Commit Graph

36607 Commits

Author SHA1 Message Date
emilylange
6431fec2c4
nixosTests.forgejo: test backup/dump service
This should allow us to catch issues regarding that in the future.

nixos/gitea had an issue with the dump service recently, which didn't
affect us, fortunately.
But to be fair, it only affected non-default-y setups.
Not something we are able to catch in the current, rather simple, config
of our test.
Still, I see a lot of value adding this new subtest to our test suite.

Anyhow, this patch also exposes the resulting tarball as test (build)
output, which is a nice addition IMHO, as it allows some sort of
external sanity-check, if needed, without running the test interactive.
2023-10-24 02:32:56 +02:00
Maciej Krüger
1ecbbb6e3f
Merge pull request #260595 from adamcstephens/lxc/squashfs
lxc-container: add squashfs image support and release output
2023-10-24 02:06:36 +02:00
Will Fancher
99a47a5e35 systemd-stage-1: Enable more encrypted installer tests 2023-10-23 17:40:34 -04:00
Martin Weinelt
6bed1ae794
nixos/tests: fix nixos-rebuild-specialisations test definition 2023-10-23 23:32:37 +02:00
Janik
a5b74d45bd
Merge pull request #262978 from JulienMalka/ferretdb-docs
nixos/ferretdb: fix broken link to documentation
2023-10-23 22:53:21 +02:00
Yureka
f13a5196fc nixos/tests/fastnetmon-advanced: init 2023-10-23 22:51:19 +02:00
Yureka
bf5f01ee52 nixos/fastnetmon-advanced: init 2023-10-23 22:51:19 +02:00
Domen Kožar
4e95cbe36e
Merge pull request #246081 from therealr5/bacula-fix
nixos/bacula: fix postgresql config and remove unneeded quotation marks
2023-10-23 21:42:11 +01:00
Vladimír Čunát
ba583cb184
Merge #262951: nixos/release-combined: drop ZFS+i686 from blockers 2023-10-23 20:34:19 +02:00
Lorenz Leutgeb
cc6c2d32f2
rosenpass: refactor, add module and test (#254813) 2023-10-23 19:29:30 +02:00
Julien Malka
5237796f2b nixos/ferretdb: fix broken link to documentation 2023-10-23 16:48:31 +00:00
Thiago Kenji Okada
7359dcf561
Merge pull request #262852 from lucasew/20231022-byname
treewide: housekeeping of packages maintained by lucasew
2023-10-23 15:48:21 +01:00
Vladimír Čunát
7aec39cc1f
nixos/release-combined: drop ZFS+i686 from blockers
The current state is certainly very wrong - testing ZFS only on i686.
I suspect it was a typo (?) in commit 2de3caf011.

The current practical problem is that the test fails,
though in a part that looks cross-platform (which adds confusion):
https://hydra.nixos.org/build/239290208#tabs-buildsteps
2023-10-23 16:42:37 +02:00
Robert Hensing
4bf1366455
Merge pull request #262724 from thiagokokada/fix-install-bootloader
nixos-rebuild: fix --install-bootloader flag with systemd-run
2023-10-23 15:24:42 +02:00
Maximilian Bosch
3ad1ebe9ff
Merge pull request #258047 from mweinelt/knot-exporter
prometheus-knot-exporter: 2021-08-21 -> 3.3.1; python310Packages.libknot: init at 3.3.1
2023-10-23 15:01:06 +02:00
Thiago Kenji Okada
65cb8b4e01 nixos/tests: make nixos-rebuild tests x86_64-linux only
Depends on GRUB2/BIOS.
2023-10-23 12:39:41 +01:00
Thiago Kenji Okada
ab3ca40d2e nixos/release-combined: add nixos-rebuild-specialisations to release-combined 2023-10-23 12:39:41 +01:00
Thiago Kenji Okada
ccebc89954 nixos/tests: add nixos-rebuild-install-bootloader 2023-10-23 12:39:40 +01:00
Maximilian Bosch
715afeb48b
nixos/tests/prometheus-exporters/knot: update for new exporter version
The knot_server_zone_count metric does not exist anymore, and the next
best thing to watch for is the zone serial, that we define ourselves.

The serial is a number and displayed in the scientific notation, i.e.

    >>> machine.succeed('curl localhost:9433/metrics|grep 019 >&2')
    [...]
    knot # knot_zone_serial{zone="test."} 2.019031301e+09
2023-10-23 13:19:52 +02:00
Martin Weinelt
589ccfdac1
nixos/prometheus-exporters/knot: update for new exporter
The new exporter has proper console scripts definition, that sets up
another executable name.

The package now also shells out to pidof, which is why we require procps
in the unit PATH.
2023-10-23 13:19:52 +02:00
Martin Weinelt
46b989f924
prometheus-knot-exporter: 2021-08-21 -> 3.3.2
The knot upstream forked this exporter and is now maintaining it
alongside Knot DNS itself.
2023-10-23 13:19:51 +02:00
Ryan Lahfa
d1ee91c22d
Merge pull request #262796 from SuperSandro2000/patch-1
nixos/nginx: document implicit default port 80
2023-10-23 11:04:54 +01:00
Martin Weinelt
6ddb74a81a
Merge pull request #262542 from yu-re-ka/matrix-synapse-opentracing
matrix-synapse: remove opentracing optional dependencies
2023-10-23 11:22:25 +02:00
Ryan Lahfa
b9337215cd
Merge pull request #229035 from NixOS/qemu-vm/tpm
qemu-vm: support TPM usecases
2023-10-23 10:10:27 +01:00
Christoph Heiss
8b6acac9de
floorp: init at 11.5.0
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-23 10:22:11 +02:00
K900
a52abd4ccb
Merge pull request #262623 from K900/continued-firefox-cleanups
firefox: start killing all the per-extension options
2023-10-23 10:25:37 +03:00
Artturin
d3234553aa nixosTests.nginx-sandbox: remove broken test and move the sandboxing test to the openresty test
nginx lua needs resty

the enableSandbox option of nginx was removed in 535896671b

the test fails with

```
vm-test-run-nginx-sandbox> machine # [   47.753580] nginx[1142]: nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see https://github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from https://openresty.org/en/download.html)
vm-test-run-nginx-sandbox> machine # [   47.756064] nginx[1142]: nginx: [alert] failed to load the 'resty.core' module (https://github.com/openresty/lua-resty-core); ensure you are using an OpenResty release from https://openresty.org/en/download.html (reason: module 'resty.core' not found:
vm-test-run-nginx-sandbox> machine # [   57.911766] systemd[1]: Failed to start Nginx Web Server.
```
2023-10-23 06:09:45 +03:00
lucasew
4ec81766c2 cockpit: 287 -> 303
Signed-off-by: lucasew <lucas59356@gmail.com>
2023-10-22 22:39:22 -03:00
Martin Weinelt
0e4b63f713 Revert "nixos/systemd-boot: Avoid remote mypy executions"
This reverts commit ea0dcd0ae1.
2023-10-23 03:38:13 +02:00
Will Fancher
0425c4de6d systemd-stage-1: bcachefs decryption 2023-10-22 20:07:55 -04:00
Arthur Gautier
08f4fe2087 qemu-vm: stop the swtpm once qemu stops
The idea is to run an async process waiting for swtpm
and we have to ensure that `FD_CLOEXEC` is cleared on this process'
stdin file descriptor, we use `fdflags` for this, a loadable builtin in
Bash ≥ 5.

The async process when exited will terminate `swtpm`, we bind the
termination of the async process to the termination of QEMU by virtue of
having `qemu` exec in that Bash script.

