Commit Graph

39728 Commits

Author SHA1 Message Date
Jörg Thalheim
721c6579d2
Merge pull request #295407 from Stunkymonkey/nixos-murmur-registerPassword-fix
nixos/murmur: fix writing registerPassword to config
2024-03-12 22:47:26 +01:00
Fabián Heredia Montiel
da8768347e
Merge pull request #293950 from DCsunset/nixos-hoogle
nixos/hoogle: add extraOptions
2024-03-12 14:57:30 -06:00
Felix Buehler
1e22e7d75e nixos/murmur: fix writing registerPassword to config 2024-03-12 21:19:24 +01:00
Arian van Putten
16526f454f nixos/binfmt: fix race condition between systemd-tmpfiles and systemd-binfmt
We need to make sure systemd-tmpfiles-setup.service ran before we
start systemd-binft.service. Otherwise it might fail to start
due to non-existant files

Fixes #295365
2024-03-12 21:08:03 +01:00
Pol Dellaiera
734b199708
Merge pull request #295197 from abysssol/ollama-tests
nixos/ollama: add tests
2024-03-12 20:28:16 +01:00
github-actions[bot]
6b78f024b2
Merge staging-next into staging 2024-03-12 18:01:46 +00:00
Azat Bahawi
d3e30a442b
nixos/incus: fix systemd service path
Fixes a regression introduced in #294754.
2024-03-12 20:03:36 +03:00
Jacob Moody
112a71eef7 nixos/tests: remove builtints.currentSystem from make-test-python.nix
When build using 'nix build' if we hit this default we will fail to
evaluate. Most instances that this should break have been fixed so
we remove this to prevent this from happening further in the future.
2024-03-12 10:09:59 -05:00
Jacob Moody
4db920ed4f nixos/tests: fix discrepancy between nix-build and nix build 2024-03-12 10:09:59 -05:00
Peder Bergebakken Sundt
285d2dcf3c nixos/spotifyd: update configuration documentation url 2024-03-12 16:07:48 +01:00
Sandro
e220724911
Merge pull request #292141 from SuperSandro2000/plasma-out-xserver 2024-03-12 13:55:27 +01:00
K900
21adc4f16a
Merge pull request #295092 from K900/more-heinous-crimes
nixos/iso-image: extremely cursed performance optimization for Hydra
2024-03-12 15:45:38 +03:00
K900
77536af43b nixos/iso-image: extremely cursed performance optimization for Hydra
Right now the worst case chain of events for building an ISO on Hydra is

    - copy everything to squashfs builder
    - run squashfs builder
    - download squashfs from builder
    - compress squashfs
    - upload squashfs to S3
    - copy squashfs to ISO builder
    - run ISO builder
    - download ISO from builder
    - compress ISO
    - upload ISO to S3

This inlines the squashfs build into the ISO build, which makes it

    - copy everything to ISO builder
    - run ISO builder
    - download ISO from builder
    - compress ISO
    - upload ISO to S3

Which should reduce queue runner load by $alot per ISO, which we have four of on small channels
(one release, one test per arch) and a lot more than four of on large channels (with various desktops)
2024-03-12 15:41:59 +03:00
github-actions[bot]
1cef2a1be7
Merge staging-next into staging 2024-03-12 12:01:40 +00:00
nikstur
da05945c74
Merge pull request #295096 from jmbaur/uki-dtb
nixos/uki: add ".dtb" section if devicetree is used
2024-03-12 12:57:15 +01:00
Sandro Jäckel
b07cdeb1b3
nixos/plasma6: move out of x11
This release focuses on wayland, lets give that justice
2024-03-12 10:49:42 +01:00
github-actions[bot]
0917422ffe
Merge staging-next into staging 2024-03-12 06:01:24 +00:00
abysssol
efed30f903 nixos/ollama: add test for the ollama service 2024-03-11 21:37:48 -04:00
cmspam
701fcd7982 nixos/incus: add openvswitch support
1. Added openvswitch integration to incus service.
2. Added tests to test openvswitch functionality with incus.
2024-03-12 01:03:39 +00:00
github-actions[bot]
fd6d62aa3d
Merge staging-next into staging 2024-03-12 00:02:37 +00:00
Jared Baur
2837c0d9aa
nixos/uki: add ".dtb" section if devicetree is used
This ensures a ".dtb" PE section makes it into the UKI so systemd-stub
can install the correct devicetree for use by the Linux kernel. This is
often needed on systems that boot with u-boot since the devicetree used
by u-boot is often a paired down version of what the Linux kernel needs.
On those kinds of boards, the lack of this PE section means that u-boot
will end up installing its internal devicetree into the UEFI
configuration table, which is what the Linux kernel ends up using.
2024-03-11 12:42:21 -07:00
Cosima Neidahl
a44e09da5e
Merge pull request #294555 from r-ryantm/auto-update/miriway
miriway: unstable-2024-02-14 -> unstable-2024-03-06
2024-03-11 19:04:18 +01:00
github-actions[bot]
06e5eb63d3
Merge staging-next into staging 2024-03-11 18:01:53 +00:00
emilylange
08c37ba899 nixos/lldap: set service UMask=0027 and StateDirectoryMode=0750
While `/var/lib/lldap` isn't technically accessible by unprivileged
users thanks to `DynamicUser=true`, a user might prefer and change it to
`DynamicUser=false`.

There is currently also a PR open that intends to make `DynamicUser`
configurable via module option.

As such, `jwt_secret_file`, if bootstrapped by the service start
procedure, might be rendered world-readable due to its permissions
(`0644/-rw-r--r--`) defaulting to the service's umask (`022`) and
`/var/lib/lldap` to `0755/drwxr-xr-x` due to `StateDirectoryMode=0755`.

This would usually be fixed by using `(umask 027; openssl ...)` instead
of just `openssl ...`.

However, it was found that another file (`users.db`), this time
bootstrapped by `lldap` itself, also had insufficient permissions
(`0644/-rw-r--r--`) inherited by the global umask and would be left
world-readable as well.

Due to this, we instead change the service's to `027`.

