Commit Graph

7603 Commits

Author SHA1 Message Date
Jade Lovelace
c125c23468 nixos/tests: fix systemd-networkd-dhcpserver under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
9ed2e58b70 nixos/tests: fix rss2email under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace
8169ded7a3 nixos/tests: fix qemu-vm-restrictnetwork under network-online dep fix 2024-01-18 16:28:41 -08:00
Adithya Nair
8b5644684e
nixos/frp: use toml configFile
According to upstream, the INI configuration file is deprecated and
TOML/YAML/JSON is recommended.
Link: https://github.com/fatedier/frp/tree/dev#configuration-files
2024-01-18 21:37:40 +05:30
Janne Heß
15c31afd8a
Merge pull request #271067 from nikstur/sysinit-reactivation
nixos/switch-to-configuration: add sysinit-reactivation.target
2024-01-18 16:13:32 +01:00
Adam C. Stephens
887d3f54c6
Merge pull request #278753 from adamcstephens/incus/migrate-test
incus, lxd: ensure lxd->incus migration is supported and tested
2024-01-18 08:01:23 -05:00
Franz Pletz
c00a2d02bd
Merge pull request #251882 from r-ryantm/auto-update/prometheus-snmp-exporter
prometheus-snmp-exporter: 0.22.0 -> 0.25.0
2024-01-18 08:16:39 +01:00
nikstur
e6b66f08a5 nixos/switch-to-configuration: add sysinit-reactivation.target 2024-01-18 00:46:30 +01:00
Franz Pletz
ed2ea66bbf
Merge pull request #278539 from Ma27/sshd-socket-activation-ports
nixos/sshd: fix socket activated ports when using ListenAddress
2024-01-17 23:27:52 +01:00
WilliButz
a8ea9fe492
nixos/prometheus-snmp-exporter: switch to new config syntax
Introduced with version 0.23.0, see
b75fc6b839/auth-split-migration.md
2024-01-17 20:32:45 +01:00
Robin Gloster
e59524560c
Merge pull request #281555 from fpletz/nixos/ntpd-rs-fix-metrics
nixos/ntpd-rs: fix metrics service
2024-01-17 15:49:24 +01:00
Sandro
23a88afe88
Merge pull request #247112 from OPNA2608/init/lomiri/lomiri-terminal-app 2024-01-17 15:31:11 +01:00
Franz Pletz
35c015ff91
nixos/ntpd-rs: fix metrics service 2024-01-17 15:06:20 +01:00
Maciej Krüger
f666630f4a
Merge pull request #280556 from gador/pgadmin-8.2
pgadmin: 8.1 -> 8.2, python3Packages.webauthn 1.11.1 -> 2.0.0, python3Packages.flask-security-too: fix pydantic issue
2024-01-17 08:30:24 +01:00
Benjamin Bädorf
7c3ecbdce9 nixos/invoiceplane: add nginx as a webserver option for invoiceplane
Getting the vhost to play nice with phpfpm was done by following this
community post: https://community.invoiceplane.com/t/topic/2654
2024-01-17 05:09:34 +01:00
Florian Brandes
03649bfdf2 python3Packages.flask-security-too: fix for webauth 2
also removes pydantic (since webauth 2 doesn't use it anymore)

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-01-16 15:55:16 +01:00
Franz Pletz
71435c9869
nixos/tests/podman: firewall now opened by module 2024-01-16 14:46:16 +01:00
Thiago Kenji Okada
401d16acd0
Merge pull request #247256 from lucasew/xrdp-audio
xrdp: add support for audio
2024-01-16 10:06:51 +00:00
OPNA2608
62b9942ca2 lomiri.lomiri-terminal-app: init at 2.0.1 2024-01-15 18:42:35 +01:00
Franz Pletz
678b899ac0
Merge pull request #264593 from fpletz/pkgs/ntp-rs-1.0.0 2024-01-15 02:17:36 +01:00
Peder Bergebakken Sundt
fa8616a4c0
Merge pull request #279479 from gepbird/c2fmzq-server-bool-setting-allow-false
nixos/c2fmzq-server: allow setting bool settings to false
2024-01-14 18:32:11 +01:00
Franz Pletz
9707745cf8
nixos/ntpd-rs: init 2024-01-14 17:34:42 +01:00
Adam Stephens
ffdcec2d94
nixos/tests/incus: add lxd-to-incus migration test 2024-01-14 09:26:49 -05:00
Felix Bühler
99f4714039
Merge pull request #277501 from Stunkymonkey/prowlarr-check-folder
nixos/tests/prowlarr: check for folder existence
2024-01-14 14:39:27 +01:00
Thomas Gerbet
afb57ff041 elasticsearch: 7.17.10 -> 7.17.16
Fixes CVE-2023-31417, CVE-2023-31418, CVE-2023-31419, CVE-2023-46673 and CVE-2023-46674.

