +02:00
github-actions[bot] 925219f62b
Merge master into staging-next 2022-05-18 18:01:13 +00:00
Artturi 974ba4eaa6
Merge pull request #173024 from edolstra/update-fallback-paths 
nix-fallback-paths.nix: Update to 2.8.1
 2022-05-18 20:42:56 +03:00
Lassulus e7f5c53e02
Merge pull request #173439 from mweinelt/openldap 
openldap: 2.4.58 -> 2.6.2
 2022-05-18 19:01:11 +02:00
Sandro 9e44ffc043
nixos/gnupg: default to a reasonable pinentry program on headless systems 2022-05-18 18:31:34 +02:00
Robert Hensing 36fb9668f7
Merge pull request #172855 from bolt12/bol12-all-regions 
Added all current available AWS regions
 2022-05-18 16:39:17 +02:00
Kristoffer Føllesdal 298e2ce302 nixos/grafana: add disableLoginForm option 2022-05-18 16:09:04 +02:00
Kristoffer Føllesdal ea8f7e7bbd nixos/grafana: add serveFromSubPath option 2022-05-18 16:08:15 +02:00
Martin Weinelt 39ef6322b5
openldap: 2.4.58 -> 2.6.2 
https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_5/ANNOUNCEMENT
https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_6/ANNOUNCEMENT

Co-Authored-By: Andreas Schrägle <nix@ajs124.de>
 2022-05-18 15:25:52 +02:00
github-actions[bot] bd9c07eb24
Merge master into staging-next 2022-05-18 12:01:24 +00:00
Shea Levy 7456be85db
Merge branch 'staging-next' into staging 2022-05-18 06:40:21 -04:00
Maximilian Bosch f1f849afb8
Merge pull request #171736 from arnottcr/nextcloud 
nextcloud24: init at 24.0.0
 2022-05-18 12:14:01 +02:00
Silvan Mosberger 26ab617a10
Merge pull request #172393 from mweinelt/openssh/sntrup761x25519-sha512-kexmethod 
nixos/openssh: Add sntrup761x25519-sha512 kexAlgo
 2022-05-18 12:03:00 +02:00
Maximilian Bosch a0bcf1e9ea
nixos/nextcloud: styling 2022-05-18 11:50:53 +02:00
Maximilian Bosch e46bff9569
nixos/nextcloud: upgrade instructions / info for v23 2022-05-18 11:47:50 +02:00
Maximilian Bosch 6f80d6836a
nixos/nextcloud: mariadb workaround is for versions >=24 not needed anymore 2022-05-18 11:22:31 +02:00
Lassulus a976121d57
Merge pull request #165474 from jian-lin/fix-wireguard-systemd-unit-dependency 
nixos/wireguard: fix dependencies on network-related targets
 2022-05-18 11:16:25 +02:00
Bobby Rong c601126bc8
nixos/pantheon: enable power-profiles-daemon 
switchboard-plug-power is providing support for this since 2.7.0.

Note that we don't handle the conflict with tlp because we have
no way of knowing which way a user wants to resolve the conflict.
 2022-05-18 14:19:53 +08:00
Bobby Rong b93b4f71f2
nixos/pantheon: also treat gnome-font-viewer as non-core apps 2022-05-18 14:19:53 +08:00
Bobby Rong 6f23ca82bd
nixos/pantheon: use pantheon.gnome-settings-daemon 
pantheon.gnome-settings-daemon *is* gnome.gnome-settings-daemon338,
doing this so I don't need to update this on every GSD update.
 2022-05-18 13:13:54 +08:00
Robert Schütz ae758a85d7 nixos/radicale: give access to /dev/urandom 
A git command was failing in the test with

