1
0
forked from colin/nix-files

Commit Graph

  • 5cba283859 overlays/cross: update upstreaming status Colin 2024-05-31 09:04:16 +0000
  • 7a701f92eb nixpkgs: bump Colin 2024-05-31 08:44:53 +0000
  • 3c3a32e436 nixpatches: grab libphonenumber cross patch from PR Colin 2024-05-31 08:43:27 +0000
  • 07aec3ca3c apps: explain why i ship both engrampa and xarchiver archive managers Colin 2024-05-31 08:39:23 +0000
  • 58d5f11c7a overlays/cross: disable patches which im not actively using Colin 2024-05-31 08:21:23 +0000
  • ed2d4ef488 overlays/cross: update upstreaming status Colin 2024-05-31 08:02:25 +0000
  • e8f8866032 overlays/cross: remove old emulated package set and buildInQemu, etc Colin 2024-05-31 06:59:32 +0000
  • a2dfd8f08e libphonenumber: use a better patch for cross (CMAKE_CROSSCOMPILING_EMULATOR) Colin 2024-05-31 06:27:10 +0000
  • c7fd3d2217 nixpkgs: 2024-05-26 -> 2024-05-31, nixpkgs-wayland -> 2024-05-31 Colin 2024-05-30 21:40:11 +0000
  • 0fcc3f8d5d ModemManager: make the sandbox more strict Colin 2024-05-30 19:24:55 +0000
  • 0bb887158b implement a dropbear SSH module Colin 2024-05-30 19:24:40 +0000
  • 6570c5ed84 modemmanager: sandbox with bwrap instead of landlock Colin 2024-05-30 18:47:09 +0000
  • 820fdecfd5 modemmanager: minimal (working) sandbox Colin 2024-05-30 18:27:34 +0000
  • 8d43565f31 sane-theme: disable sandbox Colin 2024-05-30 16:54:10 +0000
  • 18364761dd wireplumber: undo the enableSystemd=false patch Colin 2024-05-30 16:50:53 +0000
  • d3937487e6 moby: cleanup bonsai <-> sway circular dependency (slightly) Colin 2024-05-30 12:40:54 +0000
  • 3fdeacc336 sane-input-handler: add a --help command Colin 2024-05-30 12:30:41 +0000
  • 847414ac1f health-check: add a test that git is online Colin 2024-05-30 12:18:57 +0000
  • 84f2006115 servo: fix gitea Colin 2024-05-30 12:12:06 +0000
  • 7f5e12da8d dbus: dont consider the service "up" until the unix pipe actually appears Colin 2024-05-30 11:04:02 +0000
  • afa8a3c52e activationScripts.notifyActive: future-proof for if ever DBUS_SESSION_BUS_ADDRESS changes Colin 2024-05-30 11:03:35 +0000
  • bfbcb4789b activationScripts.notifyActive: fix forrenamed XDG_RUNTIME_DIR Colin 2024-05-30 10:56:17 +0000
  • 2531cc1cf6 bonsai: place the socket in a subdirectory to improve sandboxing Colin 2024-05-30 09:54:28 +0000
  • e55b75c333 wireplumber: build without systemd Colin 2024-05-30 09:46:29 +0000
  • adb54657d4 sway: fix bonsai to be visible in the sandbox Colin 2024-05-30 09:46:04 +0000
  • 6eefb9ce20 wireplumber: build against the same pipewire i deploy Colin 2024-05-30 09:06:41 +0000
  • 2233622bb7 landlock-sandboxer: remove startup messages for 6.9 Colin 2024-05-30 08:43:39 +0000
  • 274a7821a7 wireplumber: remove no-longer-needed /run/systemd directory Colin 2024-05-30 08:54:41 +0000
  • 4c84d1a727 doc: modules/users: show what XDG_SESSION_{ID,CLASS,TYPE} could look like if set Colin 2024-05-30 08:27:42 +0000
  • 175acf6442 pipewire: build without systemd Colin 2024-05-30 08:28:53 +0000
  • 0761b6135a users/colin: add myself to "audio" group so that wireplumber can access audio devices w/o systemd/logind Colin 2024-05-30 08:28:19 +0000
  • 66c899d099 callaudiod: fix to not start before dbus/pipewire are up (avoids coredump on boot) Colin 2024-05-30 06:07:08 +0000
