summary refs log tree commit diff
path: root/nixos/doc/manual/release-notes
Commit message (Collapse)AuthorAge
...
| * | | Merge pull request #208944 from risicle/ris-dockertools-makeoverridableRobert Scott2023-09-12
| |\ \ \ | | |/ / | |/| | dockerTools: use makeOverridable for buildImage family of functions
| | * | 23.11 release notes: add note on dockerTools & makeOverridableRobert Scott2023-09-11
| | | |
* | | | systemd: add release notes for v254Raito Bezarius2023-09-13
|/ / / | | | | | | | | | | | | We add information for 23.11 regarding the v254 release. This information may be modified before the actual release.
* | | noto-fonts-emoji → noto-fonts-color-emojinicoo2023-09-12
| | | | | | | | | | | | | | | | | | | | | Clarify that the monochrome font is not included, per #221181. The new name is also coherent with the name of the font, according to `fontconfig`: Noto Color Emoji.
* | | nvidia,nixos/nvidia: add datacenter drivers compatible with default cudaPkgsEdward Tjörnhammar2023-09-12
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For NVLink topology systems we need fabricmanager. Fabricmanager itself is dependent on the datacenter driver set and not the regular x11 ones, it is also tightly tied to the driver version. Furhtermore the current cudaPackages defaults to version 11.8, which corresponds to the 520 datacenter drivers. Future improvement should be to switch the main nvidia datacenter driver version on the `config.cudaVersion` since these are well known from: > https://docs.nvidia.com/deploy/cuda-compatibility/index.html#use-the-right-compat-package This adds nixos configuration options `hardware.nvidia.datacenter.enable` and `hardware.nvidia.datacenter.settings` (the settings configure fabricmanager) Other interesting external links related to this commit are: * Fabricmanager download site: - https://developer.download.nvidia.com/compute/cuda/redist/fabricmanager/linux-x86_64/ * Data Center drivers: - https://www.nvidia.com/Download/driverResults.aspx/193711/en-us/ Implementation specific details: * Fabricmanager is added as a passthru package, similar to settings and presistenced. * Adds `use{Settings,Persistenced,Fabricmanager}` with defaults to preserve x11 expressions. * Utilizes mkMerge to split the `hardware.nvidia` module into three comment delimited sections: 1. Common 2. X11/xorg 3. Data Center * Uses asserts to make the configurations mutualy exclusive. Notes: * Data Center Drivers are `x86_64` only. * Reuses the `nvidia_x11` attribute in nixpkgs on enable, e.g. doesn't change it to `nvidia_driver` and sets that to either `nvidia_x11` or `nvidia_dc`. * Should have a helper function which is switched on `config.cudaVersion` like `selectHighestVersion` but rather `selectCudaCompatibleVersion`.
* | Merge pull request #254080 from rnhmjoj/pr-passwordpennae2023-09-11
|\ \ | | | | | | nixos/users-groups: rename passwordFile in hashedPasswordFile
| * | nixos/users-groups: rename passwordFile in hashedPasswordFilernhmjoj2023-09-08
| | | | | | | | | | | | | | | | | | | | | This avoids the possible confusion with `passwordFile` being the file version of `password`, while it should contain the password hash. Fixes issue #165858.
* | | Merge pull request #253973 from trofi/bcache-make-optionalArtturi2023-09-11
|\ \ \
| * | | nixos/bcache: add a `boot.bcache.enable` kill switchSergei Trofimovich2023-09-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | My system does not use `bcache` and I sould prever my `systemPackages` not to have bcache tools. The change does not change the default but proviced usual `enable` knob.
