Commit Graph

30573 Commits

Author SHA1 Message Date
Ryan Lahfa
cc11eea79d
Merge pull request #195671 from amarshall/rename-readonlystore
nixos: nix.readOnlyStore -> boot.readOnlyNixStore
2022-12-01 15:06:23 +01:00
Ryan Lahfa
39f399f6ff
Merge pull request #199395 from owm111/physlock-m
nixos/physlock: add muteKernelMessages option
2022-12-01 14:51:50 +01:00
Ryan Lahfa
da5ef17a96
Merge pull request #199520 from bjornfor/nixos-hardware-sane-open-firewal
nixos/sane: add openFirewall option
2022-12-01 14:50:11 +01:00
Ryan Lahfa
cd08eded16
Merge pull request #202077 from Mic92/mandb-cross
nixos/mandb: fix cross compiling
2022-12-01 14:37:02 +01:00
Ryan Lahfa
1c5443f6cd
Merge pull request #203183 from teutat3s/fix/gitea-needs-gpg-in-path
gitea: needs gnupg in its path to sign commits
2022-12-01 14:29:34 +01:00
Ryan Lahfa
e1c7bf6657
Merge pull request #203723 from rvolosatovs/fix/amd-sev
module-list: include AMD SEV module
2022-12-01 14:22:16 +01:00
Georg Haas
8d47058b32
nixos/tests/tayga: init 2022-12-01 11:17:39 +01:00
Alex Zero
16b7892876
nixos/tayga: init 2022-12-01 11:17:20 +01:00
Andy Chun @noneucat
f8f19f84c6 nixos/grocy: add a basic smoke test for file uploads 2022-11-30 22:18:05 -08:00
github-actions[bot]
7ea4004879
Merge master into staging-next 2022-12-01 06:01:22 +00:00
Andrew Marshall
c88944f025 nixos: nix.readOnlyStore -> boot.readOnlyNixStore
The placement of this option under `nix` was misleading, as it is not
configuration of the Nix daemon, but rather configuration of the NixOS
boot process and how it mounts the Nix store. As such, make it an option
of `boot` to clarify what it actually affects, and imply that it will
only take effect on a reboot.

Since it no longer has the context of nix, adjust the name to include
it.
2022-11-30 22:57:08 -05:00
zowoq
34386263f7 nixos/nix-fallback-paths: 2.11.0 -> 2.11.1 2022-12-01 12:32:15 +10:00
Mario Rodas
4a057b08c4
Merge pull request #203733 from nagy/freenet-nixos-test
nixosTests.freenet: init
2022-11-30 21:18:55 -05:00
github-actions[bot]
818d9a61a3
Merge master into staging-next 2022-12-01 00:02:26 +00:00
Naïm Favier
e989ef9671
Merge pull request #203595 from ncfavier/registry-paths 2022-12-01 01:01:30 +01:00
figsoda
b865b96b97 nixos/invoiceplane: remove unnecessary parentheses 2022-11-30 18:13:58 -05:00
figsoda
f97daa68bc nixos/gammu-smsd: remove unnecessary parentheses 2022-11-30 18:12:53 -05:00
figsoda
1ecbafd0a2 nixos/discourse: remove unnecessary parentheses 2022-11-30 18:01:29 -05:00
figsoda
d1c73c2543 nixos/keepalived: remove unnecessary parentheses 2022-11-30 17:59:52 -05:00
figsoda
7dfc2a1369 nixos/user-groups: remove unnecessary parentheses 2022-11-30 17:58:55 -05:00
figsoda
55acad5c35 nixos/softether: apply statix suggestions 2022-11-30 17:56:56 -05:00
figsoda
d65639ce40 nixos/redis: simplify 2022-11-30 17:38:52 -05:00
figsoda
dfff1a2b83 nixos/prosody: simplify logic 2022-11-30 17:36:07 -05:00
figsoda
025142b808 nixos/hbase: remove unnecessary parenthesis 2022-11-30 17:32:53 -05:00
figsoda
1b9b057d92 nixos/buildbot: syntax clean up 2022-11-30 17:31:28 -05:00
figsoda
a356511f1a nixos/crossfire-server: remove unnecessary parentheses 2022-11-30 17:29:36 -05:00
figsoda
fd4f865645 nixos/nixpkgs: remove unused binding 2022-11-30 17:27:31 -05:00
figsoda
ca6c2c2111 nixos/docker-image: clean up let-in binding 2022-11-30 17:27:23 -05:00
KFears
79d19d6c9c nixos/grafana: fix 22.11 release notes 2022-12-01 00:24:41 +04:00
Maciej Krüger
0c99764a00
Merge pull request #203609 from aanderse/nixos/lxc-container 2022-11-30 21:04:22 +01:00
Martin Weinelt
7ff150ec50
Merge pull request #203781 from SuperSandro2000/fix-link
nixos/release-notes: fix link formatting
2022-11-30 19:29:05 +01:00
Sandro Jäckel
29450f5d80
nixos/release-notes: fix link formatting 2022-11-30 19:19:55 +01:00
Martin Weinelt
ce698e3f0b
Merge pull request #203735 from mweinelt/nixos-22.11-docs
Release NixOS 22.11
2022-11-30 19:19:48 +01:00
Martin Weinelt
384b898d18
Merge pull request #203774 from mweinelt/nixos-22.11-rl-fixups 2022-11-30 19:05:30 +01:00
maralorn
6184f635b3 nixos/doc: Fix typo in 22.11 release manual 2022-11-30 19:03:28 +01:00
Martin Weinelt
068f7348db nixos/doc/rl-2211: more cleanup 2022-11-30 19:01:13 +01:00
github-actions[bot]
cb51cfe745
Merge master into staging-next 2022-11-30 18:01:11 +00:00
Taeer Bar-Yam
67d671d5b7 nixos/firejail: remove the need for qualifications 2022-11-30 12:45:16 -05:00
Jörg Thalheim
4d9ac448db
Merge pull request #203391 from winterqt/rl-2211-cleanup
nixos/doc/rl-2211: cleanup
2022-11-30 18:07:31 +01:00
Lin Jian
0c70035f24
nixos/lib: add /home to pathsNeededForBoot
Before this patch, if we:

  1. add a new user in the config,
  2. mount /home seperately,
  3. not set neededForBoot for /home,
  4. and run `nixos-rebuild boot`,

the newly added user's home will not be created after a reboot. This
is because when nixos/modules/config/update-users-groups.pl is running
in stage 2 to setup users, /home is not mounted.