    error: unable to get random bytes for temporary file: Operation not permitted
    error: unable to create temporary file: Operation not permitted
    error: .Radicale.lock: failed to insert into database
    error: unable to index file '.Radicale.lock'
 2022-05-17 22:23:57 +02:00
Robert Hensing 2d1a34b8cc
Merge pull request #172813 from hercules-ci/functionTo-properly 
`lib.types.functionTo` type merging and docs
 2022-05-17 22:22:21 +02:00
Cole Helbling c0723eef37 nixos/prometheus: enable checking syntax only 
This allows config checking with external files to not fail inside the
sandbox.
 2022-05-17 10:45:49 -07:00
Maximilian Bosch 6e6ba864b3
Merge pull request #130434 from mrVanDalo/feature/fix_nextcloud_logging 
nextcloud: fix logging parameter
 2022-05-17 18:53:36 +02:00
Maximilian Bosch ab8a7cae2c
nixos/nextcloud: remove unneeded log_level-param 
Actually it's called `loglevel` on both v22 and v23.
 2022-05-17 18:11:40 +02:00
Maximilian Bosch 0b904cfc7e
Merge pull request #172926 from aidalgol/nextcloud-hsts-options 
nixos/nextcloud: Add option for max-age HSTS directive
 2022-05-17 18:04:25 +02:00
Daniel Beecham 7502133997
nixos/locate: clarification in warning message (#173247) 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2022-05-17 16:47:33 +02:00
Armando Santos fdf74c7741
maintainers/create-amis.sh: Add more AWS regions 
Add all currently available AWS regions
 2022-05-17 10:20:30 +01:00
ners fb4fc93a3e Remove mkDefault 2022-05-17 10:36:59 +02:00
github-actions[bot] 9232271f66
Merge master into staging-next 2022-05-17 00:02:18 +00:00
Jan Tojnar ff691ed9ba nixos/gdm: Fix missing icons 
Recent `wrapGAppsHook` change stops `adwaita-icon-theme` from being added to `XDG_DATA_DIRS`:
b1e73fa2e0
Since `display-manager.service` does not have `/run/current-system/sw/share` in `XDG_DATA_DIRS`, it does not pick up the globally installed icon theme either, preventing icons from showing.

Let’s make Adwaita available to fix that for now.

Fixes: https://github.com/NixOS/nixpkgs/issues/171692
 2022-05-17 00:19:18 +02:00
Robert Hensing 0b02135d3b nixosOptionsDoc: refactor 
Thanks to Infinisil for pointing this out.
 2022-05-16 22:53:23 +02:00
github-actions[bot] e87bfef273
Merge staging-next into staging 2022-05-16 18:11:41 +00:00
github-actions[bot] 115f2f7878
Merge master into staging-next 2022-05-16 18:05:56 +00:00
Linus Heckemann 7c035dbb75
Merge pull request #156822 from xfix/wrapper-assert-argc-at-least-one 
nixos/wrappers: require argc to be at least one
 2022-05-16 18:52:51 +02:00
Ian Kerins 560ca02280 nixos/nitter: update example configuration file URL 
It was moved.
 2022-05-16 10:16:06 -05:00
Klemens Nanni cbcc746f8f nixos/systemd: Package only built component units 
Account for all `with*` options causing their respective unit files to
not be built, just like the current code `withCryptsetup` already does.

This fixes build errors like the following:
```
missing /nix/store/5fafsfms64fn3ywv274ky7arhm9yq2if-systemd-250.4/example/systemd/system/systemd-importd.service
error: builder for '/nix/store/67rdli5q5akzwmqgf8q0a1yp76jgr0px-system-units.drv' failed with exit code 1
```