* | | | Merge pull request #250501 from miallo/nixos-rebuild/list-generationsDoron Behar2023-09-10
|\ \ \ \ | | | | | | | | | | nixos-rebuild: Add list-generations
| * | | | nixos-rebuild: Add list-generationsMichael Lohmann2023-09-10
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add new command `nixos-rebuild list-generations`. It will show an output like ``` $ nixos-rebuild list-generations Generation Build-date NixOS version Kernel Configuration Revision Specialisations 52 (current) Fri 2023-08-18 08:17:27 23.11.20230817.0f46300 6.4.10 448160aeccf6a7184bd8a84290d527819f1c552c * 51 Mon 2023-08-07 17:56:41 23.11.20230807.31b1eed 6.4.8 99ef480007ca51e3d440aa4fa6558178d63f9c42 * ``` This also mentions the change in the upcoming release notes
* / / / rl-2311: add note about electron path changeYureka2023-09-10
|/ / /
* | | security/acme: limit concurrent certificate generationsOliver Schmidt2023-09-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixes #232505 Implements the new option `security.acme.maxConcurrentRenewals` to limit the number of certificate generation (or renewal) jobs that can run in parallel. This avoids overloading the system resources with many certificates or running into acme registry rate limits and network timeouts. Architecture considerations: - simplicity, lightweight: Concerns have been voiced about making this already rather complex module even more convoluted. Additionally, locking solutions shall not significantly increase performance and footprint of individual job runs. To accomodate these concerns, this solution is implemented purely in Nix, bash, and using the light-weight `flock` util. To reduce complexity, jobs are already assigned their lockfile slot at system build time instead of dynamic locking and retrying. This comes at the cost of not always maxing out the permitted concurrency at runtime. - no stale locks: Limiting concurrency via locking mechanism is usually approached with semaphores. Unfortunately, both SysV as well as POSIX-Semaphores are *not* released when the process currently locking them is SIGKILLed. This poses the danger of stale locks staying around and certificate renewal being blocked from running altogether. `flock` locks though are released when the process holding the file descriptor of the lock file is KILLed or terminated. - lockfile generation: Lock files could either be created at build time in the Nix store or at script runtime in a idempotent manner. While the latter would be simpler to achieve, we might exceed the number of permitted concurrent runs during a system switch: Already running jobs are still locked on the existing lock files, while jobs started after the system switch will acquire locks on freshly created files, not being blocked by the still running services. For this reason, locks are generated and managed at runtime in the shared state directory `/var/lib/locks/`. nixos/security/acme: move locks to /run also, move over permission and directory management to systemd-tmpfiles nixos/security/acme: fix some linter remarks in my code there are some remarks left for existing code, not touching that nixos/security/acme: redesign script locking flow - get rid of subshell - provide function for wrapping scripts in a locked environment nixos/acme: improve visibility of blocking on locks nixos/acme: add smoke test for concurrency limitation heavily inspired by m1cr0man nixos/acme: release notes entry on new concurrency limits nixos/acme: cleanup, clarifications
* | | Merge pull request #251062 from ajs124/restic-wrapper-scriptJanik2023-09-09
|\ \ \
| * | | nixos/restic: add wrapper scripts that set parameters for backupajs1242023-08-28
| | | | | | | | | | | | | | | | and use in test
* | | | nixos/hail: Remove modulenicoo2023-09-08
| | | |
* | | | Merge pull request #253299 from pennae/jack-toolspennae2023-09-08
|\ \ \ \ | | | | | | | | | | jack-example-tools: init at 4
| * | | | release-notes: add note about jack2 losing its toolspennae2023-09-04
| | | | | | | | | | | | | | | | | | | | | | | | | let's spare anyone else using these the adventure of finding out why their scripts broke and where the tools went.
* | | | | nixos/infiniband: add support for configurable guidsEdward Tjörnhammar2023-09-07
| |_|/ / |/| | |
* | | | nixos/mobilizon: add release notesKerstin Humm2023-09-07
| | | |
* | | | emacsPackages.mu4e: init at 1.10.7Lin Jian2023-09-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch packages mu4e as an Emacs lisp package based on the mu4e output of the multiple-output package mu, which makes mu4e a good citizen of Emacs lisp packages in two aspects. First, mu4e now utilizes the Emacs lisp package infrastructure in Nixpkgs. This allows users who want to do AOT native compilation for non-default Emacs variants[0] to build only mu4e itself instead of the whole mu package[1]. Second, mu4e now conforms to the Emacs builtin package manager[2]. Without this patch, mu4e autoloaded commands do not work out-of-the-box[3] because its directory is added to load-path by site-start.el after the initialization of package-directory-list, which causes package-activate-all to not load mu4e-autoloads.el. This patch fixes this issue when mu4e is installed to Emacs using the withPackages wrapper[4]. [0]: such as emacs-pgtk [1]: mu.override { emacs = emacs-pgtk; } [2]: package.el [3]: either (require 'mu4e) or (require 'mu4e-autoloads) is needed to be called before an autoloaded command is called [4]: emacs-pgtk.pkgs.withPackages (epkgs: [ epkgs.mu4e ])
