Commit Graph

7630 Commits

Author SHA1 Message Date
Jade Lovelace
deb9370b88 nixos/tests: fix curl-impersonate under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace
7078a1b356 nixos/tests: fix systemd-networkd-ipv6-prefix-delegation under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace
a80464eee4 nixos/tests: fix bittorrent under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
05dc4bd146 nixos/tests: fix ferm under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
99813e788b nixos/tests: fix corerad under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
e4168ef9ba nixos/tests: fix rspamd under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
9ce6ff06c7 nixos/tests: fix kanidm under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
062be41387 nixos/tests: fix zrepl under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
d51e4a6443 nixos/tests: fix uptermd under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
c940ae656d nixos/tests: fix opensmtpd under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
c125c23468 nixos/tests: fix systemd-networkd-dhcpserver under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
9ed2e58b70 nixos/tests: fix rss2email under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
8169ded7a3 nixos/tests: fix qemu-vm-restrictnetwork under network-online dep fix 2024-01-18 16:28:41 -08:00
github-actions[bot]
b459003bdd
Merge master into staging-next 2024-01-19 00:02:22 +00:00
nikstur
eec1845744 nixos/systemd-sysusers: init 2024-01-18 23:08:14 +01:00
github-actions[bot]
dc4a7c97b0
Merge master into staging-next 2024-01-18 18:00:55 +00:00
K900
967d49b8a8 Merge remote-tracking branch 'origin/staging-next' into staging 2024-01-18 19:15:32 +03:00
Adithya Nair
8b5644684e
nixos/frp: use toml configFile
According to upstream, the INI configuration file is deprecated and
TOML/YAML/JSON is recommended.
Link: https://github.com/fatedier/frp/tree/dev#configuration-files
2024-01-18 21:37:40 +05:30
Janne Heß
15c31afd8a
Merge pull request #271067 from nikstur/sysinit-reactivation
nixos/switch-to-configuration: add sysinit-reactivation.target
2024-01-18 16:13:32 +01:00
Adam C. Stephens
887d3f54c6
Merge pull request #278753 from adamcstephens/incus/migrate-test
incus, lxd: ensure lxd->incus migration is supported and tested
2024-01-18 08:01:23 -05:00
Franz Pletz
c00a2d02bd
Merge pull request #251882 from r-ryantm/auto-update/prometheus-snmp-exporter
prometheus-snmp-exporter: 0.22.0 -> 0.25.0
2024-01-18 08:16:39 +01:00
github-actions[bot]
f8b9065479
Merge staging-next into staging 2024-01-18 00:02:50 +00:00
nikstur
e6b66f08a5 nixos/switch-to-configuration: add sysinit-reactivation.target 2024-01-18 00:46:30 +01:00
Franz Pletz
ed2ea66bbf
Merge pull request #278539 from Ma27/sshd-socket-activation-ports
nixos/sshd: fix socket activated ports when using ListenAddress
2024-01-17 23:27:52 +01:00
WilliButz
a8ea9fe492
nixos/prometheus-snmp-exporter: switch to new config syntax
Introduced with version 0.23.0, see
b75fc6b839/auth-split-migration.md
2024-01-17 20:32:45 +01:00
github-actions[bot]
5fe540596f
Merge staging-next into staging 2024-01-17 18:01:27 +00:00
Robin Gloster
e59524560c
Merge pull request #281555 from fpletz/nixos/ntpd-rs-fix-metrics
nixos/ntpd-rs: fix metrics service
2024-01-17 15:49:24 +01:00
Sandro
23a88afe88
Merge pull request #247112 from OPNA2608/init/lomiri/lomiri-terminal-app 2024-01-17 15:31:11 +01:00
Franz Pletz
35c015ff91
nixos/ntpd-rs: fix metrics service 2024-01-17 15:06:20 +01:00
github-actions[bot]
4fe3cac67d
Merge staging-next into staging 2024-01-17 12:01:22 +00:00
Maciej Krüger
f666630f4a
Merge pull request #280556 from gador/pgadmin-8.2
pgadmin: 8.1 -> 8.2, python3Packages.webauthn 1.11.1 -> 2.0.0, python3Packages.flask-security-too: fix pydantic issue
2024-01-17 08:30:24 +01:00
github-actions[bot]
e73431e32f
Merge staging-next into staging 2024-01-17 06:01:31 +00:00
Benjamin Bädorf
7c3ecbdce9 nixos/invoiceplane: add nginx as a webserver option for invoiceplane
Getting the vhost to play nice with phpfpm was done by following this
community post: https://community.invoiceplane.com/t/topic/2654
2024-01-17 05:09:34 +01:00
Florian Brandes
03649bfdf2 python3Packages.flask-security-too: fix for webauth 2
also removes pydantic (since webauth 2 doesn't use it anymore)