Found by using a customised systemd package as follows:
```
systemd.package = pkgs.systemd-small;

nixpkgs.config.packageOverrides = pkgs: {

  "systemd-small" = pkgs.systemd.override {
    withImportd = false;
    withMachined = false;
    ...
  };

};
```
 2022-05-16 16:52:25 +02:00
Kristoffer Føllesdal e13ec87217 nixos/grafana: add Azure AD OAuth options 2022-05-16 16:37:02 +02:00
github-actions[bot] add75748e2
Merge staging-next into staging 2022-05-16 12:03:45 +00:00
github-actions[bot] f10256fb7a
Merge master into staging-next 2022-05-16 12:02:51 +00:00
ners 3458d4cf89 installation-cd: remove broken virtualbox module 2022-05-16 12:34:55 +02:00
Manuel Bärenz 556ce9a40a
Merge pull request #166010 from Stunkymonkey/keepassxc-2.7.0 
keepassxc: 2.6.6 -> 2.7.1
 2022-05-16 11:08:23 +02:00
Manuel Bärenz 6423fcedb3 nixosTests.keepassxc: Simplify OCR test 2022-05-16 10:37:16 +02:00
Johannes Schleifenbaum 050e0aa6de
nixos/tests/mjolnir: set enable_registration_without_verification for matrix-synapse 2022-05-16 10:32:13 +02:00
Jörg Thalheim 9b5e36cf13
Merge pull request #173207 from SuperSandro2000/ddclient-verbose 
nixos/ddclient: turn verbose off by default
 2022-05-16 07:01:25 +01:00
github-actions[bot] e2602ad62e
Merge staging-next into staging 2022-05-16 00:04:11 +00:00
github-actions[bot] c8608fae00
Merge master into staging-next 2022-05-16 00:03:24 +00:00
Sandro 6c0dc6d621
nixos/ddclient: turn verbose off by default 
verbose is a debugging setting one step noisier than debug and should only be turned on when debugging because it leaks quite some credentials and tokens in the journalctl.
 2022-05-16 01:49:08 +02:00
Thiago Kenji Okada 1dc9931937
Merge pull request #173034 from Mic92/nix-ld 
nix-ld: 1.0.0 -> 1.0.2
 2022-05-15 21:18:54 +01:00
Jörg Thalheim d5099630b1
nix-ld: 1.0.0 -> 1.0.2 2022-05-15 21:06:05 +02:00
Victor e9b1375878 nixos/hedgedoc: fix and add config options 
* fixed minio endpoint config option name
* add requireFreeURLAuthentication config option
 2022-05-15 11:57:15 +02:00
pennae c1115d37ff nixos/mosquitto: fix attribute path display in assertions 2022-05-15 10:33:38 +02:00
pennae 2145dbc4fc nixos/mosquitto: add missing listener option bind_interface 
we expose it under settings instead of at the listener toplevel because
mosquitto seems to pick the addresses it will listen on
nondeterministically from the set of addresses configured on the
interface being bound to. encouraging its use by putting it into the
toplevel options for a listener seems inadvisable.
 2022-05-15 10:33:38 +02:00
Jörg Thalheim 14e2c1e4fb
nixos/upterm: fix race condition in test 2022-05-15 09:57:52 +02:00
Jörg Thalheim eefafb54ef
nixos/upterm: additional hardening 
Before:
$ ps aux | grep upterm
root     2575046  0.0  0.0 1085080 6968 ?        Ssl  07:03   0:00 /nix/store/ci97r1lqx4128w75k7dcsw82j5bl0n3g-upterm-0.8.2/bin/uptermd --ssh-addr [::]:2323 --private-key ssh_host_ed25519_key

After
$ ps aux | grep upterm
uptermd  2832993  0.4  0.0 1158812 6856 ?        Ssl  07:08   0:00 /nix/store/ci97r1lqx4128w75k7dcsw82j5bl0n3g-upterm-0.8.2/bin/uptermd --ssh-addr [::]:2323 --private-key ssh_host_ed25519_key
 2022-05-15 09:57:52 +02:00
github-actions[bot] a41870fcba
Merge staging-next into staging 2022-05-15 06:01:50 +00:00
github-actions[bot] a44988ac0d
Merge master into staging-next 2022-05-15 06:01:17 +00:00
Jan Tojnar d1b77f990f Merge branch 'staging-next' into staging 
Conflicts:
	pkgs/applications/networking/browsers/firefox/common.nix between f6c5761935 and a373324120.
 2022-05-15 07:08:29 +02:00
Aaron Andersen 82716bddb5
Merge pull request #170079 from bb2020/mbpfan 
nixos/mbpfan: minor changes
 2022-05-14 22:13:05 -04:00
github-actions[bot] 826104819b
Merge master into staging-next 2022-05-15 00:02:28 +00:00
Michael Weiss 084f2307d4
nixos/tests/chromium: Switch to nodes.machine (vs. deprecated machine attribute) 
The old attribute is deprecated:
trace: warning: In test `chromium-stable': The `machine' attribute in NixOS
tests (pkgs.nixosTest / make-test-pyton.nix / testing-python.nix / makeTest) is
deprecated. Please use the equivalent `nodes.machine'.