Security announces:
https://www.elastic.co/guide/en/security/7.17/release-notes-header-7.17.0.html#release-notes-7.17.16

Release notes:
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.16.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.15.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.14.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.13.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.12.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.11.html
2024-01-14 12:21:45 +01:00
Bobby Rong
4d47dc2d9f
Merge pull request #280526 from bobby285271/upd/pantheon-test
nixosTests.pantheon: Extend the test
2024-01-14 17:44:09 +08:00
Bobby Rong
40bec35947
nixosTests.pantheon: Extend the test
- Ensure greeter-compositor starts
- Ensure various environment variables are set
- Ensure multitasking view triggers
- Misc updates
2024-01-14 14:10:21 +08:00
Ryan Lahfa
dd5621df6d
Merge pull request #278380 from DeeUnderscore/fix/nginx-etag
nginx: change etags for statically compressed files served from store
2024-01-14 04:55:27 +01:00
Gutyina Gergő
7247d16af6
nixos/c2fmzq-server: allow setting bool settings to false 2024-01-14 00:19:19 +01:00
Dee Anzorge
f124c73686 nginx: change etags for statically compressed files served from store
Per RFC 9110, [section 8.8.1][1], different representations of the same
resource should have different Etags:

> A strong validator is unique across all versions of all
> representations associated with a particular resource over time.
> However, there is no implication of uniqueness across representations
> of different resources (i.e., the same strong validator might be in
> use for representations of multiple resources at the same time and
> does not imply that those representations are equivalent)

When serving statically compressed files (ie, when there is an existing
corresponding .gz/.br/etc. file on disk), Nginx sends the Etag marked
as strong. These tags should be different for each compressed format
(as shown in  an explicit example in section [8.8.3.3][2] of the RFC).
Upstream Etags are composed of the file modification timestamp and
content length, and the latter generally changes between these
representations.

Previous implementation of Nix-specific Etags for things served from
store used the store hash. This is fine to share between different
files, but it becomes a problem for statically compressed versions of
the same file, as it means Nginx was serving different representations
of the same resource with the same Etag, marked as strong.

This patch addresses this by imitating the upstream Nginx behavior, and
appending the value of content length to the store hash.

[1]: https://www.rfc-editor.org/rfc/rfc9110.html#name-validator-fields
[2]:
https://www.rfc-editor.org/rfc/rfc9110.html#name-example-entity-tags-varying
2024-01-13 22:07:50 +01:00
Mario Rodas
033f88f786
Merge pull request #277982 from trofi/spark-fix-tests-eval
spark: fix `tests` eval under `allowAliases = false`
2024-01-13 16:06:50 -05:00
Peder Bergebakken Sundt
59cefcbc62
Merge pull request #277783 from gepbird/c2fmzq-server-multiple-freeform-settings
nixos/c2fmzq-server: allow multiple freeform settings
2024-01-13 22:01:23 +01:00
Robert Hensing
221ad6d7ff
Merge pull request #277642 from Enzime/fix/nixos-rebuild-remote-sudo
nixos-rebuild: fix issues when using `--target-host`
2024-01-13 18:52:57 +01:00
lucasew
cf26222cc8 nixos/tests: add xrdp-with-audio-pulseaudio
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-01-13 12:42:06 -03:00
Florian Brandes
1c1ca56266 pgadmin: 8.1 -> 8.2
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-13 09:54:32 +01:00
Yt
827bd96b2b
Merge pull request #280005 from digtail/2024-01-09-ntfy-sh-dynamic-user
nixos/ntfy-sh: clean up DynamicUser workarounds
2024-01-12 23:39:25 +01:00
Maciej Krüger
6ba04cc302
Merge pull request #270876 from gador/pgadmin-check-pw
nixos/pgadmin: add minimumPasswordLength setting and check
2024-01-12 21:00:40 +01:00
Ryan Lahfa
08d0afbbdf
Merge pull request #239028 from chayleaf/miniupnpd
miniupnpd-nftables: init at 2.3.3
2024-01-12 20:17:33 +01:00
K900
391d29cb04 nixos/tests/installer: fix eval 2024-01-12 15:24:49 +01:00
Florian Brandes
bc21d288f4
nixos/pgadmin: apply review suggestions
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-11 11:32:32 +01:00
Weijia Wang
2f9e98ccf3 Merge branch 'master' into staging-next 2024-01-10 23:12:44 +01:00
Peder Bergebakken Sundt
dff635f38d
Merge pull request #243169 from 2xsaiko/outgoing/krb5
nixos/krb5: cleanup, fix and RFC42-ify
2024-01-10 21:06:15 +01:00
github-actions[bot]
122355be99
Merge master into staging-next 2024-01-10 00:02:18 +00:00
digital
39fd0c3fe3 nixos/ntfy-sh: clean up DynamicUser workarounds
this commit removes the static assignments for the ntfy-sh user and
group. furthermore, it removes some tmpfiles.d rules which where
initially put in place by https://github.com/NixOS/nixpkgs/pull/234811.
these are however not required, as ntfy-sh will automatically create the
required files and systemd automatically handles the migration process.

