summary refs log tree commit diff
path: root/nixos/modules/system
Commit message (Collapse)AuthorAge
* Merge pull request #110742 from siraben/deprecate-foldBen Siraphob2021-07-27
|\
| * treewide: fold -> foldrBen Siraphob2021-01-26
| |
* | nixos/systemd: fix NSS database orderingFlorian Klink2021-07-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - The order of NSS (host) modules has been brought in line with upstream recommendations: - The `myhostname` module is placed before the `resolve` (optional) and `dns` entries, but after `file` (to allow overriding via `/etc/hosts` / `networking.extraHosts`, and prevent ISPs with catchall-DNS resolvers from hijacking `.localhost` domains) - The `mymachines` module, which provides hostname resolution for local containers (registered with `systemd-machined`) is placed to the front, to make sure its mappings are preferred over other resolvers. - If systemd-networkd is enabled, the `resolve` module is placed before `files` and `myhostname`, as it provides the same logic internally, with caching. - The `mdns(_minimal)` module has been updated to the new priorities. If you use your own NSS host modules, make sure to update your priorities according to these rules: - NSS modules which should be queried before `resolved` DNS resolution should use mkBefore. - NSS modules which should be queried after `resolved`, `files` and `myhostname`, but before `dns` should use the default priority - NSS modules which should come after `dns` should use mkAfter.
* | systemd.tmpfiles.rules: Fix false infoKreyren2021-07-08
| | | | | | As per https://www.freedesktop.org/software/systemd/man/tmpfiles.d.html the current description is missleading as it fails to mention volatile files and creation with deletion
* | nixos/top-level: pass lib to specialisationsNaïm Favier2021-07-03
| |
* | modules/luksroot: add note about AE to allowDiscardsMarkus S. Wamser2021-07-01
| |
* | Merge pull request #128023 from max-privatevoid/patch-1Jörg Thalheim2021-07-01
|\ \ | | | | | | nixos/systemd-boot: Use os.path.realpath to fully resolve symlinks
| * | nixos/systemd-boot: Use os.path.realpath to fully resolve symlinksMax2021-06-24
| | | | | | | | | os.readlink only resolves one layer of symlinks. This script explicitly relies on the real path of a file for deduplication, hence symlink resolution should recurse.
* | | nixos/boot: properly override the kernel in boot.kernelPatchesDominik Xaver Hörl2021-05-31
|/ / | | | | | | | | | | Previously the code took the kernelPatches of the final derivation, which might or might not be what was passed to the derivation in the original call. The previous behaviour caused various hacks to become neccessary to avoid duplicates in kernelPatches.
* | nixos/luksroot: add bypassWorkqueues (#118114)Naïm Favier2021-05-26
| | | | | | https://wiki.archlinux.org/index.php/Dm-crypt/Specialties#Disable_workqueue_for_increased_solid_state_drive_(SSD)_performance
* | nixos/networkd: add missing [DHCPServer] optionsVincent Haupert2021-05-17
| | | | | | | | | | | | `systemd.network.networks.*.dhcpServerConfig` did not accept all of the options which are valid for networkd's [DHCPServer] section. See systemd.network(5) of systemd 247 for details.
* | nixos/systemd: enable systemd-pstore.servicehyperfekt2021-05-09
| | | | | | | | | | As described in issue #81138, the Install section of upstream units is currently ignored, so we make it part of the sysinit.target manually.