Note: This is only a refactoring.
 2022-05-14 23:54:41 +02:00
Eelco Dolstra 5ce31ec2fd
nix-fallback-paths.nix: Update to 2.8.1 2022-05-14 15:19:14 +02:00
Guillaume Girol 110c6e6c96 nixos/libvirtd: allow to provide both x86 and aarch64 ovmf 2022-05-14 12:00:00 +00:00
Federico Beffa 311aa6d05d nixos/users-group: Update description of 'homeMode' option. 2022-05-14 11:59:44 +02:00
github-actions[bot] 3328bc9666
Merge master into staging-next 2022-05-14 00:02:10 +00:00
Aidan Gauland 59244e07f0
nixos/nextcloud: Add option for max-age HSTS directive 
* Add an option services.nextcloud.nginx.hstsMaxAge for setting the max-age
  directive of the Strict-Transport-Security HTTP header.

* Make the Strict-Transport-Security HTTP header in the Nginx virtualhost block
  dependant upon the option services.nextcloud.https instead of
  services.nextcloud.nginx.recommendedHttpHeaders, as this header makes no sense
  when not using HTTPS.  (Closes #169465)
 2022-05-14 09:04:45 +12:00
adisbladis fb222e0086
Merge pull request #172820 from alyssais/compressed-firmware 
Compressed firmware
 2022-05-14 02:38:48 +08:00
github-actions[bot] fe71877bbd
Merge staging-next into staging 2022-05-13 18:03:04 +00:00
github-actions[bot] bcb22e9a7b
Merge master into staging-next 2022-05-13 18:01:23 +00:00
Martin Weinelt 3607d087ec
Merge pull request #112682 from hax404/upterm 2022-05-13 18:24:54 +02:00
fleaz cd7e4a1b32
nixos/tests/uptermd: init 2022-05-13 17:45:02 +02:00
Georg Haas 18ffb9690c
nixos/uptermd: init 2022-05-13 17:44:44 +02:00
Sandro c1b015df49
Merge pull request #172261 from jbedo/mercury 2022-05-13 17:30:11 +02:00
Alyssa Ross 8aa8e0ce7f
nixos/udev: compress all firmware if supported 
This should be a significant disk space saving for most NixOS
installations.  This method is a bit more complicated than doing it in
the postInstall for the firmware derivations, but this way it's
automatic, so each firmware package doesn't have to separately
implement its compression.

Currently, only xz compression is supported, but it's likely that
future versions of Linux will additionally support zstd, so I've
written the code in such a way that it would be very easy to implement
zstd compression for those kernels when they arrive, falling back to
xz for older (current) kernels.

I chose the highest possible level of compression (xz -9) because even
at this level, decompression time is negligible.  Here's how long it took
to decompress every firmware file my laptop uses:

	i915/kbl_dmc_ver1_04.bin                  	2ms
	regulatory.db                             	4ms
	regulatory.db.p7s                         	3ms
	iwlwifi-7265D-29.ucode                    	62ms
	9d71-GOOGLE-EVEMAX-0-tplg.bin             	22ms
	intel/dsp_fw_kbl.bin                      	65ms
	dsp_lib_dsm_core_spt_release.bin          	6ms
	intel/ibt-hw-37.8.10-fw-22.50.19.14.f.bseq	7ms

And since booting NixOS is a parallel process, it's unlikely (but
difficult to measure) that the time to user interaction was held up at
all by most of these.