  • 4aeb3360d3 cleanup: programs: dont assume sway is always the wayland/x11 provider Colin 2024-05-30 06:00:32 +0000
  • 0c456d11d8 programs: ensure things which depend on sound or wayland are ordered after it Colin 2024-05-30 04:55:05 +0000
  • 3b73773169 programs: ensure things which depend on dbus are ordered after it Colin 2024-05-30 03:48:45 +0000
  • 9ba8ff738b refactor: sane.programs.$foo.service: specify type concretely Colin 2024-05-30 03:39:32 +0000
  • f1d397940f seatd: patch sandboxing for desko Colin 2024-05-29 19:42:45 +0000
  • fa94fa8e6c seatd: sandbox with bwrap Colin 2024-05-29 19:09:57 +0000
  • 4b9c125c8c seatd: sandbox Colin 2024-05-29 17:43:40 +0000
  • 0f7d25d8a5 doc: sway: say why i wrapperType = "inplace" Colin 2024-05-29 18:58:05 +0000
  • 140641729e gvfs: disable (it was broken) Colin 2024-05-29 18:39:31 +0000
  • 32124d76bf cups: disable (not currently used, and not sandboxed) Colin 2024-05-29 18:33:17 +0000
  • c5c174f988 sway: patch to use a narrower sandbox Colin 2024-05-29 18:24:59 +0000
  • 29bc1608aa sway: remove sandbox input which are no longer necessary Colin 2024-05-29 16:12:49 +0000
  • 635ca1e5d8 seatd: pull the service definition into my own repo Colin 2024-05-29 16:34:32 +0000
  • 2789868703 seatd: split out of sway conf Colin 2024-05-29 16:22:52 +0000
  • c40ec1990a sshd: disable systemd integration Colin 2024-05-29 15:57:19 +0000
  • d4dfcd6510 login: remove systemd pam integration (so it doesnt try, and fail, to start the user manager) Colin 2024-05-29 13:26:03 +0000
  • d865be952a refactor: sandboxing: replace manual --sanebox-keep-namespace pid config with isolatePids = false Colin 2024-05-29 12:33:18 +0000
  • 7c8a18ecbd systemd: remove no-longer-used user@1000 override Colin 2024-05-29 11:42:16 +0000
  • 35ff7de06e dbus: manage it ourselves instead of having systemd do it Colin 2024-05-29 11:30:29 +0000
  • 00d06db66a make-sandboxed: handle more systemd service files Colin 2024-05-29 12:18:09 +0000
  • c570b7bf5d dbus: manage it ourselves instead of having systemd do it Colin 2024-05-29 11:30:29 +0000
  • 770fc2e574 systemd: fix typod IgnoreOnIsolate option Colin 2024-05-29 09:58:08 +0000
  • 0ed7eb24fb programs: assorted: remove legacy programs.feedback setting Colin 2024-05-29 09:54:44 +0000
  • ad8e75b6a3 programs: assorted: remove /var/lib/alsa persistence; doesnt seem to be needed Colin 2024-05-29 09:53:25 +0000
  • e8dbe0750d networkmanager: fix sandbox to actually work with systemd-resolved Colin 2024-05-29 10:34:24 +0000
  • 1378988f21 desko: *really* disable wpa_supplicant Colin 2024-05-29 10:34:03 +0000
  • b88467771e doc: trust-dns: fix wan.txt example path Colin 2024-05-29 09:33:59 +0000
  • 4309d887da wpa_supplicant: remove unused services Colin 2024-05-29 09:33:25 +0000
  • 1ee21c4795 NetworkManager: run as user instead of root Colin 2024-05-29 07:24:12 +0000
  • fb7bcbb5f5 NetworkManager-wait-online: fix missing sanebox path Colin 2024-05-29 01:37:15 +0000
  • 0013e8305e networkmanager: cleanup Colin 2024-05-29 01:35:38 +0000
  • 7dedfcebb9 networkmanager: sandbox Colin 2024-05-28 17:16:42 +0000
  • 753b97ffb4 todo.md: mark hosts/modules/gui cleanup as complete Colin 2024-05-28 16:51:29 +0000