And to lower the impact for already bootstrapped files on existing
instances like `users.db`, set `StateDirectoryMode=0750`.
2024-03-11 17:34:29 +01:00
emilylange
61a651e362 nixos/lldap: bootstrap jwt_secret if not provided
If not provided, lldap defaults to `secretjwtsecret` as value which is
hardcoded in the code base.

See https://github.com/lldap/lldap/blob/v0.5.0/server/src/infra/configuration.rs#L76-L77

This is really bad, because it is trivially easy to generate an admin
access token/cookie as attacker, if a `jwt_secret` is known.
2024-03-11 17:34:29 +01:00
Sandro
869ec01e56
Merge pull request #294286 from SuperSandro2000/unbound-remote-config-check 2024-03-11 16:06:31 +01:00
WilliButz
a2c0efbf5e
Merge pull request #274307 from thillux/esdm-1.0.1
esdm: update module after 1.0.1 changes
2024-03-11 15:11:05 +01:00
Markus Theil
36f1c0c2b3 nixos/esdm: simplify module
ESDM 1.0.1 fixed bugs related to Linux compatibility layer with CUSE.

During these fixes, the compatibility layer was simplified behind a
target in order to start the necessary services together or none of
them (services.esdm.linuxCompatServices).

Furthermore, a small helper was added to ESDM 1.0.1 in order to deal
with resume/suspend/hibernate (FUSE needs to be unblocked).

Removed options are marked.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-03-11 14:28:26 +01:00
Maximilian Bosch
8d0e5a3402
postgresqlPackages.anonymizer: init at 1.3.1 2024-03-11 14:09:17 +01:00
github-actions[bot]
339816cfdf
Merge staging-next into staging 2024-03-11 12:01:42 +00:00
Pierre Allix
cf625fe5f0 nixos/networkmanager: add doc about nm profiles interaction with resolvconf 2024-03-11 12:55:27 +01:00
Sandro
80ec88edec
Merge pull request #292025 from RaHoni/baculaTls 2024-03-11 12:01:19 +01:00
OPNA2608
a49c3d2689 nixos/tests/miriway: Be more lenient when identifying the terminal prompts 2024-03-11 11:37:49 +01:00
Atemu
ce8ddcd321
Merge pull request #281192 from diogotcorreia/pgvecto.rs
postgresqlPackages.pgvecto-rs: init at 0.2.1
2024-03-11 07:12:52 +00:00
Guanran Wang
84bbdc744e
nixos/mihomo: add tests 2024-03-11 09:51:36 +08:00
Guanran Wang
a5d09a41b0
nixos/mihomo: add release note 2024-03-11 09:51:36 +08:00
Guanran Wang
a6857b00fe
nixos/mihomo: init 2024-03-11 09:51:36 +08:00
Diogo Correia
6b97ba66a4
nixos/tests/pgvecto-rs: init 2024-03-11 01:02:17 +00:00
github-actions[bot]
e5f37c0e88
Merge staging-next into staging 2024-03-11 00:02:46 +00:00
Sandro
88c9f04d1a
Merge pull request #294771 from flokli/yubikey-agent-eval
nixos/yubikey-agent: fix eval error
2024-03-11 00:15:31 +01:00
Guanran Wang
0a5801395a nixos/clash-verge: add cfg.package 2024-03-10 20:16:41 +01:00
github-actions[bot]
43d40d2ee7
Merge staging-next into staging 2024-03-10 18:01:43 +00:00
Florian Klink
b437b19f54 nixos/yubikey-agent: fix eval error
This has been refactored in https://github.com/NixOS/nixpkgs/
pull/133542, but this reference wasn't updated.
2024-03-10 19:08:23 +02:00
Pol Dellaiera
2bd0c18d98
Merge pull request #282160 from gaykitty/stargazer-debug-mode
nixos/stargazer: add missing debugMode setting
2024-03-10 14:31:06 +01:00
github-actions[bot]
973ef4b818
Merge staging-next into staging 2024-03-10 06:01:30 +00:00
Peder Bergebakken Sundt
4a4a70ca31
Merge pull request #280836 from numinit/nebula-port-zero
nixos/nebula: default to port 0 for hosts other than lighthouse/relay
2024-03-10 05:01:04 +01:00
Peder Bergebakken Sundt
3021170dfe
Merge pull request #265687 from iblech/patch-test-socks
nixos/tests/privoxy: Verify socks support
2024-03-10 04:27:38 +01:00
Peder Bergebakken Sundt
298957b767
Merge pull request #283238 from D3vil0p3r/patch-1
doc: add note in Partitioning and formatting section
2024-03-10 04:01:18 +01:00
Will Fancher
f592a7ea77
Merge pull request #293720 from vkleen/fix/systemd-boot-random-seed
nixos/systemd: Only include systemd-boot-random-seed if the unit exists
2024-03-09 21:01:35 -05:00
github-actions[bot]
3ce29d4386
Merge staging-next into staging 2024-03-10 00:02:48 +00:00
éclairevoyant
6b80044d9d
Merge pull request #294584 from MinerSebas/plasma-samba
nixos/plasma6: Dont add samba a second time to environment.systemPackages
2024-03-09 23:40:45 +00:00
Sandro
c86e8fd7a0
Merge pull request #133542 from fpletz/refactor/pinentry-remove-multiple-outputs
pinentry: remove multiple outputs
2024-03-09 23:57:27 +01:00
Weijia Wang
8ca489efef
Merge pull request #292396 from wegank/unrar-bump
unrar: 6.2.12 -> 7.0.7
2024-03-09 22:54:53 +01:00
Bernardo Meurer
6bb56dc681
Merge pull request #294544 from lilyinstarlight/fix/fwupd-uefi-capsule-settings 2024-03-09 16:31:44 -05:00
Emily
8b7eef367c
Merge pull request #292304 from networkException/unix-socket-sliding-sync-bindaddr
nixos/matrix-sliding-sync: improve unix socket support
2024-03-09 20:12:48 +01:00
github-actions[bot]
1966fd4ba6
Merge staging-next into staging 2024-03-09 18:01:41 +00:00
Lily Foster
1801583855
nixos/fwupd: fix silent failure for uefiCapsuleSettings to ever be added
Bug was introduced in 28ea07d4e3.
2024-03-09 12:44:46 -05:00
Maciej Krüger
8b8bc2c64b
Merge pull request #294497 from cmspam/patch-1
incus.ui: Added incus-specific patches to fix branding and API
2024-03-09 18:32:40 +01:00
Maciej Krüger
8a274e0c18
nixosTests.incus.*: enable nftables to fix tests 2024-03-09 17:23:03 +01:00
MinerSebas
cf3a468eee nixos/plasma6: Dont add samba a second time to environment.systemPackages 2024-03-09 17:06:25 +01:00
gaykitty
366147b86d nixos/stargazer: add missing debugMode setting 2024-03-09 11:04:27 -05:00
networkException
f0097cf1d9
nixos/matrix-sliding-sync: create runtime directory in /run/matrix-sliding-sync
this patch enables the creation of a runtime directory with the default
mode 0755 in /run/matrix-sliding-sync to offer a simple option for
SYNCV3_BINDADDR when using unix sockets.
2024-03-08 23:16:05 +01:00
Franz Pletz
a270c43ea1
treewide: use sensible pinentry flavor 2024-03-08 23:09:02 +01:00
github-actions[bot]
c05ba82277
Merge staging-next into staging 2024-03-08 18:01:49 +00:00
Leona Maroni
399dc3f09e
Merge pull request #290925 from r-vdp/networkd_use_gateway
systemd-networkd: add missing UseGateway key in the DHCPv4 section
2024-03-08 16:38:14 +01:00
Sandro Jäckel
67c1193fab
nixos/unbound: disable checkconf when remote-control is used
Closes #293001
2024-03-08 15:34:00 +01:00
nikstur
4fc409b977
Merge pull request #294096 from WilliButz/repart-image/overridability
systemd-repart: improve overridability of image builder
2024-03-08 15:23:45 +01:00
K900
73e3a5866a
Merge pull request #294269 from K900/test-driver-mypy-fixes
nixos/lib/test-driver: fix mypy errors after staging-next merge
2024-03-08 15:35:59 +03:00
K900
7764fc5335 nixos/lib/test-driver: fix mypy errors after staging-next merge 2024-03-08 15:33:48 +03:00
Maciej Krüger
53c527b694
Merge pull request #292817 from mkg20001/steam-team
teams.steam: add - ref #289561
2024-03-08 13:26:02 +01:00
github-actions[bot]
1d176721c2
Merge staging-next into staging 2024-03-08 12:01:49 +00:00
K900
7b8d88fa05 nixos/steam: fix eval after #293564 2024-03-08 14:42:31 +03:00
Vladimír Čunát
335c734226
Merge #292500: staging-next 2024-03-01 2024-03-08 12:35:06 +01:00
Maciej Krüger
26c09016b9
modules/steam: transfer maintainership to steam team 2024-03-08 12:25:03 +01:00
Thiago Kenji Okada
488f218407
Merge pull request #293564 from Shawn8901/steam-compat-tools
steam: add extraCompatPackages
2024-03-08 11:06:15 +00:00
maxine
b587c07865
Merge pull request #292847 from jwillikers/linger-hotfix
Fix the update-lingering activation script to not fail when a user is removed
2024-03-08 09:54:44 +00:00
r-vdp
4c26c97d21
nixos/networkd: add missing UseGateway key in the DHCPv4 section 2024-03-08 10:54:03 +01:00
maxine
d231374084
Merge pull request #288873 from amaxine/networkmanager_1.46
networkmanager: 1.44.2 → 1.46.0
2024-03-08 09:52:14 +00:00
Weijia Wang
4acc19b18c
Merge pull request #291581 from Luflosi/nixos/memcached/clarify-setting
nixos/memcached: clarify behaviour of `enableUnixSocket`
2024-03-08 10:25:10 +01:00
Weijia Wang
9dd105625d unrar: 6.2.12 -> 7.0.7 2024-03-08 09:57:11 +01:00
Viktor Kleen
0aed32b9dd
nixos/systemd: Only include systemd-boot-random-seed if the unit exists
The unit file is only present if systemd was built with bootloader support.
2024-03-08 08:52:11 +00:00
Jack Kelly
dc158268f7 nixos/amazon-image: Enable Amazon SSM Agent by default
Amazon-provided EC2 images do this.

