Commit Graph

36459 Commits

Author SHA1 Message Date
nikstur
47ff8d20d7 nixos/duosec: replace activationScript
Replace with a separate systemd service.
2023-10-26 01:51:07 +02:00
nikstur
b16365b393 nixos/iscsi: replace activationScript
Move the functionality into preStart of the systemd service.
2023-10-26 01:51:07 +02:00
nikstur
256956e34d nixos/activation: link gcroot with tmpfiles instead of in activation 2023-10-26 01:44:21 +02:00
nikstur
d345b385fe nixos/tests/stunnel: replace activationScript
Replace with a separate systemd service.
2023-10-26 01:44:21 +02:00
nikstur
339a866b7c nixos/tests/systemd-timesyncd: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
6987ff3a4f nixos/spiped: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
f18ff2ec0b nixos/mlmmj: replace activationScript 2023-10-26 01:44:21 +02:00
nikstur
d5a96d508b nixos/stargazer: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
da274a11d7 nixos/tests/grafana: replace activationScript with tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
0b294fe2e8 nixos/tests/opensearch: replace activationScript via tmpfiles 2023-10-26 01:44:21 +02:00
nikstur
6c800013bf nixos/strongswan-swanctl: replace activationScripts via tmpfiles 2023-10-26 01:44:20 +02:00
nikstur
168b967b32 nixos/mattermost: replace activationScript via tmpfiles 2023-10-26 01:43:56 +02:00
André Silva
0f13df156e
iproute2: stateless configuration
0a0a8f12fa
2023-10-26 00:41:40 +01:00
nicoo
87c22100a6 stdenv.mkDerivation: Reject MD5 hashes
While there is no fetcher or builder (in nixpkgs) that takes an `md5` parameter,
for some inscrutable reason the nix interpreter accepts the following:
```nix
fetchurl {
  url = "https://www.perdu.com";
  hash = "md5-rrdBU2a35b2PM2ZO+n/zGw==";
}
```

Note that neither MD5 nor SHA1 are allowed by the syntax of SRI hashes.
2023-10-25 23:14:15 +00:00
Patrick Jackson
4a938cc665 treewide: rename handle/GH account patricksjackson to arcuru 2023-10-25 15:42:48 -07:00
nikstur
1b2b1364de nixos/ups: replace activationScript via tmpfiles 2023-10-25 23:44:01 +02:00
nikstur
88f63d1165 nixos/binfmt: replace activationScript via tmpfiles 2023-10-25 23:44:01 +02:00
nikstur
cb08d3dd72 nixos/nix-channel: replace activationScript via tmpfiles 2023-10-25 23:43:58 +02:00
Martin Weinelt
2bb79db3e2
Merge pull request #263315 from chayleaf/kea
kea: use separate runtime directories for each service
2023-10-25 22:29:31 +02:00
chayleaf
413011ddf4 kea: use separate runtime directories for each service
Kea may clean the runtime directory when starting (or maybe systemd does
it). I ran into this issue when restarting Kea after changing its
configuration, so I think the fact it normally doesn't clean it is a
race condition (it's cleaned on service start, and normally all Kea
services start at roughly the same time).
2023-10-26 02:51:43 +07:00
h7x4
8c2f678ff6 nixos/cardboard: use mkPackageOptionMD 2023-10-25 16:19:26 -03:00
Yureka
8b37735e0e
nixos/acme: add s3Bucket option (#262806) 2023-10-25 21:08:05 +02:00
Lin Jian
2a27bf588f
Merge pull request #261733 from nbdd0121/hass
nixos/home-assistant: use runCommandLocal for configuration.yaml
2023-10-26 02:23:21 +08:00
Anderson Torres
6b2f0db256 nixos/cardboard: init
Copy-inspired from river.
2023-10-25 13:26:38 -03:00
Nick Cao
f5680882ec
Merge pull request #263240 from NickCao/stratis
stratisd: 3.5.9 -> 3.6.0, stratis-cli: 3.5.3 -> 3.6.0
2023-10-25 09:38:16 -04:00
Mario Rodas
84a877ed30
Merge pull request #261722 from anthonyroussel/ssm-agent-rename
amazon-ssm-agent: rename from ssm-agent
2023-10-25 04:18:24 -05:00
Stig
a99cbd99e1
Merge pull request #255715 from TomaSajt/lanraragi
lanraragi: init at 0.8.90
2023-10-25 10:54:27 +02:00
Alyssa Ross
a3ba049545 nixos/nixpkgs.nix: use less confusing example systems
system and config shouldn't both be specified — each will be filled in
based on the other when the system is elaborated.
2023-10-25 08:33:14 +00:00
digital
a6253e6b12
nixos/syncthing: support syncthing gui and api over unix sockets (#247343) 2023-10-25 09:18:42 +02:00
Rebecca Kelly
855223de8f nixos/munin: fix internAndFixPlugins mangling store paths
The previous implementation works fine when the plugins do not already
contain store paths, which is the case for stuff from munin-contrib.
However, for plugins generated via nix (e.g. with writeShellScriptBin),
it tries to fix the paths in it which already point to the nix store,
ruining everything.
2023-10-25 09:00:45 +02:00
Rebecca Kelly
0f7fb5cdcf nixos/munin: fix key-context error when using extraAutoPlugins
If extraAutoPlugins contains values that carry context (e.g. it comes
from a flake input), the keys generated from them using baseNameOf
inherit that context and the config doesn't compile.

