Felix Buehler
6fd0acb81b
ec2-data: prefer 'install/umask' over 'chmod'
2024-07-03 23:18:43 +02:00
Pascal Bach
a8eaee11a9
Merge pull request #296459 from MinerSebas/restic-rest-server-hardening
...
nixos/restic-rest-server: Add additional service hardening
2024-04-10 23:33:34 +02:00
Cole Helbling
dbc967d14d
Revert "NixOS Integration Tests: Enable again for darwin"
2024-04-10 12:52:12 -07:00
K900
85d3f97277
Merge pull request #303114 from K900/sddm-no-x11
...
nixos/sddm: allow disabling the rest of X11
2024-04-10 22:22:20 +03:00
K900
ab0b45a3a0
nixos/sddm: allow disabling the rest of X11
2024-04-10 22:22:05 +03:00
Adam C. Stephens
e8ff41fa85
Merge pull request #285041 from r-vdp/nix-optimise-fix-timer
...
nix-optimise: only create timer unit if needed
2024-04-10 13:48:22 -04:00
Bjørn Forsman
74c1547424
nixos/doc: suggest mounting the ESP on /boot with umask=077
...
This prevents world-readable access to /boot, which is a security issue
that systemd-boot warns about.
Fixes https://github.com/NixOS/nixpkgs/issues/279362 .
2024-04-10 19:34:07 +02:00
Bjørn Forsman
e17e60b273
nixos-generate-config: preserve vfat filesystem mount permissions
...
The default is to mount these world-readable, but that's a security risk
for the EFI System Partition.
Ref https://github.com/NixOS/nixpkgs/issues/279362 .
2024-04-10 19:34:07 +02:00
Connor Baker
546930ab97
Merge pull request #300321 from jonringer/deprecate-cuda-autoAddDriver
...
cudaPackages.autoAddX: Deprecate
2024-04-10 12:45:48 -04:00
Jacek Galowicz
e4bf075cff
NixOS Integration Tests: Enable again for darwin
2024-04-10 17:59:11 +02:00
Jonathan Ringer
dadbcf9367
nixos/rl-24.05: Add deprecation entry for cudaPackages.autoAdd{DriverRunpath,OpenGLRunpathHook}
2024-04-10 08:31:19 -07:00
linsui
f1c99961e3
nixos/fzf: fix typo
2024-04-10 19:55:33 +08:00
Jörg Thalheim
949fe90552
Merge pull request #297640 from Mic92/digitalocean
...
digital-ocean: 'make it easier to use disko' and 'no longer disable multiple nixos generations in bootloader'
2024-04-10 09:08:20 +02:00
Rick van Schijndel
067e519281
Merge pull request #302858 from tweag/infinisil-maintainer
...
treewide: Drop infinisil as maintainer from most packages
2024-04-10 08:50:38 +02:00
K900
2704f5bb2f
Merge pull request #302595 from motiejus/autorandr-match-edid
...
nixos/autorandr: add --match-edid
2024-04-09 23:23:59 +03:00
Motiejus Jakštys
dd1e21f39f
nixos/autorandr: add --match-edid
...
It is useful when outputs change, but EDIDs do not. See [upstream PR][1]
for more details.
[1]: https://github.com/phillipberndt/autorandr/pull/293
2024-04-09 23:22:08 +03:00
Silvan Mosberger
ea5dfeab93
treewide: Drop infinisil as maintainer from most packages
...
I'm not going anywhere, I'm focusing my energy on other issues, and
getting pinged as a maintainer for packages is a bit distracting (also
I'm not using most of these packages anyways!)
2024-04-09 21:43:39 +02:00
Silvan Mosberger
4f1d724b82
Merge pull request #284551 from hercules-ci/types-attrTag
...
Add `types.attrTag`
2024-04-09 20:48:44 +02:00
Leona Maroni
40d8229671
Merge pull request #302203 from flyingcircusio/logrotate-docs-priority
...
nixos/logrotate docs: clarify settings
2024-04-09 20:47:59 +02:00
Jörg Thalheim
fb158384bd
Merge pull request #289270 from Mic92/nixos-tinc
...
nixos/tinc: fix user to not include . in its name
2024-04-09 19:43:48 +02:00
Jörg Thalheim
d79ff2f15b
Merge pull request #241816 from Mic92/cloud-init
...
nixos/cloud-init: enable filesystem based on what is configured
2024-04-09 19:42:45 +02:00
Jörg Thalheim
13cc579932
Merge pull request #301528 from Mic92/borgbackup-fix
...
nixos/borgbackup: fix network-online.target warning
2024-04-09 19:39:11 +02:00
pennae
4e21f361d6
Merge pull request #154952 from colemickens/extlinux
...
extlinux-conf-builder: specialisations entries
2024-04-09 18:49:08 +02:00
K900
97d675f411
Merge pull request #302758 from K900/kio-shenanigans
...
nixos/plasma6: better way to install kio5 plugins
2024-04-09 19:10:35 +03:00
K900
f18f62d23a
nixos/plasma6: better way to install kio5 plugins
...