See: https://docs.aws.amazon.com/systems-manager/latest/userguide/ami-preinstalled-agent.html
2024-03-08 16:24:00 +10:00
éclairevoyant
2319821137
nixos/scrutiny: default collector api endpoint port to point at web app port 2024-03-07 23:21:53 -05:00
éclairevoyant
fc5116d75c
nixos/scrutiny: clean up mkEnableOption definitions 2024-03-07 23:21:53 -05:00
éclairevoyant
ce5dbf1b7b
nixos/scrutiny: inherit lib bindings 2024-03-07 23:21:52 -05:00
éclairevoyant
4e710d5221
nixos/scrutiny: remove redundant lib.mdDoc 2024-03-07 23:21:52 -05:00
~noodlez1232
555aad70c0 nixos/joycond-cemuhook: fix missing module
It seems that the joycond-cemuhook.nix module was missing from the
module-list.nix. This commit should fix that problem.
2024-03-07 17:17:46 -08:00
github-actions[bot]
bca99088c2
Merge master into staging-next 2024-03-08 00:02:17 +00:00
Peder Bergebakken Sundt
5f9689332a
Merge pull request #278537 from wfdewith/syncoid-permissions
nixos/syncoid: add missing ZFS mount permission
2024-03-08 00:11:39 +01:00
Yt
0340f82b24
Merge pull request #292873 from ghthor/tabby
Tabby: bump 0.7.0 -> 0.8.3 and add systemd service
2024-03-07 21:51:06 +00:00
WilliButz
82ef47d3b7
nixos/repart-image: add options to specify mkfs parameters
This new option makes it easier to specify extra mkfs parameters for the
systemd-repart builder.

