nixpkgs/nixos/modules/system/boot
Ricardo M. Correia 6feb61233b linux: make sure all config options have the same value
Currently, kernel config options whose value is "yes" always override
options whose value is "no".

This is not always desired.

Generally speaking, if someone defines an option to have the value
"no", presumably they are disabling the option for a reason, so it's
not always OK to silently enable it due to another, probably unrelated
reason.

For example, a user may want to reduce the kernel attack surface and
therefore may want to disable features that are being enabled in
common-config.nix.

In fact, common-config.nix was already silently enabling options that
were intended to be disabled in hardened/config.nix for security
reasons, such as INET_DIAG.

By eliminating the custom merge function, these config options will
now use the default module option merge functions which make sure
that all options with the highest priority have the same value.

A user that wishes to override an option defined in common-config.nix
can currently use mkForce or mkOverride to do so, e.g.:

BINFMT_MISC = mkForce (option no);

That said, this is not going to be necessary in the future, because
the plan is for kernel config options defined in nixpkgs to use a
lower priority by default, like it currently happens for other module
options.
2021-03-07 18:27:14 +01:00
..
loader nixos/grub: fix editor check 2021-02-18 22:25:57 +01:00
binfmt.nix nixos/binfmt: add bash to sandboxPaths 2021-01-24 22:47:59 -06:00
emergency-mode.nix nixos/*: editorconfig fixes 2020-08-08 10:54:16 +10:00
grow-partition.nix utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
initrd-network.nix nixos/initrd-network: fix /etc/resolv.conf when multiple dns servers from DHCP 2020-10-19 21:32:58 -07:00
initrd-openvpn.nix nixos/modules: remove trailing whitespace 2020-08-07 14:45:39 +01:00
initrd-ssh.nix nixos/initrd-ssh: set more defensive pemissions on sshd test key 2020-09-30 15:47:49 +02:00
kernel_config.nix linux: make sure all config options have the same value 2021-03-07 18:27:14 +01:00
kernel.nix system/boot: add includeDefaultModules option 2021-02-07 11:14:36 +00:00
kexec.nix treewide: remove redundant quotes 2019-08-26 21:40:19 +00:00
luksroot.nix boot.initrd.luks: fix case Yubikey -> YubiKey 2021-02-08 04:01:47 +09:00
modprobe.nix nixos/modprobe: Fix modprobe configuration manpage link 2020-07-06 13:50:11 -07:00
networkd.nix Merge pull request #111342 from veehaitch/systemd-networkd-options 2021-02-27 00:16:20 +01:00
pbkdf2-sha512.c nixos/boot: add final newline to pbkdf2-sha512.c 2020-11-09 11:39:28 +00:00
plymouth.nix Merge pull request #99011 from andersk/plymouth-label 2021-02-21 15:44:54 -05:00
resolved.nix nixos/systemd: provide libidn2 for systemd-resolved 2020-12-25 13:45:25 +01:00
shutdown.nix utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
stage-1-init.sh boot.initrd: add verbose option 2021-01-24 07:16:21 +01:00
stage-1.nix nixos/stage-1: install networkd link files 2021-02-18 22:07:00 +01:00
stage-2-init.sh stage-2: parameterized systemd executable 2020-07-14 13:18:14 -04:00
stage-2.nix utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
systemd-lib.nix nixos/systemd-lib: allow mkIf in unitOption 2021-02-11 22:18:21 +01:00
systemd-nspawn.nix nixos/modules: remove trailing whitespace 2020-08-07 14:45:39 +01:00
systemd-unit-options.nix nixos/modules: fix systemd start rate-limits 2020-10-31 01:35:56 -07:00
systemd.nix nixos/systemd: allow preStart with other ExecStartPre cmdlines 2021-01-19 16:29:29 +01:00
timesyncd.nix networking, chrony, ntpd, timesyncd: add timeServers option type 2021-01-20 10:54:24 +01:00
tmp.nix modules/boot: Specify the type for tmpfs mounts 2021-01-09 15:32:17 +01:00