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-01-16 15:55:16 +01:00
Franz Pletz
71435c9869
nixos/tests/podman: firewall now opened by module 2024-01-16 14:46:16 +01:00
github-actions[bot]
7e5906aca4
Merge staging-next into staging 2024-01-16 12:01:24 +00:00
Thiago Kenji Okada
401d16acd0
Merge pull request #247256 from lucasew/xrdp-audio
xrdp: add support for audio
2024-01-16 10:06:51 +00:00
OPNA2608
62b9942ca2 lomiri.lomiri-terminal-app: init at 2.0.1 2024-01-15 18:42:35 +01:00
github-actions[bot]
d27cb01f7b
Merge staging-next into staging 2024-01-15 06:01:24 +00:00
Franz Pletz
678b899ac0
Merge pull request #264593 from fpletz/pkgs/ntp-rs-1.0.0 2024-01-15 02:17:36 +01:00
github-actions[bot]
c040ffb531
Merge staging-next into staging 2024-01-14 18:01:21 +00:00
Peder Bergebakken Sundt
fa8616a4c0
Merge pull request #279479 from gepbird/c2fmzq-server-bool-setting-allow-false
nixos/c2fmzq-server: allow setting bool settings to false
2024-01-14 18:32:11 +01:00
Franz Pletz
9707745cf8
nixos/ntpd-rs: init 2024-01-14 17:34:42 +01:00
Adam Stephens
ffdcec2d94
nixos/tests/incus: add lxd-to-incus migration test 2024-01-14 09:26:49 -05:00
Felix Bühler
99f4714039
Merge pull request #277501 from Stunkymonkey/prowlarr-check-folder
nixos/tests/prowlarr: check for folder existence
2024-01-14 14:39:27 +01:00
github-actions[bot]
d841ab8796
Merge staging-next into staging 2024-01-14 12:01:53 +00:00
Thomas Gerbet
afb57ff041 elasticsearch: 7.17.10 -> 7.17.16
Fixes CVE-2023-31417, CVE-2023-31418, CVE-2023-31419, CVE-2023-46673 and CVE-2023-46674.

Security announces:
https://www.elastic.co/guide/en/security/7.17/release-notes-header-7.17.0.html#release-notes-7.17.16

Release notes:
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.16.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.15.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.14.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.13.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.12.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.11.html
2024-01-14 12:21:45 +01:00
Bobby Rong
4d47dc2d9f
Merge pull request #280526 from bobby285271/upd/pantheon-test
nixosTests.pantheon: Extend the test
2024-01-14 17:44:09 +08:00
Bobby Rong
40bec35947
nixosTests.pantheon: Extend the test
- Ensure greeter-compositor starts
- Ensure various environment variables are set
- Ensure multitasking view triggers
- Misc updates
2024-01-14 14:10:21 +08:00
github-actions[bot]
c9743f0e5c
Merge staging-next into staging 2024-01-14 06:01:18 +00:00
Ryan Lahfa
dd5621df6d
Merge pull request #278380 from DeeUnderscore/fix/nginx-etag
nginx: change etags for statically compressed files served from store
2024-01-14 04:55:27 +01:00
github-actions[bot]
ec9f3ed3ee
Merge staging-next into staging 2024-01-14 00:02:46 +00:00
Gutyina Gergő
7247d16af6
nixos/c2fmzq-server: allow setting bool settings to false 2024-01-14 00:19:19 +01:00
Dee Anzorge
f124c73686 nginx: change etags for statically compressed files served from store
Per RFC 9110, [section 8.8.1][1], different representations of the same
resource should have different Etags:

> A strong validator is unique across all versions of all
> representations associated with a particular resource over time.
> However, there is no implication of uniqueness across representations
> of different resources (i.e., the same strong validator might be in
> use for representations of multiple resources at the same time and
> does not imply that those representations are equivalent)

When serving statically compressed files (ie, when there is an existing
corresponding .gz/.br/etc. file on disk), Nginx sends the Etag marked
as strong. These tags should be different for each compressed format
(as shown in  an explicit example in section [8.8.3.3][2] of the RFC).
Upstream Etags are composed of the file modification timestamp and
content length, and the latter generally changes between these
representations.

Previous implementation of Nix-specific Etags for things served from
store used the store hash. This is fine to share between different
files, but it becomes a problem for statically compressed versions of
the same file, as it means Nginx was serving different representations
of the same resource with the same Etag, marked as strong.

This patch addresses this by imitating the upstream Nginx behavior, and
appending the value of content length to the store hash.