See https://github.com/systemd/systemd/blob/v255/docs/ENVIRONMENT.md?plain=1#L575-L577
2024-03-07 22:50:56 +01:00
Soenke Klinger
d0a888c315
doc: added nvidiaLegacy driver version 470 to available options in nixos manual (#290231)
Its possible to install the nvidiaLegacy470 driver for the slightly outdated GPUs, but the documentation only has the hints how to install the drivers for the even older GPUs.
2024-03-07 22:29:13 +01:00
Sandro
5f39678474
Merge pull request #292552 from diogotcorreia/oci-containers-fix-stop-one-shot
nixos/oci-containers: ignore nonexistent container when stopping
2024-03-07 21:23:51 +01:00
Maximilian Bosch
3c8f4e06e6
Merge pull request #287602 from Ma27/drop-postgres-ensurePermissions
nixos/postgresql: drop ensurePermissions option
2024-03-07 19:50:44 +00:00
WilliButz
f88148f05e
nixos/repart-image: improve overridability, use structuredAttrs
Parameters passed to systemd-repart are now passed to the build script
via environment variable, which is defined as a list of strings in
combination with `__structuredAttrs = true`. This should make it easier
to customize the image build using `overrideAttrs`.

Both the script used to amend the repart definitions and the amended
definitions are now available via passthru.
2024-03-07 18:27:11 +01:00
Martin Weinelt
1371fe6327
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/servers/home-assistant/default.nix
2024-03-07 17:12:13 +01:00
Emily
2ab0d96297
Merge pull request #293251 from nesteroff/chromium-initial-prefs
nixos/chromium: add the ability to set initial preferences
2024-03-07 16:33:09 +01:00
Nick Cao
b4f564dbff
Merge pull request #293821 from NickCao/knot-test-quic
nixosTests.knot: test zone transfer over quic
2024-03-07 09:43:04 -05:00
Will Owens
d9188fc882
nixos/tabby: init module
- Enable tabby to run as a systemd service
- Document standard tabby configuration
2024-03-07 06:29:12 -05:00
DCsunset
38261d9556 nixos/hoogle: add extraOptions 2024-03-06 22:12:41 -05:00
github-actions[bot]
e0fd83a658
Merge master into staging-next 2024-03-07 00:02:06 +00:00
Robert Hensing
f32e786e98
Merge pull request #292099 from hercules-ci/update-nixops_unstable
nixops_unstable to nixops_unstable_minimal.withPlugins migration + update
2024-03-07 00:46:59 +01:00
Robert Hensing
76fc2db1f5 nixosTests.nixops_unstable: Set memorySize to 2G
Give the evaluator some breathing room.
2024-03-06 22:47:23 +01:00
Robert Hensing
663b3d4be7 nixops_unstable*: Make withPlugins.*.tests.nixos behave correctly 2024-03-06 22:47:22 +01:00
Philip Taron
86ae7a6243
Remove top level with lib; in docs (#293829) 2024-03-06 22:35:43 +01:00
Yuri Nesterov
960f93fd4f nixos/chromium: add the ability to set initial preferences 2024-03-06 21:32:18 +02:00
Shawn8901
93a891f0e8 steam: add extraCompatPackages 2024-03-06 20:24:55 +01:00
Nick Cao
3b7625845b
nixosTests.knot: test zone transfer over quic 2024-03-06 13:41:24 -05:00
Peder Bergebakken Sundt
715b2ae92e
Merge pull request #292608 from onemoresuza/hare-crosscomp
hare: enable cross-compilation
2024-03-06 19:36:45 +01:00
github-actions[bot]
8a8a630460
Merge master into staging-next 2024-03-06 18:01:19 +00:00
Sandro
e656679228
Merge pull request #286523 from MarcelCoding/listmonk
listmonk: 2.5.1 -> 3.0.0
2024-03-06 18:49:20 +01:00
Coutinho de Souza
478cff8d32
haredoc: init at 0.24.0
Also add a mention to the release notes of 24.05 about `hare` and
`haredoc` being split into different packages.
2024-03-06 11:57:55 -03:00
superherointj
ac497db437
Merge pull request #292418 from superherointj/k3s-to-k3s_1_29
k3s: k3s_1_28 -> k3s_1_29
2024-03-06 11:10:02 -03:00
Franz Pletz
f05e5f3a51
Merge pull request #285807 from MinerSebas/prometheus-restic-exporter
prometheus-restic-exporter: 1.4.0 -> 1.5.0
2024-03-06 14:35:24 +01:00
github-actions[bot]
d6370b05b5
Merge master into staging-next 2024-03-06 12:01:15 +00:00
Leona Maroni
182053a2cf
Merge pull request #293595 from SuperSandro2000/git-io-remove
treewide: stop using deprecated git.io shortlink service
2024-03-06 11:14:14 +01:00
Fabian Möller
f753e58e6e
nixos/networkd: allow RoutingPolicyRule port ranges
Linux and Systemd allow port ranges to be used in routing policy rules.