Fixes (partially?) #148197
 2022-05-13 14:36:34 +00:00
Jelle Besseling 0f69a517a4 nixos/mastodon: use redis.servers 2022-05-13 15:39:44 +02:00
Maximilian Bosch 4d0e1bfb3a
Merge pull request #172381 from mayflower/atlassian-service-restart 
nixos/{jira,crowd,confluence}: restart service on failure
 2022-05-13 14:10:30 +02:00
github-actions[bot] 814126147f
Merge staging-next into staging 2022-05-13 12:02:03 +00:00
github-actions[bot] 477cc9463d
Merge master into staging-next 2022-05-13 12:01:27 +00:00
Mario Rodas 9457a82e42
Merge pull request #171459 from ivan/postgresql-is-14 
nixos/postgresql: use postgres 14 for 22.05
 2022-05-13 06:44:25 -05:00
Artturi a0ed85ef29
Merge pull request #165876 from tpwrules/slim-eltorito 
iso-image: slim down UEFI El Torito image
 2022-05-13 14:30:38 +03:00
Linus Heckemann a7ee915179
Merge pull request #172378 from Mindavi/hydra-updates-3 
Hydra updates 3
 2022-05-13 12:55:53 +02:00
Max Hausch 2802e8f05c
nixos/hedgedoc: Set StateDirectory to workDir and uploadsPath 
This is needed to make uploading files possible in the hedgedoc ui.
 2022-05-13 10:27:51 +02:00
Robert Hensing 062bc5e74a lib.types.functionTo: Add pseudo-attr to generated docs 2022-05-13 09:01:05 +02:00
github-actions[bot] 97ea1401a7
Merge master into staging-next 2022-05-13 00:03:00 +00:00
Justin Bedo 0d41bc81d6
mercury: 20.06.1 -> 22.01.1 2022-05-13 08:48:16 +10:00
Silvan Mosberger 486992aca7
Merge pull request #160752 from svrana/desktop-manager-script-start 
desktop manager script: start properly
 2022-05-12 20:49:13 +02:00
Silvan Mosberger fd50826952
Merge pull request #104457 from ju1m/public-inbox 
Update public-inbox to 1.8.0 and add systemd services
 2022-05-12 20:46:39 +02:00
Sandro d89d7af1ba
Merge pull request #171165 from justinas/teleport-9 
teleport: 8.1.3 -> 9.1.2, add rdpclient
 2022-05-12 20:08:26 +02:00
github-actions[bot] 6b23d26afc
Merge master into staging-next 2022-05-12 18:02:25 +00:00
Alyssa Ross 85d792a928
nixos: don't put non-firmware in hardware.firmware 
These two packages don't have a lib/firmware directory, so putting
them in hardware.firmware has no effect.  This will become a hard
error once firmware compression is implemented.

(In the case of Linux, the firmware was all moved to linux-firmware.)
 2022-05-12 15:17:51 +00:00
Sandro 03c48beada
Merge pull request #172681 from LeSuisse/box-php-parallel-lint-zhf 
php81Packages.php-parallel-lint: fix the build
 2022-05-12 14:18:44 +02:00
Daniel Poelzleithner 64878e3a67 automysqlbackp: fix missing permissions for mysqldump 
automysqldump passes the --events flag, but without the EVENTS permission a error occures:
> mysqldump: Couldn't execute 'show events': Access denied for user 'automysqlbackup'@'localhost' to database 'mysql' (1044)
 2022-05-12 13:17:14 +02:00
Thomas Gerbet 3c90c28124 phpPackages.box: 2.7.5 -> 3.16.0 
The source has been moved to the new upstream since Box2 is abandonned.
 2022-05-12 11:42:27 +02:00
ners 49945f07cc installation-cd: add more guest tools to graphical installation base 2022-05-12 09:36:49 +02:00
Julien Moutinho c646d375d3 nixos/public-inbox: support enabling confinement 
Add support for enabling confinement
but does not enable it by default yet
because so far no module within NixOS uses confinement
hence that would set a precedent.
 2022-05-12 01:56:46 +02:00
Julien Moutinho 0e290442ba nixos/public-inbox: add tests 2022-05-12 01:56:16 +02:00
Julien Moutinho 8514800c42 nixos/public-inbox: init 2022-05-12 01:56:15 +02:00
Jan Tojnar 5af93e6908 Merge branch 'staging-next' into staging 2022-05-12 01:24:26 +02:00
Artturi c7b10b6df9
Merge pull request #172131 from euank/ena-2.7.1 
ena: 2.5.0 -> 2.7.1 & nixos/amazon-image: default to 5.15 kernel
 2022-05-12 01:38:24 +03:00
oxalica 085a5256c1
nixos/btrbk: inherit lib functions to simplify use-sites 2022-05-12 05:55:39 +08:00
oxalica 60e13131b6
nixos/btrbk: allow instances without timers 
This allows btrbk instances without a triggering timer by setting
`onCalendar` to `null`.
This is useful for manual-starting only btrbk backup settings.
 2022-05-12 05:55:17 +08:00
github-actions[bot] 7dbfbc2e90
Merge staging-next into staging 2022-05-11 18:10:52 +00:00
Thiago Kenji Okada eb6c3e1591
Merge pull request #171101 from NickCao/dendrite-bump 
dendrite: 0.8.1 -> 0.8.4
 2022-05-11 14:27:50 +01:00
Nick Cao 82f0b53588
dendrite: 0.8.1 -> 0.8.4 2022-05-11 18:40:05 +08:00
github-actions[bot] 2d62d4f8e6
Merge staging-next into staging 2022-05-11 06:02:11 +00:00
Rick van Schijndel 3a7f7c1153 hydra-unstable -> hydra_unstable 2022-05-10 23:32:02 +02:00
Martin Weinelt fa7ce6bc7f
nixos/openssh: Add sntrup761x25519-sha512 kexAlgo 
Introduced in OpenSSH 9.0 it became the part of the default kexAlgorithm
selection, visibile in sshd_config(5).