[1]: https://www.rfc-editor.org/rfc/rfc9110.html#name-validator-fields
[2]:
https://www.rfc-editor.org/rfc/rfc9110.html#name-example-entity-tags-varying
2024-01-13 22:07:50 +01:00
Mario Rodas
033f88f786
Merge pull request #277982 from trofi/spark-fix-tests-eval
spark: fix `tests` eval under `allowAliases = false`
2024-01-13 16:06:50 -05:00
Peder Bergebakken Sundt
59cefcbc62
Merge pull request #277783 from gepbird/c2fmzq-server-multiple-freeform-settings
nixos/c2fmzq-server: allow multiple freeform settings
2024-01-13 22:01:23 +01:00
github-actions[bot]
e59c8549eb
Merge staging-next into staging 2024-01-13 18:01:22 +00:00
Robert Hensing
221ad6d7ff
Merge pull request #277642 from Enzime/fix/nixos-rebuild-remote-sudo
nixos-rebuild: fix issues when using `--target-host`
2024-01-13 18:52:57 +01:00
Ryan Lahfa
32ccbe0927
Merge pull request #272029 from blitz/rust-for-linux
In-kernel Rust on Linux (Optional) (2nd Attempt)
2024-01-13 16:51:00 +01:00
lucasew
cf26222cc8 nixos/tests: add xrdp-with-audio-pulseaudio
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-01-13 12:42:06 -03:00
Florian Brandes
1c1ca56266 pgadmin: 8.1 -> 8.2
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-13 09:54:32 +01:00
Yt
827bd96b2b
Merge pull request #280005 from digtail/2024-01-09-ntfy-sh-dynamic-user
nixos/ntfy-sh: clean up DynamicUser workarounds
2024-01-12 23:39:25 +01:00
Maciej Krüger
6ba04cc302
Merge pull request #270876 from gador/pgadmin-check-pw
nixos/pgadmin: add minimumPasswordLength setting and check
2024-01-12 21:00:40 +01:00
Julian Stecklina
d1f33201ef
nixos/tests/kernel-rust: init 2024-01-12 20:29:06 +01:00
Ryan Lahfa
08d0afbbdf
Merge pull request #239028 from chayleaf/miniupnpd
miniupnpd-nftables: init at 2.3.3
2024-01-12 20:17:33 +01:00
K900
391d29cb04 nixos/tests/installer: fix eval 2024-01-12 15:24:49 +01:00
Florian Brandes
bc21d288f4
nixos/pgadmin: apply review suggestions
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-11 11:32:32 +01:00
Weijia Wang
2f9e98ccf3 Merge branch 'master' into staging-next 2024-01-10 23:12:44 +01:00
Peder Bergebakken Sundt
dff635f38d
Merge pull request #243169 from 2xsaiko/outgoing/krb5
nixos/krb5: cleanup, fix and RFC42-ify
2024-01-10 21:06:15 +01:00
github-actions[bot]
122355be99
Merge master into staging-next 2024-01-10 00:02:18 +00:00
digital
39fd0c3fe3 nixos/ntfy-sh: clean up DynamicUser workarounds
this commit removes the static assignments for the ntfy-sh user and
group. furthermore, it removes some tmpfiles.d rules which where
initially put in place by https://github.com/NixOS/nixpkgs/pull/234811.
these are however not required, as ntfy-sh will automatically create the
required files and systemd automatically handles the migration process.

A nixosTest is added to demonstrate that the migration is working
reliably.

This also fixes an issue with where systemd would sometimes not start
ntfy-sh. The tmpfiles rules in combination with impermanence caused `/
var/lib/ntfy-sh` to be a directory when it should have been a symlink.
2024-01-10 00:15:50 +01:00
Peder Bergebakken Sundt
3bf05ba941
Merge pull request #271481 from eliandoran/feature/snmpd
nixos/snmpd: init
2024-01-09 21:32:27 +01:00
K900
838aefefc3 Merge remote-tracking branch 'origin/master' into staging-next 2024-01-09 22:42:37 +03:00
Herwig Hochleitner
ae34cddb51
linuxPackages.systemtap: 4.8 -> 5.0a, add nixos tests (#276840)
* nixos/tests/systemtap: init smoke test

* linuxPackages.systemtap: use --sysroot instead of -r

* nixos/tests/systemtap: rule out warnings

* linuxPackages.systemtap: smaller sysroot

* nixos/tests/systemtap: test on a few more kernels

* linuxPackages.systemtap: provide debuginfo for tracing kernel.function

* linuxPackages.systemtap: test kernel.function probe

* linuxPackages.systemtap: 4.8 -> 5.0a
2024-01-09 19:38:02 +01:00
Yaya
0b3fbec39d nixosTests.paperless: Convert paperless extraConfig to settings
`services.paperless.extraConfig` has been replaced with
`services.paperless.settings` in #277019.
2024-01-09 13:47:52 +01:00
github-actions[bot]
6bf0bf35bb
Merge master into staging-next 2024-01-08 18:00:58 +00:00
Maciej Krüger
b5b2f6bec4
Merge pull request #277620 from nbraud/nixos/pam/ssh-agent-auth-31611
nixos/pam: Add option for ssh-agent auth's trusted authorized_keys files
2024-01-08 17:42:02 +01:00
github-actions[bot]
f85fe5fc29
Merge master into staging-next 2024-01-07 18:00:54 +00:00
Guillaume Girol
db0f76e8c9
Merge pull request #271030 from symphorien/nixseparatedebuginfod
nixseparatedebuginfod: init at 0.3.0, plus module and nixos test
2024-01-07 17:45:13 +01:00
Jan Tojnar
ff42d23313 Merge branch 'master' into staging-next
Conflicts:

pkgs/development/python-modules/dbt-core/default.nix
pkgs/development/python-modules/dbt-semantic-interfaces/default.nix

Still broken by pydantic 2 bump, though.
2024-01-07 16:14:41 +01:00
Nick Cao
d49252891f
Merge pull request #279015 from oddlama/fix-typesense-tests
typesense: fix test failure due to initialization timing
2024-01-07 09:45:40 -05:00
oddlama
c6394f7c41
typesense: fix test failure due to initialization timing 2024-01-07 13:04:59 +01:00
github-actions[bot]
9f96550945
Merge master into staging-next 2024-01-07 12:01:24 +00:00
Jörg Thalheim
db59d03371
Merge branch 'master' into pr/bcachefs 2024-01-07 11:40:30 +01:00
Michael Hoang
b09de27cd6 nixos-rebuild: add --target-host test 2024-01-07 03:40:01 +11:00
github-actions[bot]
4fb3b0394b
Merge master into staging-next 2024-01-06 12:01:05 +00:00
Jörg Thalheim
610af56da4 nixos/tests/sway: fix alacritty xwayland test
if WAYLAND_DISPLAY is set to some invalid string than alacritty will
exit with an error.
2024-01-06 11:21:27 +01:00
Martin Weinelt
430fd07751
Merge remote-tracking branch 'origin/master' into staging-next 2024-01-06 04:57:06 +01:00
Martin Weinelt
095dec0437
Merge pull request #278808 from mweinelt/maintenance
Scale back maintainership on various packages
2024-01-06 04:51:44 +01:00
Martin Weinelt
eba4d277a0 Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
-	pkgs/development/python-modules/sabctools/default.nix
2024-01-06 04:51:01 +01:00
Sergei Trofimovich
01f78ec6f8 systemd.tests.systemd-journal-upload: fix meta eval
Without the change metadata evaluation fails as:

    $ nix-instantiate --eval --expr 'with import ./. {}; systemd.tests.systemd-journal-upload.meta'
    error:
       … while evaluating the attribute 'tests.systemd-journal-upload.meta'

       error: undefined variable 'raitoezarius'

       at nixos/tests/systemd-journal-upload.nix:5:33:

            4|   meta = with pkgs.lib.maintainers; {
            5|     maintainers = [ minijackson raitoezarius ];
             |                                 ^
            6|   };
2024-01-05 21:34:36 +00:00
Adam C. Stephens
8949c5d63b
Merge pull request #278810 from r-ryantm/auto-update/squeezelite
squeezelite: 1.9.9.1449 -> 1.9.9.1463
2024-01-05 14:43:18 -05:00
Adam Stephens
a72a7ad723
nixos/tests/slimserver: regex squeezelite number in log 2024-01-05 12:43:01 -05:00
Martin Weinelt
4611371303
treewide: scale back maintainership for various packages 2024-01-05 14:43:39 +01:00
github-actions[bot]
340cf4304d
Merge master into staging-next 2024-01-05 06:01:12 +00:00
zowoq
3d0b034e87 maintainers/teams: add buildbot 2024-01-05 11:41:19 +10:00
github-actions[bot]
1e290d634f
Merge master into staging-next 2024-01-05 00:02:27 +00:00
Raito Bezarius
861431f282 nixos/tests/bootspec: test initrd and initrdSecrets a bit stricter
We will now ensure that no `initrdSecrets` leaks under no initrd secrets
and that `initrdSecrets` are there if we do have initrd secrets.
2024-01-04 23:11:23 +01:00
nicoo
9ed1423dcf nixos/pam: Warn on insecure sshAgentAuth configurations 2024-01-04 17:30:09 +00:00
Maximilian Bosch
7e45990c06
nixos/sshd: fix socket activated ports when using ListenAddress
Noticed that issue while reviewing #275633: when declaring
`ListenAddress host` without a port, all ports declared by
`Port`/`cfg.ports` will be used with `host` according to
`sshd_config(5)`.

However, if this is done and socket activation is used, only a socket
for port 22 is created instead of a sockets for each port from
`Port`/`cfg.ports`. This patch corrects that behavior.

Also added a regression test for this case.
2024-01-03 19:42:45 +01:00