https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#SourcePort=
2024-03-06 09:11:54 +01:00
Jacek Galowicz
3b2b12769d
Merge pull request #293573 from hercules-ci/nixos-running-tests-requirements
nixos/doc: Describe NixOS test system requirements
2024-03-06 07:51:02 +01:00
github-actions[bot]
8660ec23c7
Merge master into staging-next 2024-03-06 00:02:17 +00:00
Sandro Jäckel
04d33b98e1
treewide: stop using deprecated git.io shortlink service 2024-03-05 22:58:29 +01:00
Sandro
911b4015d2
Merge pull request #283319 from phaer/etebase-server
etebase: fix runtime crash due to wrong pydantic..
2024-03-05 21:37:21 +01:00
Robert Hensing
eb787006d7 nixos/doc/running-nixos-tests: Describe system requirements 2024-03-05 20:51:10 +01:00
github-actions[bot]
ac779b472e
Merge master into staging-next 2024-03-05 18:01:25 +00:00
Adam C. Stephens
a51a27a78b
Merge pull request #291554 from jnsgruk/homepage-config
nixos/homepage-dashboard: support structured config
2024-03-05 09:48:19 -05:00
Jon Seager
0b39e86cbc
nixosTests.homepage-dashboard: test managed and unmanaged configs 2024-03-05 14:38:53 +00:00
Jon Seager
183bc82cca
nixos/homepage-dashboard: add breaking change notice to release notes 2024-03-05 14:38:52 +00:00
Jon Seager
c0330351a0
nixos/homepage-dashboard: support structured config 2024-03-05 14:38:52 +00:00
Arian van Putten
3e98d57895 nixos/doc: Add 24.05 release notes for AMIs 2024-03-05 10:03:49 +01:00
github-actions[bot]
16bca48d25
Merge master into staging-next 2024-03-05 06:01:12 +00:00
adisbladis
5cdb38bb16
Merge pull request #288579 from blitz/vbox-kvm-2
virtualboxKvm: init
2024-03-05 18:58:57 +13:00
Mikael Voss
fe639ca418 nixos/tests/akkoma: Adapt to latest toot release 2024-03-05 05:27:40 +01:00
github-actions[bot]
100a9b96ce
Merge master into staging-next 2024-03-05 00:01:58 +00:00
Someone
46b75bf589
Merge pull request #291828 from SomeoneSerge/refactor/cdi-nvidia
nixos/cdi.dynamic.nvidia: expose driverLink
2024-03-04 18:32:34 +00:00
github-actions[bot]
fe2479b166
Merge master into staging-next 2024-03-04 18:00:55 +00:00
nikstur
c0feba86fb nixos/test-instrumentation: use full path to env
It is sometimes useful to have a seprate /usr partition to make systemd
tools happy (e.g. repart, sysupdate, gpt-auto-generator etc.). The test
script should not depend on usrbinenv to make this possible.
2024-03-04 16:12:56 +01:00
Nick Cao
8e19126885
Merge pull request #289009 from 999eagle/feat/miniflux-no-db
nixos/miniflux: add option to disable configuring a local postgresql db
2024-03-04 09:47:14 -05:00
github-actions[bot]
6620dd578c
Merge master into staging-next 2024-03-04 12:06:01 +00:00
Brian McKenna
40bebc8749 extest: refactor to use mkEnableOption 2024-03-04 19:18:20 +11:00
Brian McKenna
5dffe7eebf extest: init at 1.0.2 2024-03-04 19:18:20 +11:00
Sophie Tauchert
cb5f2a8e87
nixos/tests/miniflux: add test for external database 2024-03-04 09:07:21 +01:00
Sophie Tauchert
1f8385d6d1
nixos/miniflux: add option to disable configuring a local postgresql db 2024-03-04 09:07:20 +01:00
github-actions[bot]
1a3380fec6
Merge master into staging-next 2024-03-04 06:10:33 +00:00
Robert Schütz
e67761b6f6
Merge pull request #292854 from SuperSandro2000/vaultwarden-bitwarden_rs
vaultwarden: cleanup maintainers, nixos/vaultwarden: drop aliases
2024-03-04 00:36:06 +00:00
github-actions[bot]
7869e723ac
Merge master into staging-next 2024-03-04 00:02:16 +00:00
Sandro Jäckel
06a6371247
nixos/vaultwarden: set meta.maintainers to package maintainer 2024-03-04 00:41:56 +01:00
Cosima Neidahl
c981cb00dd
Merge pull request #248972 from codifryed/coolercontrol-0.17.0
coolercontrol: init at 1.1.1
2024-03-03 19:31:59 +01:00
Martin Weinelt
f09b7dc6a5
Merge pull request #289961 from leona-ya/vikunja-0.23.0
vikunja: 0.22.1 -> 0.23.0
2024-03-03 19:15:35 +01:00
github-actions[bot]
3d632fe115
Merge master into staging-next 2024-03-03 18:01:09 +00:00
Jordan Williams
8558d7b1ce
nixos/users-groups: Fix the update-lingering activation script failing
The update-lingering activation script currently fails during rebuilds.
This happens when removing a user with linger enabled.
The call to loginctl disable-linger runs for the non-existent user.
This returns an error code which causes the failure.

To mitigate this, this PR removes any residual linger files.
These are files named for the user in /var/lib/systemd/linger.
A simple check for user existence determines whether to delete the file.
This happens before the call to disable-linger to avoid any errors.

Fixes #283769.
2024-03-03 12:00:25 -06:00
Guillaume Girol
5b274d5f01 nixos/nix: add workaround for https://github.com/NixOS/nix/issues/9487
Nix has a suprising behavior where if the option `extra-foo` is set before `foo`, then setting `foo` overwrites the setting for `extra-foo`. This is reported as https://github.com/NixOS/nix/issues/9487, and will likely not be fixed any time soon.

This works around this issue by always putting `extra-*` settings after non-extra ones in the nixos-generated `/etc/nix.conf`.
2024-03-03 17:03:46 +01:00
Guillaume Girol
dc9a74e61e
Merge pull request #291934 from e1mo/bird-lg-1-3-5
bird-lg: 1.3.1 -> 1.3.5
2024-03-03 15:50:42 +01:00
Guillaume Girol
9887be970b
Merge pull request #292437 from deviant/nixos-nixseparatedebuginfod-nix2.3
nixos/nixseparatedebuginfod: fix compatibility with Nix 2.3
2024-03-03 14:12:27 +01:00
github-actions[bot]
0d466b7ac7
Merge master into staging-next 2024-03-03 12:01:17 +00:00
Pascal Bach
8240cbf81b
Merge pull request #292124 from r-ryantm/auto-update/minio
minio: 2024-02-24T17-11-14Z -> 2024-02-26T09-33-48Z
2024-03-03 11:22:22 +01:00
Pascal Bach
7305821c58 tests/minio: fix broken minio test
Since last update minio pre allocates 2GiB of memory, so the test VM
needs more than that to not run out of memory.

