Eelco Dolstra
abdc5961c3
Fix starting the firewall
...
Probably as a result of 992c514a20
, it
was not being started anymore.
My understanding of systemd.special(7) (section "Special passive
system units") is that the firewall should want network-pre.target,
rather than the other way around (not very intuitive...). This in
itself does not cause the firewall to be wanted, which is why the
wanted-by relationship with multi-user.target is necessary.
http://hydra.nixos.org/build/39965589
2016-09-07 14:30:11 +02:00
Eelco Dolstra
d8625f6d25
Make the NFSv4 tests release-critical
...
We can probably drop NFSv3...
2016-09-07 14:15:57 +02:00
Eelco Dolstra
58b028f9ee
nfs module: Fix dependency on statd and idmapd
...
http://hydra.nixos.org/build/40038016
2016-09-07 14:15:57 +02:00
Eelco Dolstra
015c984537
nfs module: Improve descriptions
2016-09-07 14:15:57 +02:00
Alexey Shmalko
b7237abc08
avahi-daemon: remove default browse-domains
...
These domains are not actually default but examples. See
https://github.com/lathiat/avahi/blob/master/avahi-daemon/avahi-daemon.conf#L24
for default config.
2016-09-07 13:58:21 +02:00
Shea Levy
03b888e205
Merge branch 'stage2-generalise-containers' of https://github.com/rickynils/nixpkgs
2016-09-07 05:39:22 -04:00
Eelco Dolstra
70be99c645
Merge pull request #18365 from NixOS/fix-sshd-failure
...
Make /var/empty immutable (with chattr +i)
2016-09-07 11:18:49 +02:00
Domen Kožar
8f95e6f6aa
hardcode e2fsprogs, idempotent chmod, remove care condition
2016-09-07 10:49:27 +02:00
Rickard Nilsson
ab9537ca22
nixos: Generalise the container tests in stage-2 boot
...
This way, stage-2 behaves correctly also for libvirt-lxc containers.
Some more discussion on this:
a7a08188bf
bfe46a653b
2016-09-07 07:50:04 +00:00
Langston Barrett
492a90f1c9
dovecot service: require mail{User,Group} with sieveScripts
...
fixes #17702 .
2016-09-07 01:50:59 +00:00
Nikolay Amiantov
aed2cd32f8
nixos containers: hopefully fix test failures
...
Closes #18377 .
2016-09-07 02:55:48 +03:00
Franz Pletz
9190dbcc0e
Merge pull request #18366 from groxxda/acme-loop
...
security.acme: require networking for client, remove loop without fallbackHost
2016-09-06 23:02:07 +02:00
Domen Kožar
3877ec5b2f
Make /var/empty immutable
...
Fixes #14910 and #18358
Deployed to an existing server, restarted sshd and polkit to verify
they don't fail.
2016-09-06 20:13:33 +02:00
Thomas Tuegel
caac16a924
Merge pull request #18362 from ericsagnes/fix/im-description
...
input-methods modules: fix engine description
2016-09-06 11:42:28 -05:00
Alexander Ried
e84b803300
security.acme: remove loop when no fallbackHost is given
2016-09-06 17:47:00 +02:00
Alexander Ried
7f98dca782
security.acme: the client really needs networking
...
Actually this can be improved since the client only needs network
connectivity if it needs to renew the certificate.
2016-09-06 17:47:00 +02:00
Eelco Dolstra
98102ebd92
Enable the runuser command from util-linux
...
Fixes #14701 .
2016-09-06 17:23:27 +02:00
Eelco Dolstra
f2ddf2a9be
nix: 1.11.3 -> 1.11.4
2016-09-06 16:15:22 +02:00
Eelco Dolstra
1fef99942e
nixos-rebuild: Move the Nix fallback store paths into a separate file
2016-09-06 16:07:47 +02:00
Eric Sagnes
314c30cbf1
input-methods modules: fix engine description
2016-09-06 22:53:15 +09:00
obadz
3f1ceae281
Partially revert "Revert "nixos: remove rsync from base install and add explicit path in nixos-install""
...
This partially reverts commit 0aa7520670
.
Fine for rsync to be in system path but we still need the explicit path
in nixos-install in case it is invoked from non-NixOS systems and also
to fix OVA test failure
See also 0aa7520670
cc @edolstra
2016-09-06 11:49:03 +01:00
Eelco Dolstra
520cb14f16
Fix infinite recursion introduced by f3c32cb2c1
2016-09-05 18:17:22 +02:00
Eelco Dolstra
1a1a31c9d8
Merge pull request #18321 from groxxda/cleanup
...
various: minor cleanup
2016-09-05 17:11:45 +02:00
Eelco Dolstra
5b5c2fb9c0
Make the default fonts conditional on services.xserver.enable
...
We were pulling in 44 MiB of fonts in the default configuration, which
is a bit excessive for headless configurations like EC2
instances. Note that dejavu_minimal ensures that remote X11-forwarded
applications still have a basic font regardless.
