Martin Weinelt
a2d1d16af8
nixos/mosquitto: Migrate away from bind_address/port config keys
...
Fixes these two deprecation warnings, by moving away from these options
towards a simple listener configuration.
> The 'bind_address' option is now deprecated and will be removed in a future version. The behaviour will default to true.
> The 'port' option is now deprecated and will be removed in a future version. Please use 'listener' instead.
Fixes: #120860
2021-05-01 19:46:48 +02:00
Martin Weinelt
33e867620e
nixos/mosquitto: harden systemd unit
...
It can still network, it can only access the ssl related files if ssl is
enabled.
✗ PrivateNetwork= Service has access to the host's network 0.5
✗ RestrictAddressFamilies=~AF_(INET|INET6) Service may allocate Internet sockets 0.3
✗ DeviceAllow= Service has a device ACL with some special devices 0.1
✗ IPAddressDeny= Service does not define an IP address allow list 0.2
✗ RootDirectory=/RootImage= Service runs within the host's root directory 0.1
✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1
→ Overall exposure level for mosquitto.service: 1.1 OK 🙂
2021-05-01 19:46:48 +02:00
Luke Granger-Brown
6aec5a24a4
Merge pull request #120176 from r-ryantm/auto-update/doppler
...
doppler: 3.23.2 -> 3.24.3
2021-05-01 18:41:29 +01:00
Luke Granger-Brown
291fd0ee7e
doppler: 3.24.1 -> 3.24.3
2021-05-01 17:40:21 +00:00
Luke Granger-Brown
3dc446c835
Merge pull request #120185 from r-ryantm/auto-update/fluent-bit
...
fluent-bit: 1.7.3 -> 1.7.4
2021-05-01 18:34:49 +01:00
Luke Granger-Brown
e276940ac0
Merge pull request #120189 from r-ryantm/auto-update/geoipupdate
...
geoipupdate: 4.6.0 -> 4.7.1
2021-05-01 18:30:29 +01:00
Luke Granger-Brown
3e473120d9
Merge pull request #120153 from r-ryantm/auto-update/buildkite-agent
...
buildkite-agent: 3.28.1 -> 3.29.0
2021-05-01 18:23:18 +01:00
Luke Granger-Brown
b6c96f42ed
Merge pull request #120600 from dotlambda/openshot-ffmpeg
...
libsForQt5.libopenshot: use ffmpeg instead of ffmpeg_3
2021-05-01 18:18:45 +01:00
Milan Pässler
d05202ea7c
Revert "firefox-esr: use latest Rust"
...
This reverts commit 903e23ad36
.
It caused segfaults when playing media:
https://github.com/NixOS/nixpkgs/issues/121408
2021-05-01 18:47:29 +02:00
Sandro
4b2c9640e7
Merge pull request #120613 from erikbackman/master
2021-05-01 18:42:40 +02:00
Jan Tojnar
1733bade1a
Merge pull request #121226 from zhaofengli/librem-take2
...
phosh: init at 0.10.2
2021-05-01 18:41:50 +02:00
Graham Christensen
17af7a98d2
Merge pull request #121159 from ymatsiuk/fluxcd
...
fluxcd: 0.12.0 -> 0.13.2
2021-05-01 12:03:07 -04:00
Robert Schütz
ddf0468506
google-drive-ocamlfuse: 0.7.22 -> 0.7.26
2021-05-01 17:45:34 +02:00
Sandro
8efeed72fb
Merge pull request #120627 from MetaDark/yabridge
...
yabridge, yabridgectl: hard code wine path
2021-05-01 17:35:03 +02:00
Sandro
e9547b6a31
Merge pull request #120733 from evalexpr/add-zsh-z
2021-05-01 17:33:07 +02:00
Lennart Spitzner
8c70a1a989
lib: fix documented type of fixedWidthString ( #121396 )
2021-05-01 17:29:00 +02:00
Ilan Joselevich
d77daaf10b
virt-manager: 3.1.0 -> 3.2.0 ( #120279 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-05-01 16:22:14 +01:00
Luke Granger-Brown
be598f3980
Merge pull request #120541 from pennae/fail2ban
...
nixos/fail2ban: add maxretry/extraPackages options
2021-05-01 15:09:24 +01:00
davidak
20935f3e29
Merge pull request #95225 from ZerataX/mangohud
...
mangohud: init at 0.4.1
2021-05-01 15:24:28 +02:00
davidak
6dab4db428
Merge pull request #119668 from davidak/ocenaudio
...
ocenaudio: 3.10.2 -> 3.10.6
2021-05-01 15:18:54 +02:00
Luke Granger-Brown
1e9f225a7a
Merge pull request #120633 from r-ryantm/auto-update/android-udev-rules
...
android-udev-rules: 20210302 -> 20210425
2021-05-01 13:57:27 +01:00
Luke Granger-Brown
55b33802be
Merge pull request #120647 from r-ryantm/auto-update/conky
...
conky: 1.12.1 -> 1.12.2
2021-05-01 13:53:50 +01:00
Sandro
ac72d9acfe
Merge pull request #91955 from c00w/expand
...
sd-image: Add option to control sd image expansion on boot.
2021-05-01 14:52:07 +02:00
Luke Granger-Brown
2bf2252d6a
libsForQt5.libopenshot: tidy up nixpkgs-hammering comments
...