Signed-off-by: Arthur Gautier <baloo@superbaloo.net>
Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
2023-10-23 01:02:24 +02:00
Atemu
e0417d79ff
Merge pull request #262574 from Atemu/installer-no-powersave-governor
installer/nixos-generate-config: don't set powersave cpuFreqGovernor
2023-10-23 00:59:19 +02:00
Martin Weinelt
3244b1eaef
Merge pull request #262678 from plumelo/feat/esphome-proc-subset
esphome: remove ProcSubset from serviceConfig
2023-10-23 00:46:21 +02:00
DavHau
cae154a67e nixos/systemd-tmpfiles: add settings option 2023-10-23 00:34:23 +02:00
Anthony Roussel
ccf080ee05
amazon-ssm-agent: rename from ssm-agent 2023-10-22 22:04:09 +02:00
Sandro
f4d631c3d1
nixos/nginx: document implicit default port 80 2023-10-22 21:32:50 +02:00
Lassulus
448f34e913
Merge pull request #262381 from makefu/pkgs/ps3netsrv/replace-upstream
ps3netsrv: replace with webman mod fork
2023-10-22 20:32:13 +01:00
Emily
a61c6b478d
Merge pull request #262741 from emilylange/nixos-forgejo-postgres15
nixos/forgejo: work around permissions error on `postgresql_15`
2023-10-22 21:04:41 +02:00
Will Fancher
13f325005c
Merge pull request #262740 from ElvishJerricco/systemd-stage-1-improve-udhcpc-assertion
systemd-stage-1: Improve udhcpc assertion
2023-10-22 13:46:38 -04:00
Martin Weinelt
8c5947252d
Merge pull request #262776 from pennae/mosquitto-skip-bind-test
nixos/mosquitto: remove the bind_interface test
2023-10-22 19:28:24 +02:00
pennae
33ba318db6 nixos/mosquitto: remove the bind_interface test
bind_interface is the mosquitto way of trying to bind to all addresses
on an interface, but it is unreliable (trying to bind to link-local v6
addresses *sometimes* but not always) and just prone to failure in
general for reasons we have yet to discover.

since this kind of automatic behavior isn't particularly necessary in a
declarative system we may as well skip it.
2023-10-22 19:12:26 +02:00
Robert Schütz
80f59b1626
Merge pull request #261135 from dotlambda/nixos-iptsd-init
nixos/iptsd: init
2023-10-22 09:48:37 -07:00
Artturi
b2426befa0
Merge pull request #259784 from dmytrokyrychuk/init-spice-autorandr
spice-autorandr: init at 0.0.2
2023-10-22 18:52:10 +03:00
Martin Weinelt
410ccec99c
Merge pull request #261931 from mweinelt/homeassistant-satellite
homeassistant-satellite: init at 2.3.0
2023-10-22 16:53:03 +02:00
K900
e6f5980d87 nixos/tests/firefox: use the module
This should exercise the module a bit in the test, and also removes an awkward override.
2023-10-22 17:13:50 +03:00
K900
60421a1622 firefox: start killing all the per-extension options 2023-10-22 17:13:42 +03:00
Meghea Iulian
bff068e514
esphome: remove ProcSubset from serviceConfig
Remove ProcSubset from esphome serviceConfig because esphome/bwrap needs to
access it.
According to
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProcSubset=
ProcSubset isn't even recommended for most programs.
Fixes #262674
2023-10-22 17:09:00 +03:00
Raito Bezarius
83b131bb55 nixos/tests: adopt newest TPM support in test infra 2023-10-22 16:01:37 +02:00
Raito Bezarius
25872524f0 nixos/qemu-vm: add virtualisation.tpm for running TPM in QEMU infrastructure 2023-10-22 16:01:37 +02:00
Dmytro Kyrychuk
d147d7feed nixos/spice-autorandr: init 2023-10-22 13:45:56 +00:00
emilylange
b8585a119c
nixos/forgejo: work around permissions error on postgresql_15
From `postgresql_15`'s release notes:
> PostgreSQL 15 also revokes the CREATE permission from all users except
a database owner from the public (or default) schema.

https://www.postgresql.org/about/news/postgresql-15-released-2526/

This directly affects `services.postgresql.ensureUsers` in NixOS,
leading to
> permission denied for schema public

`postgresql_15` is now the default for stateVersion `23.11`/`unstable`.

So until this is resolved globally, we work around this issue.
2023-10-22 15:25:34 +02:00
Jacek Galowicz
dda77fcc55
Merge pull request #257535 from RaitoBezarius/vmstate
nixos/lib/test-driver: use QMP API to watch for VM state
2023-10-22 14:22:34 +01:00
Will Fancher
1a6c2e4837 systemd-stage-1: Improve udhcpc assertion 2023-10-22 09:12:34 -04:00
Yureka
0288685a4d nixos/matrix-synapse: remove opentracing options 2023-10-22 14:15:39 +02:00
Guillaume Girol
f32a622d3a paperwork: 2.1.2 -> 2.2.0
changelog: https://gitlab.gnome.org/World/OpenPaperwork/paperwork/-/blob/develop/paperwork-gtk/ChangeLog
2023-10-22 14:11:39 +02:00
Will Fancher
a662970807
Merge pull request #262167 from jakubgs/systemd/fix-autofs-config
systemd: rename required AUTOFS4_FS to AUTOFS_FS
2023-10-22 08:08:11 -04:00
Maciej Krüger
49bc1a76e0
Merge pull request #261692 from josephst/fix-lxc-container-bootloader
nixos/lxc-container: use absolute path for ln in install-lxc-sbin-init.sh
2023-10-22 13:47:14 +02:00
nikstur
9b20e22b88
Merge pull request #262573 from ElvishJerricco/systemd-repart-stage-1-assertion
nixos/systemd-repart: Add assertion requiring systemd in initrd
2023-10-22 11:53:59 +02:00
Vladimír Čunát
ece040c37c
Merge #258573: nixos/release-combined: make gitlab a channel blocker 2023-10-22 11:24:50 +02:00
Ryan Lahfa
efccbbab5b
Merge pull request #258994 from lorenzleutgeb/msr
nixos/hardware/cpu/x86/msr: init
2023-10-22 10:24:12 +01:00
Lin Jian
23203f8e12
Merge pull request #262666 from SuperSandro2000/patch-1
nixos/acme: fix upstream documentation link
2023-10-22 17:13:26 +08:00
Lin Jian
c132df63df
Merge pull request #250792 from ckiee/init-rkvm
{,nixos/}rkvm: init
2023-10-22 17:11:12 +08:00
Lorenz Leutgeb
62c63f746a nixos/undervolt: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
84803308bf nixos/xmrig: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
b70a63a910 nixos/tlp: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
b893b67028 nixos/throttled: Use hardware.cpu.x86.msr 2023-10-22 09:40:59 +02:00
Lorenz Leutgeb
a98c933412 nixos/hardware/cpu/intel/msr: init 2023-10-22 09:40:59 +02:00
Sandro
4a97d6181c
nixos/acme: fix upstream documentation link 2023-10-22 05:47:45 +02:00
Joseph Stahl
d156ab6c9c nixos/lxc-container: use absolute path for ln in install-lxc-sbin-init.sh
Recent change to nixos-rebuild (https://github.com/NixOS/nixpkgs/pull/258571)
adds systemd-run, which brings with it a cleaner environment
(ie $PATH not available).
Workaround: use absolute path for ln to avoid command-not-found error
2023-10-22 03:18:15 +03:00
github-actions[bot]
1cf369a0dd
Merge master into staging-next 2023-10-22 00:02:31 +00:00
Peder Bergebakken Sundt
d2af1eb6ff
Merge pull request #256449 from illustris/hadoop
hadoop: 3.3.5 -> 3.3.6, build container executor from source
2023-10-22 01:40:19 +02:00
K900
c92fb2994f
Merge pull request #262617 from aij/fix/programs.firefox.enable
nixos/firefox: Fix package references
2023-10-22 01:22:16 +03:00
Ivan Jager
57436cf549 nixos/firefox: Fix package references
https://github.com/NixOS/nixpkgs/pull/262017 removed `with pkgs;` so setting
`programs.firefox.enable = true` resulted in evaluation errors like
`error: undefined variable 'ff2mpv'`

This still doesn't fix https://github.com/NixOS/nixpkgs/issues/262600
2023-10-21 16:53:32 -05:00
Ryan Lahfa
96107a2d2a
Merge pull request #261047 from adamcstephens/zfs/2.2.0
zfs/zfsUnstable: 2.1.13/2.2.0-rc5 -> 2.2.0
2023-10-21 22:38:05 +01:00
Rishi Desai
52effd56af nixos/fanout: add test 2023-10-21 17:31:14 -03:00
Rishi Desai
d1df9108ba nixos/fanout: init fanout oneshot module 2023-10-21 17:31:14 -03:00
Janik
abca224ce4
Merge pull request #242467 from dadada/dev/dadada/init-nixos-soft-serve
nixos/soft-serve: init
2023-10-21 21:58:47 +02:00
Robert Hensing
0987120ad2
Merge pull request #262582 from hercules-ci/nixos-test-rename-store-image
nixos/qemu-vm: Rename nixos-disk-image -> nix-store-image
2023-10-21 20:46:23 +02:00
Will Fancher
22325ce016 systemd-stage-1: Support for user shells 2023-10-21 13:24:16 -04:00
Alyssa Ross
83b8726e5f
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/python-modules/velbus-aio/default.nix
2023-10-21 17:24:16 +00:00
Robert Hensing
7096340f9e nixos/qemu-vm: Rename nixos-disk-image -> nix-store-image
For the image that's actually a store image only.
Helps with visibility. The name "nixos-disk-image" has no special
significance, by grepping nixpkgs.
2023-10-21 19:13:58 +02:00
nikstur
95e6dfd5d9
Merge pull request #260275 from thillux/jitterentropy-rngd
jitterentropy-rngd: init at 1.2.8
2023-10-21 19:10:51 +02:00
Ryan Lahfa
e6ade691a5
Merge pull request #259347 from ElvishJerricco/systemd-stage-1-zfs-sysusr-dependency
systemd 254: ZFS /usr fix with systemd-stage-1
2023-10-21 18:04:13 +01:00
Will Fancher
b57c850790 nixos/systemd-repart: Add assertion requiring systemd in initrd 2023-10-21 12:29:34 -04:00
Atemu
fb602e5608 installer/nixos-generate-config: don't set powersave cpuFreqGovernor
This script would always "detect" the "powersave" governor as it is available on
practically all CPUs while the "ondemand" governor is only available on some old
CPUs.