2016-09-05 15:51:37 +02:00
Eelco Dolstra
f3c32cb2c1
Let services.openssh.forwardX11 imply programs.ssh.setXAuthLocation
2016-09-05 15:38:42 +02:00
Alexander Ried
53f3c2a278
systemd: add some missing upstream units
2016-09-05 15:03:46 +02:00
Alexander Ried
322c823193
agetty: remove override for container-getty@.service since it's upstream
...
Added in systemd/systemd@68ac53e
2016-09-05 15:03:35 +02:00
Alexander Ried
2fd6b36c51
networkd.module: remove before network-online
...
this is already upstream default
2016-09-05 15:03:35 +02:00
Alexander Ried
992c514a20
(network,remote-fs)-pre: remove duplicate wantedBy and before
...
this is part of (network,remote-fs).target, repectively
2016-09-05 15:03:35 +02:00
Eelco Dolstra
ab49ebe6fa
Make it possible to disable "info"
2016-09-05 14:53:27 +02:00
Eelco Dolstra
5e5df88457
modules/profiles/minimal.nix: Disable "man"
2016-09-05 14:53:27 +02:00
Eelco Dolstra
ba70ce28ae
no-x-libs.nix: Ensure that dbus doesn't use X11
...
It appears that packageOverrides no longer overrides aliases, so
aliases like
dbus_tools = self.dbus.out;
dbus_daemon = self.dbus.daemon;
now use the old, non-overriden version of dbus. That seems like a
pretty serious regression in general, but for this particular problem,
I've fixed it by replacing dbus_daemon by dbus.daemon and dbus_tools
by dbus.
2016-09-05 13:45:59 +02:00
Eelco Dolstra
0aa7520670
Revert "nixos: remove rsync from base install and add explicit path in nixos-install"
...
This reverts commit 582313bafe
.
Removing rsync is actually pointless because nixos-install depends on
it. So if it's part of the system closure, we may as well provide it
to users.
Probably with the next Nix release we can drop the use of rsync and
use "nix copy" instead.
2016-09-05 13:45:59 +02:00
Langston Barrett
ee501fd49a
networkmanager: add information from wiki to docs ( #18245 )
...
* networkmanager: add information from wiki to docs
Specifically:
* mention nmcli, nmtui
* mention gtk and kde applets
fixes #13273
2016-09-05 11:13:47 +02:00
Joachim Fasting
269f739ded
grsecurity module: set nixpkgs.config.grsecurity = true
2016-09-05 00:56:17 +02:00
Domen Kožar
393e646e4f
setuid-wrappers: correctly umount the tmpfs
2016-09-04 17:56:00 +02:00
Jaka Hudoklin
c083ab99b2
Merge pull request #17969 from offlinehacker/pkgs/etcd/update-3.0.6
...
Update etcd, improve nixos module, fix nixos tests
2016-09-04 16:31:50 +02:00
Rok Garbas
095c7aefe1
nixos/manual: mentioning other zsh options at program.zsh.enable
...
fixes #13224
2016-09-04 16:31:29 +02:00
Jörg Thalheim
94dd66882f
ferm: fix race condition in integration test ( #18288 )
...
curl sent the request faster then nginx bound the port in some cases
2016-09-04 14:34:06 +02:00
Karn Kallio
8d977ead38
setuid-wrappers : Prepare permissions for running wrappers
...
The new setuid-wrappers in /run cannot be executed by users due to:
1) the temporary directory does not allow access
2) the /run is mounted nosuid
2016-09-04 03:19:32 +02:00
Alexander Ried
1542bddcc8
nixos-install.sh: Create /var ( #18266 )
...
Got lost in a6670c1a0b
2016-09-03 19:17:44 +02:00
Joachim F
78b4b632ae
Merge pull request #18085 from Mic92/ferm
...
ferm: add integration test
2016-09-03 17:27:38 +02:00
Joachim F
3db5311be9
Merge pull request #18207 from tavyc/quagga-module
...
quagga service: init
2016-09-03 16:23:23 +02:00
Graham Christensen
ff5fd1ec40
etcd-cluster: split up openssl commands
2016-09-03 13:59:28 +02:00
Tuomas Tynkkynen
e2c6740c37
Merge commit 'adaee73' from staging into master
...
This one was already merged into release-16.09, so let's not have the
stable branch is ahead of master and confuse things. In addition to
that, currently we have an odd situation that master has less things
actually finished building than in staging.
Conflicts:
pkgs/data/documentation/man-pages/default.nix
2016-09-03 01:02:51 +03:00
Vladimír Čunát
02217bf697
Merge #17838 : postgresql: Fix use with extensions
2016-09-02 20:09:40 +02:00
Octavian Cerna
eb14130934
quagga test: Add test for the quagga service.
2016-09-02 14:00:32 +03:00
Octavian Cerna
a30d4654f2
quagga service: New NixOS module.
2016-09-02 13:59:51 +03:00
Rob Vermaas
d6dbe43af2
bightbox-image.nix: use lib in stead of stdenv.lib. Fixes #18208
2016-09-02 10:04:09 +00:00
Lancelot SIX
5b8072fff6
postgresql: Fix use with extensions
...
Fixes #15512 and #16032
With the multi output, postgresql cannot find at runtime what is its
basedir when looking for libdir and pkglibdir. This commit fixes that.
2016-09-02 11:51:21 +02:00