1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-25 03:17:13 +00:00
Commit graph

286499 commits

Author SHA1 Message Date
Martin Weinelt a2d1d16af8
nixos/mosquitto: Migrate away from bind_address/port config keys
Fixes these two deprecation warnings, by moving away from these options
towards a simple listener configuration.

> The 'bind_address' option is now deprecated and will be removed in a future version. The behaviour will default to true.
> The 'port' option is now deprecated and will be removed in a future version. Please use 'listener' instead.

Fixes: #120860
2021-05-01 19:46:48 +02:00
Martin Weinelt 33e867620e
nixos/mosquitto: harden systemd unit
It can still network, it can only access the ssl related files if ssl is
enabled.

✗ PrivateNetwork=                                             Service has access to the host's network                                            0.5
✗ RestrictAddressFamilies=~AF_(INET|INET6)                    Service may allocate Internet sockets                                               0.3
✗ DeviceAllow=                                                Service has a device ACL with some special devices                                  0.1
✗ IPAddressDeny=                                              Service does not define an IP address allow list                                    0.2
✗ RootDirectory=/RootImage=                                   Service runs within the host's root directory                                       0.1
✗ RestrictAddressFamilies=~AF_UNIX                            Service may allocate local sockets                                                  0.1

→ Overall exposure level for mosquitto.service: 1.1 OK 🙂
2021-05-01 19:46:48 +02:00
Luke Granger-Brown 6aec5a24a4
Merge pull request #120176 from r-ryantm/auto-update/doppler
doppler: 3.23.2 -> 3.24.3
2021-05-01 18:41:29 +01:00
Luke Granger-Brown 291fd0ee7e doppler: 3.24.1 -> 3.24.3 2021-05-01 17:40:21 +00:00
Luke Granger-Brown 3dc446c835
Merge pull request #120185 from r-ryantm/auto-update/fluent-bit
fluent-bit: 1.7.3 -> 1.7.4
2021-05-01 18:34:49 +01:00
Luke Granger-Brown e276940ac0
Merge pull request #120189 from r-ryantm/auto-update/geoipupdate
geoipupdate: 4.6.0 -> 4.7.1
2021-05-01 18:30:29 +01:00
Luke Granger-Brown 3e473120d9
Merge pull request #120153 from r-ryantm/auto-update/buildkite-agent
buildkite-agent: 3.28.1 -> 3.29.0
2021-05-01 18:23:18 +01:00
Luke Granger-Brown b6c96f42ed
Merge pull request #120600 from dotlambda/openshot-ffmpeg
libsForQt5.libopenshot: use ffmpeg instead of ffmpeg_3
2021-05-01 18:18:45 +01:00
Milan Pässler d05202ea7c
Revert "firefox-esr: use latest Rust"
This reverts commit 903e23ad36.

It caused segfaults when playing media:
https://github.com/NixOS/nixpkgs/issues/121408
2021-05-01 18:47:29 +02:00
Sandro 4b2c9640e7
Merge pull request #120613 from erikbackman/master 2021-05-01 18:42:40 +02:00
Jan Tojnar 1733bade1a
Merge pull request #121226 from zhaofengli/librem-take2
phosh: init at 0.10.2
2021-05-01 18:41:50 +02:00
Graham Christensen 17af7a98d2
Merge pull request #121159 from ymatsiuk/fluxcd
fluxcd: 0.12.0 -> 0.13.2
2021-05-01 12:03:07 -04:00
Robert Schütz ddf0468506 google-drive-ocamlfuse: 0.7.22 -> 0.7.26 2021-05-01 17:45:34 +02:00
Sandro 8efeed72fb
Merge pull request #120627 from MetaDark/yabridge
yabridge, yabridgectl: hard code wine path
2021-05-01 17:35:03 +02:00
Sandro e9547b6a31
Merge pull request #120733 from evalexpr/add-zsh-z 2021-05-01 17:33:07 +02:00
Lennart Spitzner 8c70a1a989
lib: fix documented type of fixedWidthString (#121396) 2021-05-01 17:29:00 +02:00
Ilan Joselevich d77daaf10b
virt-manager: 3.1.0 -> 3.2.0 (#120279)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-05-01 16:22:14 +01:00
Luke Granger-Brown be598f3980
Merge pull request #120541 from pennae/fail2ban
nixos/fail2ban: add maxretry/extraPackages options
2021-05-01 15:09:24 +01:00
davidak 20935f3e29
Merge pull request #95225 from ZerataX/mangohud
mangohud: init at 0.4.1
2021-05-01 15:24:28 +02:00
davidak 6dab4db428
Merge pull request #119668 from davidak/ocenaudio
ocenaudio: 3.10.2 -> 3.10.6
2021-05-01 15:18:54 +02:00
Luke Granger-Brown 1e9f225a7a
Merge pull request #120633 from r-ryantm/auto-update/android-udev-rules
android-udev-rules: 20210302 -> 20210425
2021-05-01 13:57:27 +01:00
Luke Granger-Brown 55b33802be
Merge pull request #120647 from r-ryantm/auto-update/conky
conky: 1.12.1 -> 1.12.2
2021-05-01 13:53:50 +01:00
Sandro ac72d9acfe
Merge pull request #91955 from c00w/expand
sd-image: Add option to control sd image expansion on boot.
2021-05-01 14:52:07 +02:00
Luke Granger-Brown 2bf2252d6a libsForQt5.libopenshot: tidy up nixpkgs-hammering comments
* Remove now-unused dependency from arguments
* Move swig to nativeBuildInputs
* Add comment to fetchpatch
2021-05-01 12:51:46 +00:00
Sandro 783f5cd8bc
Merge pull request #107940 from c00w/credhub
credhub-cli: fix build under go1.15
2021-05-01 14:51:04 +02:00
Luke Granger-Brown d76b075e3c
Merge pull request #121246 from thblt/master
nixos/pcscd: ensure polkit rules are loaded (fix #121121)
2021-05-01 13:30:45 +01:00
Alyssa Ross c49a518f9f qemu: 5.2.0 -> 6.0.0; adopt; broaden platforms
Tested building qemu_kvm, qemu_full, and qemu_test on x86_64-linux.
Also tested booting a VM generated with nixos-rebuild build-vm.

