Commit Graph

253017 Commits

Author SHA1 Message Date
Graham Christensen
f2cfecdec3
nixos ami: preflight the imds token
According to Freenode's ##AWS, the metadata server can sometimes
take a few moments to get its shoes on, and the very first boot
of a machine can see failed requests for a few moments.
2020-11-19 13:56:44 -05:00
Graham Christensen
83ea88e03f
nixos: ec2 ami: support IMDSv2
AWS's metadata service has two versions. Version 1 allowed plain HTTP
requests to get metadata. However, this was frequently abused when a
user could trick an AWS-hosted server in to proxying requests to the
metadata service. Since the metadata service is frequently used to
generate AWS access keys, this is pretty gnarly. Version two is
identical except it requires the caller to request a token and provide
it on each request.

Today, starting a NixOS AMI in EC2 where the metadata service is
configured to only allow v2 requests fails: the user's SSH key is not
placed, and configuration provided by the user-data is not applied.
The server is useless. This patch addresses that.

Note the dependency on curl is not a joyful one, and it expand the
initrd by 30M. However, see the added comment for more information
about why this is needed. Note the idea of using `echo` and `nc` are
laughable. Don't do that.
2020-11-19 13:00:56 -05:00
Graham Christensen
21339b41bf
nixos: openstack: have its own metadata fetcher expression
These two APIs have diverged over time and are no longer compatible.
2020-11-18 11:42:32 -05:00
Jörg Thalheim
6625284c39
Merge pull request #104182 from helsinki-systems/fix/gst-plugins-bad 2020-11-18 17:15:21 +01:00
ajs124
19ddb6e657 freeswitch: use spandsp3 2020-11-18 17:13:30 +01:00
ajs124
4897c23904 spandsp3: init at 3.0.0 2020-11-18 17:13:29 +01:00
ajs124
99b47e7111 Revert "spandsp: 0.0.6 -> 3.0.0"
This reverts commit e184cede92.
2020-11-18 17:05:22 +01:00
R. RyanTM
f2e4de720d libgda: 5.2.9 -> 5.2.10 2020-11-18 15:46:07 +01:00
Maximilian Bosch
f01bfd6843
Merge pull request #104154 from WilliButz/update/grafana/v7.3.3
grafana: 7.3.2 -> 7.3.3
2020-11-18 15:34:45 +01:00
Ryan Mulligan
e5e08a5062
Merge pull request #100763 from neonfuz/koreader
koreader: 2020.09 -> 2020.11
2020-11-18 06:31:35 -08:00
Doron Behar
0365749e68
Merge pull request #103817 from doronbehar/pkg/alacritty
alacritty: 0.5.0 -> 0.6.0-rc1
2020-11-18 15:38:21 +02:00
Emery Hemingway
7e25b71132 nixos: use nativeBuildInputs in make- iso9660-image and system-tarball
The tools used to create iso9660 images and tarballs are independent of
the platform of the closure contained within.
2020-11-18 14:05:30 +01:00
Maximilian Bosch
6e9e1a0c42
Merge pull request #104157 from fadenb/synapse_1.23.0
matrix-synapse: 1.22.1 -> 1.23.0
2020-11-18 14:04:54 +01:00
Tristan Helmich
8061cdaf64 matrix-synapse: 1.22.1 -> 1.23.0 2020-11-18 12:20:20 +00:00
Jan Tojnar
9635686059
Merge pull request #104074 from jtojnar/more-gnome-updates 2020-11-18 13:05:22 +01:00
WilliButz
e453e9ef98
grafana: 7.3.2 -> 7.3.3 2020-11-18 11:52:52 +01:00
Michael Weiss
ad0958bf7d
Merge pull request #104100 from primeos/chromium
chromium: 86.0.4240.198 -> 87.0.4280.66
2020-11-18 11:49:03 +01:00
Michele Guerini Rocco
09506f5018
Merge pull request #104134 from r-ryantm/auto-update/btfs
btfs: 2.22 -> 2.23
2020-11-18 10:26:16 +01:00
Bernardo Meurer
7edf1ced82 pypy: enable aarch64-linux platform 2020-11-18 09:55:33 +01:00
Christoph Hrdinka
567c2d880b
Merge pull request #103461 from GovanifY/pcsx2-usb-merge
pcsx2: unstable-2020-10-10 -> unstable-2020-11-13
2020-11-18 09:54:41 +01:00
Vladimír Čunát
9a38c3a11b
knot-resolver: fix evaluation on darwin
I somehow forgot that libcap_ng is linux-only.  I'm missing ofborg's
darwin builder, but I might've tested evaluation at least...
2020-11-18 08:41:28 +01:00
Vincent Laporte
47b02b30e3 ocamlPackages.ppx_blob: 0.4.0 → 0.7.1 2020-11-18 08:25:15 +01:00
Vincent Laporte
597e7748d1 ocamlPackages.dispatch: 0.4.1 → 0.5.0
ocamlPackages.webmachine: 0.6.2 → 0.7.0
2020-11-18 08:24:28 +01:00
Ryan Mulligan
c1e60d9584
Merge pull request #87380 from r-ryantm/auto-update/python3.7-logilab-common
python37Packages.logilab_common: 1.5.2 -> 1.6.1
2020-11-17 21:28:13 -08:00
Ryan Mulligan
c12b401432
Merge pull request #104024 from ryantm/rm-shaarli
shaarli-material: remove package
2020-11-17 21:21:18 -08:00
R. RyanTM
1edae8aa7b btfs: 2.22 -> 2.23 2020-11-18 05:13:07 +00:00
Martin Weinelt
a823dee9d9 python3Packages.python-didl-lite: 1.2.4 -> 1.2.5 2020-11-17 19:23:17 -08:00
Martin Weinelt
f106443066 python3Packages.PyRMVtransport: 0.2.9 -> 0.2.10
Disables the test, because they require pytest-httpx, which has not been
packaged yet.
2020-11-17 19:23:17 -08:00
Martin Weinelt
492c60ccf0 python3Packages.ntc-templates: 1.5.0 -> 1.6.0 2020-11-17 19:23:17 -08:00
Martin Weinelt
c63c4f71fc python3Packages.ircstates: 0.11.3 -> 0.11.5 2020-11-17 19:23:17 -08:00
Martin Weinelt
cfef6dd82c python3Packages.ircrobots: 0.3.3 -> 0.3.5 2020-11-17 19:23:17 -08:00
Martin Weinelt
204501b9cf python3Packages.clldutils: 3.5.2 -> 3.5.4 2020-11-17 19:23:17 -08:00
Martin Weinelt
77e9b46697 python3Packages.brother: 0.1.17 -> 0.1.18 2020-11-17 19:23:17 -08:00
Martin Weinelt
46463b7d47 python3Packages.async-upnp-client: 0.14.14 -> 0.14.15 2020-11-17 19:23:17 -08:00
Martin Weinelt
5c4a4a5d6f python3Packages.async_stagger: 0.3.0 -> 0.3.1 2020-11-17 19:23:17 -08:00
Martin Weinelt
ed6d6ebca7 python3Packages.mocket: 3.9.2 -> 3.9.3 2020-11-17 19:23:17 -08:00
Martin Weinelt
832add5165 python3Packages.csvw: 1.8.0 -> 1.8.1 2020-11-17 19:23:17 -08:00
Aaron Janse
52d3cc4438 tomb: 2.7 -> 2.8 2020-11-18 09:54:49 +08:00
Yorick van Pelt
9ca12dc4c7 python3Packages.reedsolo: init at 1.5.4
reedsolo: maintain, add tests, fix cython