We also remove the time based tests as it makes the test non deterministic
2024-03-03 11:20:44 +01:00
github-actions[bot]
26d76ed9a5
Merge master into staging-next 2024-03-03 00:02:18 +00:00
Pol Dellaiera
f480f9f47e
Merge pull request #292823 from SuperSandro2000/paperless-too-many-open-files
nixos/paperless: fix too many open files
2024-03-02 23:51:11 +01:00
Pol Dellaiera
6e201a6d91
Merge pull request #292850 from newAM/llama-cpp-module-list
nixos/llama-cpp: add to module-list
2024-03-02 23:49:14 +01:00
Leona Maroni
46ad1987b9
Merge pull request #278698 from bachp/photoprism-update
photoprism: 231011-63f708417 -> 231128-f48ff16ef
2024-03-02 23:03:49 +01:00
Arian van Putten
cc04ae5878 nixos/amazon-ec2-amis: Add NixOS 23.11
Note that this list will stop being updated from now on.
Please use https://nixos.github.io/amis/ and https://nixos.github.io/amis/images.json instead.
We are working on integrating this in the https://nixos.org/ website
These get updated for every channel bump.
2024-03-02 22:40:50 +01:00
Maximilian Bosch
a9bcd3b8b7
Merge pull request #292825 from SuperSandro2000/nextcloud-with-apps-local
nixos/nextcloud: build with-apps local
2024-03-02 21:39:36 +00:00
Julien Malka
4ee410d8f8
Merge pull request #283547 from r-vdp/boot_sort_key 2024-03-02 22:17:52 +01:00
nikstur
b6401f808a
Merge pull request #292636 from RaitoBezarius/smm-works-for-something-else-than-x86-actually
OVMF: remove invalid `assert` on SMM
2024-03-02 21:04:12 +01:00
Sandro Jäckel
4264ded76e
nixos/vaultwarden: drop aliases 2024-03-02 20:18:55 +01:00
Alex Martens
aafa54a1a8 nixos/llama-cpp: add to module-list 2024-03-02 10:46:24 -08:00
github-actions[bot]
81198fd201
Merge master into staging-next 2024-03-02 18:01:04 +00:00
Sandro Jäckel
907b5ebcee
nixos/nextcloud: build with-apps local 2024-03-02 18:01:38 +01:00
K900
633a090546
Merge pull request #292822 from xNaxdy/work/plasma6-install-sshfs
programs/kdeconnect: install sshfs
2024-03-02 19:59:13 +03:00
Sandro Jäckel
da1ccb628f
nixos/paperless: fix too many open files
paperless-web-start[658743]: kombu.exceptions.OperationalError: [Errno 24] Too many open files: '/nix/store/k6h0pihpi3ih31zjk6ragqcp4mjz4pjs-python3.11-concurrent-log-handler-0.9.24/lib/python3.11/site-packages/concurrent_log_handler-0.9.24.dist-info/entry_points.txt'
2024-03-02 17:52:18 +01:00
Naxdy
bc910886a1
programs/kdeconnect: install sshfs 2024-03-02 17:51:04 +01:00
Maciej Krüger
55ead8c56a
Merge pull request #290976 from adamcstephens/incus/nft
nixos/incus: assert nftables is used when firewall is enabled
2024-03-02 17:40:44 +01:00
Paul Meyer
a217ccfe1f
Merge pull request #292773 from attilaolah/patch-1
Add missing closing parens
2024-03-02 17:32:16 +01:00
Franz Pletz
764d15f59f
pinentry: remove multiple outputs package
fixes #133156 #124753
2024-03-02 17:16:53 +01:00
Nick Cao
2646fba84d
Merge pull request #292702 from NickCao/fcitx5-plasma6
nixos/fcitx5: enable plasma6Support by default if plasma6 is enabled
2024-03-02 10:54:19 -05:00
K900
57746ceea5
Merge pull request #292748 from K900/sycoca-oof
nixos/plasma6: nuke sycoca on activation
2024-03-02 15:21:39 +03:00
github-actions[bot]
f51807feea
Merge master into staging-next 2024-03-02 12:01:28 +00:00
Yt
492678349b
Merge pull request #292412 from bobrippling/fix/ebusd-logging
ebusd: fix logging overrides
2024-03-02 11:46:35 +00:00
Attila Oláh
ac4441fabd
Add missing closing parens.
https://xkcd.com/859
2024-03-02 12:40:40 +01:00
K900
d7a4bf5998 nixos/plasma6: nuke sycoca on activation
This is not the right solution, but it should get us going for now.
2024-03-02 11:26:41 +03:00
github-actions[bot]
9819563ca9
Merge master into staging-next 2024-03-02 06:00:53 +00:00
Gabriella Gonzalez
b8698cd8d6
macOS support for NixOS tests (#282401)
Closes #193336
Closes #261694
Related to #108984

The goal here was to get the following flake to build and run on
`aarch64-darwin`:

```nix
{ inputs.nixpkgs.url = <this branch>;

  outputs = { nixpkgs, ... }: {
    checks.aarch64-darwin.default =
      nixpkgs.legacyPackages.aarch64-darwin.nixosTest {
        name = "test";

        nodes.machine = { };

        testScript = "";
      };
  };
}
```

… and after this change it does.  There's no longer a need for the
user to set `nodes.*.nixpkgs.pkgs` or
`nodes.*.virtualisation.host.pkgs` as the correct values are inferred
from the host system.
2024-03-02 06:33:14 +01:00
annalee
a04ddbe327
Merge remote-tracking branch 'upstream/master' into sn-remove 2024-03-02 04:08:10 +00:00
Nick Cao
48e5de444b
nixos/fcitx5: enable plasma6Support by default if plasma6 is enabled 2024-03-01 22:43:56 -05:00
r-vdp
a8ab8b59a7
systemd-boot: introduce options to set a sort-key for systemd-boot entries
Without sort-keys specified on entries, the entries are sorted only by
file name (in decreasing order, so starting at the end of the alphabet!),
without taking any other fields into account (see
[the boot loader specification reference][1]).
Moreover, entries without a sort-key are always ordered after all
entries with a sort-key, so by not adding a sort-key to the NixOS ones,
we cannot add a sort-key to any other entry while keeping it below the
NixOS entries.

So currently we have options to set the file names for additional entries like
memtest and netbootxyz.
However, as mentioned above, the sorting by file name is not very intuitive and
actually sorts in the opposite order of what is currently mentioned in the option
descriptions.

With this commit, we set a configurable sort-key on all NixOS entries,
and add options for setting the sort-keys for the memtest and netbootxyz
entries.
The sorting by sort-key is more intuitive (it starts at the start of the
alphabet) and also takes into account the machine-id and version for entries
with identical sort-keys.

We use a bootspec extension to store the sort keys, which allows us to
redefine the sort key for individual specialisations without needing any
special casing.