  • 247fc1f887 hosts/modules/gui: fold into hosts/common/programs Colin 2024-05-28 16:51:02 +0000
  • 3c2ca46ef9 hosts/modules/gui/gtk: hoist to sane.programs.sane-theme Colin 2024-05-28 16:17:42 +0000
  • 95dc395925 hosts/modules/gui/theme: lift my sway background up into its own package Colin 2024-05-28 15:48:37 +0000
  • cefd6c0534 documentation improvements Colin 2024-05-28 13:35:54 +0000
  • 05efec8fd7 wg-home: decrease the refresh timeout Colin 2024-05-28 13:35:40 +0000
  • e8846b2d6b wpa_supplicant: sandbox Colin 2024-05-28 13:34:35 +0000
  • be38d56717 make-sandboxed: handle more systemd/dbus service file locations Colin 2024-05-28 13:35:17 +0000
  • 7d242ab02c sane-battery-estimate: sandbox Colin 2024-05-28 09:41:04 +0000
  • 47611eaa26 sane-weather: sandbox Colin 2024-05-28 09:38:04 +0000
  • 9719f0f785 mpv: relax sandboxing for the sake of subtitle downloading Colin 2024-05-28 09:37:57 +0000
  • 8042ea76e6 assorted programs: specify sandbox.autodetectCliPaths variant more precisely than just true Colin 2024-05-28 07:14:27 +0000
  • c59236509b sane-cast: sandbox Colin 2024-05-28 07:07:11 +0000
  • 50e5206b0e todo.md: document that moby touchscreen stays on even when the screen is disabled Colin 2024-05-28 05:27:37 +0000
  • 4ba0343315 networkmanager: hoist some lib.mkIfs up a few levels Colin 2024-05-28 05:27:23 +0000
  • cbe6072c03 polyunfill: remove policykit suid wrappers Colin 2024-05-28 05:24:37 +0000
  • bea1fd95e5 polyunfill: disable dbus-daemon-launch-helper suid wrapper Colin 2024-05-28 05:14:06 +0000
  • ae544c0649 polyunfill: disable mount/umount suid wrappers Colin 2024-05-28 05:02:26 +0000
  • b571f70988 polyunfill: remove fusermount suid wrapper Colin 2024-05-28 04:56:14 +0000
  • e6498ad152 notejot: fix sandboxing Colin 2024-05-28 03:59:31 +0000
  • 976b8ae45e rofi-snippets: make the filtering case insensitive, and improve ellipsis placement come 1.7.6 Colin 2024-05-28 03:38:36 +0000
  • ab7c4d7410 rofi-snippets: remove the subshell and just use a pipe Colin 2024-05-28 03:23:04 +0000
  • d2c3bec98e rofi-snippets: remove an extraneous layer of sandbox Colin 2024-05-28 03:04:57 +0000
  • 3c5e5632ee wtype: sandbox Colin 2024-05-28 03:04:26 +0000
  • dcedb8d3f0 sanebox: handle --flag=path style of autodetected paths Colin 2024-05-28 03:04:02 +0000
  • 8586db59f1 todo.md: sync Colin 2024-05-28 02:14:10 +0000
  • 1f4d500b02 snippets: update Colin 2024-05-28 02:11:49 +0000
  • 56b846023b update snippets Colin 2024-05-28 01:27:59 +0000
  • 747d6c876d sane-vpn: add a "dns-fix" subcommand to open a shell using an external DNS resolver Colin 2024-05-28 01:23:22 +0000
  • f38d2d52d2 alsa-ucm-pinephone-pmos: prefer the earpiece over the "internal speaker" Colin 2024-05-27 14:13:56 +0000
  • 04bbf54385 alsa-ucm-conf: switch to postmarketos version Colin 2024-05-27 13:41:03 +0000
  • f2271180dd alsa-ucm-conf: split the patched alsa confs out into their own package Colin 2024-05-27 12:53:06 +0000
  • 60b1ab1429 conky: split sane-battery-estimate out into its own program Colin 2024-05-27 11:33:40 +0000
  • db3636641d sxmo-utils: disable update script Colin 2024-05-27 01:29:05 +0000
  • 54a891504d delfin: 0.4.2 -> 0.4.4 Colin 2024-05-27 01:28:28 +0000
  • 8ea5061bef firefox-extensions: update to latest Colin 2024-05-27 01:15:53 +0000