IME the "powersave" governor barely provides any power savings but introduces
massive performance deficits, including noticable stuttering. This is not the
default experience we should offer users, even for those who use laptops.

Use the kernel default (currently "performance", CPU makers may change it in
future) instead.
2023-10-21 18:29:25 +02:00
Ryan Lahfa
c5442c247f
Merge pull request #257262 from dongcarl/2023-09-nginx-fixes
nixos/nginx: Allow empty port for listen directive (for unix socket)
2023-10-21 17:26:57 +01:00
Adam Stephens
1a81fe0cc8
zfs: 2.1.13 -> 2.2.0 2023-10-21 12:16:31 -04:00
dadada
77f7b5a3e5
nixos/soft-serve: init
This adds a NixOS module for Soft Serve, a tasty, self-hostable Git
server for the command line. The module has a test that checks some
basic things like creating users, creating a repo and cloning it.

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-10-21 17:51:42 +02:00
Atemu
5a137cf607 nixos/hardware: use mkEnableOption
Also made the default of hardware.wirelessRegulatoryDatabase part of the option
declaration, not the implementation.
2023-10-21 17:30:36 +02:00
Ryan Lahfa
0b0440e028
Merge pull request #254647 from Janik-Haag/networkManagerEnsureProfiles
nixos/networkmanager: add declarative profiles
2023-10-21 15:06:41 +01:00
github-actions[bot]
0c34dab04f
Merge master into staging-next 2023-10-21 12:01:08 +00:00
Sandro Jäckel
b11e3eb7d1 nixos/asf: update hardening options to match upstream 2023-10-21 13:50:05 +02:00
Ryan Lahfa
8fc9bb20e4
Merge pull request #258801 from Izorkin/fix-netdata 2023-10-21 13:34:31 +02:00
nikstur
6958acea7e
Merge pull request #262179 from ElvishJerricco/systemd-stage-1-specific-fs-packages
systemd-stage-1: Use specific fs packages
2023-10-21 13:25:42 +02:00
Raito Bezarius
f94876a65c nixos/lib/test-driver: wire up QMP client
Now that we have a QMP client, we can wire it up in the test driver.

For now, it is almost completely useless because of the need of a constant "event loop", especially
for event listening.

In the next commits, we will slowly enable more and more usecases.
2023-10-21 13:03:15 +02:00
K900
186cd78231
Merge pull request #262017 from K900/firefox-preserve-old-args
nixos/firefox: preserve old wrapper args when overriding
2023-10-21 11:46:40 +03:00
github-actions[bot]
1c4183d88a
Merge master into staging-next 2023-10-21 06:00:57 +00:00
Sandro Jäckel
7f94b9e9c6
nixos/fail2ban: change bantime default to not be config breaking 2023-10-21 02:38:29 +02:00
github-actions[bot]
fb3e2499b7
Merge master into staging-next 2023-10-21 00:02:17 +00:00
Evan Deaubl
9407ed628d nixos/tailscale: add openFirewall option 2023-10-20 15:57:40 -07:00
Janik H
a316aa58d9
nixos/networkmanager: add declarative profiles 2023-10-21 00:20:36 +02:00
Bjørn Forsman
5c78e5b4aa nixos/ddclient: simplify with lib.getExe 2023-10-20 23:49:18 +02:00
Bjørn Forsman
8a8ec36615 Revert "ddclient: remove package and module on upstream maintainer request"
This reverts commit d35df28f65.

Upstream ddclient has new maintainers and made a new release (update in
next commit(s)).
2023-10-20 23:49:18 +02:00
makefu
d85a7949c9
ps3netsrv: add notice about replacement of with webman-mod fork 2023-10-20 23:16:42 +02:00
Dmitry Kalinkin
6392f18258
Merge pull request #262351 from h7x4/remove-nix-exec-bits
treewide: remove execute bit for non-executable `*.nix` files
2023-10-20 14:45:16 -04:00
Yueh-Shun Li
872fe27639
voms, xrootd: clean up $out/etc.orig (#241466)
When externalEtc is not null, create an extra output "etc" and move the
"$out/etc" content into "$etc/etc" before creating the symlink at
"$out/etc".
2023-10-20 14:35:38 -04:00
github-actions[bot]
cfc75eec46
Merge master into staging-next 2023-10-20 18:00:54 +00:00
h7x4
e6321d2788
treewide: remove execute bit for non-executable *.nix files 2023-10-20 19:55:39 +02:00
Vladimír Čunát
9320d9e7bc
Merge #260527: Mailman fixes
...into staging-next
2023-10-20 18:56:03 +02:00
Martin Weinelt
95856e526e
nixos/homeassistant-satellite: init 2023-10-20 17:26:10 +02:00
Bjørn Forsman
142074c2a8 nixos: fix bad mkEnableOption descriptions
Fix descriptions that don't account for (1) the "Whether to enable"
prefix or (2) the automatically added trailing dot.
2023-10-20 16:22:40 +01:00
Pol Dellaiera
fdecb1dabf
Merge pull request #244941 from h7x4/reduce-options-in-hedgedoc-module
nixos/hedgedoc: refactor to reduce option count
2023-10-20 16:07:16 +02:00
nikstur
feb3b2522f
Merge pull request #262292 from helsinki-systems/feat/stc-no-filter-units
nixos/switch-to-configuration: Allow not filtering units
2023-10-20 16:04:32 +02:00
Janne Heß
a1012b2160
nixos/switch-to-configuration: Allow not filtering units 2023-10-20 15:45:43 +02:00
github-actions[bot]
d7e9da1742
Merge master into staging-next 2023-10-20 12:01:24 +00:00
chayleaf
e2b6ff8384 nixos/akkoma: add services.akkoma.dist.extraFlags
This allows configuring Erlang flags
2023-10-20 17:34:14 +07:00
Cabia Rangris
585a8b12b1
Merge pull request #258853 from SuperSandro2000/dex
nixos/dex: fix start with latest systemd update
2023-10-20 09:59:21 +00:00
Arian van Putten
0257e9f13a
Merge pull request #261449 from arianvp/growpart-online
nixos/grow-partition: Resize partition online instead of in initrd
2023-10-20 09:25:31 +00:00
Arian van Putten
b756441de2 nixos/grow-partition: add nixos test 2023-10-20 08:58:10 +00:00
nikstur
f0154409a1 nixos/nix-daemon: remove activationScript
The activationScript does not seem to be necessary anymore as the paths
are created anyways.
2023-10-20 10:26:32 +02:00
Markus Theil
e98a8367ec jitterentropy-rngd: init at 1.2.8
Add jitterentropy-rngd, a tool similar to rng-tools.
While not necessarily needed, it is useful for those
who want to strengthen their kernel entropy input pool
by periodic insertion of an independent source.

The entropy source is a NIST SP800-90B compliant
non-physical true RNG source on most systems.
See the jitterentropy documentation for details
(http://chronox.de/jent/doc/CPU-Jitter-NPTRNG.pdf).

