summary refs log tree commit diff
path: root/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml
Commit message (Collapse)AuthorAge
* nixos/doc: update rl-2111 w.r.t. iptables-nft migrationFlorian Klink2022-03-09
| | | | | | | Follow-up on https://github.com/NixOS/nixpkgs/pull/161426. Explain why having legacy iptables rules installed can lead to confusing firewall behaviour, and provide some guidance on how to fix this.
* Merge pull request #161426 from flokli/rl-2111-nftablesFlorian Klink2022-02-24
|\ | | | | nixos/doc: improve release notes for iptables-nft and systemd with nftables backend
| * nixos/doc: improve release notes for iptables-nft and systemd with nftables ↵Florian Klink2022-02-22
| | | | | | | | | | | | | | | | | | | | backend This change probably wasn't documented sufficiently in the release notes, neither the fact systemd stopped using iptables on its own in case of nf_tables support. Fixes #156041.
* | add `/usr` neededForBoot entry to 21.11 release notesShahar Dawn Or2022-02-23
|/
* linux: enable BPF_UNPRIV_DEFAULT_OFF between 5.10 and 5.15Martin Weinelt2022-01-15
| | | | | | | | | | | | | | | | | Disable unprivileged access to BPF syscalls to prevent denial of service and privilege escalation via a) potential speculative execution side-channel-attacks on unmitigated hardware[0] or b) unvalidated memory access in ringbuffer helper functions[1]. Fixes: CVE-2021-4204, CVE-2022-23222 [0] https://ebpf.io/summit-2021-slides/eBPF_Summit_2021-Keynote-Daniel_Borkmann-BPF_and_Spectre.pdf [1] https://www.openwall.com/lists/oss-security/2022/01/13/1
* nixos/maddy: Better description, user and group handlingJonas Heinrich2021-12-30
|
* nixos/maddy: Add module for maddyJonas Heinrich2021-12-07
| | | | Co-authored-by: Patrick Hilhorst <git@hilhorst.be>
* nixos/doc/manual/release-notes/rl-2111: add prometheus-smartctl-exporterMartin Weinelt2021-12-05
|
* OpenJDK: expose more versionsPhilipp Dargel2021-12-02
| | | | Provide a way to access all JDK versions.
* nixos/doc/manual/release-notes/rl-2111: fix multiple option linksMartin Weinelt2021-12-02
|
* nixos/doc/manual/release-notes/rl-2111: move highlights introductionMartin Weinelt2021-12-02
|
* Merge pull request #147898 from tomberek/release_bumpTimothy DeHerrera2021-11-29
|\ | | | | nixos/rl-21.11: bump
| * [21.11] update README.mdTom Bereknyei2021-11-29
| | | | | | | | | | | | | | | | [21.11] update upgrading [21.11] update release date run generation
* | hydrus: 462 -> 463Daniel Olsen2021-11-28
| |
* | nixos/doc: Add note about big updates regarding hydrus to release notesDaniel Olsen2021-11-28
| |
* | Revert "Merge pull request #141192 from ↵Michael Weiss2021-11-27
|/ | | | | | | | | | | | | | | | | | | | | | | helsinki-systems/feat/improved-socket-handling2" This reverts commit 57961d2b838cc31fa4ce89641b6a8db544a8471a, reversing changes made to b04f913afce4419f6b777fd64ac52315dbef3aaf. (I.e. this reverts PR #141192.) While well-intended, this change does unfortunately introduce very serious regressions that are especially disruptive/noticeable on desktop systems (e.g. users of Sway will loose their graphical session when running "nixos-rebuild switch"). Therefore, this change has to be reverted ASAP instead of trying to fix it in "production". Note: An updated version should be extensively discussed, reviewed, and tested before re-landing this change as an earlier version also had to be reverted for the exact same issues [0]. Fix: #146727 [0]: https://github.com/NixOS/nixpkgs/pull/73871#issuecomment-559783752
* kratos: 0.7.6-alpha.1 -> 0.8.0-alpha.3Vladyslav Burzakovskyy2021-11-23
|
* nixos/doc: add release notes about retroarch changesThiago Kenji Okada2021-11-20
|
* gnat: 9 -> 11sternenseemann2021-11-15
| | | | | | | | Update the default GNAT version from 9 to 11, as GNAT >= 11 is required to compile the 22.* AdaCore libraries. To allow this, we need to pick a patch from ghdl's master fixing a compilation problem with GNAT 11.
