Commit Graph

349606 Commits

Author SHA1 Message Date
Naïm Favier
5ab62e17b5
nixos: move default module location logic to eval-config.nix 2022-01-27 22:13:35 +01:00
Naïm Favier
5a07097772
lib/modules: introduce setDefaultModuleLocation
Wraps a module with a default location for reporting errors.
2022-01-27 22:12:53 +01:00
Fabian Affolter
f90310a12f
Merge pull request #157016 from applePrincess/exploitdb-2022-01-26
exploitdb: 2022-01-25 -> 2022-01-26
2022-01-27 18:54:34 +01:00
Bernardo Meurer
fe55576eea
Merge pull request #156997 from TredwellGit/linux
Kernels 2022-01-27
2022-01-27 09:52:03 -08:00
ajs124
47a2176ec8
Merge pull request #156998 from mweinelt/smartctl-exporter-fixups
prometheus.exporters.smartctl: fixes
2022-01-27 18:49:49 +01:00
Martin Weinelt
3a4bed480a
Merge pull request #156937 from mweinelt/firefox 2022-01-27 18:41:56 +01:00
Bernardo Meurer
5f9b470ff0
Merge pull request #154809 from helsinki-systems/feat/stc-proper-unit-file-parser
nixos/switch-to-configuration: Proper unit file parser and clean/fix lower part of the script
2022-01-27 09:35:34 -08:00
Aaron Andersen
3cafa47a66
Merge pull request #157019 from dali99/fix-mx-puppet-discord-module
nixos/mx-puppet-discord: Change systemd unit description to avoid new…
2022-01-27 12:02:59 -05:00
maralorn
037eb0a617
Merge pull request #156491 from NixOS/haskell-updates
haskellPackages: update stackage and hackage
2022-01-27 18:01:42 +01:00
Malte Brandy
caef341934 Merge branch 'master' into haskell-updates 2022-01-27 17:48:01 +01:00
Malte Brandy
c1e2f12203 haskellPackages: mark builds failing on hydra as broken
This commit has been generated by maintainers/scripts/haskell/mark-broken.sh
2022-01-27 17:47:21 +01:00
Stig
196873f601
Merge pull request #155116 from wentasah/amc-add-oodoc
auto-multiple-choice: add OpenOfficeOODoc perl module as dependency
2022-01-27 17:37:02 +01:00
Martin Weinelt
12c26aca1f
prometheus.exporters.smartctl: Fix autodiscovery
When no devices are given the exporter tries to autodiscover available
disks. The previous DevicePolicy was however preventing the exporter
from accessing any device at all, since only explicitly mentioned ones
were allowed.

This commit adds an allow rule for several device classes that I could
find on my machines, that gets set when no devices are explicitly
configured.

There is an existing problem with nvme devices, that expose a character
device at `/dev/nvme0`, and a (namespaced) block device at
`/dev/nvme0n1`. The character device does not come with permissions that
we could give to the exporter without further impacting the hardening.

  crw------- 1 root root 247, 0 27. Jan 03:10 /dev/nvme0
  brw-rw---- 1 root disk 259, 0 27. Jan 03:10 /dev/nvme0n1

The autodiscovery only finds the character device, which the exporter
unfortunately does not have access to.

However a simple udev rule can be used to resolve this:

  services.udev.extraRules = ''
    SUBSYSTEM=="nvme", KERNEL=="nvme[0-9]*", GROUP="disk"
  '';

Unfortunately I'm not fully aware of the security implications this
change carries and we should question upstream (systemd) why they did
not include such a rule.
The disk group has no members on any of my machines.

  ❯ getent group disk
  disk6:
2022-01-27 17:33:27 +01:00
R. RyanTM
899778e8cf
tev: 1.19 -> 1.22
* tev: 1.19 -> 1.22 (#156914)