This patch fixes this issue.
2022-12-01 00:49:46 +08:00
Jörg Thalheim
07fe1b987b nixos/doc/rl-2211: cleanup 2022-11-30 17:37:03 +01:00
Aaron Andersen
ecf7441d25 nixos/lxc: apply recommendations from distrobuilder 2022-11-30 10:09:59 -05:00
Elis Hirwing
9126bcf608
Merge pull request #203634 from LeSuisse/pcre-jit-sealloc-issue
php8*: disable PCRE2 JIT SEAlloc to avoid crashes when forking
2022-11-30 16:03:36 +01:00
Thomas Gerbet
622f4ee354 php8*: disable PCRE2 JIT SEAlloc to avoid crashes when forking
This is a follow up to #200815 and #184634.

The PCRE2 JIT SEAlloc does not support the `fork()` as announced in
their README [0]:
> If you are enabling JIT under SELinux environment you may also want to add
>  --enable-jit-sealloc, which enables the use of an executable memory allocator
>  that is compatible with SELinux. Warning: this allocator is experimental!
>  It does not support fork() operation and may crash when no disk space is
>  available. This option has no effect if JIT is disabled.

As a result using it in PHP can break apps and tools, it can only be
enabled under very specific context where you have a full picture of
what the PHP code is doing.

This contribution disables again the PCRE2 JIT SEAlloc and extends the
existing PHP/PCRE2 tests to make sure we do not enable it again by
mistake.

[0] https://www.pcre.org/readme.txt
2022-11-30 13:22:39 +01:00
Bobby Rong
d54eca4cbb
Merge pull request #203589 from bobby285271/cinnamon
Cinnamon updates 2022-11-29
2022-11-30 20:21:12 +08:00
github-actions[bot]
b910b25976
Merge master into staging-next 2022-11-30 12:01:13 +00:00
Daniel Nagy
807c2f1fc0
nixosTests.freenet: init 2022-11-30 12:15:00 +01:00
Martin Weinelt
f1b9cc23aa Release NixOS 22.11 2022-11-30 11:52:38 +01:00
Minijackson
31f1a9a2a9 nixos/netbox: fix ldap configuration 2022-11-30 10:10:28 +01:00
Minijackson
01932120ab nixos/netbox: set path of dynamic content
By default this paths are set in the Nix store, and so no media,
reports, or scripts could be added / modified
2022-11-30 10:10:28 +01:00
Roman Volosatovs
a2251e2225
module-list: include AMD SEV module
Signed-off-by: Roman Volosatovs <rvolosatovs@riseup.net>
2022-11-30 09:11:50 +01:00
github-actions[bot]
aff62e907a
Merge master into staging-next 2022-11-30 06:01:30 +00:00
Andrew Marshall
87245df5d3 nixos/stubby: Support fine-grained logLevel
In much older versions, Stubby only supported debug logging, but that is
no longer true, so support the fine-grained log level.
2022-11-29 20:14:00 -06:00
Winter
881f22670e nixos/doc/rl-2211: add entry for aarch64-linux jobset inclusion/images on homepage 2022-11-29 21:07:36 -05:00
Winter
b937bf637f nixos/doc/rl-2211: add entry for libxcrypt migration 2022-11-29 21:07:36 -05:00
Winter
e81b0cec91 nixos/doc/rl-2211: cleanup 2022-11-29 21:07:33 -05:00
Bobby Rong
590ec12c5b
cinnamon.mint-artwork: 1.6.8 -> 1.7.0
The cursors are moved from this package to mint-cursor-themes.

usr/share/mint-artwork/sounds/* are updated under a license of cc-by-40.
2022-11-30 09:22:08 +08:00
github-actions[bot]
541466e966
Merge master into staging-next 2022-11-30 00:02:24 +00:00
Maximilian Bosch
70bd3715e0
Merge pull request #202918 from SuperSandro2000/rleease-notes-191713
nixos/release-notes: add entry for #191713
2022-11-30 00:36:03 +01:00
KFears
bb4cc151b6 nixos/openrgb: fix linking in release notes 2022-11-30 01:31:46 +04:00
Bjørn Forsman
19a6b85e8f nixos: disable systemd-oomd when enableUnifiedCgroupHierarchy is false
Or else systemd-oomd gets marked as failed due to
"Userspace Out-Of-Memory (OOM) Killer was skipped because of a failed condition check (ConditionControlGroupController=v2)."
and cause the system to enter degraded state.

Ref https://github.com/NixOS/nixpkgs/issues/195085
2022-11-29 20:39:05 +01:00
github-actions[bot]
843fc7a4a5
Merge master into staging-next 2022-11-29 18:01:54 +00:00
Florian Klink
83807f3aaa nixos/doc/rl-2211: document nsncd option 2022-11-29 17:00:19 +00:00
Bruno Bigras
86730cdb4b
Merge pull request #203452 from robryk/restic
nixos/tests/restic: readability & not parsing human-readable output
2022-11-29 11:35:39 -05:00
Sandro
5b408166d8
Merge pull request #203063 from fabianhauser/fix/musescore-test 2022-11-29 17:24:08 +01:00
Naïm Favier
bcb5f0decc
nixos/nix-daemon: allow registry paths to be... paths
Currently paths are handled by `types.package`, whose semantics are a
bit of a mess. In particular, it converts path values to derivations
using `toDerivation`, which will lead to problems when flake `outPath`s
become paths in https://github.com/NixOS/nix/pull/6530.