This doesn't actually need to be an attrset anyways, so a bit of
internal refactoring lets us fix this without changing the visible API.
2023-10-25 09:00:45 +02:00
Charles Hall
f5dcc015b9
nixos/garage: set StateDirectory if used at all
Changes the `mkIf` to trigger if *either* `data_dir`/`metadata_dir` use
`/var/lib/garage`, not only if both do. This is useful to me because I
want to store metadata in `/var/lib/garage` but I also want to store
data in a different mountpoint (via `data_dir` and `ReadWritePaths`).
2023-10-24 22:03:21 -07:00
TomaSajt
8e18ff0c24
nixos/lanraragi: init 2023-10-25 01:14:59 +02:00
nikstur
a8f50f9919 nixos/activation: remove specialfs activationScript
The stage-2-init.sh script has the same functionality hardcoded so we do
not need it in the activationScript again.
2023-10-25 00:48:37 +02:00
nikstur
59e3726755 nixos/activation: replace var activationScript via tmpfiles 2023-10-25 00:48:37 +02:00
Julian Stecklina
3c1c4b65e9 nixos/timesyncd: replace activationScript via ExecPreStart 2023-10-25 00:48:35 +02:00
Nick Cao
19f440889f
nixosTests.stratis.encryption: fix after stratis update 2023-10-24 18:47:39 -04:00
nikstur
f827f7ad7b nixos/wrappers: replace activationScript
Create the wrappers via a separate systemd service.
2023-10-24 23:51:37 +02:00
Timothy DeHerrera
f06b975898
Merge pull request #262135 from Kiskae/nvidia-udev-fix
nixos/nvidia: partially revert #181674
2023-10-24 13:58:22 -06:00
Janik
e46b352ac4
Merge pull request #231065 from yu-re-ka/fnm-advanced-module
nixos/fastnetmon-advanced: init
2023-10-24 21:43:26 +02:00
Emily
702853c61a
Merge pull request #263046 from emilylange/nixos-forgejo
nixosTests.forgejo: test backup/dump service; nixos/forgejo: pass {env}`GIT_PROTOCOL` via ssh to forgejo; nixosTests.forgejo: test git wire protocol version
2023-10-24 19:40:20 +02:00
Guillaume Girol
8b37bb122a
Merge pull request #255734 from symphorien/paperwork-2.2
paperwork: 2.1.2 -> 2.2.1
2023-10-24 18:53:32 +02:00
Robert Hensing
3fbda64514
Merge pull request #263131 from Ma27/sshd-test-networkd
nixos/tests/openssh: use dashes for hostnames
2023-10-24 17:53:15 +02:00
K900
d0d6219c42
Merge pull request #262265 from chayleaf/akkoma-extra
nixos/akkoma: add services.akkoma.dist.extraFlags
2023-10-24 18:30:24 +03:00
Will Fancher
43487a4f80 nixos/release-combined: re-add ZFS to release-combined
Since #262982, ZFS tests works again. Also, this time we'll use the
correct systems.
2023-10-24 11:00:35 -04:00
Maximilian Bosch
e4c369b443
Merge pull request #263146 from globin/globin-maintainership
treewide: update globin's maintainership
2023-10-24 16:45:43 +02:00
Robert Hensing
5dfc78a8ad
Merge pull request #262021 from Enzime/linux-builder-cross
linux-builder: support `x86_64-linux` on `aarch64`
2023-10-24 14:34:29 +02:00
Maximilian Bosch
b16ac6e7bb
nixos/tests/openssh: use dashes for hostnames
Otherwise the tests will fail with `networking.useNetworkd = true;`
because `systemd-resolved` ignores invalid hostnames in `/etc/hosts`
(which is where all hosts from the `nodes`-attribute set end up) and
subsequently e.g. `ssh server_lazy` will fail because the name cannot be
resolved.