* doc: Explain daemon(IO)NiceLevel removal in release noteMikael Voss2021-11-15
|
* Merge master into staging-nextgithub-actions[bot]2021-11-13
|\
| * Merge pull request #144933 from Artturin/ananicyinitArtturi2021-11-12
| |\ | | | | | | ananicy: init at unstable-2021-11-05
| | * nixos/ananicy: initArtturin2021-11-11
| | |
* | | Merge master into staging-nextgithub-actions[bot]2021-11-11
|\| |
| * | Merge pull request #144618 from fgaz/staticjinja/4.1.1Sandro2021-11-11
| |\ \
| | * | staticjinja: 4.1.0 -> 4.1.1Francesco Gazzetta2021-11-04
| | | |
* | | | Merge master into staging-nextgithub-actions[bot]2021-11-10
|\| | |
| * | | Merge pull request #145227 from Synthetica9/julia-to-stableAnderson Torres2021-11-10
| |\ \ \ | | | | | | | | | | julia: point to -stable instead of -lts
| | * | | julia: -lts -> -stablePatrick Hilhorst2021-11-09
| | | | |
* | | | | Merge master into staging-nextgithub-actions[bot]2021-11-10
|\| | | |
| * | | | Merge pull request #145181 from helsinki-systems/release-notes/opensshJanne Heß2021-11-09
| |\ \ \ \ | | | | | | | | | | | | nixos/changelog: Mention OpenSSH upgrade
| | * | | | nixos/changelog: Mention OpenSSH upgradeJanne Heß2021-11-09
| | |/ / /
| * / / / nixos/doc/manual/release-notes/rl-2111: Nix 2.4Bernardo Meurer2021-11-09
| |/ / /
* | | | Merge master into staging-nextgithub-actions[bot]2021-11-08
|\| | |
| * | | nixos/prometheus: throw a helpful error when ↵Bas van Dijk2021-11-07
| | | | | | | | | | | | | | | | services.prometheus.environmentFile is defined
| * | | nixos/prometheus: remove services.prometheus.environmentFileBas van Dijk2021-11-07
| | |/ | |/| | | | | | | The option `services.prometheus.environmentFile` has been removed since it was causing [issues](https://github.com/NixOS/nixpkgs/issues/126083) and Prometheus now has native support for secret files.
* | | Merge master into staging-nextgithub-actions[bot]2021-11-07
|\| |
| * | loki: 2.3.0 -> 2.4.0happysalada2021-11-07
| | |
* | | Merge master into staging-nextgithub-actions[bot]2021-11-07
|\| |
| * | nixos/xmrig: initVictor Freire2021-11-06
| | |
* | | Merge master into staging-nextgithub-actions[bot]2021-11-06
|\| |
| * | nixos/pam: pam_mkhomedir umask to 0077Nico Berlee2021-11-06
| | | | | | | | | | | | | | | | | | pam_mkhomedir should create homedirs with the same umask as the rest of the system. Currently it creates homedirs with go+rx which makes it readable for other non-privileged users.
| * | nixosTest: Add xclip as example of stdout blockerRobert Hensing2021-11-06
| | |
* | | Merge master into staging-nextgithub-actions[bot]2021-11-05
|\| |
| * | nixos/unifi: refactor mountpointsPascal Bach2021-11-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | Use service internal bind mounts instead of global ones. This also moves the logs to /var/log/unifi on the host and the run directory to /run/unifi. Closes #61424
| * | Merge pull request #144239 from illustris/hadoopBernardo Meurer2021-11-04
| |\ \ | | | | | | | | nixos/hadoop: Add HA services and HTTPFS
| | * | nixos/hadoop: release notesillustris2021-11-03
| | | |
* | | | Merge branch 'staging-next' into stagingVladimír Čunát2021-11-05
|\| | |
| * | | nixosTest: Document stdout waiting behaviorRobert Hensing2021-11-05
| | | |
* | | | Merge staging-next into staginggithub-actions[bot]2021-11-04
|\| | |