This change makes the "incompatible changes" section in the above PR
obsolete: `nix.registry.nixpkgs.flake = nixpkgs;` works as expected (the
flake is copied to the store).
2022-11-29 14:18:04 +01:00
github-actions[bot]
a6c80cc1ae
Merge master into staging-next 2022-11-29 12:01:28 +00:00
sandydoo
11fbf96e2b
nixos/rosetta: add release notes 2022-11-29 10:33:37 +00:00
sandydoo
624ebdc10d
nixos/rosetta: init module
Run x86_64 binaries through Rosetta inside NixOS guests running on
Apple silicon.
2022-11-29 10:27:51 +00:00
Mario Rodas
22c4865309
Merge pull request #203484 from asbachb/lxd/check-for-lxcfs
lxd: Check if `lxcfs` is enabled before adding it as service dependency
2022-11-29 01:45:25 -05:00
Bobby Rong
d91da6d1fb
Merge pull request #201328 from NixOS/cinnamon
Cinnamon 5.6
2022-11-29 14:33:07 +08:00
Bobby Rong
89f3049f9d
rl-23.05: Mention cinnamon 5.6 update 2022-11-29 10:12:36 +08:00
Bobby Rong
faed103fb7
cinnamon.mint-artwork: 1.6.0 -> 1.6.8
Hided home/trash/network desktop icons by default.

Also changed their default logo settings (cs_info and menu), so what we
should modify to cinnamon-symbolic is now linuxmint-logo-ring-symbolic.
We are lucky, linuxmint-logo-ring-symbolic only appears in a few other
places and non of them are useful, menu@cinnamon.org/settings-override.json
simply won't work because cinnamon-common doesn't know that file.

Also set default cursor theme, this package now directly provides those
cursor themes. And, we now default to the Mint-Y-Aqua theme.
2022-11-29 10:11:43 +08:00
github-actions[bot]
e6be0713d4
Merge master into staging-next 2022-11-29 00:02:37 +00:00
Sandro
03b9249971
Merge pull request #202087 from Shawn8901/pve-load-credential 2022-11-28 23:17:26 +01:00
Jonas Heinrich
3aff916914 nixos/opensnitch: Add option to configure rules 2022-11-28 14:19:16 -05:00
Jonas Heinrich
11fdcb163e
Merge pull request #202541 from yayayayaka/gitlab-15.6.0
gitlab: 15.4.4 -> 15.6.0
2022-11-28 20:07:40 +01:00
github-actions[bot]
c9cba1ab24
Merge master into staging-next 2022-11-28 18:01:25 +00:00
Benjamin Asbach
96424ddf55 lxd: Check if lxcfs is enabled before adding it as service dependency
Without that check `lxc.service` cannot be manage manually as a manual start fails due to missing dependency to `lxcfs` when not enabled.
2022-11-28 21:48:34 +04:00
Robert Obryk
ccfc1d2421 nixos/tests/restic: use machine-readable output
This change causes us to stop relying on the way `restic snapshots`
formats its human-readable output.
2022-11-28 14:55:32 +01:00
Robert Obryk
7cdb313558 nixos/tests/restic: unify naming
This commit makes the correspondence between a backup job and location
of its repository clearer.
2022-11-28 14:55:28 +01:00
Robert Obryk
84e05961f8 nixos/tests/restic: cleanup 2022-11-28 14:55:21 +01:00
georgewhewell
2fc9e88c8c nixos/erigon: add extraArgs 2022-11-28 08:38:50 -05:00
github-actions[bot]
5b74f8b399
Merge master into staging-next 2022-11-28 12:01:29 +00:00
Izorkin
93de6bf9ed nixos/mastodon: add smtp assertions 2022-11-28 12:07:32 +01:00
github-actions[bot]
6aeef7531c
Merge staging-next into staging 2022-11-28 06:01:53 +00:00
Sandro
4991514dbd
Merge pull request #200114 from SuperSandro2000/changedetection-io 2022-11-28 02:54:54 +01:00
Sandro Jäckel
a4f053f0e4
nixos/release-notes: add entry for #191713 2022-11-28 02:19:18 +01:00
Sandro
543a5be21a
Merge pull request #197922 from SuperSandro2000/modprobeconfig 2022-11-28 01:35:53 +01:00
Sandro
853077236a
Merge pull request #202124 from SuperSandro2000/dbus-passthru-daemon 2022-11-28 01:35:34 +01:00
github-actions[bot]
23dcd1620e
Merge staging-next into staging 2022-11-28 00:03:09 +00:00
Sandro
9185121c22
Merge pull request #201060 from gador/sqlite3-to-mysql-init 2022-11-28 00:55:45 +01:00
Vladimír Čunát
cdad0ce127
nixos/filesystems: fix a typo in docs 2022-11-27 21:57:35 +01:00
Elis Hirwing
9222c47479
Merge pull request #202799 from drupol/php/november-2022-bumps
{php80,php81,php82}: November bumps
2022-11-27 20:23:42 +01:00
github-actions[bot]
38af11b9ce
Merge staging-next into staging 2022-11-27 18:01:39 +00:00
Gerd Flaig
adddfe7932 Use file sink encoding json
Encoding ndjson isn't supported in recent versions.
2022-11-27 12:56:00 -05:00
Alexander Bantyev
df85dda331
Merge pull request #198314 from Izorkin/update-nginx-cache
nixos/nginx: add proxyCache options
2022-11-27 18:51:09 +04:00
teutat3s
6033e4e5ed
gitea: needs gnupg in its path to sign commits
See: https://docs.gitea.io/en-us/signing/#installing-and-generating-a-gpg-key-for-gitea
2022-11-27 15:01:32 +01:00
Mario Rodas
98d30160b4
Merge pull request #202619 from NickCao/stratis
stratisd: 3.3.0 -> 3.4.0