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2023-10-20 10:04:11 +02:00
Artturin
3342d1a9a9 Merge branch 'master' into staging-next 2023-10-20 09:29:36 +03:00
Fabián Heredia Montiel
6b29b95a75
Merge pull request #261975 from R-VdP/rvdp/fish_status_subcommands
fish: use the subcommand style for the status command
2023-10-19 22:01:56 -06:00
Will Fancher
18013cc71e systemd-stage-1: Use specific fs packages 2023-10-19 21:13:22 -04:00
Jakub Sokołowski
26c4e35cea
systemd: rename required AUTOFS4_FS to AUTOFS_FS
The `AUTOFS4_FS` name appears to be a legacy naming stub:

>Ok, I ran the script, and also decided that we might as well remove
>the AUTOFS4 legacy naming stub entry by now.
>
>It has been five years, and people will have either picked up the new
>name with 'make oldconfig', or they just don't use 'make oldconfig' at
>all.

https://lore.kernel.org/lkml/CAHk-=wgK9-Tx4BxYMrc0pg==mcaz3cjWF6-CBwVpM_BZAmf4JQ@mail.gmail.com/#r

That has been remove in 6.6 kernel and results in a failure:
```
error:
       Failed assertions:
       - CONFIG_AUTOFS4_FS is not enabled!
```

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-10-20 01:44:13 +02:00
Martin Weinelt
d042a29613
Merge pull request #253764 from linj-fork/fix-ping-wrapper
nixos/network-interfaces: stop wrapping ping with cap_net_raw
2023-10-20 00:57:55 +02:00
Thiago Kenji Okada
bcdd2da2dc
Merge pull request #262051 from thiagokokada/qt-module-fixes
nixos/qt: multiple fixes
2023-10-19 23:34:24 +01:00
Emily
4d0db3bfee
Merge pull request #259254 from Tom-Hubrecht/nixos-outline
nixos/outline: Add the possibility of using local storage instead of S3
2023-10-20 00:10:40 +02:00
Martin Weinelt
bb8f272106
nixos/wyoming-openwakeword: allow access to /proc/cpuinfo
Required somewhere in tensorflow, likely for CPU feature discovery.
2023-10-19 23:11:14 +02:00
Thiago Kenji Okada
38623a8003 nixos/qt: improve module documentation 2023-10-19 21:54:22 +01:00
Thiago Kenji Okada
39250f5df5 nixos/qt: multiple fixes
- Removal of top-level `with lib`
- Allow usage of module without setting `platformTheme`, so we can set
  the QT_PLUGIN_PATH/QML2_IMPORT_PATH paths without theming
- Add support for kvantum and some other styles
- Add myself as maintainer
2023-10-19 21:54:22 +01:00
nicoo
ea0dcd0ae1 nixos/systemd-boot: Avoid remote mypy executions 2023-10-19 20:58:52 +01:00
Kiskae
e24d43a18c nixos/nvidia: partially revert #181674
nvidia has changed the name of the chardev in the latest beta driver.
Match the behavior of `nvidia-modprobe` and hardcode the major number.
2023-10-19 21:57:35 +02:00
github-actions[bot]
0bcaa2f556
Merge master into staging-next 2023-10-19 18:00:54 +00:00
Thiago Kenji Okada
24a1589ebf
Merge pull request #251996 from surfaceflinger/microbin
microbin: add service
2023-10-19 18:36:02 +01:00
Thiago Kenji Okada
383389d086
Merge pull request #254582 from oluceps/dae-fix-overr
nixos/dae: fix override existed config issue
2023-10-19 18:34:30 +01:00
Bjørn Forsman
cc7791cfd9 nixos/lighttpd: add reload support
Allow reloading the webserver, which is useful when e.g there are new
certificates available that we want lighttpd to use, but don't want to
completely shut down the server.
2023-10-19 19:23:04 +02:00
Thiago Kenji Okada
b348656665
Merge pull request #259053 from flyingcircusio/percona-server-8.0
percona-server_8_0: init at 8.0.34
2023-10-19 18:17:59 +01:00
Arian van Putten
8caf3dcf34
Merge pull request #261505 from philiptaron/wlanConfig
systemd.network.netdev: add support for WLAN devices
2023-10-19 16:33:30 +00:00
Christoph Heiss
4714845327
nixos/tests/openssh: add test for AllowUsers
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-19 18:30:52 +02:00
Christoph Heiss
a077b7fadb
openssh: add {Allow,Deny}{Users,Groups} settings
`settingsFormat` unfortunaly needed a bit of a rework, see also
discussion in #227442.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-19 18:30:51 +02:00
Tom Hubrecht
be68df309d nixos/outline: Add the possibility of using local storage instead of S3 2023-10-19 17:58:27 +02:00
Arian van Putten
80a578580f nixos/grow-partition: Resize partition online instead of in initrd
There's no reason to do this in initrd. Partitions can be resized online.
We just have to make sure it happens before we resize the file system.

This also makes grow-partition work with systemd-initrd
2023-10-19 12:34:27 +00:00
Weijia Wang
ef6f366a95
Merge pull request #261744 from anthonyroussel/updates/sssd
sssd: 2.9.1 -> 2.9.2
2023-10-19 14:20:11 +02:00
github-actions[bot]
25bcfa6c2f
Merge master into staging-next 2023-10-19 12:01:00 +00:00
Michael Schneider
c22fed2281
nixos/doc/manual/development/writing-documentation.xml: fix build command (#262044) 2023-10-19 13:43:03 +02:00
Robert Hensing
4b5b27c7ca
Merge pull request #260770 from hercules-ci/darwin-builder-observable
`darwin.linux-builder`: Make more observable
2023-10-19 13:26:22 +02:00
K900
23704cce1f nixos/firefox: preserve old wrapper args when overriding
Also some drive-by cleanups
2023-10-19 13:10:22 +03:00
r-vdp
97e3336a5b
fish: use the subcommand style for the status command
The flag style has been deprecated and will eventually be removed.
2023-10-19 08:40:56 +02:00
github-actions[bot]
0f33269212
Merge master into staging-next 2023-10-19 06:01:20 +00:00
Fabián Heredia Montiel
27cb30e0ad
Merge pull request #260415 from helsinki-systems/drop/linux_4_14
linux_4_14: remove
2023-10-18 20:09:49 -06:00
github-actions[bot]
4b9cf6ff6e
Merge master into staging-next 2023-10-19 00:02:21 +00:00
Weijia Wang
f643ac2e68
Merge pull request #261884 from JulienMalka/tang-rl
nixos/tang: add to release notes
2023-10-19 01:28:40 +02:00
Weijia Wang
f570f42e60
Merge pull request #261723 from anthonyroussel/virtio-win-rename
virtio-win: rename from win-virtio
2023-10-19 01:23:24 +02:00
the-furry-hubofeverything
ac30ac808a nixos/virt-manager: init 2023-10-18 21:02:37 +02:00
Maximilian Bosch
2ee12a93de treewide: remove myself (ma27) from a few packages
It's time again, I guess :>

Main motivation is to stop being pinged about software that I maintained
for work now that I'm about to switch jobs. There's no point in pinging
me to review/test updates or to debug issues in e.g. the Atlassian stack
or on mailman since I use neither personally.

But there's also a bunch of other stuff that I stopped using personally. While
at it I realized that I'm still maintainer of a few tests & modules related to
packages I stopped maintaining in the past already.
2023-10-18 15:47:20 -03:00
Julien Malka
90475ceff8
nixos/tang: add to release notes 2023-10-18 20:44:07 +02:00
github-actions[bot]
de8dd334ab
Merge master into staging-next 2023-10-18 18:01:05 +00:00
Maximilian Bosch
bbcc14f34b
Merge pull request #261816 from Ma27/regreet-cage-args
nixos/regreet: make `cage(1)` args configurable
2023-10-18 19:44:44 +02:00
Florian Klink
770d1c5bcd nixos/garage: drop default package
This gives better control over what package of garage is running, and
makes upgrades a conscious decision.
2023-10-18 19:20:03 +02:00
Florian Klink
5b80b755aa nixos/garage: nixpkgs-fmt 2023-10-18 19:20:03 +02:00
Florian Klink
45e438fd89 nixosTests.garage: fix 2023-10-18 19:20:03 +02:00
Raito Bezarius
be85addb7f garage_0_9: init at 0.9.0
https://git.deuxfleurs.fr/Deuxfleurs/garage/releases/tag/v0.9.0
2023-10-18 19:20:03 +02:00
Anthony Roussel
20319223ee
nixosTests.sssd: add aarch64-linux platform 2023-10-18 18:26:57 +02:00
Adrian Pistol
1916a0cb9e syslogng: clean up build 2023-10-18 17:51:04 +02:00
Maximilian Bosch
89ec004f59
nixos/regreet: make cage(1) args configurable
In my case I'd like to be able to add `-m last` to `cage` to make sure
that the login form from regreet isn't displayed half on my external
monitor and half on my laptop screen, but on the last connected monitor
only.