* | | | Merge pull request #253510 from schmittlauch/cawbird-removeWeijia Wang2023-09-06
|\ \ \ \ | | | | | | | | | | cawbird: remove due to being broken and abandoned
| * | | | cawbird: remove due to being broken and abandonedTrolli Schmittlauch2023-09-05
| | | | | | | | | | | | | | | | | | | | -- dedicated to Larry the bird
* | | | | Merge pull request #253391 from MrMebelMan/update/kratos_v1.0.0Weijia Wang2023-09-05
|\ \ \ \ \ | |/ / / / |/| | | | kratos: 0.10.1 -> 1.0.0
| * | | | kratos: 0.10.1 -> 1.0.0Vladyslav Burzakovskyy2023-09-05
| | | | |
* | | | | rl-2311: Mention faulty GitLab database schemaYaya2023-09-05
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | GitLab instances created or updated between versions [15.11.0, 15.11.2] have an incorrect database schema. [1] This will become a problem once upgrading GitLab to >=16.2.0. A workaround can be found in the GitLab docs: [2] [1]: https://gitlab.com/gitlab-org/gitlab/-/issues/408835 [2]: https://docs.gitlab.com/ee/update/versions/gitlab_16_changes.html#undefined-column-error-upgrading-to-162-or-later
* / / / nixos/release-notes: reword the Jool noternhmjoj2023-09-04
|/ / /
* | | Merge pull request #244093 from adamcstephens/lxd/vmMario Rodas2023-09-03
|\ \ \ | | | | | | | | lxd: Add VM image and server support for QEMU VMs
| * | | nixos/lxd: add virtual-machine support, image and moduleAdam Stephens2023-09-03
| | | |
* | | | release-notes: add entry for new stalwart-mail modulepacien2023-09-03
| | | |
* | | | Merge pull request #249103 from yaxitech/github-runner-v2.308.0Jonas Chevalier2023-09-01
|\ \ \ \ | | | | | | | | | | github-runner: 2.307.1 -> 2.308.0
| * | | | nixos/github-runners: add `nodeRuntimes` optionVincent Haupert2023-08-22
| | | | |
* | | | | nixos/nncp: add caller and daemon servicesEmery Hemingway2023-08-29
| | | | |
* | | | | nixos/prometheus/unbound-exporter: update for new packageMartin Weinelt2023-08-28
| | | | | | | | | | | | | | | | | | | | | | | | | The command line interface changed slightly, but still supports the TCP as well as the UDS control interface.
* | | | | Merge pull request #249765 from NixOS/nixos/modules/honk-initPol Dellaiera2023-08-28
|\ \ \ \ \ | |_|_|_|/ |/| | | | nixos/honk: init
| * | | | nixos/modules/honk: initPol Dellaiera2023-08-27
| | | | |
* | | | | release-notes: add networking.nftables.tables newsMaciej Krüger2023-08-28
| | | | |
* | | | | Merge master into staging-nextgithub-actions[bot]2023-08-27
|\ \ \ \ \
| * | | | | aseprite: drop free version and alias to unfree versionkyren2023-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The free version of Aseprite has a maintained fork, LibreSprite which is already packaged in nixpkgs. The only really useful version of Aseprite vs LibreSprite is the unfree version, and the free version will never receive updates.
* | | | | | Merge branch 'master' into staging-nextTheodore Ni2023-08-26
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Manually fixed a merge conflict between https://github.com/NixOS/nixpkgs/pull/227900 and https://github.com/NixOS/nixpkgs/pull/246022.
| * | | | | Merge pull request #251412 from karolinschlegel/update-odooMaciej Krüger2023-08-26
| |\ \ \ \ \ | | |_|_|_|/ | |/| | | |
| | * | | | odoo: 15.20230317 -> 16.20230722Karolin Schlegel2023-08-26
| | | | | |
* | | | | | Merge master into staging-nextgithub-actions[bot]2023-08-26
|\| | | | |
| * | | | | doc: document baloo re-indexingPeter Hoeg2023-08-26
| | | | | |
* | | | | | Merge master into staging-nextgithub-actions[bot]2023-08-26
|\| | | | |
| * | | | | Merge pull request #242365 from h7x4/add-mysqld-exporterFranz Pletz2023-08-25
| |\ \ \ \ \ | | |/ / / / | |/| | | | services/prometheus/exporters: add mysqld
| | * | | | services/prometheus/exporters: add mysqldh7x42023-08-13
| | | | | | | | | | | | | | | | | | | | | | | | Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
* | | | | | Merge master into staging-nextgithub-actions[bot]2023-08-25
|\| | | | |
| * | | | | pass: stop installing password-store.elLin Jian2023-08-25
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | password-store.el is on MELPA so it is available in Nixpkgs as emacs.pkgs.password-store. Using emacs.pkgs.password-store is preferred because of better package quality: - Emacs lisp package dependencies are automatically installed - byte-compilation is done - native-compilation is done
* | | | | Merge master into staging-nextgithub-actions[bot]2023-08-24
|\| | | |