* | Merge pull request #114374 from oxalica/lib/platform-support-checkSilvan Mosberger2021-05-08
|\ \ | | | | | | lib.meta: introduce `availableOn` to check package availability on given platform
| * | lib.meta: introduce `availableOn`oxalica2021-04-02
| | |
* | | nixos/top-level: specialArgs to specialisationsPacman992021-05-06
| | |
* | | Merge pull request #114637 from KaiHa/pr/fix-systemd-boot-builderLuke Granger-Brown2021-04-25
|\ \ \ | | | | | | | | systemd-boot-builder.py: ignore profile names with invalid chars
| * | | systemd-boot-builder: gracefully ignore errors during entry creationKai Harries2021-03-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Catch and ignore errors during writing of the boot entries. These errors could stem from profile names that are not valid filenames on vfat filesystems. fixes #114552
* | | | Revert "nixos/systemd: provide libidn2 for systemd-resolved"Konrad Borowski2021-04-12
| | | | | | | | | | | | | | | | | | | | | | | | This patch is no longer necessary with systemd v247.3. This reverts commit c674a51382ce556f98c76f270275ecece3a4936a.
* | | | Merge master into staging-nextgithub-actions[bot]2021-04-08
|\ \ \ \
| * | | | treewide: fix eval without aliases after ↵ajs1242021-04-08
| | | | | | | | | | | | | | | | | | | | 9378fdf87e0626e8c63a90a378c38444ff54808b
* | | | | Merge branch 'master' into staging-nextJan Tojnar2021-04-06
|\| | | |
| * | | | nixos/systemd: increase default numeric PID rangeGabriel Ebner2021-04-03
| | |/ / | |/| |
* / | | treewide: use perl.withPackages when possiblernhmjoj2021-03-31
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since 03eaa48 added perl.withPackages, there is a canonical way to create a perl interpreter from a list of libraries, for use in script shebangs or generic build inputs. This method is declarative (what we are doing is clear), produces short shebangs[1] and needs not to wrap existing scripts. Unfortunately there are a few exceptions that I've found: 1. Scripts that are calling perl with the -T switch. This makes perl ignore PERL5LIB, which is what perl.withPackages is using to inform the interpreter of the library paths. 2. Perl packages that depends on libraries in their own path. This is not possible because perl.withPackages works at build time. The workaround is to add `-I $out/${perl.libPrefix}` to the shebang. In all other cases I propose to switch to perl.withPackages. [1]: https://lwn.net/Articles/779997/
* | | Merge master into staging-nextgithub-actions[bot]2021-03-28
|\ \ \
| * \ \ Merge pull request #115792 from ncfavier/patch-2Linus Heckemann2021-03-28
| |\ \ \ | | | | | | | | | | nixos/stage-1: make cpio quiet
| | * | | nixos/stage-1: make cpio quietNaïm Favier2021-03-10
| | | | |
* | | | | Merge master into staging-nextgithub-actions[bot]2021-03-23
|\| | | |
| * | | | nixos/systemd: missing a few units for KDE to use systemdPeter Hoeg2021-03-23
| | | | |
* | | | | Merge master into staging-nextgithub-actions[bot]2021-03-23
|\| | | |
| * | | | Merge pull request #116455 from svanderburg/systemdunitpathSander van der Burg2021-03-22
| |\ \ \ \ | | | | | | | | | | | | systemd: allow custom unit folders to be configured with SYSTEMD_UNIT…
| | * | | | systemd: allow custom unit folders to be configured with SYSTEMD_UNIT_PATHSander van der Burg2021-03-22
| | |/ / /
* | | | | Merge master into staging-nextgithub-actions[bot]2021-03-20
|\| | | |
| * | | | Merge pull request #108952 from Mic92/systemd-builderJörg Thalheim2021-03-20
| |\ \ \ \ | | | | | | | | | | | | nixos/systemd-boot: add typechecking
| | * | | | nixos/systemd-boot: add typecheckingJörg Thalheim2021-01-10
| | | | | |
* | | | | | Merge staging-next into staginggithub-actions[bot]2021-03-19
|\| | | | |
| * | | | | Revert "nixos/systemd: Handle template overrides"Alexander Foremny2021-03-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit e3b90b6ccc4cf4147fd01df1ed8779b1c85744bd. This commit broke container tests and thus blocked channels from advancing.