That's basically the issue described in #226586, though it's not a
proper fix since the login form is shown on one monitor only.
2023-10-18 14:01:32 +02:00
github-actions[bot]
8e8fc73296
Merge master into staging-next 2023-10-18 12:01:25 +00:00
Pol Dellaiera
2898e563b4
Merge pull request #261772 from NixOS/projecteur/add-nixos-module-erratum
nixos/modules: add missing projecteur entry
2023-10-18 10:06:46 +02:00
Pol Dellaiera
ace2bcc2d2
nixos/modules: add missing projecteur entry 2023-10-18 09:09:15 +02:00
h7x4
2295751a5a
nixos/rkvm: add nixos test 2023-10-18 06:21:40 +03:00
ckie
f3ad4def37
nixos/rkvm: init
Co-authored-by: Lin Jian <me@linj.tech>
2023-10-18 06:21:40 +03:00
github-actions[bot]
35eee590be
Merge master into staging-next 2023-10-18 00:02:17 +00:00
Yureka
bfa26b6ee3 nixos/release-combined: make gitlab a channel blocker
Prevent issues like https://github.com/NixOS/nixpkgs/pull/257932 from reaching nixos-unstable in the future
2023-10-18 00:49:29 +02:00
Gary Guo
d7d1894a36 nixos/home-assistant: use runCommandLocal for configuration.yaml
It's a quite trivial operation, no need to query substitutors.
2023-10-17 23:27:46 +01:00
Anthony Roussel
7d90e85ef4
virtio-win: rename from win-virtio 2023-10-18 00:27:06 +02:00
Christopher Crouse
f9947192cb
nixos/opensnitch: fix typo and enable new system rules
Fixed typo to enable [new system rules](https://github.com/evilsocket/opensnitch/wiki/System-rules#upgrading-from-previous-versions)

Fixes: https://github.com/NixOS/nixpkgs/issues/256290
2023-10-17 18:00:48 +00:00
Philip Taron
173a3a25f0
Remove restriction on PhysicalDevice being int; reformat and document the Type field 2023-10-17 09:43:37 -07:00
Alyssa Ross
acf111d42b
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/python-modules/flask-wtf/default.nix
	pkgs/development/python-modules/unstructured-inference/default.nix
	pkgs/development/python-modules/unstructured/default.nix
	pkgs/development/python-modules/velbus-aio/default.nix
2023-10-17 13:05:40 +00:00
Artturi
22e61b1402
nixos/fail2ban: also inherit bantime (#244688)
nixos/fail2ban: also inherit bantime
2023-10-17 09:40:39 +03:00
github-actions[bot]
8c62479810
Merge master into staging-next 2023-10-17 00:02:14 +00:00
Philip Taron
989cca26c4
systemd.network.netdev: Add support for WLAN devices
These are virtual interface, where one physical wifi adapter can have
more than one interface.

See https://systemd.network/systemd.netdev.html#%5BWLAN%5D%20Section%20Options
and dedf2d0054
2023-10-16 15:04:44 -07:00
Victor Engmark
8da856302c
nixos/shiori: add web root option
Fixes #260328, allowing users to host the service somewhere other than
the root of the host.

Co-authored-by: h7x4 <h7x4@nani.wtf>
2023-10-17 10:11:00 +13:00
nat
78039bcb27
release-notes: add entry for new microbin module 2023-10-16 21:39:34 +02:00
nat
8009330112
nixos/microbin: add module 2023-10-16 21:38:20 +02:00
Bjørn Forsman
f561e395bd nixos/tests/deconz: init 2023-10-16 20:49:41 +02:00
Bjørn Forsman
4164383dd4 nixos/deconz: init
Add a NixOS module for the deCONZ Zigbee gateway service.
2023-10-16 20:49:41 +02:00
h7x4
abe468822f
nixos/hedgedoc: add SuperSandro2000 and h7x4 as maintainer 2023-10-16 20:38:47 +02:00
h7x4
a70a3e61d7
nixos/hedgedoc: harden systemd unit 2023-10-16 20:38:47 +02:00
Maximilian Bosch
3357e6df46
Merge pull request #260008 from Ma27/synapse-log-config
nixos/matrix-synapse: mergeable log configuration
2023-10-16 18:01:44 +00:00
github-actions[bot]
3a75845d38
Merge master into staging-next 2023-10-16 18:01:26 +00:00
Silvan Mosberger
e0b3b074fb
Merge pull request #255547 from Majiir/pam-modular-rules
nixos/pam: assemble rules from modular configuration
2023-10-16 19:41:00 +02:00
Arian van Putten
dd3deac858
Merge pull request #261452 from nikstur/systemd-repart-gpt-header
nixos/systemd-repart: remove superfluous gpt manipulation
2023-10-16 18:05:55 +01:00
nikstur
e8b4e945dd nixos/systemd-repart: remove superfluous gpt manipulation 2023-10-16 19:03:57 +02:00
Nick Cao
1b291038b9
Merge pull request #261416 from lelgenio/writefreely-fix-module
nixos/writefreely: fix admin user creation on sqlite
2023-10-16 12:13:19 -04:00
Jörg Thalheim
86e3c2f58e
Merge pull request #261377 from jfroche/fix/remove-dagger
dagger: remove
2023-10-16 15:06:27 +01:00
lelgenio
218bef9116 nixos/writefreely: fix admin user creation on sqlite 2023-10-16 10:41:47 -03:00
Lin Jian
fbc62319f1
Merge pull request #260291 from donovanglover/nixos-containers/optional-restart
nixos/nixos-containers: add restartIfChanged option
2023-10-16 20:41:32 +08:00
Jean-François Roche
3c54f29cca dagger: remove
It violates the dagger trademark policy to use `dagger` name and compile from
source.

closes #260848
2023-10-16 14:37:11 +02:00
github-actions[bot]
cb4734193d
Merge master into staging-next 2023-10-16 12:01:25 +00:00
Jennifer Graul
d4b59bcdb0 nixos/librenms: add nixos test 2023-10-16 13:28:22 +02:00
Jennifer Graul
e94820dfb2 nixos/librenms: init 2023-10-16 13:28:22 +02:00
Jean-François Roche
fb3723fe52
nixos/tang: create module for tang server (#247037)
This commit adds a module for the tang server and the related nixos test.
2023-10-16 13:10:15 +02:00
Janik
bb6be0baba
Merge pull request #261259 from totoroot/google-cloud-bigtable-tool-0.12.0 2023-10-16 12:35:13 +02:00
Alyssa Ross
579ae9b989
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/python-modules/cirq-core/default.nix
2023-10-16 08:49:23 +00:00
Julien Malka
8cff7c9e69 tests/ferretdb: init 2023-10-16 10:15:30 +02:00
Julien Malka
c54ab7d643 nixos/ferretdb: init 2023-10-16 10:15:30 +02:00
zowoq
4ef9100595 nixosTests.buildbot: fix impure evaluation 2023-10-16 15:40:45 +10:00
Maciej Krüger
afc33ef9d2
Merge pull request #260687 from mkg20001/lxd-ui
nixos/lxd: fix ui.enable desc
2023-10-16 01:30:58 +02:00
Martin Weinelt
94c8c31bee
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/numba/default.nix
2023-10-15 22:31:34 +02:00
Yureka
3488f86baf nixos/peering-manager: add scheduled tasks 2023-10-15 22:01:04 +02:00
Matthias Thym
32d8adf411 google-cloud-sql-proxy: rename from cloud-sql-proxy 2023-10-15 21:00:43 +02:00
Maximilian Bosch
083a10949a
Merge pull request #258695 from Majiir/fix-networkd-defaultgateway
nixos/network-interfaces-systemd: support and require defaultGateway.interface
2023-10-15 16:42:01 +02:00
Maximilian Bosch
e5928d9a73
nixos/synapse: mkDefault each value of the log config
That way it's not even needed to specify an `mkForce` when changing
existing attributes, e.g. root's log level.
2023-10-15 16:16:28 +02:00
Vojtěch Káně
b8624bd312 nixos/firefox-syncserver: fix and update the docs and options descriptions 2023-10-15 13:33:40 +02:00
Lassulus
a3dacf1dc8
Merge pull request #260306 from doronbehar/nixos/syncthing-many-devices 2023-10-15 10:24:40 +01:00
h7x4
6cd8da76f9
nixos/hedgedoc: refactor to reduce option count
- Remove lots of declared options that were not used outside of being
  included in settings. These should now be used through the freeform
  module.
- Deprecate `cfg.workDir`, in favor of using systemds `StateDirectory`
- Use sqlite as default database.

Co-authored-by: Sandro Jäckel <sandro.jaeckel@gmail.com>
2023-10-15 08:45:43 +02:00
Vladimír Čunát
746e16f927
nixos/release: fixup evaluation of tested job (firefox)
This fixes 3b6389aa2f49e; I'm sorry for the mistake.
2023-10-15 08:18:33 +02:00
toastal
ccb0f87129 prosody: use default network, remove libevent, config deprecated
`use_libevent` config option has been deprecated as there are 3
networking back-ends (see: https://prosody.im/doc/network_backend). It
is probably unwise to stray from the defaults (epoll).