It is also enabled by default in the OpenSSH client, as can be seen from

$ ssh -Q KexAlgorithms

Also clarifies that we use the referenced documents as the lower bound,
given that they haven't been updated for 5-7y.
 2022-05-10 23:20:54 +02:00
Maximilian Bosch 6f9099fa62
nixos/{jira,crowd,confluence}: restart service on failure 
In case of unexpected failures of the services - such as an OOM - it
shouldn't be necessary for an administrator to restart the service by
hand (which is usually sufficient). Instead, this should happen
automatically.

Also, I decided to increase the interval between restart attempts from
100ms[1] to 10s for a small grace period as suggested by several online
resources[2][3].

[1] See `systemd.service(5)`
[2] https://it.megocollector.com/linux/create-systemd-services-for-atlassian-apps/
[3] https://anteru.net/blog/2017/jira-confluence-with-systemd-on-centos/
 2022-05-10 22:31:22 +02:00
Rick van Schijndel f433d91bb3 anbox: drop kernel modules package 
All builds are broken:
- 4.14
- 4.19
- 5.4

https://hydra.nixos.org/eval/1761072?filter=anbox&compare=1760998&full=#tabs-still-fail

Let's just drop it.

This leaves the anbox module possibly in a broken-ish state,
but I'm not sure what to do about it.
 2022-05-10 21:15:48 +02:00
github-actions[bot] 3a79190750
Merge staging-next into staging 2022-05-10 18:01:50 +00:00
D Anzorge 271905a33f minetest: add aliases and release notes for v4 deprecation 2022-05-10 19:26:25 +02:00
Lara 8f54cca448 nixos/doc: Add Snipe-IT to 22.05 release notes 2022-05-10 16:57:21 +02:00
Lara 9cb388739f nixos/snipe-it: init 
Snipe-IT is a free open source IT asset/license management system

https://snipeitapp.com/
 2022-05-10 16:57:21 +02:00
bb2020 8bdcffc4fe nixos/mbpfan: minor changes 2022-05-10 15:40:17 +03:00
Justinas Stankevicius 25cf5ebcd0 teleport: 8.1.3 -> 9.1.2 2022-05-09 23:35:46 +03:00
github-actions[bot] 629adb097a
Merge staging-next into staging 2022-05-09 18:01:59 +00:00
Artturi 4ae23f5c7d
Merge pull request #156071 from Madouura/dev/bcachefs-installer 
nixos/tests/installer: add bcachefs tests
 2022-05-09 19:48:16 +03:00
Robert Hensing ebf0465d09 Merge remote-tracking branch 'upstream/master' into testers 2022-05-09 14:27:13 +02:00
Robert Hensing ae172a2bb4 treewide: nixosTest -> testers.nixosTest 2022-05-09 14:16:06 +02:00
github-actions[bot] 27575e98ee
Merge staging-next into staging 2022-05-09 12:08:45 +00:00
Klemens Nanni 199933efdf nixos/mandoc: Leave shell argument quoting to nix 
Manually crafting a quoted string that otherwise lacks any safe-guards
looks odd.

