Commit Graph

40193 Commits

Author SHA1 Message Date
Pascal Bach
a8eaee11a9
Merge pull request #296459 from MinerSebas/restic-rest-server-hardening
nixos/restic-rest-server:  Add additional service hardening
2024-04-10 23:33:34 +02:00
Cole Helbling
dbc967d14d Revert "NixOS Integration Tests: Enable again for darwin" 2024-04-10 12:52:12 -07:00
K900
85d3f97277
Merge pull request #303114 from K900/sddm-no-x11
nixos/sddm: allow disabling the rest of X11
2024-04-10 22:22:20 +03:00
K900
ab0b45a3a0 nixos/sddm: allow disabling the rest of X11 2024-04-10 22:22:05 +03:00
Adam C. Stephens
e8ff41fa85
Merge pull request #285041 from r-vdp/nix-optimise-fix-timer
nix-optimise: only create timer unit if needed
2024-04-10 13:48:22 -04:00
Bjørn Forsman
74c1547424 nixos/doc: suggest mounting the ESP on /boot with umask=077
This prevents world-readable access to /boot, which is a security issue
that systemd-boot warns about.

Fixes https://github.com/NixOS/nixpkgs/issues/279362.
2024-04-10 19:34:07 +02:00
Bjørn Forsman
e17e60b273 nixos-generate-config: preserve vfat filesystem mount permissions
The default is to mount these world-readable, but that's a security risk
for the EFI System Partition.

Ref https://github.com/NixOS/nixpkgs/issues/279362.
2024-04-10 19:34:07 +02:00
Connor Baker
546930ab97
Merge pull request #300321 from jonringer/deprecate-cuda-autoAddDriver
cudaPackages.autoAddX: Deprecate
2024-04-10 12:45:48 -04:00
Jacek Galowicz
e4bf075cff NixOS Integration Tests: Enable again for darwin 2024-04-10 17:59:11 +02:00
Jonathan Ringer
dadbcf9367
nixos/rl-24.05: Add deprecation entry for cudaPackages.autoAdd{DriverRunpath,OpenGLRunpathHook} 2024-04-10 08:31:19 -07:00
linsui
f1c99961e3 nixos/fzf: fix typo 2024-04-10 19:55:33 +08:00
Jörg Thalheim
949fe90552
Merge pull request #297640 from Mic92/digitalocean
digital-ocean: 'make it easier to use disko' and 'no longer disable multiple nixos generations in bootloader'
2024-04-10 09:08:20 +02:00
Rick van Schijndel
067e519281
Merge pull request #302858 from tweag/infinisil-maintainer
treewide: Drop infinisil as maintainer from most packages
2024-04-10 08:50:38 +02:00
K900
2704f5bb2f
Merge pull request #302595 from motiejus/autorandr-match-edid
nixos/autorandr: add --match-edid
2024-04-09 23:23:59 +03:00
Motiejus Jakštys
dd1e21f39f nixos/autorandr: add --match-edid
It is useful when outputs change, but EDIDs do not. See [upstream PR][1]
for more details.

