Christoph Heiss
88a3d2a0b4
sourcehut: fix postgresql database permission for postgresql >= 15
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 15:50:16 +01:00
Christoph Heiss
66b86f8a2e
sourcehut: de-duplicate nginx add_header
directives
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 14:14:59 +01:00
Christoph Heiss
acd21dad52
sourcehut: use systemd.tmpfiles instead of manually creating logfiles
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 14:14:59 +01:00
Christoph Heiss
641e54bb28
sourcehut: create logs directory unconditionally
...
An empty log directory, in case it stays unused, does not hurt anyone.
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:47 +01:00
Christoph Heiss
fc6addb147
sourcehut: reword api-origin
option description
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:47 +01:00
Christoph Heiss
589b75bdc8
sourcehut: disable IPv6 completely for tests
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:47 +01:00
Christoph Heiss
78cc2783c8
sourcehut: drop obsolete services
array in favor of indivdual enable
flags
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:47 +01:00
Christoph Heiss
6b25e09d2d
sourcehut: fix up some more bin paths
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:47 +01:00
Christoph Heiss
5841d27497
sourcehut: explicitly disallow openssh to socket-active
...
This breaks the (already fragile) gitsrht-dispatch -> gitsrht-keys
command chain.
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:47 +01:00
Christoph Heiss
c39ba7f5b1
sourcehut: remove set -x
from ssh commands
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:46 +01:00
Christoph Heiss
6648488333
sourcehut: fix logging of git/hg ssh commands
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:45 +01:00
Christoph Heiss
6e51802196
sourcehut: fix repos
path by using actual settings value
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:32 +01:00
Christoph Heiss
c123a37be6
sourcehut.gitsrht: 0.78.20 -> 0.84.2
...
Newer version of the gitsrht-api service call setrlimit() on startup,
thus allow it in the `SystemCallFilter` definition for the service.
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 13:01:30 +01:00
Christoph Heiss
d703173520
sourcehut: make /query endpoint config common to all services
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-11-11 12:39:28 +01:00
Ryan Lahfa
b8218af2e6
Merge pull request #256226 from ElvishJerricco/systemd-stage-1-testing-backdoor
2023-11-10 14:08:07 +01:00
Lin Jian
36f4c90526
Merge pull request #266150 from robryk/resticnotimer
...
nixos/restic: allow timer to be disabled
2023-11-10 17:51:14 +08:00
K900
b0dd91c32a
Merge pull request #266509 from K900/remove-nixos-option-shim
...
nixos/installer: remove nixos-option compat shim
2023-11-10 10:47:18 +03:00
Yureka
6d475b6d95
nixos/tests/sudo: check that sudo is enabled by default
2023-11-10 03:32:26 +01:00
Yureka
b0206f9bf9
nixos/sudo: enable by default
...
The default was accidentally changed to false in #262790
2023-11-10 03:30:39 +01:00
Will Fancher
e9e2240763
nixos/tests/systemd-initrd-modprobe: Test parameter in stage 1
2023-11-09 17:53:49 -05:00
Will Fancher
b41cbee0fd
nixos/tests/systemd-initrd-networkd-ssh: Test with backdoor not LUKS
2023-11-09 17:53:49 -05:00
Will Fancher
8900b027c7
nixos/tests/systemd-initrd-networkd: Use initrdBackdoor
2023-11-09 17:53:49 -05:00
Will Fancher
90e2658693
nixos/tests/systemd-initrd-networkd: Separate into different tests
2023-11-09 17:53:49 -05:00
Will Fancher
9a0f523372
systemd-stage-1: Enable backdoor in nixos tests
2023-11-09 17:53:48 -05:00
Will Fancher
f8ba8be54b
testing-instrumentation: Factor backdoor service out to variable
2023-11-09 17:02:01 -05:00
Will Fancher
c20ad5d379
Merge pull request #266369 from SuperSandro2000/systemd-unit-empty-lines
...
systemd-lib: cleanup empty lines in unit files
2023-11-09 16:49:11 -05:00
Arnout Engelen
97b0ae26f7
doc: avoid 'simply' ( #266434 )
...
While the word 'simply' is usually added to encourage readers, it often has the
opposite effect and may even appear condescending, especially when the reader
runs into trouble trying to apply the suggestions from the documentation. It is
almost always an improvement to simply drop the word from the sentence.
(there are more possible improvements like this, we can apply those in separate
PRs)
2023-11-09 21:48:05 +01:00
K900
1d6b03af9a
nixos/installer: remove nixos-option compat shim
...
It's been two years.