reedsolo: Apply suggestions from code review

Co-authored-by: Jonathan Ringer <jonringer@users.noreply.github.com>
2020-11-17 16:41:17 -08:00
Jonathan Ringer
283900f4d2 python3Packages.xmlschema: 1.2.5 -> 1.3.1 2020-11-17 16:33:25 -08:00
Ryan Mulligan
cb0908a810
Merge pull request #100482 from Narice/report-out-of-date-packages
Added out-of-date package reports to github templates
2020-11-17 16:21:05 -08:00
Ryan Mulligan
ef20cdc5f0
Merge pull request #104025 from r-ryantm/auto-update/bitwarden
bitwarden: 1.22.2 -> 1.23.0
2020-11-17 16:13:04 -08:00
Ryan Mulligan
6c74dc7672
Merge pull request #102128 from bryanasdev000/package-velero-1.5.2
velero: 1.5.1 -> 1.5.2
2020-11-17 16:10:24 -08:00
Ryan Mulligan
ac68b39e5d
Merge pull request #103874 from r-ryantm/auto-update/helmfile
helmfile: 0.134.0 -> 0.134.1
2020-11-17 15:04:53 -08:00
Dmitry Kalinkin
d712598fe2
Merge pull request #103641 from veprbl/pr/awkward1_0_4_3
python3Packages.awkward1: 0.2.38 -> 0.4.4
2020-11-17 17:33:09 -05:00
Kim Lindberger
d5b146418e
Merge pull request #103146 from talyz/keepassxc-networking
keepassxc: Enable networking by default
2020-11-17 23:31:06 +01:00
zowoq
87aa3671e8 cockroachdb: workaround trimpath build failure 2020-11-18 08:13:34 +10:00
zowoq
702c242558 quorum: workaround trimpath build failure 2020-11-18 08:13:34 +10:00
zowoq
11c19be426 direnv: workaround hardcoded GOFLAGS 2020-11-18 08:13:34 +10:00
zowoq
d1884cbadf minio: drop redundant trimpath flag 2020-11-18 08:13:34 +10:00