Use `escapeShellArg` instead before prepending the path.
 2022-05-09 10:48:54 +02:00
Janne Heß e6fb1e63d1
Merge pull request #171650 from helsinki-systems/feat/config-systemd-package 
treewide: pkgs.systemd -> config.systemd.package
 2022-05-09 10:23:04 +02:00
Euan Kemp 35cfe2c29c nixos/amazon-image: default to 5.15 kernel 
Previously, it was held back due to the ENA driver not building on the
current default (5.15). The previous commit bumps the ENA driver, which
allows 5.15 to work.
 2022-05-08 21:13:50 -07:00
github-actions[bot] 31938a3f5c
Merge staging-next into staging 2022-05-09 00:03:28 +00:00
github-actions[bot] f39e774f11
Merge master into staging-next 2022-05-09 00:02:27 +00:00
Sandro 8803756fd3
Merge pull request #172072 from ivan/tinc-unbreak 
nixos/tinc: unbreak the service
 2022-05-09 01:27:12 +02:00
Sandro b196dea22d
Merge pull request #172080 from wentasah/usbrelay-1.0 
usbrelay: 0.9 -> 1.0
 2022-05-09 01:02:08 +02:00
Niklaus Giger 1d82f62aef
UHK-agent: Support for Ultimate Hacking Keyboard udev-rules and configuration application (#132420) 
* maintainers: add ngiger

* uhk-agent: init at 1.5.17

* Apply suggestions from code review

* Update pkgs/os-specific/linux/uhk-agent/default.nix

* Apply suggestions from code review

* Update pkgs/os-specific/linux/uhk-agent/default.nix

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2022-05-08 22:40:52 +02:00
Michal Sojka 26ec7081d6 nixos/usbrelayd: set myself as module maintainer 
I forgot setting that when creating the module.
 2022-05-08 21:44:50 +02:00
Michal Sojka 3effbca0bc usbrelay: 0.9 -> 1.0 2022-05-08 21:16:32 +02:00
ajs124 e4a1b1aacd
Merge pull request #171588 from mweinelt/tools-userpkgs 
nixos/tools: move firefox into user packages
 2022-05-08 19:02:47 +01:00
github-actions[bot] 6ab1fe48df
Merge staging-next into staging 2022-05-08 18:01:43 +00:00
github-actions[bot] e92815729d
Merge master into staging-next 2022-05-08 18:01:10 +00:00
Ivan Kozik 9db1d1782b nixos/tinc: unbreak the service 
The user is actually tinc.${network}, as Mic92 points out in
https://github.com/NixOS/nixpkgs/pull/171703#discussion_r867506032

Sorry, I broke this in https://github.com/NixOS/nixpkgs/pull/171703 earlier.

coreutils 9.1 chown does not complain in this case with a valid dotted user.
 2022-05-08 16:04:20 +00:00
Sandro befb337461
Merge pull request #169216 from Shawn8901/fix_prometheus_config_generation 
nixos/prometheus: use pkgs.formats.json.generate to write config file
 2022-05-08 15:09:09 +02:00
github-actions[bot] c5da241985
Merge staging-next into staging 2022-05-08 12:01:39 +00:00
github-actions[bot] eaaed3f1d2
Merge master into staging-next 2022-05-08 12:01:07 +00:00
Artturi 3c8e6248cb
Merge pull request #172040 from K900/fix-installer-eval 
installation-cd-base: fix eval
 2022-05-08 13:50:10 +03:00
Robert Schütz 2ddfd7e81b nixos/borgmatic: use pkgs.formats.yaml 2022-05-08 01:08:28 -07:00
K900 e994576b0d installation-cd-base: fix eval 2022-05-08 11:08:10 +03:00
github-actions[bot] d2d66da45b
Merge staging-next into staging 2022-05-07 18:01:36 +00:00
github-actions[bot] 84277e82a5
Merge master into staging-next 2022-05-07 18:01:03 +00:00
Florian Klink dbf2b9152f nixos/tests/systemd-nspawn: add test for machinectl pull-tar 
This will package up the closure of pkgs.hello in a tarball, and will
later on verify machinectl pull-tar properly unpacked it, serving as a
regression test for #108158.