* Remove now-unused dependency from arguments
* Move swig to nativeBuildInputs
* Add comment to fetchpatch
2021-05-01 12:51:46 +00:00
Sandro
783f5cd8bc
Merge pull request #107940 from c00w/credhub
...
credhub-cli: fix build under go1.15
2021-05-01 14:51:04 +02:00
Luke Granger-Brown
d76b075e3c
Merge pull request #121246 from thblt/master
...
nixos/pcscd: ensure polkit rules are loaded (fix #121121 )
2021-05-01 13:30:45 +01:00
Alyssa Ross
c49a518f9f
qemu: 5.2.0 -> 6.0.0; adopt; broaden platforms
...
Tested building qemu_kvm, qemu_full, and qemu_test on x86_64-linux.
Also tested booting a VM generated with nixos-rebuild build-vm.
I wasn't able to test building pkgsMusl.qemu_kvm, because of many
build failures in dependencies.
2021-05-01 11:31:02 +00:00
Fabian Affolter
76c3a0677e
Merge pull request #121316 from r-ryantm/auto-update/macchina
...
macchina: 0.6.9 -> 0.7.2
2021-05-01 13:04:56 +02:00
Martin Weinelt
468c34be50
Merge pull request #121367 from LeSuisse/postgresql_jdbc-42.2.20
...
postgresql_jdbc: 42.2.5 -> 42.2.20
2021-05-01 12:28:11 +02:00
Daniël de Kok
9faac78ede
Merge pull request #119778 from danieldk/cudnn-8.1.1
...
cudnn_cudatoolkit_11_0: 8.1.0 -> 8.1.1
2021-05-01 11:52:37 +02:00
Robert Schütz
ada3e19b7a
prs: 0.2.10 -> 0.2.11 ( #121314 )
...
https://gitlab.com/timvisee/prs/-/blob/v0.2.11/CHANGELOG.md#0211-2021-04-30
2021-05-01 11:01:38 +02:00
Michael Raskin
fee25b20d6
Merge pull request #121372 from r-ryantm/auto-update/cgal
...
cgal_5: 5.2 -> 5.2.1
2021-05-01 08:53:24 +00:00
R. RyanTM
2ec00820e6
cgal_5: 5.2 -> 5.2.1
2021-05-01 08:30:14 +00:00
Thomas Gerbet
f722f8d518
postgresql_jdbc: 42.2.5 -> 42.2.20
...
Fixes CVE-2020-13692.
2021-05-01 09:46:26 +02:00
Zhaofeng Li
31a32eeed3
nixos/phosh: init
...
Co-authored-by: Blaž Hrastnik <blaz@mxxn.io>
Co-authored-by: Jan Tojnar <jtojnar@gmail.com>
Co-authored-by: Jordi Masip <jordi@masip.cat>
2021-05-01 06:55:02 +00:00
Zhaofeng Li
3086335f04
nixos/feedbackd: init
2021-05-01 06:52:35 +00:00
Zhaofeng Li
f3e2883167
feedbackd: Add udev rules to output
2021-05-01 06:52:35 +00:00
lewo
85aef7706e
Merge pull request #120620 from mweinelt/empty-capability-bounding-sets
...
nixos/{opendkim,rspamd}: Fix CapabilityBoundingSet option
2021-05-01 08:17:19 +02:00
Otavio Salvador
3b07746b0a
shellhub-agent: 0.6.0 -> 0.6.4
...
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2021-04-30 23:08:32 -07:00
Otavio Salvador
388659919a
cargo-limit: 0.0.7 -> 0.0.8
...
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2021-04-30 23:08:32 -07:00
Guillaume Girol
fcc8230147
bombono: update ffmpeg, fix iso generation
2021-04-30 23:04:29 -07:00
Anderson Torres
af4d1fae3f
Merge pull request #121341 from AluisioASG/aasg/haunt-0.2.5
...
haunt: fix Guile load paths
2021-05-01 02:17:34 -03:00
Anderson Torres
1e56a5ae63
Merge pull request #121357 from AndersonTorres/new-river
...
river: refactor
2021-05-01 01:35:04 -03:00
AndersonTorres
e1a8c80e92
river: refactor
2021-05-01 00:45:20 -03:00
Mario Rodas
b6ee21af06
Merge pull request #121295 from marsam/update-lxc
...
lxc: 4.0.6 -> 4.0.7
2021-04-30 22:29:22 -05:00
Luke Granger-Brown
c58f60b41b
Merge pull request #121352 from lukegb/debug-hydra
...
amazonImage: make statically sized again
2021-05-01 04:06:34 +01:00
R. RyanTM
168f7a1dcf
malcontent: 0.10.0 -> 0.10.1
2021-05-01 05:02:33 +02:00
Luke Granger-Brown
733d682cc3
nixos/release: add amazonImageAutomaticSize
...
This allows us to continue to have the automatically sized image attempt
to build on Hydra, which should give us a good indication of when we've
got this fixed.
2021-05-01 02:43:45 +00:00
Mario Rodas
070f37edd6
Merge pull request #121344 from r-ryantm/auto-update/buildkit
...
buildkit: 0.8.2 -> 0.8.3
2021-04-30 21:38:55 -05:00
Luke Granger-Brown
87c3b7e767
amazonImage: make statically sized again
...
For reasons we haven't been able to work out, the aarch64 EC2 image now
regularly exceeds the output image size on hydra.nixos.org. As a
workaround, set this back to being statically sized again.
The other images do seem to build - it's just a case of the EC2 image
now being too large (occasionally non-determinstically).
2021-05-01 02:19:42 +00:00