Closes #203194
2022-11-27 08:58:59 -05:00
Martin Weinelt
8e46323226 nixos/tests/pinnwand: drop reaper, refactor steck setup 2022-11-27 13:50:44 +01:00
Martin Weinelt
2882a76651 nixos/pinnwand: convert to freeform type, drop reaper unit 2022-11-27 13:50:44 +01:00
github-actions[bot]
f1f9569cde
Merge staging-next into staging 2022-11-27 00:03:04 +00:00
Martin Weinelt
35d7617d81
Merge pull request #200354 from mweinelt/kanidm-1.1.0-alpha.10 2022-11-26 22:11:29 +01:00
Flakebi
272ac9ec64 kanidm: add release not for tls requirement 2022-11-26 21:43:12 +01:00
Flakebi
887020f39c nixos/kanidm: Add tls options
Since 1.1.0-alpha.10 kanidm requires TLS to be set up or it won't start.
2022-11-26 21:42:35 +01:00
Silvan Mosberger
a566d0842e
Merge pull request #172736 from infinisil/docker-nix-shell 2022-11-26 20:21:59 +01:00
github-actions[bot]
6d0026d4d6
Merge staging-next into staging 2022-11-26 18:01:45 +00:00
Guillaume Bouchard
d1b6d2d0ab haskellPackages.callHackage: updating all-cabal-hashes do not invalidate callHackage
Packages built with `haskellPackages.callHackage` won't be rebuilt when
updating `all-cabal-hashes`.

The removed comment was keeping a reference to the `cabal2nix` call,
which itself depends on `all-cabal-hashes`, in order to keep this file
during a garbage collection.

The tradeoff is between:

- The current behavior: a mass rebuild, any change of `all-cabal-hashes`
  triggers a rebuild of all the packages built with `callHackage` and
  packages which depend on them. This can take hours, and may happen
  after a "small" unrelated change (i.e. an user is bumping
  `all-cabal-hashes` in order to use a new package from hackage). It
  also have global impacts in a project (long rebuild in CI, new entries
  in cache, developers need to fetch the new entries, ...). In this
  context, `cabal2nix` entries are not garbage collected.
- The new behavior: No mass rebuild, but `cabal2nix` derivations need to
  be recomputed after a garbage collection. This is usually fast (a few
  seconds by call), linear with the number of calls and should not
  happen a lot (i.e. users are not garbage collecting everyday).