Review instructed to flat-out remove it versus previously making it opt-in.
2023-10-15 10:02:50 +07:00
Robert Schütz
04b6bd2def nixos/iptsd: init 2023-10-14 18:52:38 -07:00
github-actions[bot]
1d9483230a
Merge master into staging-next 2023-10-15 00:02:33 +00:00
Artturi
32817b0b03
Merge pull request #259075 from schuelermine/patch/nixos/modules/nano/syntaxHighlight 2023-10-15 02:46:07 +03:00
Artturi
6f5cccb96c
Merge pull request #259918 from kidonng/patch-3 2023-10-15 02:42:13 +03:00
Weijia Wang
53dc4745a8
Merge pull request #261074 from erdnaxe/prom-fixes
nixos/prometheus: fix cross-compilation
2023-10-15 01:34:13 +02:00
ajs124
89e976973b linux_4_14: remove 2023-10-15 01:19:34 +02:00
Doron Behar
79c78d68c6 nixos/syncthing: get API key for every curl request
Fixes #260262.
2023-10-15 02:04:52 +03:00
Doron Behar
b9b120c607 nixosTests.syncthing-many-devices: init 2023-10-15 02:04:52 +03:00
Maximilian Bosch
632cfff257
Merge pull request #259619 from Majiir/fix-networkd-dhcp
nixos/network-interfaces-systemd: fix DHCP setting
2023-10-14 20:47:36 +02:00
github-actions[bot]
8381e32b2c
Merge master into staging-next 2023-10-14 18:00:58 +00:00
Majiir Paktu
c4228b6c8f nixos/network-interfaces-systemd: fix DHCP setting
The networkd backend logic for setting DHCP= on an interface is bugged
and inconsistent with the scripted logic. Consider this simple NixOS
configuration:

    {
      networking.useNetworkd = true;
      networking.interfaces.eth0.wakeOnLan.enable = true;
    }

The default value of networking.useDHCP is true, so we expect our eth0
interface to have DHCP enabled. With the scripted backend, this works.
But the networkd backend generates the following 40-eth0.network file:

    [Match]
    Name=eth0

    [Network]
    DHCP=no
    IPv6PrivacyExtensions=kernel

This is happening because the wakeOnLan configuration creates a key in
networking.interfaces, and the networkd backend erroneously checks that
instead of for explicitly configured IP addresses as in the scripted
backend. The documentation is also inconsistent across various options.

This change aligns the networkd backend and option documentation to the
actual behavior of the scripted backend, and updates a test to account
for this behavior for both backends.
2023-10-14 13:57:32 -04:00
Artturi
75023c43a2
Merge pull request #260975 from Artturin/x11xkb
nixos/x11: don't use a submodule for xkb options
2023-10-14 18:52:30 +03:00
Alexandre Iooss
925a8806dc nixos/prometheus: fix cross-compilation 2023-10-14 16:45:18 +02:00
Weijia Wang
e39aad56c2 Merge branch 'master' into staging-next 2023-10-14 16:33:49 +02:00
Martin Weinelt
3b44a3139f
Merge pull request #260185 from vcunat/p/firefox-no-tests
nixos/release: don't block on firefox tests
2023-10-14 16:01:15 +02:00
Maximilian Bosch
6998695f5d
Merge pull request #259658 from Majiir/fix-networkd-wakeonlan
nixos/network-interfaces-systemd: fix WakeOnLan
2023-10-14 14:48:22 +02:00
github-actions[bot]
af075c4055
Merge master into staging-next 2023-10-14 12:01:00 +00:00
Maximilian Bosch
d664571660
Merge pull request #256598 from adamcstephens/net/warn-multiple-net
nixos/networking: warn when both networkd and dhcpcd can collide
2023-10-14 12:24:24 +02:00
Vladimir Pouzanov
ed44cfb141
Merge branch 'master' into shellconfig 2023-10-14 08:38:25 +01:00
github-actions[bot]
57667077ed
Merge master into staging-next 2023-10-14 06:00:57 +00:00
Artturin
d891f369ee nixos/x11: don't use a submodule for xkb options
A submodule is unnecessary

Improved a few descriptions
2023-10-14 04:15:53 +03:00
Artturi
5fabe8c9fd
Merge pull request #260764 from MatthewCash/fix/xdg-base-pam 2023-10-14 04:01:48 +03:00
Weijia Wang
2c4a6562d1 Merge branch 'master' into staging-next 2023-10-14 00:22:03 +02:00
Fabián Heredia Montiel
d80ad25cf8
Merge pull request #259792 from Luflosi/kubo-test-improvements
nixos/tests/kubo: various improvements
2023-10-13 16:13:46 -06:00
github-actions[bot]
4a7eb88e55
Merge master into staging-next 2023-10-13 18:01:03 +00:00
Janik
96896946dd
Merge pull request #242371 from jfly/add-openvpn3-systemd-resolved-support 2023-10-13 19:58:37 +02:00
Thiago Kenji Okada
57a3c03486
Merge pull request #258571 from thiagokokada/nixos-rebuild-system-run
nixos-rebuild: run activation inside systemd-run
2023-10-13 17:19:25 +01:00
Bobby Rong
3eb6ccb947
Merge pull request #260479 from bobby285271/upd/xfce-test
nixosTests.xfce: Extend the test
2023-10-13 23:36:44 +08:00
Pol Dellaiera
948c4d7de2
Merge pull request #260702 from NixOS/projecteur/add-nixos-module
nixos/modules/projecteur: init
2023-10-13 17:11:05 +02:00
Maximilian Bosch
35f6dbe7fc
Merge pull request #259967 from Ma27/nextcloud-cleanups
nextcloud: 27.1.0 -> 27.1.2, update nginx, drop nextcloud25
2023-10-13 16:40:40 +02:00
Bobby Rong
8609b30455
nixosTests.xfce: Extend the test
So we got some basic OCR testing here.
2023-10-13 22:40:03 +08:00
github-actions[bot]
4645621691
Merge master into staging-next 2023-10-13 12:01:05 +00:00
Maciej Krüger
784bf5dd5e
Merge pull request #260589 from adamcstephens/lxd/udev-trigger 2023-10-13 12:31:38 +02:00
Jeremy Fleischman
7ee5699496
nixos/openvpn3: Add support for systemd-resolved
I noticed that openvpn3 is been clobbering my `/etc/resolv.conf` file. I
dug around a bit, and it turns out that upstream actually does have
support for systemd-resolved. I think it makes sense for us to
automatically enable that feature if the system is configured to use
systemd-resolved.

I opted to not change the default behavior of `pkgs.openvpn3`, but can
easily be convinced to change that if folks think I should.
2023-10-13 00:32:15 -07:00
github-actions[bot]
8a68e0b5f5
Merge master into staging-next 2023-10-13 06:01:14 +00:00
Artturi
effd18f070
Merge pull request #260600 from Artturin/llvmaddnoteforremovalofextend 2023-10-13 07:11:29 +03:00
Matthew_Cash
9c24f502b7
nixos/user-groups: fix environment.profiles using parameter expansion 2023-10-12 21:00:34 -07:00
Nick Cao
d1a8d93744
Merge pull request #258616 from ctron/add-trunk-ng
add trunk-ng, a fork of trunk
2023-10-12 20:05:04 -04:00
github-actions[bot]
58485aaddb
Merge master into staging-next 2023-10-13 00:02:24 +00:00
Sandro Jäckel
39e1727f0f
nixos/dex: fix start with latest systemd update
With those settings starting dex crashed with:

Oct 03 21:37:51 hydrogen (tart-pre)[11048]: dex.service: Failed to set up mount namespacing: /run/systemd/mount-rootfs/sys/fs/cgroup/system.slice/dex.service/memory.pressure: No such file or directory
Oct 03 21:37:51 hydrogen (tart-pre)[11048]: dex.service: Failed at step NAMESPACE spawning /nix/store/q8clp1lm8jznxf9330jd8cwc6mdy6glz-dex-start-pre: No such file or directory
2023-10-13 00:34:08 +02:00
Artturin
d470944859 nixos/x11: create xkb option by default
without this
```
nix-repl> nixosTests.xfce.nodes.machine.services.xserver.xkb
error: The option 'nodes.machine.services.xserver.xkb' is used but not defined.
```

with this
```
nix-repl> nixosTests.xfce.nodes.machine.services.xserver.xkb
{ dir = "/nix/store/096yg7fc67py86w0bm6g7a32npgyh5ic-xkeyboard-config-2.39/etc/X11/xkb"; layout = "us"; model = "pc104"; options = "terminate:ctrl_alt_bksp"; variant = ""; }
```
2023-10-13 01:16:14 +03:00
Fabián Heredia Montiel
f96d8113b3
Merge pull request #259745 from Luflosi/update/kubo
kubo: 0.22.0 -> 0.23.0
2023-10-12 15:42:59 -06:00
Robert Hensing
508c310222 darwin.linux-builder: Expose nixosConfig and nixosOptions attributes
I chose not to do nixos.{config, options} because that would make it
look too much like a configuration object, which it is not.

A configuration object I would define as for example the result of
calling NixOS, an attrset with `_type = "configuration";`.