* | | | | | Merge staging-next into staginggithub-actions[bot]2021-03-19
|\| | | | |
| * | | | | Merge pull request #115549 from adrianparvino/new-nixos-unstableFlorian Klink2021-03-16
| |\ \ \ \ \ | | |_|/ / / | |/| | | | systemd: Handle template overrides
| | * | | | nixos/systemd: Handle template overridesAdrian Parvin D. Ouano2021-03-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adding template overrides allows for custom behavior for specific instances of a template. Previously, it was not possible to provide bind mounts for systemd-nspawn. This change allows it.
* | | | | | Merge pull request #115584 from grahamc/systemd-modprobe-serviceFlorian Klink2021-03-09
|\ \ \ \ \ \ | |/ / / / / |/| | | | | systemd: add the modprobe service
| * | | | | nixos/systemd: bring in modprobe@.serviceGraham Christensen2021-03-09
| | |_|/ / | |/| | | | | | | | | | | | | It is broken: it looks for /sbin/modprobe, but it works anyway??
* | | | | Merge pull request #90065 from wizeman/u/fix-config-mergeLinus Heckemann2021-03-08
|\ \ \ \ \ | |_|/ / / |/| | | | linux: make sure all config options have the same value
| * | | | linux: make sure all config options have the same valueRicardo M. Correia2021-03-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, kernel config options whose value is "yes" always override options whose value is "no". This is not always desired. Generally speaking, if someone defines an option to have the value "no", presumably they are disabling the option for a reason, so it's not always OK to silently enable it due to another, probably unrelated reason. For example, a user may want to reduce the kernel attack surface and therefore may want to disable features that are being enabled in common-config.nix. In fact, common-config.nix was already silently enabling options that were intended to be disabled in hardened/config.nix for security reasons, such as INET_DIAG. By eliminating the custom merge function, these config options will now use the default module option merge functions which make sure that all options with the highest priority have the same value. A user that wishes to override an option defined in common-config.nix can currently use mkForce or mkOverride to do so, e.g.: BINFMT_MISC = mkForce (option no); That said, this is not going to be necessary in the future, because the plan is for kernel config options defined in nixpkgs to use a lower priority by default, like it currently happens for other module options.
* | | | | Merge pull request #114000 from worldofpeace/plymouth-bgrtWORLDofPEACE2021-03-04
|\ \ \ \ \ | |_|/ / / |/| | | | nixos/plymouth: use bgrt theme
| * | | | nixos/plymouth: use white nixos logoWORLDofPEACE2021-02-25
| | | | | | | | | | | | | | | | | | | | This looks cohesive with the spinner in the bgrt theme.
| * | | | nixos/plymouth: use bgrt themeWORLDofPEACE2021-02-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The BGRT theme is probably a close as to "FlickerFree" we can get without https://github.com/NixOS/nixpkgs/pull/74842. It's more agnostic than the Breeze theme. We also install all of themes provided by the packages, as it's possible that one theme needs the ImageDir of another, and they're small files anyways. Lastly, how plymouth handles logo and header files is a total mess, so hopefully when they have an actual release we won't need to do all this symlinking.
| * | | | nixos/plymouth: exit on missing themeWORLDofPEACE2021-02-25
| | | | | | | | | | | | | | | | | | | | | | | | | Much better to provide a helpful message than to get an obscure sed message.
| * | | | nixos/plymouth: use upstream defaultsEdmund Wu2021-02-25
| | | | | | | | | | | | | | | | | | | | | | | | | https://gitlab.freedesktop.org/plymouth/plymouth/-/issues/101 https://gitlab.freedesktop.org/plymouth/plymouth/-/blob/75204a2517658c01bd1d39f2dff845512c9cab12/src/plymouthd.defaults
* | | | | Merge pull request #111802 from twhitehead/init-symlinksLinus Heckemann2021-03-02
|\ \ \ \ \ | |_|/ / / |/| | | | nixos/stage1: chroot stage 2 init exists check so symlink resolve
| * | | | stage-1: accept init symlinks at any levelTyson Whitehead2021-02-25
| | | | |