Closes #108158
 2022-05-07 18:14:46 +02:00
Rick van Schijndel 17c252aab1
Merge pull request #153940 from tomfitzhenry/phosh-service 
nixos/phosh: add Phosh, the Phone Shell
 2022-05-07 17:56:44 +02:00
Artturi 1d09b16b0c
Merge pull request #171709 from avdv/fix-illum-segfault-and-restart 
illum: Prevent segfault when unplugging keyboards
 2022-05-07 17:40:52 +03:00
github-actions[bot] 00e5877c2f
Merge staging-next into staging 2022-05-07 00:02:47 +00:00
github-actions[bot] fa99b3742a
Merge master into staging-next 2022-05-07 00:02:09 +00:00
Sandro 72565373a4
Merge pull request #170912 from Baughn/master 2022-05-07 01:14:08 +02:00
Maximilian Bosch f0bb39d4b7
Merge pull request #167327 from lheckemann/networkd-usedhcp 
nixos/networkd: reimplement useDHCP in a sensible way
 2022-05-07 00:05:44 +02:00
Sandro 398cf5bf2d
Merge pull request #164698 from illustris/proxmox-lxc 2022-05-06 23:35:13 +02:00
Sandro d21ebc62bf
Merge pull request #170851 from danderson/danderson/ts-warn-rpf 
nixos/tailscale: warn if strict reverse path filtering is in use.
 2022-05-06 23:21:50 +02:00
github-actions[bot] 730d96c6bd
Merge staging-next into staging 2022-05-06 18:01:53 +00:00
github-actions[bot] 6c361fbbd8
Merge master into staging-next 2022-05-06 18:01:18 +00:00
Svein Ove Aas dcade93a25 factorio: Add loadLatestSave 2022-05-06 17:50:35 +01:00
Félix Baylac-Jacqué 7f76009e10 nixosTests.pleroma: fix test, remove toot patch 
Initially applied via e7f6370701, then
reverted by 96aaf29234.

Re-applying this patch: the pleroma NixOS test is broken without it.

It was originally impossible to login in toot without having an
interactive shell. I opened https://github.com/ihabunek/toot/pull/180
upstream to fix that and fetch this patch for this test.

The author decided to fix the issue using a slightly different
approach at a3eb5dca24

Because of this upstream fix, our custom patch does not apply anymore.
Using that stdin-based login upstream feature.

Pointing pleroma_ctl to the right RELEASE_COOKIE as well.
 2022-05-06 17:45:42 +02:00
Maximilian Bosch f4e5bd8064
nixos/nixos-generate-config: update comment for useDHCP 2022-05-06 16:56:47 +02:00
Vladimír Čunát 8ad52489e9
Merge branch 'master' into staging-next 2022-05-06 16:07:25 +02:00
Maximilian Bosch 7dbfd6b997
Merge pull request #171783 from Ma27/linux-kernel-updates 
Linux kernels 2022-05-06
 2022-05-06 14:05:28 +02:00
github-actions[bot] ad713fb84e
Merge staging-next into staging 2022-05-06 12:02:39 +00:00
github-actions[bot] 6e0aca3c43
Merge master into staging-next 2022-05-06 12:02:02 +00:00
Janne Heß 764d77f4c3
Merge pull request #124261 from helsinki-systems/feat/state-version-default-warn 
nixos/version: Warn about using the default of system.stateVersion
 2022-05-06 13:20:43 +02:00
Yureka 96aaf29234
Revert "Merge pull request #164398 from NinjaTrappeur/nin/pleroma-wrappers" 
This reverts commit 05417a66e7, reversing
changes made to 53e4f8d237.
 2022-05-06 12:38:28 +02:00
Maximilian Bosch b79d9a846b
linux/hardened/patches/5.17: init at 5.17.5-hardened1 2022-05-06 10:17:59 +02:00
github-actions[bot] 4c4d0d6bc3
Merge staging-next into staging 2022-05-06 06:02:20 +00:00
github-actions[bot] ff5c4d3404
Merge master into staging-next 2022-05-06 06:01:36 +00:00
Rick van Schijndel 32bebf42ea
Merge pull request #171703 from ivan/chown-colon 
treewide: chown user:group instead of user.group to fix warnings from coreutils 9.1
 2022-05-06 07:20:40 +02:00
David Anderson 3fdac0f981 nixos/tailscale: warn if strict reverse path filtering is in use. 
Tailscale uses policy routing to enable certain traffic to bypass
routes that lead into the Tailscale mesh. NixOS's reverse path
filtering setup doesn't understand the policy routing at play,
and so incorrectly interprets some of this traffic as spoofed.

Since this only breaks some features of Tailscale, merely warn
users about it, rather than make it a hard error.

Updates tailscale/tailscale#4432

Signed-off-by: David Anderson <dave@natulte.net>
 2022-05-05 18:28:48 -07:00
Sandro b9e7f61c72
Merge pull request #171747 from danderson/danderson/tailscale-getent 
nixos/tailscale: add glibc to PATH.
 2022-05-06 03:10:00 +02:00