See https://github.com/NixOS/nixpkgs/issues/194751 for details.
2022-11-26 19:00:56 +01:00
Silvan Mosberger
22d1a12f8b
Merge pull request #203028 from NixOS/pure-nixos-tests 2022-11-26 17:13:32 +01:00
Fabian Hauser
7dd3214c52 nixos/tests/musescore: fix 2022-11-26 14:24:45 +01:00
sternenseemann
7b9b222763 nixos/doc: update RL entry for GNAT update 2022-11-26 14:20:09 +01:00
github-actions[bot]
9ce2c2146e
Merge staging-next into staging 2022-11-26 12:02:03 +00:00
Silvan Mosberger
47813a3214 nixos/tests: Make pure
Just had @fabianhauser at the #ZurichZHF hackathon run into this, causing the
tests to fail evaluation due to some system impurity
2022-11-26 11:52:51 +01:00
Naïm Favier
3200a56924
Merge pull request #202866 from miniBill/patch-1 2022-11-26 11:31:44 +01:00
Tom Fitzhenry
cc16ce5945 nixos/tests/phosh: add subtest to check the on-screen keyboard 2022-11-26 10:17:04 +01:00
Francesco Gazzetta
e518978869
Merge pull request #202728 from fgaz/warzone2100/4.3.2
warzone2100: 4.3.1 -> 4.3.2, add nixos test
2022-11-26 08:54:21 +00:00
github-actions[bot]
e5a45ed6d9
Merge staging-next into staging 2022-11-25 18:02:16 +00:00
Leonardo Taglialegne
6d77ca3ffd Fix typo in 22.11 release notes 2022-11-25 16:11:54 +01:00
Izorkin
5cfb7fb716 nixos/tests/mastodon: update test 2022-11-25 15:00:19 +01:00
Izorkin
e8927f2631 nixos/tests/mastodon: remove CA service 2022-11-25 15:00:19 +01:00
github-actions[bot]
f8c61f361e
Merge staging-next into staging 2022-11-25 12:02:07 +00:00
Maximilian Bosch
71b00e8112
Merge pull request #202816 from mayflower/fix-hedgedoc-docs
nixos/hedgedoc: configuration -> settings in option's description
2022-11-25 12:45:33 +01:00
Maximilian Bosch
df50f73b57
nixos/hedgedoc: configuration -> settings in option's description
`configuration` has been renamed to `settings` and our docs should
reflect that.
2022-11-25 10:32:34 +01:00
Pol Dellaiera
aa634993cd php82: 8.2.0rc6 -> 8.2.0rc7
News: https://github.com/php/php-src/blob/php-8.2.0RC7/NEWS
2022-11-25 09:32:07 +01:00
github-actions[bot]
442fcc94e1
Merge staging-next into staging 2022-11-25 06:01:40 +00:00
Martin Weinelt
a4e5468bc0
Merge pull request #202187 from hmenke/alps 2022-11-25 01:34:53 +01:00
github-actions[bot]
d002d690a2
Merge staging-next into staging 2022-11-25 00:02:54 +00:00
Anderson Torres
0603e83936
Merge pull request #202734 from jmbaur/flashrom-package-option
nixos/flashrom: Add package option
2022-11-24 20:13:59 -03:00
Lassulus
43b6a1ffe9
Merge pull request #202216 from helsinki-systems/feat/nixos-acme-test-20y
nixos/tests/acme/server: generate certs with longer validity
2022-11-24 21:42:50 +01:00
Jared Baur
53021e3340
nixos/flashrom: Add package option
Allow for custom flashrom package to be used.
2022-11-24 12:31:07 -08:00
Francesco Gazzetta
cc0182e2d1 nixosTests.warzone2100: init 2022-11-24 20:48:42 +01:00
github-actions[bot]
db4a84c993
Merge staging-next into staging 2022-11-24 18:01:45 +00:00
Luke Granger-Brown
b7a9466d54
Merge pull request #202563 from mfenniak/fix-unifi-poller-service
nixos/prometheus-unifi-poller-exporter: fix executable name in systemd
2022-11-24 15:45:57 +01:00
Robert Hensing
d08a22c7ce
Merge pull request #201937 from panda2134/master
netlify-cli: 6.13.2 -> 12.2.4, esbuild_netlify: 0.13.6 -> 0.14.39
2022-11-24 13:52:52 +00:00
Sandro Jäckel
f4d8e64bed
nixos/modprobe: replace boot.isContainer with boot.modprobeConfig.enable 2022-11-24 14:07:46 +01:00
Sandro
f92201f461
Merge pull request #197925 from SuperSandro2000/lvm2 2022-11-24 13:58:29 +01:00
Jeff Hutchison
a587e528c5
Add prometheus-nut-exporter module 2022-11-24 07:50:09 -05:00
github-actions[bot]
d54f37c561
Merge staging-next into staging 2022-11-24 06:01:50 +00:00
Nick Cao
7d2faad3b7
nixos/stratis: update tests to use new features 2022-11-24 10:02:20 +08:00
Sandro
4976c161f8
Merge pull request #201949 from Icy-Thought/picom-backend-egl 2022-11-24 02:38:23 +01:00
github-actions[bot]
a6dbfe6906
Merge staging-next into staging 2022-11-24 00:02:35 +00:00
Martin Weinelt
8cbf9ed05b
Merge pull request #202567 from phfroidmont/master 2022-11-23 22:04:36 +01:00
Paul-Henri Froidmont
b8ffc572d2
nixos/patroni: only run tests on x86_64-linux
etcd doesn't support other architectures and refuses to start
2022-11-23 21:54:19 +01:00
Mathieu Fenniak
eed28ead0c Workaround for upstream crash when !datadog 2022-11-23 12:58:07 -07:00
Mathieu Fenniak
e7f761fe60 Fix executable name 2022-11-23 10:31:46 -07:00
Linus Heckemann
36ca2b495f nixos/ec2: use only curl in metadata fetcher, log to console
We don't need both wget and curl, so let's use only curl (which is
part of a minimal NixOS closure, unlike wget).

Logging to the console is helpful for debugging.
2022-11-23 17:19:16 +01:00
Linus Heckemann
6fb582e030 ec2-metadata-fetcher: ignore failure when fetching metadata parts
Instances without SSH keys configured will receive a 404 from the
metadata server when attempting to fetch an SSH key. This is not an
actual problem though, and shouldn't result in the service failing.

If the metadata server cannot be reached, the script will fail at an
earlier stage when attempting to get authentication data.
2022-11-23 17:19:16 +01:00
Linus Heckemann
eddfcf8622 amazon-image: fetch metadata only in stage-2
This also removes automatic enablement/mounting of instance store swap
devices and ext3 filesystems. This behaviour is strongly opinionated
and shouldn't be enabled by default.

The unionfs behaviour never took effect anyway, because the AMI
manifest path only exists for instance store-backed AMIs, which have
not been supported by nixpkgs since
84742e2293 (2019).
2022-11-23 17:19:13 +01:00
Linus Heckemann
24e33a4d2e nixos/ec2: remove paravirtualization-specific code
Paravirtualized EC2 instances haven't been supported since 2017.
It's safe to remove this now.
2022-11-23 17:18:18 +01:00
M. A
6b3629a3a2 Revert "nixos/gitlab: Use Git 2.35.x to work around git bug"
This reverts commit f94d14899d70150abcf2823e243524397b0c1806.

git 2.35.x became unsupported by gitaly and makes the gitaly systemd
service fail.
2022-11-23 15:18:19 +00:00
github-actions[bot]
26b9cf3d24
Merge staging-next into staging 2022-11-23 12:01:56 +00:00
Félix Baylac-Jacqué
8040c468ed
nixosTests/prosody[-mysql]: fix tests TLS setup
The tests TLS setup was bogus: the xmpp-send-message script was trying
to connect to the server through a bogus domain name. Injecting the
right one.

I'm a bit confused about that one. I know for sure this NixOS test
succeeded last time I checked it, but the TLS conf is bogus for sure.
I assume the slixmpp SNI validation was a bit too loose and was
tightened at some point.
2022-11-23 11:05:12 +01:00
Félix Baylac-Jacqué
501d684de8
nixosTests/prosody: add timeout
The xmpp-sendmessage the slixmpp-powered python script tend to timeout
and block the nixos channels.