[1]: https://uapi-group.org/specifications/specs/boot_loader_specification/#sorting
2024-03-02 02:11:32 +01:00
nuko
636584b3ff
nixos/komga: use lib.getExe 2024-03-02 13:56:20 +13:00
nuko
b18bcf3a04
nixos/komga: add systemd service hardening 2024-03-02 13:55:25 +13:00
nikstur
ee2a53dc86 nixos/tests/systemd-boot: make secureBoot test work on different architectures 2024-03-01 23:45:07 +01:00
nikstur
ce1d1f3e6c nixos/qemu-vm: remove implicit dependency on SSM
The qemu module shouldn't implicitly (and for all architectures) enable
SSM when enabling Secure Boot.

Additionally, this breaks aarch64 Secure Boot tests because this module
doesn't use the right machine type for anything but X86.
2024-03-01 23:40:36 +01:00
phaer
fa34964ef1 etebase: make proper package...
and remove the ad-hoc python environment.
Also remove daphne and use uvicorn just as upstream does
2024-03-01 22:55:27 +01:00
nikstur
1df98b23f6
Merge pull request #292061 from nikstur/systemd-random-seed
nixos/systemd: include systemd-boot-random-seed.service
2024-03-01 21:46:39 +01:00
Nick Cao
fcba479b33
Merge pull request #292607 from NickCao/fcitx5-nixos
nixos/fcitx5: add plasma6 support option
2024-03-01 13:36:04 -05:00
Robert Hensing
55dcd06bdb
Merge pull request #292487 from jmbaur/nixos-cross-check
nixos/nixpkgs: fix determination for cross-compiled nixos system
2024-03-01 18:19:58 +01:00
Jared Baur
3794246066
nixos/nixpkgs: fix determination for cross-compiled nixos system
Since the output of `lib.systems.elaborate` contains functions, an
equality check with `==` does not suffice, `lib.systems.equals` should
be used instead.
2024-03-01 09:05:08 -08:00
Nick Cao
6e2d4054ae
nixos/fcitx5: add plasma6 support option 2024-03-01 11:34:09 -05:00
Ryan Lahfa
fae73881ba
Merge pull request #292561 from arianvp/fix-make-disk-image-systemd-boot-homeless-shelter-clobber
nixos/lib/make-disk-image.nix: fix systemd-boot-builder clobbering /homeless-shelter
2024-03-01 16:59:16 +01:00
Adam C. Stephens
b52452f8c7
Merge pull request #291951 from amarshall/zfs-pkgs-renaming
zfs: rename zfsStable -> zfs_2_2; zfsUnstable -> zfs_unstable; remove enableUnstable option in favor of package
2024-03-01 10:09:12 -05:00
phaer
720a1eb5e7 modules/etebase-server: add package, pythonPackage
options, to keep the packaeges configurable
2024-03-01 14:32:46 +01:00
RaHoni
2af073f716
nixos/bacula: refactor option generation
The generation of the descriptions always used lib explicitly even
thoughit was already specified with 'with'.

Since using `with lib` is discouraged this was also changed to inherit.
2024-03-01 14:11:57 +01:00
RaHoni
ad2f55dc4e
nixos/bacula: Add support for TLS
Added the majority of TLS options used for transport encryption.

This uses a submodule since all resources share the same settings.

The documentation can be found under:
https://www.bacula.org/13.0.x-manuals/en/main/Bacula_TLS_Communications_E.html
2024-03-01 14:11:57 +01:00
Sandro
5ad27da222
Merge pull request #291907 from SuperSandro2000/tailscaled-flags 2024-03-01 13:54:54 +01:00
Sandro
b84bc4ea3a
Merge pull request #264087 from leonm1/matter-server-module 2024-03-01 13:51:19 +01:00
Sandro
51e92056db
Merge pull request #283660 from ocfox/transfer 2024-03-01 13:36:03 +01:00
github-actions[bot]
18bc3c64e6
Merge master into staging-next 2024-03-01 12:00:58 +00:00
Arian van Putten
b75a29cb6c nixos/lib/make-disk-image.nix: fix systemd-boot-builder clobbering /homeless-shelter
systemd-boot-builder.py calls nix-env --list-generations which creates
$HOME/.nix-defexpr/channels/nixos if it doesn't exist. This would cause a folder
/homeless-shelter to show up in the final image which in turn breaks nix builds
in the target image if sandboxing is turned off (as /homeless-shelter is never
allowed to exist).
2024-03-01 12:52:48 +01:00
Diogo Correia
81f21e3936
nixos/oci-containers: ignore nonexistent container when stopping
Fixes #292551
2024-03-01 10:41:00 +00:00
K900
e758ca61fe nixos/lib/test-driver: make the warning message more noticeable 2024-03-01 13:20:09 +03:00
Marcel
896a4d62d8
listmonk: ensure correct application of data migration 2024-03-01 10:45:12 +01:00
Sarah Brofeldt
13a94ad1fb
Merge pull request #292291 from cafkafk/dockerRegistry-openFirewall
nixos/dockerRegistry: add `openFirewall` option
2024-03-01 09:57:07 +01:00
Christina Sørensen
d31cbb78ca
nixos/dockerRegistry: add openFirewall option
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-03-01 09:56:03 +01:00
K900
690d54ef45
Merge pull request #292326 from hcsch/pipewire-wireplumber-doc-fix
nixos/pipewire: doc fixes as a follow-up to #282377 and #291946
2024-03-01 09:28:17 +03:00
K900
b4622a277e
Merge pull request #292483 from mjm/plasma6-kcmutils
nixos/plasma6: install kcmutils
2024-03-01 09:25:51 +03:00
Matt Moriarity
e59d120fc1 nixos/plasma6: install kcmutils 2024-02-29 20:12:42 -07:00
nuko
502f34f3e0
nixos/komga: rfcfmt, rm mdDoc & toplvl with lib 2024-03-01 15:13:06 +13:00
networkException
10fc05bfc1
nixos/matrix-synapse: allow synapse to write to directories of unix socket paths
this patch takes the path of all unix socket listeners and appends their
respective parent directories to the ReadWritePaths allow list for the
matrix-synapse systemd service.

previously configuring a unix socket in a directory not writable by
synapse would fail.
2024-03-01 02:36:29 +01:00
github-actions[bot]
18e39b9167
Merge staging-next into staging 2024-03-01 00:02:47 +00:00
Sandro
bbabfca453
Merge pull request #263765 from numinit/armagetronad-module
nixos/armagetronad: Add module with NixOS tests
2024-03-01 00:46:34 +01:00
Sandro
b8ec4c1475
Merge pull request #290449 from Kiskae/patch-2
nixos/podman: pass proxy variables to podman API
2024-03-01 00:37:27 +01:00
Sandro
daa33a4bf7
Merge pull request #287299 from SuperSandro2000/unbound-checkconf
nixos/unbound: check validity of config file
2024-03-01 00:33:36 +01:00
V
ff990ea66a nixos/nixseparatedebuginfod: fix compatibility with Nix 2.3
Appending to options with the `extra-` prefix was added in Nix 2.4,
which makes config validation fail on this version without the guard.