* tev: don't build on aarch64-linux

Co-authored-by: Renaud <c0bw3b@users.noreply.github.com>
2022-01-27 17:06:22 +01:00
Daniel Olsen
5288bcab0a nixos/mx-puppet-discord: Change systemd unit description to avoid newline 2022-01-27 16:49:40 +01:00
Lein Matsumaru
93fb37332b
exploitdb: 2022-01-25 -> 2022-01-26 2022-01-27 15:22:33 +00:00
Robert Hensing
d0947df006
Merge pull request #156992 from hercules-ci/revert-153594-doc-optimization
Revert 153594 doc optimization
2022-01-27 15:46:36 +01:00
Ryan Mulligan
8328d4a50c
Merge pull request #156929 from r-ryantm/auto-update/sympa
sympa: 6.2.66 -> 6.2.68
2022-01-27 06:46:05 -08:00
dasj19
83ab260bbe
tomboy: remove (#156979)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-01-27 15:21:33 +01:00
Sandro
55eab1b1b7
Merge pull request #156999 from SuperSandro2000/procs 2022-01-27 15:20:45 +01:00
Fabian Affolter
a4e916ad03
Merge pull request #156995 from fabaff/bump-sqlfluff
sqlfluff: 0.9.2 -> 0.9.3
2022-01-27 14:59:10 +01:00
Fabian Affolter
fc98f95561
Merge pull request #156990 from r-ryantm/auto-update/python3.10-flux-led
python310Packages.flux-led: 0.28.11 -> 0.28.17
2022-01-27 14:58:54 +01:00
Stig
3445b70e5b
Merge pull request #156964 from raboof/perl-libnet-3.12-to-3.13
perlPackages.libnet: 3.12 -> 3.13
2022-01-27 14:26:04 +01:00
Sandro
4794b2f047
Merge pull request #154324 from zaninime/sshportal 2022-01-27 14:18:38 +01:00
Sandro
90087b3562
Merge pull request #156828 from willcohen/grass-darwin 2022-01-27 14:16:28 +01:00
Sandro
5a673e356a
Merge pull request #156898 from r-ryantm/auto-update/vgrep 2022-01-27 14:07:13 +01:00
Sandro
27cccd4e49
Merge pull request #151363 from Stunkymonkey/doc-updateWalker 2022-01-27 14:06:36 +01:00
Bobby Rong
c2f5452f26
Merge pull request #156936 from bobby285271/pantheon
Pantheon updates 2022-01-26
2022-01-27 21:03:07 +08:00
Sandro Jäckel
b81c67d478
procs: 0.12.0 -> 0.12.1 2022-01-27 13:55:22 +01:00
Martin Weinelt
f860b289d4
prometheus.exporters.smartctl: Allow RAWIO
This allows the exporter to perform SCSI commands and interact with hpsa
and cciss devices.
2022-01-27 13:49:25 +01:00
Sandro
6b5f731b74
Merge pull request #156960 from r-ryantm/auto-update/python3.10-google-cloud-dlp 2022-01-27 13:47:18 +01:00
Janne Heß
1f3b1a9067
Merge pull request #139075 from polykernel/nix-structural-settings-patch-1
nixos/nix-daemon: use structural settings
2022-01-27 13:38:41 +01:00
Markus S. Wamser
3624f96c70 imagemagick: apply upstream patch to fix perlPackages.ImageMagick 2022-01-27 13:37:01 +01:00
Fabian Affolter
ffce342b55
Merge pull request #156988 from fabaff/bump-pyeight
python3Packages.pyeight: 0.1.9 -> 0.2.0
2022-01-27 13:22:32 +01:00
Fabian Affolter
b5b4ceedf4
Merge pull request #156987 from fabaff/bump-losant-rest
python3Packages.losant-rest: 1.15.1 -> 1.15.2
2022-01-27 13:22:20 +01:00
Fabian Affolter
1b4877e2c4
Merge pull request #156985 from fabaff/bump-mailchecker
python3Packages.mailchecker: 4.1.9 -> 4.1.10
2022-01-27 13:21:55 +01:00
Fabian Affolter
1815d66589
Merge pull request #156984 from fabaff/bump-halohome
python3Packages.halohome: 0.4.0 -> 0.5.0
2022-01-27 13:21:25 +01:00
Fabian Affolter
01266d1b17
Merge pull request #156983 from fabaff/bump-meshtastic
python3Packages.meshtastic: 1.2.75 -> 1.2.76
2022-01-27 13:20:15 +01:00
Fabian Affolter
5a52b55c08
Merge pull request #156810 from r-ryantm/auto-update/python3.10-azure-mgmt-web
python310Packages.azure-mgmt-web: 6.0.0 -> 6.1.0
2022-01-27 13:02:40 +01:00
Fabian Affolter
48a55ee20c
Merge pull request #156819 from r-ryantm/auto-update/python3.10-pylaunches
python310Packages.pylaunches: 1.2.2 -> 1.3.0
2022-01-27 13:00:15 +01:00
Robert Hensing
4acad300ac Revert "pkgs.path: Avoid copying when used via flake"
This reverts commit 813f9da8ab.
2022-01-27 12:53:30 +01:00
Robert Hensing
6b9ef93b98 Revert "flake.nix: Set nixpkgs.config.path"
This reverts commit 0b222173db.
2022-01-27 12:53:29 +01:00
Fabian Affolter
2d34099b4c
Merge pull request #156975 from r-ryantm/auto-update/python3.10-azure-mgmt-resource
python310Packages.azure-mgmt-resource: 20.0.0 -> 20.1.0
2022-01-27 12:50:50 +01:00
TredwellGit
7e76358a03 linux: 5.4.173 -> 5.4.174 2022-01-27 11:48:33 +00:00
TredwellGit
35ba4ae7a4 linux: 5.16.2 -> 5.16.3 2022-01-27 11:48:26 +00:00
TredwellGit
532ede5712 linux: 5.15.16 -> 5.15.17 2022-01-27 11:48:18 +00:00
TredwellGit
b14eceedca linux: 5.10.93 -> 5.10.94 2022-01-27 11:48:10 +00:00
TredwellGit
7b55056304 linux: 4.9.297 -> 4.9.298 2022-01-27 11:48:03 +00:00
TredwellGit
c0b2ac9b7a linux: 4.4.299 -> 4.4.300 2022-01-27 11:47:56 +00:00
TredwellGit
e0781196f7 linux: 4.19.225 -> 4.19.226 2022-01-27 11:47:50 +00:00