Adding a signal-based timeout making sure that whatever happens, the
script won't run for more than 2 minutes. That should be pleinty
enough time to finish regardless of the runner specs. As a data point,
it runs in about 10 secs on my desktop machine.
2022-11-23 11:03:00 +01:00
github-actions[bot]
e424324159
Merge staging-next into staging 2022-11-23 06:01:41 +00:00
georgewhewell
5b8c42f98c nixos/lighthouse: add dataDirs to unit ReadWritePaths 2022-11-22 20:48:33 -05:00
github-actions[bot]
e31b8a36d7
Merge staging-next into staging 2022-11-23 00:02:46 +00:00
Henri Menke
d02af66091
nixos/alps: fix for Hydra failure
https://hydra.nixos.org/build/199758163
2022-11-22 20:50:28 +01:00
Jörg Thalheim
a42f7a0875 nixos/mandb: fix cross compiling 2022-11-22 20:13:25 +01:00
figsoda
82fe76d1cd carnix,cratesIO: remove 2022-11-22 14:10:25 -05:00
github-actions[bot]
52bca233ff
Merge staging-next into staging 2022-11-22 12:01:52 +00:00
Valentin Gagarin
10ffe1e731
Merge pull request #201084 from wentasah/nixos-doc-fix-install
nixos/doc: fix installing from other distro
2022-11-22 11:13:09 +01:00
github-actions[bot]
ef59504ab1
Merge staging-next into staging 2022-11-22 06:01:48 +00:00
panda2134
669067ed04 netlify-cli: update release note for updating netlify-cli 2022-11-22 12:20:11 +08:00
WORLDofPEACE
de6f2b0a07 nixos/dbus: support dbus-broker 2022-11-22 09:36:22 +08:00
github-actions[bot]
66da6215fb
Merge staging-next into staging 2022-11-22 00:03:02 +00:00
Martin Weinelt
005233baa2
nixos/tests/evcc: init 2022-11-21 22:40:15 +01:00
Martin Weinelt
36f58b687c
nixos/evcc: init 2022-11-21 22:40:15 +01:00
Sandro
caf13a5bb1
Merge pull request #182759 from otopetrik/proxmox-image-uefi 2022-11-21 21:34:30 +01:00
Martin Weinelt
b68bd2ee52 23.05 is Stoat 2022-11-21 21:22:27 +01:00
Cabia Rangris
a19d805696
Merge pull request #202160 from yrd/outline
outline: 0.66.3 -> 0.67.0
2022-11-21 23:30:08 +04:00
Martin Weinelt
3d332ee800
Merge pull request #202211 from helsinki-systems/fix/redis-requirepass 2022-11-21 20:25:13 +01:00
Sandro Jäckel
c7f5becba3 dbus: remove unused daemon passhtru 2022-11-21 20:23:00 +01:00
Shawn8901
5ed08d83f7 nixos/prometheus-pve-exporter: Use LoadCredentials to make configFiles readable to DynamicUser 2022-11-21 20:20:50 +01:00
Sandro
3a05360e53
Merge pull request #200082 from panicgh/fetchgit-sparse-checkout 2022-11-21 20:00:56 +01:00
github-actions[bot]
9c6223b5f6
Merge staging-next into staging 2022-11-21 18:01:33 +00:00
ajs124
57abd8c1cf nixos/tests/acme/server: generate certs with longer validity 2022-11-21 18:18:17 +01:00
ajs124
7274df353c nixos/tests/acme/server: patch certificate generation for longer validity 2022-11-21 18:17:55 +01:00
ajs124
195aa53509 nixos/redis: fix requirepass 2022-11-21 18:00:12 +01:00
figsoda
91969d8d37
Merge pull request #201527 from figsoda/lib
lib/attrsets: add concatMapAttrs
2022-11-21 11:01:43 -05:00
pacien
4cdc08f925 nixos/mautrix-telegram: document JSON env var config
This was introduced in mautrix-telegram v0.12.1.

See: https://github.com/mautrix/telegram/issues/584#issuecomment-1250027272
See: https://github.com/mautrix/telegram/releases/tag/v0.12.1
2022-11-21 08:46:52 -05:00
pacien
e14bdbb997 Revert "nixos/mautrix-telegram: substitute secrets in config file at runtime (#112966)"
This is no longer necessary since mautrix-telegram v0.12.1, which
supports JSON-formatted environment variable and therefore maps
natively.

See: https://github.com/mautrix/telegram/issues/584#issuecomment-1250027272
See: https://github.com/mautrix/telegram/releases/tag/v0.12.1

This partially reverts commit 24133ead28.
2022-11-21 08:46:52 -05:00
CRTified
4a8f6ceb66 nixos/mautrix-telegram: add documentation for setting arbitrary secrets
The change that allows setting the secrets by an environment file had
the undocumented side effect of allowing to set any key by the environment
file (Related PR: https://github.com/tulir/mautrix-telegram/pull/332).

This is required to e.g. set `bridge.login_shared_secret`, which was not
documented before.