I wasn't able to test building pkgsMusl.qemu_kvm, because of many
build failures in dependencies.
2021-05-01 11:31:02 +00:00
Fabian Affolter 76c3a0677e
Merge pull request #121316 from r-ryantm/auto-update/macchina
macchina: 0.6.9 -> 0.7.2
2021-05-01 13:04:56 +02:00
Martin Weinelt 468c34be50
Merge pull request #121367 from LeSuisse/postgresql_jdbc-42.2.20
postgresql_jdbc: 42.2.5 -> 42.2.20
2021-05-01 12:28:11 +02:00
Daniël de Kok 9faac78ede
Merge pull request #119778 from danieldk/cudnn-8.1.1
cudnn_cudatoolkit_11_0: 8.1.0 -> 8.1.1
2021-05-01 11:52:37 +02:00
Robert Schütz ada3e19b7a
prs: 0.2.10 -> 0.2.11 (#121314)
https://gitlab.com/timvisee/prs/-/blob/v0.2.11/CHANGELOG.md#0211-2021-04-30
2021-05-01 11:01:38 +02:00
Michael Raskin fee25b20d6
Merge pull request #121372 from r-ryantm/auto-update/cgal
cgal_5: 5.2 -> 5.2.1
2021-05-01 08:53:24 +00:00
R. RyanTM 2ec00820e6 cgal_5: 5.2 -> 5.2.1 2021-05-01 08:30:14 +00:00
Thomas Gerbet f722f8d518 postgresql_jdbc: 42.2.5 -> 42.2.20
Fixes CVE-2020-13692.
2021-05-01 09:46:26 +02:00
Zhaofeng Li 31a32eeed3 nixos/phosh: init
Co-authored-by: Blaž Hrastnik <blaz@mxxn.io>
Co-authored-by: Jan Tojnar <jtojnar@gmail.com>
Co-authored-by: Jordi Masip <jordi@masip.cat>
2021-05-01 06:55:02 +00:00
Zhaofeng Li 3086335f04 nixos/feedbackd: init 2021-05-01 06:52:35 +00:00
Zhaofeng Li f3e2883167 feedbackd: Add udev rules to output 2021-05-01 06:52:35 +00:00
lewo 85aef7706e
Merge pull request #120620 from mweinelt/empty-capability-bounding-sets
nixos/{opendkim,rspamd}: Fix CapabilityBoundingSet option
2021-05-01 08:17:19 +02:00
Otavio Salvador 3b07746b0a shellhub-agent: 0.6.0 -> 0.6.4
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2021-04-30 23:08:32 -07:00
Otavio Salvador 388659919a cargo-limit: 0.0.7 -> 0.0.8
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2021-04-30 23:08:32 -07:00
Guillaume Girol fcc8230147 bombono: update ffmpeg, fix iso generation 2021-04-30 23:04:29 -07:00
Anderson Torres af4d1fae3f
Merge pull request #121341 from AluisioASG/aasg/haunt-0.2.5
haunt: fix Guile load paths
2021-05-01 02:17:34 -03:00
Anderson Torres 1e56a5ae63
Merge pull request #121357 from AndersonTorres/new-river
river: refactor
2021-05-01 01:35:04 -03:00
AndersonTorres e1a8c80e92 river: refactor 2021-05-01 00:45:20 -03:00
Mario Rodas b6ee21af06
Merge pull request #121295 from marsam/update-lxc
lxc: 4.0.6 -> 4.0.7
2021-04-30 22:29:22 -05:00
Luke Granger-Brown c58f60b41b
Merge pull request #121352 from lukegb/debug-hydra
amazonImage: make statically sized again
2021-05-01 04:06:34 +01:00
R. RyanTM 168f7a1dcf malcontent: 0.10.0 -> 0.10.1 2021-05-01 05:02:33 +02:00
Luke Granger-Brown 733d682cc3 nixos/release: add amazonImageAutomaticSize
This allows us to continue to have the automatically sized image attempt
to build on Hydra, which should give us a good indication of when we've
got this fixed.
2021-05-01 02:43:45 +00:00
Mario Rodas 070f37edd6
Merge pull request #121344 from r-ryantm/auto-update/buildkit
buildkit: 0.8.2 -> 0.8.3
2021-04-30 21:38:55 -05:00
Luke Granger-Brown 87c3b7e767 amazonImage: make statically sized again
For reasons we haven't been able to work out, the aarch64 EC2 image now
regularly exceeds the output image size on hydra.nixos.org. As a
workaround, set this back to being statically sized again.

The other images do seem to build - it's just a case of the EC2 image
now being too large (occasionally non-determinstically).
2021-05-01 02:19:42 +00:00