In d6e84a4574 the test-framework was
changed to replace all dashes with underscores of hostnames in the
python code to have readable hostnames that are valid. I.e.

    nodes.foo-bar = {}

represents a host with a valid hostname and it can be referenced in the
`testScript` with `foo_bar`.

Applying this here fixes the test for both scripted networking and
networkd.
2023-10-24 14:24:10 +02:00
misuzu
e0d3bcbb53 nixos/tests/installer: add bpool for grub files in zfsroot test 2023-10-24 13:43:21 +02:00
misuzu
b8a547d38b nixos/tests/installer: add postInstallCommands to makeInstallerTest 2023-10-24 13:43:21 +02:00
Michael Hoang
ab1f45f3d3 linux-builder: support x86_64-linux on aarch64 2023-10-24 13:35:37 +02:00
Robin Gloster
e5d552f5b9
treewide: update globin's maintainership 2023-10-24 13:09:45 +02:00
Vladimír Čunát
1ec4e9dea4
nixos/release-combined: drop nixos-rebuild-install-bootloader
... at least until it's fixed.  /cc PR #262724 again.
2023-10-24 09:51:23 +02:00
Jacek Galowicz
1005fa006e nixos/tests/bittorrent: Uncomment Seeder Takedown 2023-10-24 07:24:27 +01:00
emilylange
98ebe7b877
nixosTests.forgejo: test git wire protocol version
Co-Authored-By: networkException <git@nwex.de>
2023-10-24 03:32:03 +02:00
emilylange
402b5c67a8
nixos/forgejo: pass {env}GIT_PROTOCOL via ssh to forgejo
when using the host's openssh service (not the builtin golang one).

This enables the use of the much faster and more efficient wire protocol
version 2.
See https://git-scm.com/docs/protocol-v2
2023-10-24 03:27:20 +02:00
emilylange
6431fec2c4
nixosTests.forgejo: test backup/dump service
This should allow us to catch issues regarding that in the future.

nixos/gitea had an issue with the dump service recently, which didn't
affect us, fortunately.
But to be fair, it only affected non-default-y setups.
Not something we are able to catch in the current, rather simple, config
of our test.
Still, I see a lot of value adding this new subtest to our test suite.