This should _for sure_ avoid pulling in unnecessary bits.
2024-04-09 19:10:10 +03:00
Sandro
4cc6ce454d
Merge pull request #291913 from SuperSandro2000/sddm-wayland-only
2024-04-09 14:31:12 +02:00
Sandro
550f705f42
Merge pull request #301392 from McSinyx/yubi-pinentry-doc
2024-04-09 10:54:22 +02:00
K900
ad3a164c8c
Merge pull request #302748 from eclairevoyant/steam-fonts-revert
...
Revert "nixos/steam: ensure Steam picks up font packages"
2024-04-09 08:24:41 +03:00
Bjørn Forsman
a29010fe79
nixos: improve many 'enable' descriptions
2024-04-09 07:10:17 +02:00
éclairevoyant
f6fe07e669
Revert "nixos/steam: ensure Steam picks up font packages"
...
This reverts commit 2a1241b0e6
2024-04-09 00:38:11 -04:00
Robert Schütz
0dca19054c
Merge pull request #302389 from SuperSandro2000/vaultwarden-webvault
...
vaultwarden.webvault: 2024.3.0 -> 2024.3.1
2024-04-09 03:49:54 +00:00
Adam C. Stephens
f3ee2a75d4
Merge pull request #301712 from adamcstephens/incus/6
...
incus: 0.7.0 -> 6.0.0, add lts
2024-04-08 23:25:58 -04:00
Pol Dellaiera
38475aff83
Merge pull request #276695 from katexochen/azure-cli/plugins
...
azure-cli: immutable command index & add extensions
2024-04-09 03:44:35 +02:00
éclairevoyant
0c165dec84
nixos/steam: ensure Steam picks up font packages
2024-04-08 15:59:36 -07:00
Sandro Jäckel
b6e0c42bc2
tests/vaultwarden: adjust to changes in frontend
2024-04-09 00:05:35 +02:00
Sandro Jäckel
476b8c276e
treewide: rename renamed sddm/displayManager settings
2024-04-08 21:56:38 +02:00
Sandro Jäckel
5598d81e94
nixos/graphical-desktop: extract generic graphical things from xserver
...
This is required to fix the keymap in SDDM without X.
2024-04-08 21:56:37 +02:00
Sandro Jäckel
d220d8bb6f
nixos/sddm: allow running on wayland without xserver enabled
2024-04-08 21:56:37 +02:00
Sandro Jäckel
0d3ab0d4ec
nixos/sddm: move option from services.xserver.displayManager.sddm to services.displayManager.sddm
...
Because it is not just X anymore
2024-04-08 21:56:37 +02:00
Sandro Jäckel
6be2bfcc32
nixos/display-managers: extract generic display-manager bits
...
Some settings which where before inside the xserver module, are generic
and also required for SDDM under wayland. To make them easily re-usable
lets extract them.
2024-04-08 21:56:36 +02:00
Adam Stephens
a55f6f1511
lxd: add release notes for LTS change
2024-04-08 14:18:16 -04:00
Adam Stephens
dce92a3114
incus-lts: init at 6.0.0 and make default
2024-04-08 14:18:02 -04:00
nikstur
80cafa6a29
Merge pull request #302590 from nikstur/repart-image-label-length
...
nixos/image/repart: assert maximum label length
2024-04-08 18:48:53 +02:00
Will Fancher
0f5ae24dfb
Merge pull request #302466 from luishfonseca/zfs-initrd-udev-rules
...
nixos/zfs: Install zfs udev rules on stage1
2024-04-08 11:43:35 -04:00
Florian Klink
1dab5d7c77
Merge pull request #302228 from xzfc/bind-ipv6
...
bind: allow recursive queries from IPv6 loopback
2024-04-08 18:35:18 +03:00
nikstur
ad19cee09c
nixos/image/repart: assert maximum label length
...
The maximum label length is specified by UEFI and enforced/asserted by
systemd-repart. This lets evaluation fail already and give the user
some more information about what's wrong.
Also warn when the suggested label length is exceeded. This serves as a
safety mechanism for using systemd-sysupdate style A/B updates where the
version number is encoded in the label and might not be incrementable
when the maximum label size is reached.
2024-04-08 16:42:25 +02:00
nikstur
4c397ea6de
systemd-lib: include GPTMaxLabelLength constant
2024-04-08 16:42:25 +02:00
Cabia Rangris
215d144f77
nixos/outline: fix s3 storage ( #302567 )
...
ReadWritePaths were crashing the unit due to non-existent folders on s3 configuration
https://github.com/NixOS/nixpkgs/pull/298892#issuecomment-2042666854
2024-04-08 17:06:27 +04:00
nikstur
b1a486be09
Merge pull request #301581 from nikstur/repart-image-cross
...
nixos/repart-image: supply explicit --architecture to repart
2024-04-08 14:14:19 +02:00
Michele Guerini Rocco
42b2359f2c
Merge pull request #302522 from kmein/keygen
...
nixos/manual: fix sshfs keygen output
2024-04-08 12:07:17 +02:00