GitHub: closes #103347
2022-11-21 08:46:52 -05:00
Henri Menke
384293bbbb
nixos/alps: fixes for service hardening 2022-11-21 13:21:44 +01:00
github-actions[bot]
c7a82061f6
Merge staging-next into staging 2022-11-21 12:02:10 +00:00
Izorkin
17933082cc nixos/mastodon: fix emoji import 2022-11-21 11:43:28 +01:00
Janne Heß
c107fb66da
Merge pull request #202132 from ElvishJerricco/systemd-stage-1-tests-hibernate
nixos: ext fixes with systemd-initrd
2022-11-21 10:38:19 +01:00
Yannik Rödel
4de63c6750 outline: 0.66.3 -> 0.67.0 2022-11-21 09:33:08 +01:00
Nick Cao
46328f5596
nixosTests.systemd-initrd-luks-password: test mounting device unlocked in initrd after switching root 2022-11-21 14:49:20 +08:00
Nick Cao
51e4bd298f
nixos/udev: enable initrd-udevadm-cleanup-db.service in systemd stage 1 2022-11-21 14:33:27 +08:00
github-actions[bot]
09eedfc76b
Merge staging-next into staging 2022-11-21 06:01:40 +00:00
Will Fancher
71c74bf173 nixos: Add ext to fsPackages in stage 2 with systemd-initrd enabled 2022-11-20 22:30:01 -05:00
Sandro
8b5dd47fe0
Merge pull request #201647 from jtojnar/nixos-dbus-cleanup 2022-11-21 03:01:58 +01:00
Will Fancher
23b3add0e3 nixos: Fix hibernate test with systemd stage 1 2022-11-20 21:01:51 -05:00
github-actions[bot]
feb86eb7b8
Merge staging-next into staging 2022-11-21 00:03:03 +00:00
Samuel Dionne-Riel
db50c66faf
Merge pull request #201750 from samueldr/feature/plasma-mobile-settings
nixos/plasma5: Sync Plasma Mobile kwinrc defaults with upstream
2022-11-20 17:16:16 -05:00
Maximilian Bosch
853d0a3f2b
Merge pull request #199150 from Ma27/grafana-fixup
nixos/grafana: documentation/warning improvements after #191768
2022-11-20 20:53:25 +01:00
Jörg Thalheim
83b468db28
Merge pull request #196148 from Mic92/tailscale
tailscale: improve formatting on warning message
2022-11-20 20:12:46 +01:00
Maximilian Bosch
4a73fad515
nixos/doc: also note that external YAML files for grafana will end up in the store 2022-11-20 20:03:38 +01:00
Maximilian Bosch
98cadbcf70
nixos/grafana: review fixes 2022-11-20 19:54:44 +01:00
github-actions[bot]
77fbd162df
Merge staging-next into staging 2022-11-20 18:01:45 +00:00
Maximilian Bosch
2580440389
Merge pull request #198470 from RaitoBezarius/nc25-openssl
nextcloud25: use openssl 1.1 as a PHP extension to fix RC4 encryption
2022-11-20 18:32:41 +01:00
Maximilian Bosch
6ee5ae3e48
nixos/grafana: make warning more clear 2022-11-20 18:21:41 +01:00
Maximilian Bosch
9d7e9c5965
nixos/grafana: allow using both directories or single YAML files for non-Nix provisioning 2022-11-20 18:21:41 +01:00
Maximilian Bosch
2f1dfb0db3
nixos/grafana: fix w/o datasources or dashboard provisioning 2022-11-20 18:21:41 +01:00
Maximilian Bosch
4ec456b725
nixos/grafana: fix secret-related warnings
Closes #198646

* The options `password`/`basicAuthPassword` were removed for
  datasources in Grafana 9. The only option to declare them now is to use
  `secureJsonData`.
* Fix description for contactPoints provisioning: when using file/env
  providers, nothing will be leaked into the store.
* Fix regex in file-provider usage check: it's also possible to either
  use `$__env{FOO}` or `$FOO` to fetch secrets from the environment.
* Fix warning for datasources: `password`/`basicAuthPassword` was
  removed, also check for each setting in `secureJsonData` if
  env/file-provider was used (then no warning is needed!).
2022-11-20 18:21:40 +01:00
Maximilian Bosch
b300ec349c
nixos/doc: wording fix 2022-11-20 18:21:40 +01:00
Maximilian Bosch
febc8a4307
nixos/tests/grafana: demonstrate how to use the file provider
Yes, it's still a store path, but it's only for demonstration purposes.
Also we now have fewer warnings in the provision test.
2022-11-20 18:21:40 +01:00
Maximilian Bosch
03b34e85d4
nixos/grafana: we only support single YAML files for provisioning 2022-11-20 18:21:39 +01:00
Maximilian Bosch
45e1ce7e3a
nixos/grafana: get rid of unnecessary flatten for warnings 2022-11-20 18:21:39 +01:00
Maximilian Bosch
afd6199cff
nixos/grafana: re-add legacy notifiers test, mention notifiers in release notes 2022-11-20 18:21:39 +01:00
Maximilian Bosch
25b5824696
nixos/grafana: mark services.grafana.extraOptions as removed 2022-11-20 18:21:38 +01:00
Maximilian Bosch
252785fd9c
nixos/doc: improve release-notes for services.grafana 2022-11-20 18:21:38 +01:00
Maximilian Bosch
957e368f3d
nixos/grafana: provision.{datasources,dashboards} can't be a list anymore
The hack with `either` had the side-effect that the sub-options of the
submodule didn't appear in the manual. I decided to remove this because
the "migration" isn't that hard, you just need to fix some module
declarations.

However, `mkRenamedOptionModule` wouldn't work here because it'd create
a "virtual" option for the deprecated path (i.e.
`services.grafana.provision.{datasources,dashboards}`), but that's the
already a new option, i.e. the submodule for the new stuff.

To make sure that you still get errors, I implemented a small hack using
`coercedTo` which throws an error if a list is specified (as it would be
done on 22.05) which explains what to do instead to make the migration
easier.