Anyhow, this patch also exposes the resulting tarball as test (build)
output, which is a nice addition IMHO, as it allows some sort of
external sanity-check, if needed, without running the test interactive.
2023-10-24 02:32:56 +02:00
Maciej Krüger
1ecbbb6e3f
Merge pull request #260595 from adamcstephens/lxc/squashfs
lxc-container: add squashfs image support and release output
2023-10-24 02:06:36 +02:00
Martin Weinelt
6bed1ae794
nixos/tests: fix nixos-rebuild-specialisations test definition 2023-10-23 23:32:37 +02:00
Janik
a5b74d45bd
Merge pull request #262978 from JulienMalka/ferretdb-docs
nixos/ferretdb: fix broken link to documentation
2023-10-23 22:53:21 +02:00
Yureka
f13a5196fc nixos/tests/fastnetmon-advanced: init 2023-10-23 22:51:19 +02:00
Yureka
bf5f01ee52 nixos/fastnetmon-advanced: init 2023-10-23 22:51:19 +02:00
Domen Kožar
4e95cbe36e
Merge pull request #246081 from therealr5/bacula-fix
nixos/bacula: fix postgresql config and remove unneeded quotation marks
2023-10-23 21:42:11 +01:00
Vladimír Čunát
ba583cb184
Merge #262951: nixos/release-combined: drop ZFS+i686 from blockers 2023-10-23 20:34:19 +02:00
Lorenz Leutgeb
cc6c2d32f2
rosenpass: refactor, add module and test (#254813) 2023-10-23 19:29:30 +02:00
Julien Malka
5237796f2b nixos/ferretdb: fix broken link to documentation 2023-10-23 16:48:31 +00:00
Thiago Kenji Okada
7359dcf561
Merge pull request #262852 from lucasew/20231022-byname
treewide: housekeeping of packages maintained by lucasew
2023-10-23 15:48:21 +01:00
Vladimír Čunát
7aec39cc1f
nixos/release-combined: drop ZFS+i686 from blockers
The current state is certainly very wrong - testing ZFS only on i686.
I suspect it was a typo (?) in commit 2de3caf011.

The current practical problem is that the test fails,
though in a part that looks cross-platform (which adds confusion):
https://hydra.nixos.org/build/239290208#tabs-buildsteps
2023-10-23 16:42:37 +02:00
Robert Hensing
4bf1366455
Merge pull request #262724 from thiagokokada/fix-install-bootloader
nixos-rebuild: fix --install-bootloader flag with systemd-run
2023-10-23 15:24:42 +02:00
Maximilian Bosch
3ad1ebe9ff
Merge pull request #258047 from mweinelt/knot-exporter
prometheus-knot-exporter: 2021-08-21 -> 3.3.1; python310Packages.libknot: init at 3.3.1
2023-10-23 15:01:06 +02:00
github-actions[bot]
2c2c0379b7
Merge staging-next into staging 2023-10-23 12:02:04 +00:00
Thiago Kenji Okada
65cb8b4e01 nixos/tests: make nixos-rebuild tests x86_64-linux only
Depends on GRUB2/BIOS.
2023-10-23 12:39:41 +01:00
Thiago Kenji Okada
ab3ca40d2e nixos/release-combined: add nixos-rebuild-specialisations to release-combined 2023-10-23 12:39:41 +01:00
Thiago Kenji Okada
ccebc89954 nixos/tests: add nixos-rebuild-install-bootloader 2023-10-23 12:39:40 +01:00
Maximilian Bosch
715afeb48b
nixos/tests/prometheus-exporters/knot: update for new exporter version
The knot_server_zone_count metric does not exist anymore, and the next
best thing to watch for is the zone serial, that we define ourselves.

The serial is a number and displayed in the scientific notation, i.e.

    >>> machine.succeed('curl localhost:9433/metrics|grep 019 >&2')
    [...]
    knot # knot_zone_serial{zone="test."} 2.019031301e+09
2023-10-23 13:19:52 +02:00
Martin Weinelt
589ccfdac1
nixos/prometheus-exporters/knot: update for new exporter
The new exporter has proper console scripts definition, that sets up
another executable name.

