Commit Graph

499697 Commits

Author SHA1 Message Date
Philipp Bartsch
30ad9053ab nixos/murmur: add apparmor policy 2023-07-13 11:11:01 +02:00
Philipp Bartsch
ced170c030 nixos/miniflux: add apparmor policy
This change also extends the test to ensure that normal operations
aren't denied.
2023-07-13 11:10:39 +02:00
Philipp Bartsch
1256178263 apparmor: fix python import issues
With buildPythonApplication the PYTHONPATH is now populated properly,
which should address the ModuleNotFoundError issue.

I also moved some of the substitutions from postInstall to prePatch, so
they don't conflict with the wrapped executables.

Because upstream does not seem to hardcode binary paths in the utils
anymore, some of the old substituteInPlace rules could be removed.

Partial fix for nixpkgs#169056
2023-07-12 21:38:31 +02:00
Philipp Bartsch
0f474b4c6c nixos/apparmor: support custom i18n glibc locales
The i18n nixos module creates a customized glibcLocales package.
Use the system specific glibcLocale instead of the vanilla one.
2023-07-12 21:38:31 +02:00
Philipp Bartsch
ad7ffe3a7c nixos/apparmor: fix syntax in abstractions/bash 2023-07-09 22:25:30 +02:00
Philipp Bartsch
9145e6df84 nixos/apparmor: add missing abstraction/nss-systemd
The abstraction/nameservice profile from apparmor-profiles package
includes abstractions/nss-systemd. Without "reexporting" it,
the include fails and we get some errors.
2023-07-09 22:21:44 +02:00
Philipp Bartsch
0eabede44b nixos/apparmor: make abstractions/ssl_certs more go friendly
By default golang's crypto/x509 implementation wants to read
/etc/pki/tls/certs/ when loading system certificates.

This patch adds the path to reduce audit log noise.