2023-11-09 20:57:57 +03:00
Pierre Bourdon
b75b355b50
Merge pull request #262790 from nbraud/nixos/sudo
...
nixos/sudo: bring in line with release notes
2023-11-09 16:53:02 +01:00
Bernardo Meurer
22e859ae44
Merge pull request #266264 from hercules-ci/nix-stable-2.18
...
nix: 2.17.1 -> 2.18.1
2023-11-09 12:39:44 -03:00
Thiago Kenji Okada
da8c62363e
Merge pull request #266310 from Atry/patch-4
...
azure-agent: add dependencies for its extensions
2023-11-09 09:52:10 +00:00
Will Fancher
2f73652c34
Merge pull request #240651 from accelbread/postresumecommands
...
nixos/boot: add postResumeCommands option
2023-11-09 04:22:05 -05:00
Sandro Jäckel
ae0bbc00e8
systemd-lib: cleanup empty lines in unit files
2023-11-09 02:08:57 +01:00
Robert Hensing
6381cc0525
nix: 2.17.1 -> 2.18.1
2023-11-08 23:19:33 +01:00
Yang, Bo
b5c2407d56
nixos/doc: release notes for virtualisation.googleComputeImage.efi
2023-11-08 21:05:21 +01:00
Yang, Bo
1ce985242c
google-compute-image: support NVMe and UEFI
2023-11-08 21:05:21 +01:00
nicoo
b942382216
nixos/sudo: refactor processing of cfg.extraRules
2023-11-08 19:41:39 +00:00
nicoo
1852b67bc6
nixos/sudo: Make the default rules' options configurable
2023-11-08 19:41:39 +00:00
nicoo
93011e31bd
nixos/sudo: Handle root
's default rule through extraRules
...
This makes things more uniform; moreover, users can now inject rules before this.
2023-11-08 19:41:39 +00:00
nicoo
097115485a
nixos/terminfo: Simplify sudo-related option
2023-11-08 19:41:38 +00:00
nicoo
77ed368b20
nixos/sudo: Refactor option definitions
2023-11-08 19:41:38 +00:00
nicoo
19e1420e13
nixos/sudo: Move support for pam_ssh_agent_auth(8)
to PAM's NixOS module
2023-11-08 19:41:37 +00:00
Felix Bühler
7aaa664cc2
Merge pull request #263054 from uninsane/pr-trust-dns-0.24.0
...
trust-dns: 0.23.0 -> 0.24.0
2023-11-08 19:35:23 +01:00
Yang, Bo
c4086e5ce9
azure-agent: add dependencies for its extensions
...
waagent's extension `Microsoft.OSTCExtensions.VMAccessForLinux` requires Python, otherwise it would be failed to install with the following error message in `/var/log/waagent.log`:
```
No Python interpreter found on the box
```
waagent's extension `Microsoft.CPlat.Core.RunCommandLinux` needs lsof, otherwise it would produce the following error message in `/var/log/waagent.log`:
```
/var/lib/waagent/Microsoft.Azure.Extensions.CustomScript-2.1.10/bin/custom-script-shim: line 60: lsof: command not found
```
2023-11-08 17:54:08 +00:00
Caleb
c4d3afef06
wyoming-faster-whisper fix CUDA devices not being detected. ( #266167 )
...
This change enables CUDA support by allowing access to /dev/nvidia0.
2023-11-08 13:34:26 +01:00
Ryan Lahfa
bc2b72df73
Merge pull request #264234 from guiguid/guiguid-patch-netdata-systemd-journal
...
netdata: 1.43.0 -> 1.43.2 and add systemd-journal plugin
2023-11-08 13:30:43 +01:00
K900
63fe80d8d5
Merge pull request #266093 from K900/pipe-systemd-cat
...
treewide: replace `<command> | systemd-cat` with `systemd-cat <command>`
2023-11-08 11:28:44 +03:00
Will Fancher
eaad9ece24
Merge pull request #266116 from ElvishJerricco/sd-s1-user-shells-fix-warning
...
nixos/initrd-ssh: Only warn about shell when using systemd initrd
2023-11-07 21:25:21 -05:00
Rodrigo Gryzinski
23a5f1f80d
nixos/wireguard: add wireguard to default kernel modules
...
Previously the module was only dynamically loaded on service startup,
this is needed in case security.lockKernelModules is enabled.
2023-11-07 22:02:51 -03:00
Robert Hensing
87391b681f
Merge pull request #265836 from hercules-ci/nixosTests-no-surprises
...
nixos/testing/nodes: Do allow aliases
2023-11-08 00:55:32 +01:00