The package now also shells out to pidof, which is why we require procps
in the unit PATH.
2023-10-23 13:19:52 +02:00
Martin Weinelt
46b989f924
prometheus-knot-exporter: 2021-08-21 -> 3.3.2
The knot upstream forked this exporter and is now maintaining it
alongside Knot DNS itself.
2023-10-23 13:19:51 +02:00
Ryan Lahfa
d1ee91c22d
Merge pull request #262796 from SuperSandro2000/patch-1
nixos/nginx: document implicit default port 80
2023-10-23 11:04:54 +01:00
Martin Weinelt
6ddb74a81a
Merge pull request #262542 from yu-re-ka/matrix-synapse-opentracing
matrix-synapse: remove opentracing optional dependencies
2023-10-23 11:22:25 +02:00
Ryan Lahfa
b9337215cd
Merge pull request #229035 from NixOS/qemu-vm/tpm
qemu-vm: support TPM usecases
2023-10-23 10:10:27 +01:00
Christoph Heiss
8b6acac9de
floorp: init at 11.5.0
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-10-23 10:22:11 +02:00
K900
a52abd4ccb
Merge pull request #262623 from K900/continued-firefox-cleanups
firefox: start killing all the per-extension options
2023-10-23 10:25:37 +03:00
lucasew
4ec81766c2 cockpit: 287 -> 303
Signed-off-by: lucasew <lucas59356@gmail.com>
2023-10-22 22:39:22 -03:00
Martin Weinelt
0e4b63f713 Revert "nixos/systemd-boot: Avoid remote mypy executions"
This reverts commit ea0dcd0ae1.
2023-10-23 03:38:13 +02:00
github-actions[bot]
df9eab6771
Merge staging-next into staging 2023-10-23 00:03:00 +00:00
Arthur Gautier
08f4fe2087 qemu-vm: stop the swtpm once qemu stops
The idea is to run an async process waiting for swtpm
and we have to ensure that `FD_CLOEXEC` is cleared on this process'
stdin file descriptor, we use `fdflags` for this, a loadable builtin in
Bash ≥ 5.

The async process when exited will terminate `swtpm`, we bind the
termination of the async process to the termination of QEMU by virtue of
having `qemu` exec in that Bash script.

Signed-off-by: Arthur Gautier <baloo@superbaloo.net>
Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
2023-10-23 01:02:24 +02:00
Atemu
e0417d79ff
Merge pull request #262574 from Atemu/installer-no-powersave-governor
installer/nixos-generate-config: don't set powersave cpuFreqGovernor
2023-10-23 00:59:19 +02:00
Martin Weinelt
3244b1eaef
Merge pull request #262678 from plumelo/feat/esphome-proc-subset
esphome: remove ProcSubset from serviceConfig
2023-10-23 00:46:21 +02:00
DavHau
cae154a67e nixos/systemd-tmpfiles: add settings option 2023-10-23 00:34:23 +02:00
Guillaume Girol
bf86bfb6d6
Merge pull request #256312 from 6t8k/fuse3_3.11.0-3.16.1
fuse3: 3.11.0 -> 3.16.2
2023-10-22 23:55:30 +02:00
Anthony Roussel
ccf080ee05
amazon-ssm-agent: rename from ssm-agent 2023-10-22 22:04:09 +02:00
Sandro
f4d631c3d1
nixos/nginx: document implicit default port 80 2023-10-22 21:32:50 +02:00
Lassulus
448f34e913
Merge pull request #262381 from makefu/pkgs/ps3netsrv/replace-upstream
ps3netsrv: replace with webman mod fork
2023-10-22 20:32:13 +01:00
Emily
a61c6b478d
Merge pull request #262741 from emilylange/nixos-forgejo-postgres15
nixos/forgejo: work around permissions error on `postgresql_15`
2023-10-22 21:04:41 +02:00
github-actions[bot]
3d9ca9d8e3
Merge staging-next into staging 2023-10-22 18:01:34 +00:00
6t8k
5790995938
nixos/doc: document backward incompatibility of fuse3 bump to 3.16.2 2023-10-22 19:50:04 +02:00
Will Fancher
13f325005c
Merge pull request #262740 from ElvishJerricco/systemd-stage-1-improve-udhcpc-assertion
systemd-stage-1: Improve udhcpc assertion
2023-10-22 13:46:38 -04:00
Martin Weinelt
8c5947252d
Merge pull request #262776 from pennae/mosquitto-skip-bind-test
nixos/mosquitto: remove the bind_interface test
2023-10-22 19:28:24 +02:00
pennae
33ba318db6 nixos/mosquitto: remove the bind_interface test
bind_interface is the mosquitto way of trying to bind to all addresses
on an interface, but it is unreliable (trying to bind to link-local v6
addresses *sometimes* but not always) and just prone to failure in
general for reasons we have yet to discover.

since this kind of automatic behavior isn't particularly necessary in a
declarative system we may as well skip it.
2023-10-22 19:12:26 +02:00
Robert Schütz
80f59b1626
Merge pull request #261135 from dotlambda/nixos-iptsd-init
nixos/iptsd: init
2023-10-22 09:48:37 -07:00