A nixosTest is added to demonstrate that the migration is working
reliably.

This also fixes an issue with where systemd would sometimes not start
ntfy-sh. The tmpfiles rules in combination with impermanence caused `/
var/lib/ntfy-sh` to be a directory when it should have been a symlink.
2024-01-10 00:15:50 +01:00
Peder Bergebakken Sundt
3bf05ba941
Merge pull request #271481 from eliandoran/feature/snmpd
nixos/snmpd: init
2024-01-09 21:32:27 +01:00
K900
838aefefc3 Merge remote-tracking branch 'origin/master' into staging-next 2024-01-09 22:42:37 +03:00
Herwig Hochleitner
ae34cddb51
linuxPackages.systemtap: 4.8 -> 5.0a, add nixos tests (#276840)
* nixos/tests/systemtap: init smoke test

* linuxPackages.systemtap: use --sysroot instead of -r

* nixos/tests/systemtap: rule out warnings

* linuxPackages.systemtap: smaller sysroot

* nixos/tests/systemtap: test on a few more kernels

* linuxPackages.systemtap: provide debuginfo for tracing kernel.function

* linuxPackages.systemtap: test kernel.function probe

* linuxPackages.systemtap: 4.8 -> 5.0a
2024-01-09 19:38:02 +01:00
Yaya
0b3fbec39d nixosTests.paperless: Convert paperless extraConfig to settings
`services.paperless.extraConfig` has been replaced with
`services.paperless.settings` in #277019.
2024-01-09 13:47:52 +01:00
github-actions[bot]
6bf0bf35bb
Merge master into staging-next 2024-01-08 18:00:58 +00:00
Maciej Krüger
b5b2f6bec4
Merge pull request #277620 from nbraud/nixos/pam/ssh-agent-auth-31611
nixos/pam: Add option for ssh-agent auth's trusted authorized_keys files
2024-01-08 17:42:02 +01:00
github-actions[bot]
f85fe5fc29
Merge master into staging-next 2024-01-07 18:00:54 +00:00
Guillaume Girol
db0f76e8c9
Merge pull request #271030 from symphorien/nixseparatedebuginfod
nixseparatedebuginfod: init at 0.3.0, plus module and nixos test
2024-01-07 17:45:13 +01:00
Jan Tojnar
ff42d23313 Merge branch 'master' into staging-next
Conflicts:

pkgs/development/python-modules/dbt-core/default.nix
pkgs/development/python-modules/dbt-semantic-interfaces/default.nix