Change-Id: Ie253978dbaf00b228fecc08698a3dcc01cd2d82b
2024-02-29 23:10:31 +01:00
superherointj
09390b5cfe nixos/doc: release note for k3s_1_29 2024-02-29 18:38:58 -03:00
Rob Pilling
979ae4c6e5 nixos/ebusd: fix logging overrides
This fixes #292131 - currently we specify --log=all:<level>, which
overrides all other log areas. Specifying this first allows the
further log areas to be specified without being replaced.
2024-02-29 21:02:26 +00:00
github-actions[bot]
c7d7e4a7a5
Merge staging-next into staging 2024-02-29 18:01:30 +00:00
Kerstin
51363e5c0d
Merge pull request #280628 from h7x4/nixos-module-update-kanidm-add-backup-dir-to-bindpaths
nixos/kanidm: declare `online_backup` options
2024-02-29 15:19:34 +01:00
Michele Guerini Rocco
11b122ec70
Merge pull request #292185 from dotlambda/searxng-mainProgram
searxng: set meta.mainProgram
2024-02-29 14:19:51 +01:00
Hans Christian Schmitz
3f86bd950c
nixos/pipewire: add docs for passthru.requiredLv2Packages 2024-02-29 13:28:04 +01:00
Hans Christian Schmitz
b97450b007
nixos/wireplumber: fix incorrect option name in docs 2024-02-29 13:28:04 +01:00
github-actions[bot]
81a57dc133
Merge staging-next into staging 2024-02-29 12:02:30 +00:00
Arnout Engelen
728d2d1fd9
Merge pull request #287805 from raboof/sway-update-to-1.9
sway: 1.8.1 -> 1.9.0
2024-02-29 12:06:52 +01:00
Arnout Engelen
36e51d7cbf
sway: 1.8.1 -> 1.9.0
Co-authored-by: Phileas Lebada <norpol@users.noreply.github.com>
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2024-02-29 11:37:30 +01:00
networkException
644eac31e6
nixos/matrix-sliding-sync: document unix socket support in SYNCV3_BINDADDR 2024-02-29 11:03:01 +01:00
Leona Maroni
3302864e6e
Merge pull request #292030 from Flakebi/paperless
paperless: fix uploading files via local folder
2024-02-29 08:10:28 +01:00
Martin Weinelt
65b31e498a Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
- pkgs/development/python-modules/influxdb/default.nix
- pkgs/development/tools/misc/binutils/default.nix
2024-02-29 07:19:15 +01:00
Robert Schütz
603c5af519 nixos/tests/searx: use configured package for static content
Also use the simple theme because upstream dropped the oscar one:
https://github.com/searxng/searxng/discussions/1167
2024-02-28 17:51:29 -08:00
Robert Schütz
3330e3c9c3 nixos/searx: use lib.getExe 2024-02-28 17:51:24 -08:00
Franz Pletz
317a383090
Merge pull request #292189 from nagisa/fixes-systemd-upheldBy-propagation 2024-02-29 02:08:56 +01:00
Silvan Mosberger
8e6598a68c
Merge pull request #286399 from benaryorg/global_ini_alt2
pkgs.formats: pkgs.formats version of lib.generators.toINIWithGlobalSection
2024-02-29 01:20:37 +01:00
Simonas Kazlauskas
34c5cc74a1 systemd: fix propagation of upheldBy option to units 2024-02-29 02:01:24 +02:00
Silvan Mosberger
cd5dc76d83 substitute: Deprecate replacements, introduce replacementsList
Also:
- Add tests
- Treewide update
- Improve docs
2024-02-29 00:35:27 +01:00
abysssol
8720397720 nixos/ollama: replace incorrect use of overrideAttrs
The bug prevents nixos from compiling
if the ollama service is built with cuda enabled.
2024-02-28 17:15:30 -05:00
Adam C. Stephens
8ed07da2ed
Merge pull request #290433 from adamcstephens/consul/tests
nixos/tests/consul: enable unfree
2024-02-28 13:35:48 -05:00
Adam C. Stephens
6b834b5e9a
Merge pull request #290570 from adamcstephens/lxc/sysctl
nixos/lxc/generator: remove sysctl error handling
2024-02-28 13:34:48 -05:00
K900
ba13f3e524 nixos/doc: typo 2024-02-28 20:26:55 +03:00
Adam Stephens
5f1b65f75f
nixos/tests/incus: ensure sysctl rules apply successfully to lxc containers 2024-02-28 11:59:39 -05:00
Julian Stecklina
3661b3ee53 nixosTests.virtualbox: add happy path KVM test
The KVM support is still new and experimental. There is no point in
doing extensive testing. Just check whether it works in general.
2024-02-28 17:43:43 +01:00
Julian Stecklina
77c7ac6c35 nixosTests.virtualbox: allow additional parameters for tests 2024-02-28 17:36:22 +01:00
Julian Stecklina
a9822fa200 nixos/virtualbox-host: expose option to run with KVM 2024-02-28 17:36:22 +01:00
K900
6a711189fc nixos/doc: release note for Plasma 6 2024-02-28 18:56:31 +03:00
K900
7d93928492 nixos/release: add Plasma 6 ISO variant 2024-02-28 18:49:33 +03:00
K900
2614e40893 sddm: add Wayland to the wrapper if enabled 2024-02-28 18:49:33 +03:00
K900
7b74d9a4ac sddm: 0.20.0-unstable -> 0.21.0 2024-02-28 18:49:33 +03:00