Recreating a configuration object without evalModules is quite
feasible but not guaranteed to be correct, and not maintainable.
2023-10-12 23:10:41 +02:00
Robert Hensing
9443a0b51e darwin.linux-builder: Set meta.position 2023-10-12 22:58:50 +02:00
Adam Stephens
dbeeeb8e06
nixos/lxc-container: enable udev-trigger for nested containers 2023-10-12 15:11:09 -04:00
github-actions[bot]
176015fc74
Merge master into staging-next 2023-10-12 18:01:06 +00:00
Weijia Wang
c3a3b38cb9
Merge pull request #258813 from SuperSandro2000/drop-searx
searx: drop
2023-10-12 19:55:39 +02:00
Pol Dellaiera
30046d3bc1
nixos/module: add projecteur 2023-10-12 19:51:20 +02:00
Weijia Wang
1cdfe7f591
Merge pull request #260260 from wegank/wordpress-alias
wordpress6_1, wordpress6_2: drop
2023-10-12 19:38:05 +02:00
Jens Reimann
32814b01a4 trunk-ng: init at 0.17.8 2023-10-12 18:07:06 +02:00
Adam Stephens
c2ff509e66
lxc-container: add squashfs image support and release output 2023-10-12 10:52:05 -04:00
Adam Stephens
a91bd0b468
make-squashfs: add support for pseudoFiles, custom name, and disabling strip 2023-10-12 10:51:41 -04:00
Aaron Andersen
bae7820f02
Merge pull request #259425 from aanderse/nixos/openssh-authorized-principals
nixos/openssh: add support for authorized principals
2023-10-12 10:30:52 -04:00
figsoda
a9cd086d3c
Merge pull request #260618 from Aleksanaa/nixos/bandwhich
nixos/bandwhich: add missing capabilities
2023-10-12 10:18:46 -04:00
Maciej Krüger
d934d20cd3
nixos/lxd: fix ui.enable desc
Otherwise it would show up as "Whether to enable Enables the (experimental) LXD UI. ."

Now is just "Whether to enable (experimental) LXD UI."
2023-10-12 15:24:01 +02:00
github-actions[bot]
f220ef48f8
Merge master into staging-next 2023-10-12 12:01:25 +00:00
Molly Miller
1a794a3e4b nixos/mailman: store locks in ephemeral runtime directory
nixosTests.mailman: test mailman master lock handling
2023-10-12 10:39:18 +00:00
Alyssa Ross
1bb67a90ba
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/python-modules/bambi/default.nix
	pkgs/development/python-modules/jaxopt/default.nix
2023-10-12 09:08:12 +00:00
aleksana
bb777015c8 nixos/bandwhich: add missing capabilities 2023-10-12 15:53:55 +08:00
Artturi
520e363e82
Merge pull request #259891 from l0b0/refactor/xkb-attrset 2023-10-12 08:43:28 +03:00
OTABI Tomoya
d570cfb5b0
Merge pull request #260433 from adamcstephens/sabctools/7.1.2
python311Packages.sabctools: 7.0.2 -> 7.1.2, fix sabnzbd
2023-10-12 14:26:48 +09:00
Artturin
2b1258e453 llvmPackages: add the removal of extend to release-notes 2023-10-12 07:50:57 +03:00
Mikael Fangel
46d295f15c nixos/gnu: remove 2023-10-11 23:43:45 -03:00
Donovan Glover
fd7daf9fc4
nixos/nixos-containers: add restartIfChanged option
This commit makes auto-restarting declarative containers optional.

This is useful when you don't want changes to your config to automatically
restart the container and thus stop any applications running inside it.
2023-10-11 21:53:42 -04:00
Silvan Mosberger
2f01d20202
Merge pull request #259927 from asymmetric/no-docbook-in-manual
nixos/manual: no DocBook for mkPackageOption
2023-10-12 03:27:21 +02:00
Sandro Jäckel
e793d18455 nixos/searx: little makeover 2023-10-11 23:48:29 +02:00
Sandro Jäckel
ad1f57095f searx: drop
searx has been removed as it is unmaintained. Please switch to searxng.
2023-10-11 23:48:28 +02:00
Arnout Engelen
6071292b2a
Merge pull request #243338 from raboof/prometheus-imap-mailstat-exporter-init-at-2023-06-20
prometheus-imap-mailstat-exporter: init at 0.0.1
2023-10-11 17:33:25 -03:00
Alyssa Ross
21e3908ea3
nixos/mailman: ensure uwsgi uses mailman's python
If they differ, uwsgi will fail to start, because it won't be able to
find the appropriate libraries.
2023-10-11 20:20:12 +00:00
github-actions[bot]
b8d473b6d2
Merge master into staging-next 2023-10-11 18:01:06 +00:00
Bobby Rong
4cf896a425
Merge pull request #260080 from r-ryantm/auto-update/cinnamon.mint-artwork
cinnamon.mint-artwork: 1.7.5 -> 1.7.6
2023-10-11 21:08:19 +08:00
Adam Stephens
cb719dfa72
nixos/tests/sabnzbd: add check for sabctools mismatch 2023-10-11 08:53:22 -04:00
github-actions[bot]
0e9411554d
Merge master into staging-next 2023-10-11 12:01:09 +00:00
Atemu
16fb0b365d
Merge pull request #259056 from leona-ya/nixos-paperless-systemd-254
nixos/paperless: fix start with latest systemd
2023-10-11 13:15:24 +02:00
edef
89e45f23db nixos/modules/security/wrappers: drop dead code 2023-10-11 08:49:32 +00:00
Victor Engmark
3a6c79cff6 nixos/x11: refactor XKB options into a single attrset
[Motivation](https://github.com/NixOS/nixpkgs/issues/257817#issuecomment-1741705042):

- Having all the XKB options in the same attribute set clarifies their
  relation better than using a common option name prefix ("xkb").
- `services.xserver.layout` is an XKB option, but this is not obvious
  from its name. Putting it with the other XKB options clarifies this.

Co-authored-by: Michele Guerini Rocco <rnhmjoj@users.noreply.github.com>
2023-10-11 09:46:37 +03:00
github-actions[bot]
54e78cb7bf
Merge master into staging-next 2023-10-11 06:01:20 +00:00
Arnout Engelen
aae49a5cc7
Merge pull request #247540 from imlonghao/borgmatic/1.8.1
borgmatic: 1.7.15 -> 1.8.1
2023-10-10 22:46:24 -03:00
Majiir Paktu
9d6e6e18bc nixos/pam: add maintainer 2023-10-10 21:11:35 -04:00
Majiir Paktu
e712b6e81d nixos/pam: generate apparmor includes from rules
Removes redundant config from the module. Fixes a bug where some modules
(e.g. ussh) were added to apparmor even though they had no rules enabled.
2023-10-10 21:11:35 -04:00
Majiir Paktu
43f7cb4a95 nixos/pam: add order comment to each rule line 2023-10-10 21:11:35 -04:00
Majiir Paktu
077cdcc7e9 nixos/pam: convert rules to attrs, add order field
Makes it possible to override properties of a rule by name. Introduces
an 'order' field that can be overridden to change the sequence of rules.

For now, the order value for each built-in rule is derived from its
place in the hardcoded list of rules.
2023-10-10 21:11:34 -04:00
Majiir Paktu
e86487e579 nixos/pam: remove empty text fields 2023-10-10 21:11:34 -04:00
Majiir Paktu
5b8439f966 nixos/pam: add settings option for common argument styles
Adds easily overrideable settings for the most common PAM argument
styles. These are:

- Flag (e.g. "use_first_pass"): rendered for true boolean values. false
  values are ignored.

- Key-value (e.g. "action=validate"): rendered for non-null, non-boolean
  values.