Still broken by pydantic 2 bump, though.
2024-01-07 16:14:41 +01:00
Nick Cao
d49252891f
Merge pull request #279015 from oddlama/fix-typesense-tests
typesense: fix test failure due to initialization timing
2024-01-07 09:45:40 -05:00
oddlama
c6394f7c41
typesense: fix test failure due to initialization timing 2024-01-07 13:04:59 +01:00
github-actions[bot]
9f96550945
Merge master into staging-next 2024-01-07 12:01:24 +00:00
Jörg Thalheim
db59d03371
Merge branch 'master' into pr/bcachefs 2024-01-07 11:40:30 +01:00
Michael Hoang
b09de27cd6 nixos-rebuild: add --target-host test 2024-01-07 03:40:01 +11:00
github-actions[bot]
4fb3b0394b
Merge master into staging-next 2024-01-06 12:01:05 +00:00
Jörg Thalheim
610af56da4 nixos/tests/sway: fix alacritty xwayland test
if WAYLAND_DISPLAY is set to some invalid string than alacritty will
exit with an error.
2024-01-06 11:21:27 +01:00
Martin Weinelt
430fd07751
Merge remote-tracking branch 'origin/master' into staging-next 2024-01-06 04:57:06 +01:00
Martin Weinelt
095dec0437
Merge pull request #278808 from mweinelt/maintenance
Scale back maintainership on various packages
2024-01-06 04:51:44 +01:00
Martin Weinelt
eba4d277a0 Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
-	pkgs/development/python-modules/sabctools/default.nix
2024-01-06 04:51:01 +01:00
Sergei Trofimovich
01f78ec6f8 systemd.tests.systemd-journal-upload: fix meta eval
Without the change metadata evaluation fails as:

    $ nix-instantiate --eval --expr 'with import ./. {}; systemd.tests.systemd-journal-upload.meta'
    error:
       … while evaluating the attribute 'tests.systemd-journal-upload.meta'

       error: undefined variable 'raitoezarius'

       at nixos/tests/systemd-journal-upload.nix:5:33:

            4|   meta = with pkgs.lib.maintainers; {
            5|     maintainers = [ minijackson raitoezarius ];
             |                                 ^
            6|   };
2024-01-05 21:34:36 +00:00
Adam C. Stephens
8949c5d63b
Merge pull request #278810 from r-ryantm/auto-update/squeezelite
squeezelite: 1.9.9.1449 -> 1.9.9.1463
2024-01-05 14:43:18 -05:00
Adam Stephens
a72a7ad723
nixos/tests/slimserver: regex squeezelite number in log 2024-01-05 12:43:01 -05:00
Martin Weinelt
4611371303
treewide: scale back maintainership for various packages 2024-01-05 14:43:39 +01:00
github-actions[bot]
340cf4304d
Merge master into staging-next 2024-01-05 06:01:12 +00:00
zowoq
3d0b034e87 maintainers/teams: add buildbot 2024-01-05 11:41:19 +10:00
github-actions[bot]
1e290d634f
Merge master into staging-next 2024-01-05 00:02:27 +00:00
Raito Bezarius
861431f282 nixos/tests/bootspec: test initrd and initrdSecrets a bit stricter
We will now ensure that no `initrdSecrets` leaks under no initrd secrets
and that `initrdSecrets` are there if we do have initrd secrets.
2024-01-04 23:11:23 +01:00
nicoo
9ed1423dcf nixos/pam: Warn on insecure sshAgentAuth configurations 2024-01-04 17:30:09 +00:00
Maximilian Bosch
7e45990c06
nixos/sshd: fix socket activated ports when using ListenAddress
Noticed that issue while reviewing #275633: when declaring
`ListenAddress host` without a port, all ports declared by
`Port`/`cfg.ports` will be used with `host` according to
`sshd_config(5)`.

However, if this is done and socket activation is used, only a socket
for port 22 is created instead of a sockets for each port from
`Port`/`cfg.ports`. This patch corrects that behavior.

Also added a regression test for this case.
2024-01-03 19:42:45 +01:00
nicoo
a46ea51ca3 nixos/pam: Rename option enableSSHAgentAuth to sshAgentAuth.enable 2024-01-03 14:49:36 +00:00
Ivan Mincik
afc2f0f7bc postgresqlPackages.postgis: build minimal gdal version
This change is reducing closure size from 1.5G to
544M.
2024-01-03 11:38:02 +01:00
OPNA2608
c637680b5d lomiri.lomiri-indicator-network: init at 1.0.0 2024-01-02 18:33:17 +01:00
Gutyina Gergő
3306755683
nixos/c2fmzq-server: allow multiple freeform settings 2024-01-01 22:50:16 +01:00
Guillaume Girol
dece72548e nixseparatedebuginfod: add module and nixos test 2024-01-01 13:42:13 +01:00
github-actions[bot]
e61ae81f8f
Merge master into staging-next 2024-01-01 00:02:16 +00:00
Sergei Trofimovich
3d40057509 spark: fix tests eval under allowAliases = false
Without the change `tests` eval fails as:

    $ nix build --no-link -f. spark.tests --arg config '{ allowAliases = false; }'
    error: attribute 'nixosTest' missing
           12|   };
           13|   testSparkCluster = { sparkPackage, ... }: pkgs.nixosTest ({
             |                                             ^
           14|     name = "spark";
       Did you mean nixosTests?

`nixosTest` is an alias defined as:

    pkgs/top-level/aliases.nix:  nixosTest = testers.nixosTest; # Added 2022-05-05
2023-12-31 22:47:55 +00:00
Janik
6be9d4fc21
Merge pull request #266283 from Noodlesalat/ping-exporter-1.1.0
ping_exporter: init at 1.1.0
2023-12-31 20:50:30 +01:00
github-actions[bot]
65cbf5e637
Merge master into staging-next 2023-12-31 18:01:09 +00:00
Guillaume Girol
a5cbc50912
Merge pull request #276385 from majiru/drawterm-tests
drawterm: unstable-2023-09-03 -> unstable-2023-12-23 & nixos tests
2023-12-31 15:41:26 +01:00
github-actions[bot]
dc1ce0d685
Merge staging-next into staging 2023-12-31 12:01:23 +00:00
Martin Weinelt
f142aeb3a2
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/scikit-build-core/default.nix
2023-12-31 12:00:30 +01:00
Maciej Krüger
b8a8c2cf15
Merge pull request #266332 from nbraud/nixos/tests/ssh-agent-auth
Add NixOS test for `security.pam.enableSSHAgentAuth`
2023-12-31 10:38:36 +01:00
github-actions[bot]
a9cb88c7ae
Merge staging-next into staging 2023-12-31 06:01:28 +00:00
Jan Tojnar
80020c7db4 Merge branch 'master' into staging-next
; Conflicts:
;	pkgs/development/lua-modules/generated-packages.nix
;	pkgs/development/lua-modules/overrides.nix
2023-12-31 02:31:32 +01:00
zowoq
41e3e7ef30 buildbot: 3.10.0 -> 3.10.1
Changelog: https://github.com/buildbot/buildbot/releases/tag/v3.10.1
2023-12-30 11:25:04 +10:00
Maximilian Bosch
d25fdec5b3
Merge pull request #212430 from onny/nextcloud-cleanup
nixos/nextcloud: Move options into now freeForm extraOptions
2023-12-29 23:44:24 +01:00
github-actions[bot]
294b981465
Merge staging-next into staging 2023-12-29 18:01:23 +00:00
github-actions[bot]
f50aae4fb1
Merge master into staging-next 2023-12-29 18:00:57 +00:00
nikstur
5a9c0b7600
Merge pull request #267983 from nikstur/replace-simple-activation-2
nixos: replace activationScripts 2/x
2023-12-29 16:29:11 +01:00
Bobby Rong
75e6da4bce
Merge pull request #277153 from trofi/nixosTests.allDrivers.anbox-avoid-aliases
nixosTests.allDrivers.anbox: avoid use of aliases
2023-12-29 21:59:43 +08:00
Felix Buehler
4a4e3f6d4e nixos/tests/prowlarr: check fo folder existance 2023-12-29 10:57:56 +01:00
nikstur
1c22b64fc9 nixos/tests/nextcloud: replace activationScript
Replace with a seprate systemd service
2023-12-29 03:41:45 +01:00
nikstur
36f2ab21ea nixos/tests/incron: replace activcationScript via tmpfiles 2023-12-29 03:21:36 +01:00
Jonas Heinrich
dd8c96379f nixos/nextcloud: Move options into now freeForm extraOptions 2023-12-29 01:04:46 +01:00
github-actions[bot]
a5650ee564
Merge staging-next into staging 2023-12-29 00:02:24 +00:00
github-actions[bot]
bd7fd36fe2
Merge master into staging-next 2023-12-29 00:01:57 +00:00