Relevant code:
- https://github.com/golang/go/blob/go1.20.5/src/crypto/x509/root_unix.go#L32-L82
- https://github.com/golang/go/blob/go1.20.5/src/crypto/x509/root_linux.go#L17-L22
2023-07-08 00:53:27 +02:00
Weijia Wang
4bc72cae10
Merge pull request #240491 from r-ryantm/auto-update/gcompris
gcompris: 3.2 -> 3.3
2023-06-29 17:38:07 +03:00
Weijia Wang
4cd16c45b9
Merge pull request #240443 from r-ryantm/auto-update/oneDNN
oneDNN: 3.1.1 -> 3.2
2023-06-29 17:35:31 +03:00
Weijia Wang
6b568ce356
Merge pull request #235806 from dani0854/libimobiledevice/update
libimobiledevice: switch to OpenSSL
2023-06-29 17:33:58 +03:00
Weijia Wang
3ec53d15c6
Merge pull request #240466 from r-ryantm/auto-update/flannel
flannel: 0.21.5 -> 0.22.0
2023-06-29 17:24:56 +03:00
Weijia Wang
78597395ec
Merge pull request #240385 from r-ryantm/auto-update/gfxreconstruct
gfxreconstruct: 0.9.18 -> 1.0.0
2023-06-29 17:24:30 +03:00
Sandro
bc8aa1cdb0
Merge pull request #216063 from Stunkymonkey/source-and-tags-phases 2023-06-29 16:23:35 +02:00
Sandro
16b76678e3
Merge pull request #240100 from ee2500/sregex 2023-06-29 16:17:14 +02:00
Sandro
b37bb797d2
Merge pull request #240311 from Luflosi/update/kubo-migrator 2023-06-29 16:16:31 +02:00
K900
da3ea1e492
Merge pull request #240360 from Myaats/linux-firmware
linux-firmware: 20230515 -> 20230625
2023-06-29 17:15:21 +03:00
Thiago Kenji Okada
ff64c09409 python3Packages.pylddwrap: mark it as badPlatform in darwin 2023-06-29 11:12:09 -03:00
Thiago Kenji Okada
1543c5f4f4 python3Packages.pylddwrap: patch to use ldd from stdenv.cc.bintools.libc_bin 2023-06-29 11:12:09 -03:00
Sandro
864814228e
Merge pull request #240280 from aaronjheng/lightwalletd 2023-06-29 16:02:47 +02:00
Sandro
438a6d07da
Merge pull request #229410 from ralismark/csvkit-setuptools 2023-06-29 16:00:18 +02:00
Sandro
fef4d8181d
Merge pull request #240404 from mweinelt/esphome-2023.6.3 2023-06-29 15:59:47 +02:00
figsoda
a68e3ee900
Merge pull request #240508 from r-ryantm/auto-update/oh-my-zsh
oh-my-zsh: 2023-06-26 -> 2023-06-26
2023-06-29 09:55:57 -04:00
Sandro
aecd4e5de2
Merge pull request #240461 from aaronjheng/credential-detector 2023-06-29 15:50:35 +02:00
Sandro
2eee0a746f
Merge pull request #240454 from aaronjheng/humioctl 2023-06-29 15:49:16 +02:00
Janne Heß
7a4c916440
Merge pull request #236845 from helsinki-systems/upd/mariadb
mariadb: 10.11.4, 10.10.5, 10.6.14, 10.5.21 & 10.4.30
2023-06-29 15:37:19 +02:00
Sandro
53c58a239d
Merge pull request #240328 from SuperSamus/pcsx2 2023-06-29 15:29:24 +02:00
Mario Rodas
6103a665f4
Merge pull request #240338 from chvp/fix/zeroad
zeroad: fix build by using fmt_9
2023-06-29 08:26:50 -05:00
Sandro
2d355cacae
Merge pull request #240218 from NixOS/pr/mplhep_init 2023-06-29 14:44:48 +02:00
Sandro
0431f99716
Merge pull request #240476 from dotlambda/imagemagick-7.1.1-12 2023-06-29 14:44:12 +02:00
Sandro
81bdbd2525
Merge pull request #240225 from leona-ya/paperless-1-16-5 2023-06-29 14:43:36 +02:00
Sandro
3791e8908e
Merge pull request #240482 from natsukium/fzf-fish/update 2023-06-29 14:42:08 +02:00
Sandro
e4a8ee68ed
Merge pull request #240481 from superwhiskers/update-rakudo 2023-06-29 14:41:58 +02:00
R. RyanTM
81ec36bd82
python310Packages.mbstrdecoder: 1.1.2 -> 1.1.3 (#240468)
Co-authored-by: Nick Cao <nickcao@nichi.co>
2023-06-29 14:39:36 +02:00
Sandro
3dadeec9a9
Merge pull request #240487 from chvp/upd/hookshot 2023-06-29 14:38:01 +02:00
Sandro
bf3b55a6b8
Merge pull request #240462 from tmiller/auto-update/zoom-us 2023-06-29 14:19:51 +02:00
R. Ryantm
54067c54a9
oh-my-zsh: 2023-06-26 -> 2023-06-26 2023-06-29 14:15:03 +02:00
Danil Suetin
5320d2d29f
libimobiledevice: switch to OpenSSL 2023-06-29 12:12:07 +00:00
Sandro
29f5e51d58
Merge pull request #240500 from fortuneteller2k/molsketch 2023-06-29 14:12:03 +02:00
Sandro
a21c873f01
Merge pull request #201518 from hacker1024/package/github-copilot-intellij-agent 2023-06-29 14:08:59 +02:00
Emily
f038daef94
Merge pull request #240496 from sayanarijit/master
qrscan: init at 0.1.9
2023-06-29 14:03:16 +02:00
Martin Weinelt
3456b015bc
Merge pull request #240450 from mweinelt/tts-0.15.0
tts: 0.14.3 -> 0.15.0
2023-06-29 14:02:21 +02:00
Sandro
a72ba97e10
Merge pull request #240511 from emilylange/grafana-agent 2023-06-29 13:56:04 +02:00
Tim Kleinschmidt
b7edbb0915
gex: 0.3.3 -> 0.3.8 (#225549) 2023-06-29 13:52:10 +02:00
Pol Dellaiera
58f16ff9d2
Merge pull request #238501 from l0b0/contributing-guide-test-instructions
contributing: Explain how to run common tests
2023-06-29 13:41:26 +02:00
Kevin Cox
65365bbb83
Merge pull request #240417 from kevincox/minetest-conf
nixos.minetest-server: Add option for generating config file and ability to add extra command line flags
2023-06-29 07:36:04 -04:00
Yaya
5619360467
gitlab: 16.1.0 -> 16.1.1 (#240503)
https://gitlab.com/gitlab-org/gitlab/-/blob/v16.1.1-ee/CHANGELOG.md
2023-06-29 13:18:30 +02:00
hacker1024
de7d05b9f6
github-copilot-intellij-agent: init at 1.2.8.2631 2023-06-29 13:18:08 +02:00
Yaya
7fd06ae3e9 gitlab-container-registry: Disable a flaky test 2023-06-29 13:18:02 +02:00
Yaya
6599971bde gitlab-container-registry: 3.76.0 -> 3.77.0
https://gitlab.com/gitlab-org/container-registry/-/blob/v3.77.0-gitlab/CHANGELOG.md
2023-06-29 13:18:02 +02:00
Stanisław Pitucha
3be82d2fa8
Merge pull request #240478 from viraptor/update-cf
cf-vault: 0.0.13 -> 0.0.15
2023-06-29 21:02:19 +10:00