Most PAM arguments can be configured this way. Others can still be
configured with the 'args' option.
2023-10-10 21:11:34 -04:00
Martin Weinelt
37773cd0b0
Merge pull request #259729 from natsukium/factory-boy
python311Packages.factory-boy: rename from factory_boy
2023-10-11 02:04:37 +02:00
Fabián Heredia Montiel
d676e059d7 Merge remote-tracking branch 'origin/master' into staging-next 2023-10-10 15:07:12 -06:00
Bernardo Meurer
fd1b81464c
Merge pull request #258328 from Madouura/pr/rocm-update 2023-10-10 16:20:36 -04:00
Izorkin
cfd837442f nixos/samba: start service after network activation 2023-10-10 20:13:52 +02:00
maxine
f3d84b91e9
Merge pull request #260248 from ToxicFrog/linger
nixos/users-groups: add user option to enable lingering
2023-10-10 20:08:27 +02:00
github-actions[bot]
b1ae965cda
Merge master into staging-next 2023-10-10 18:00:56 +00:00
Weijia Wang
7db9836654 wordpress6_1, wordpress6_2: drop 2023-10-10 18:38:22 +02:00
R. Ryantm
051963b199
cinnamon.mint-artwork: 1.7.5 -> 1.7.6
This sets the mono font to DejaVu Sans Mono 10.
2023-10-10 22:06:50 +08:00
imlonghao
4a519fa142
borgmatic: 1.7.15 -> 1.8.1 2023-10-10 21:48:13 +08:00
Rebecca Kelly
e648d46465 nixos/users-groups: add user option to enable lingering
Adapted from
https://gist.github.com/graham33/fdbdcc18317a621d9dd54beb36be6683

Fixes #3702

Lingering users can still be managed mutably by root with `loginctl`,
but the settings here will take precedence when `nixos-rebuild` is run.
2023-10-10 08:53:48 -04:00
Jörg Thalheim
b7057368c8 systemd-boot-builder: add missing fsync in atomic writes
write(2) and close(2) doesn't ensure the file content actually got synched, so let's also fsync before doing the rename
2023-10-10 14:49:51 +02:00
Jörg Thalheim
8335022649 nixos/tests/systemd-boot: improve assertion error for update test 2023-10-10 14:49:51 +02:00
Jörg Thalheim
865a2cf8c1 Revert "nixos/systemd-boot: skip EFI update to 252"
This reverts commit 80665d606a.

Parsing the package version broke our systemd-boot builder test.

i.e. it won't be able to parse systemd-boot efi binaries coming from
ubuntu

We no longer use the faulty systemd-boot version so this code should no
longer be needed.
2023-10-10 14:49:51 +02:00
Jörg Thalheim
b7fbd1ffd4 systemd-boot-builder: use regex prefix string
otherwise there are warnings for \.
2023-10-10 14:49:51 +02:00
Jörg Thalheim
5ee9fdf929 systemd-boot-builder: use new builtin typing style 2023-10-10 14:49:51 +02:00
Jörg Thalheim
e20a886f87 systemd-boot-builder: drop unused import 2023-10-10 14:49:51 +02:00
Jörg Thalheim
a17f41ed0b systemd-boot-builder: replace mkdir_p function with stdlib equivalent 2023-10-10 14:49:51 +02:00
Jörg Thalheim
f4bf9702be systemd-boot-builder: always do syncfs, even after a failure 2023-10-10 14:49:51 +02:00
Jörg Thalheim
dbac7467ad systemd-boot-builder: drop semicolons
this is python, not C.
2023-10-10 14:49:51 +02:00
Jörg Thalheim
1f70361d08 systemd-boot-builder: resort imports according to isort
foo
2023-10-10 14:49:51 +02:00
github-actions[bot]
0efc5df650
Merge master into staging-next 2023-10-10 12:01:29 +00:00
Robert Hensing
a14f3f829d nixos/eval-config.nix: Rename arg nixosSystem -> configuration
For some time now the attrset returned by `evalModules` has
`type = "configuration"`.

This is a clean refactor because the name is not exposed.
(never is for simple lambda)
2023-10-10 13:25:15 +02:00
Robert Hensing
1c0427862e nixos/eval-config.nix: Rename let withExtraArgs -> withExtraAttrs
Presumably it only used to add `extraArgs`, but it also adds other
attributes now.
2023-10-10 13:24:55 +02:00
Robert Hensing
2eb706646a
Merge pull request #259797 from K900/eval-config-pkgs
eval-config.nix: set nixpkgs.pkgs instead of _module.args.pkgs
2023-10-10 13:18:30 +02:00
Vladimír Čunát
3b6389aa2f
nixos/release: don't block on firefox tests
I can't recall when these tests last discovered a real problem.
Having to do many manual restarts is annoying, e.g.
  https://hydra.nixos.org/build/237622614#tabs-buildsteps
2023-10-10 12:19:27 +02:00
Maximilian Bosch
3d3b99ad20
Merge pull request #259980 from Ma27/synapse-db-assertion
nixos/matrix-synapse: drop old DB check assertion, actually require DB to be up
2023-10-10 11:41:05 +02:00
Maximilian Bosch
791fe98a0d
Merge pull request #259888 from julianschacher/matrix-synapse-fix-media-store-access
nixos/matrix-synapse: add `media_store_path` to services `ReadWritePaths`
2023-10-10 11:40:45 +02:00
Luflosi
cf8aa48605
nixos/tests/kubo: various improvements
Add new test to check if kubo.passthru.repoVersion is set correctly.
Also split the existing NixOS VM test into two independent parts. The test already used two independent VMs but just one testScript. This made experimenting with just one of the two VMs slower than it needed to be. It should also increase parallelism slightly since both test scripts can now run at the same time.
2023-10-10 10:46:25 +02:00
Ben Wolsieffer
b6876d5c86
nixos/security/wrappers: don't force PIE hardening (#259509)
PIE causes problems with static binaries on ARM (see 76552e9). It is
enabled by default on other platforms anyway when musl is used, so we
don't need to specify it manually.
2023-10-10 10:13:29 +02:00
Lin Jian
a75d4a5fd5
Merge pull request #260069 from doronbehar/doc/mkOptionType.typo
nixos/doc/mkOptionType: small typo fix
2023-10-10 15:23:08 +08:00
Majiir Paktu
6eea7fb194 nixos/pam: extract args field
Module arguments have common escaping rules for all PAMs.
2023-10-09 23:17:37 -04:00
Majiir Paktu
12a488e89c nixos/pam: extract modulePath field 2023-10-09 23:17:36 -04:00
Majiir Paktu
25bc21f19a nixos/pam: extract control field 2023-10-09 23:17:36 -04:00
Majiir Paktu
0563e0a379 nixos/pam: give each rule a name
These names are internal identifiers. They will be used as keys so that
users can reconfigure rules by merging a rule config with the same name.
The name is arbitrary. The built-in rules are named after the PAM where
practical.
2023-10-09 23:17:36 -04:00
Majiir Paktu
fbd7427b14 nixos/pam: define rules as submodules
Allows us to decompose rules into multiple fields that we later format
as textual rules. Eventually allows users to override individual fields.
2023-10-09 23:17:36 -04:00
Majiir Paktu
3c85d159f7 nixos/pam: automatically populate rule type
Eliminates a redundancy between the 'rules' suboptions and the type
specified in each rule.

We eventually want to give each rule a name so that we can merge config
overrides. The PAM name is a natural choice for rule name, but a PAM is
often used in multiple rule types. Organizing rules by type and rule
name avoids name collisions.
2023-10-09 23:17:15 -04:00
Carl Dong
e5c2c71280 nixos/nginx: Allow empty port for listen directive
When listening on unix sockets, it doesn't make sense to specify a port
for nginx's listen directive.

Since nginx defaults to port 80 when the port isn't specified (but the
address is), we can change the default for the option to null as well
without changing any behaviour.
2023-10-09 21:16:03 -04:00
Majiir Paktu
d6bb805932 nixos/pam: extract header comments
Unblocks converting the rules from one big string to a rich data
structure.
2023-10-09 20:40:19 -04:00
github-actions[bot]
6b95af2485
Merge master into staging-next 2023-10-10 00:02:12 +00:00
Ryan Lahfa
bfc5d57d66
Merge pull request #259886 from RaitoBezarius/drop-varnish 2023-10-10 00:46:20 +02:00
Herwig Hochleitner
13364f124a cdemu: fix service setup
closes https://github.com/NixOS/nixpkgs/issues/154613
2023-10-10 00:23:27 +02:00
Madoura
6f39d63688
nixos/doc: rocm-opencl-icd -> rocmPackages.clr.icd 2023-10-09 16:38:54 -05:00
Madoura
fb93210205
nixos/doc: note ROCm changes 2023-10-09 16:38:53 -05:00
Doron Behar
6843abd5fb
Merge pull request #231152 from tcheronneau/nixos.tinyproxy
Adding tinyproxy service to NixOS
2023-10-09 23:53:58 +03:00
Anderson Torres
52058530ce nixos/connman: refactor 2023-10-09 17:49:02 -03:00
Doron Behar
3c34a1a464 nixos/doc/mkOptionType: small typo fix 2023-10-09 23:38:32 +03:00
6t8k
ebec07fd24
nixos/tests/openssh: wait for sshd(.socket) units, add timeout=30
Motivated by recently observed flakiness of this test on Hydra:

[1] https://github.com/NixOS/nixpkgs/pull/259051#issuecomment-1752363951
[2] https://hydra.nixos.org/build/237478399
2023-10-09 20:54:14 +02:00
Thiago Kenji Okada
e7a621f8e9
Merge pull request #259066 from thiagokokada/add-renice-sway
nixos/sway: add enableRealtime option
2023-10-09 19:53:51 +01:00