[1]: https://github.com/phillipberndt/autorandr/pull/293
2024-04-09 23:22:08 +03:00
Silvan Mosberger
ea5dfeab93 treewide: Drop infinisil as maintainer from most packages
I'm not going anywhere, I'm focusing my energy on other issues, and
getting pinged as a maintainer for packages is a bit distracting (also
I'm not using most of these packages anyways!)
2024-04-09 21:43:39 +02:00
Silvan Mosberger
4f1d724b82
Merge pull request #284551 from hercules-ci/types-attrTag
Add `types.attrTag`
2024-04-09 20:48:44 +02:00
Leona Maroni
40d8229671
Merge pull request #302203 from flyingcircusio/logrotate-docs-priority
nixos/logrotate docs: clarify settings
2024-04-09 20:47:59 +02:00
Jörg Thalheim
fb158384bd
Merge pull request #289270 from Mic92/nixos-tinc
nixos/tinc: fix user to not include . in its name
2024-04-09 19:43:48 +02:00
Jörg Thalheim
d79ff2f15b
Merge pull request #241816 from Mic92/cloud-init
nixos/cloud-init: enable filesystem based on what is configured
2024-04-09 19:42:45 +02:00
Jörg Thalheim
13cc579932
Merge pull request #301528 from Mic92/borgbackup-fix
nixos/borgbackup: fix network-online.target warning
2024-04-09 19:39:11 +02:00
pennae
4e21f361d6
Merge pull request #154952 from colemickens/extlinux
extlinux-conf-builder: specialisations entries
2024-04-09 18:49:08 +02:00
K900
97d675f411
Merge pull request #302758 from K900/kio-shenanigans
nixos/plasma6: better way to install kio5 plugins
2024-04-09 19:10:35 +03:00
K900
f18f62d23a nixos/plasma6: better way to install kio5 plugins
This should _for sure_ avoid pulling in unnecessary bits.
2024-04-09 19:10:10 +03:00
Sandro
4cc6ce454d
Merge pull request #291913 from SuperSandro2000/sddm-wayland-only 2024-04-09 14:31:12 +02:00
Sandro
550f705f42
Merge pull request #301392 from McSinyx/yubi-pinentry-doc 2024-04-09 10:54:22 +02:00
K900
ad3a164c8c
Merge pull request #302748 from eclairevoyant/steam-fonts-revert
Revert "nixos/steam: ensure Steam picks up font packages"
2024-04-09 08:24:41 +03:00
Bjørn Forsman
a29010fe79 nixos: improve many 'enable' descriptions 2024-04-09 07:10:17 +02:00
éclairevoyant
f6fe07e669
Revert "nixos/steam: ensure Steam picks up font packages"
This reverts commit 2a1241b0e6aa5a18169c7507e64887fd90302320.
2024-04-09 00:38:11 -04:00
Robert Schütz
0dca19054c
Merge pull request #302389 from SuperSandro2000/vaultwarden-webvault
vaultwarden.webvault: 2024.3.0 -> 2024.3.1
2024-04-09 03:49:54 +00:00
Adam C. Stephens
f3ee2a75d4
Merge pull request #301712 from adamcstephens/incus/6
incus: 0.7.0 -> 6.0.0, add lts
2024-04-08 23:25:58 -04:00
Pol Dellaiera
38475aff83
Merge pull request #276695 from katexochen/azure-cli/plugins
azure-cli: immutable command index & add extensions
2024-04-09 03:44:35 +02:00
éclairevoyant
0c165dec84 nixos/steam: ensure Steam picks up font packages 2024-04-08 15:59:36 -07:00
Sandro Jäckel
b6e0c42bc2
tests/vaultwarden: adjust to changes in frontend 2024-04-09 00:05:35 +02:00
Sandro Jäckel
476b8c276e
treewide: rename renamed sddm/displayManager settings 2024-04-08 21:56:38 +02:00
Sandro Jäckel
5598d81e94
nixos/graphical-desktop: extract generic graphical things from xserver
This is required to fix the keymap in SDDM without X.
2024-04-08 21:56:37 +02:00
Sandro Jäckel
d220d8bb6f
nixos/sddm: allow running on wayland without xserver enabled 2024-04-08 21:56:37 +02:00
Sandro Jäckel
0d3ab0d4ec
nixos/sddm: move option from services.xserver.displayManager.sddm to services.displayManager.sddm
Because it is not just X anymore
2024-04-08 21:56:37 +02:00
Sandro Jäckel
6be2bfcc32
nixos/display-managers: extract generic display-manager bits
Some settings which where before inside the xserver module, are generic
and also required for SDDM under wayland. To make them easily re-usable
lets extract them.
2024-04-08 21:56:36 +02:00
Adam Stephens
a55f6f1511
lxd: add release notes for LTS change 2024-04-08 14:18:16 -04:00
Adam Stephens
dce92a3114
incus-lts: init at 6.0.0 and make default 2024-04-08 14:18:02 -04:00
nikstur
80cafa6a29
Merge pull request #302590 from nikstur/repart-image-label-length
nixos/image/repart: assert maximum label length
2024-04-08 18:48:53 +02:00
Will Fancher
0f5ae24dfb
Merge pull request #302466 from luishfonseca/zfs-initrd-udev-rules
nixos/zfs: Install zfs udev rules on stage1
2024-04-08 11:43:35 -04:00
Florian Klink
1dab5d7c77
Merge pull request #302228 from xzfc/bind-ipv6
bind: allow recursive queries from IPv6 loopback
2024-04-08 18:35:18 +03:00
nikstur
ad19cee09c nixos/image/repart: assert maximum label length
The maximum label length is specified by UEFI and enforced/asserted by
systemd-repart. This lets evaluation fail already and give the user
some more information about what's wrong.

Also warn when the suggested label length is exceeded. This serves as a
safety mechanism for using systemd-sysupdate style A/B updates where the
version number is encoded in the label and might not be incrementable
when the maximum label size is reached.
2024-04-08 16:42:25 +02:00
nikstur
4c397ea6de systemd-lib: include GPTMaxLabelLength constant 2024-04-08 16:42:25 +02:00
Cabia Rangris
215d144f77
nixos/outline: fix s3 storage (#302567)
ReadWritePaths were crashing the unit due to non-existent folders on s3 configuration

https://github.com/NixOS/nixpkgs/pull/298892#issuecomment-2042666854
2024-04-08 17:06:27 +04:00
nikstur
b1a486be09
Merge pull request #301581 from nikstur/repart-image-cross
nixos/repart-image: supply explicit --architecture to repart
2024-04-08 14:14:19 +02:00
Michele Guerini Rocco
42b2359f2c
Merge pull request #302522 from kmein/keygen
nixos/manual: fix sshfs keygen output
2024-04-08 12:07:17 +02:00
Kierán Meinhardt
1c896bd6e1 nixos/manual: fix sshfs keygen output 2024-04-08 10:48:29 +02:00