Also, I linkified the options in the manual now to make it easier to
navigate between those.
2022-11-20 18:21:35 +01:00
ajs124
626e8b67fa nixos/tests/acme/server: regenerate certs
expired today
2022-11-20 16:37:42 +01:00
Elis Hirwing
14cc62d7e6
Merge pull request #201000 from drupol/php/8.2.0
php82: init at 8.2.0rc6
2022-11-20 16:01:00 +01:00
github-actions[bot]
cdba88b83b
Merge staging-next into staging 2022-11-20 12:01:44 +00:00
github-actions[bot]
1d03874733
Merge staging-next into staging 2022-11-20 06:01:41 +00:00
David Wilemski
c9543015d0
nixos/firewall: remove stray quote from package option
This quote is not needed and shows up rendered in the manpage documenting this option.
2022-11-19 22:04:52 -06:00
Martin Weinelt
1bb3114d92
Merge pull request #201984 from hax404/deluge_test 2022-11-20 02:17:26 +01:00
Jan Tojnar
1c37b65fb9
Merge pull request #181967 from noneucat/fix/at-spi2-core
gnome/at-spi2-core: also set GTK_A11Y when at-spi2-core is disabled
2022-11-20 02:17:08 +01:00
Martin Weinelt
0db9431e26
Merge pull request #201991 from vlinkz/calamaresqtwebkit 2022-11-20 01:59:28 +01:00
Andy Chun @noneucat
2fedbbab9c nixos/gnome/at-spi2-core: force GTK_A11Y=none when disabled
GTK 4 applications use accessibility bus directly
and will try to connect to it every time a widget is created:
https://gitlab.gnome.org/GNOME/gtk/-/issues/4831

This will make GTK 4 apps (e.g. newly ported Nautilus) grind
to a halt on systems that do not have AT-SPI service installed.

Let’s explicitly disable accessibility support with an environment
variable when the AT-SPI service is not enabled to avoid that.
Just like we do for ATK-based applications with `NO_AT_BRIDGE`.

Fixes: https://github.com/NixOS/nixpkgs/issues/197188
2022-11-20 01:50:38 +01:00
Victor Fuentes
4fe9988b89
installation-cd: Remove libsForQt5.full 2022-11-19 19:12:37 -05:00
github-actions[bot]
1e1586019b
Merge staging-next into staging 2022-11-20 00:03:01 +00:00
happysalada
82ee824968 surrealdb: module init 2022-11-19 18:58:04 -05:00
Georg Haas
f20402f8e3
nixos/tests/deluge: fix test
deluge-console always exits with code 1. This is known in https://dev.deluge-torrent.org/ticket/3291
2022-11-20 00:35:59 +01:00
Icy-Thought
2beff9375c
nixos/picom: add egl backend to options 2022-11-19 19:29:22 +01:00
github-actions[bot]
14b4aa3fd4
Merge staging-next into staging 2022-11-19 18:01:53 +00:00
Martin Weinelt
c021df5792
Merge pull request #197254 from Atemu/fstab-escape-options 2022-11-19 18:08:40 +01:00
happysalada
4a3aa6ff98 tremor-rs: module init 2022-11-19 11:41:21 -05:00
Martin Weinelt
2714a22521
Merge pull request #198820 from talyz/keycloak-admin-password 2022-11-19 15:03:03 +01:00
Martin Weinelt
6c1b52297d
Merge pull request #195497 from mweinelt/crypt-hash-deprecations 2022-11-19 14:28:44 +01:00
Martin Weinelt
218e2f5e14
Merge pull request #193740 from illustris/hbase
hbase: remove 1.7, 2.4.11 -> 2.4.15, init 2.5.1, 3.0.0-alpha-2 -> alpha-3
2022-11-19 14:28:11 +01:00
Martin Weinelt
78155df21d
nixos/users-groups: Warn about deprecated hashes at activation
To allow for a reasonably fast deprecation of weak password hashing
schemes we provide an activation script that checks existing hashes in
/etc/shadow and issues a warning for user accounts that still rely on
deprecated hashes.

Co-Authored-By: oxalica <oxalicc@pm.me>
2022-11-19 14:07:59 +01:00
Martin Weinelt
f391e6dbcc
nixos/user: Don't recommend mkpasswd methods
Instead rely on the default, which at this time is yescrypt.
2022-11-19 14:07:59 +01:00
Martin Weinelt
55ab131ee2
nixos/manual: Don't recommend mkpasswd methods
Instead rely on the default, which at this time is yescrypt.
2022-11-19 14:07:59 +01:00
linsui
7370fcf517 nixos/firefox: remove firefox-wayland 2022-11-19 17:55:13 +08:00
linsui
958cdd7c6b nixos/firefox: add preferencesStatus, autoConfig
... and nativeMessagingHosts
2022-11-19 17:50:51 +08:00
linsui
b9778b3a95 nixos/firefox: lint 2022-11-19 17:50:51 +08:00
linsui
6120738eaa nixos/firefox: fix "The option is used but not defined" 2022-11-19 17:50:51 +08:00
github-actions[bot]
c412a7bb54
Merge staging-next into staging 2022-11-19 06:01:45 +00:00
Zhaofeng Li
3d185562b5 nixos/tests/phosh: init 2022-11-19 06:55:25 +01:00
Zhaofeng Li
8b2d34fa5e test-driver: Allow configuring delay for send_{key,chars} 2022-11-19 06:55:25 +01:00
github-actions[bot]
5658def54f
Merge staging-next into staging 2022-11-19 00:02:58 +00:00
Sergei Trofimovich
00d016a2f5
Merge pull request #186764 from fricklerhandwerk/remove-syntax-overview
remove Nix language syntax summary
2022-11-18 22:41:54 +00:00
github-actions[bot]
9bfdfb309f
Merge staging-next into staging 2022-11-18 18:01:51 +00:00
Anderson Torres
fc8a4f7291
Merge pull request #201521 from hmenke/alps
nixos/alps: add hardening, extensible options, test
2022-11-18 14:46:03 -03:00
Maciej Krüger
980e2c2ed2
Merge pull request #196773 from bobvanderlinden/pr-steam-package 2022-11-18 13:08:39 +01:00
github-actions[bot]
851d47d583
Merge staging-next into staging 2022-11-18 12:01:54 +00:00
Vladimír Čunát
8ab030e8de
Merge #201359: firefox, thunderbird, librewolf: Enable wayland support by default 2022-11-18 10:49:22 +01:00