summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* nixos/openldap: migrate sssd-ldap to new settingsKai Wohlfahrt2020-11-21
|
* nixos/openldap: Fix sssd-ldap testKai Wohlfahrt2020-11-21
| | | | Use this as a test of the migration warnings/functionality.
* nixos/openldap: use mkRenamedOptionModuleKai Wohlfahrt2020-11-21
| | | | | This offers less helpful warnings, but makes the implementation considerably more straightforward.
* nixos/openldap: fix path + base64 value typesKai Wohlfahrt2020-11-21
|
* nixos/openldap: Fix indentationKai Wohlfahrt2020-11-21
|
* nixos/openldap: Remove extraConfig optionsKai Wohlfahrt2020-11-21
| | | | Instead of deprecating, as per PR feedback
* nixos/openldap: Mention schemas in migration hintKai Wohlfahrt2020-11-21
|
* nixos/openldap: Add release-notes for OLC configKai Wohlfahrt2020-11-21
|
* nixos/openldap: Add support for base64 valuesKai Wohlfahrt2020-11-21
|
* nixos/openldap: Pick some PR nitsKai Wohlfahrt2020-11-21
|
* nixos/openldap: Allow declarativeContents for multiple databasesKai Wohlfahrt2020-11-21
|
* nixos/openldap: Add delcarativeConfig by suffixKai Wohlfahrt2020-11-21
| | | | | Adding by index could be an issue if the user wanted the data to be added to a DB other than the first.
* nixos/openldap: switch to slapd.d configurationKai Wohlfahrt2020-11-21
| | | | | | | | The old slapd.conf is deprecated. Replace with slapd.d, and use this opportunity to write some structured settings. Incidentally, this fixes the fact that openldap is reported up before any checks have completed, by using forking mode.
* Merge pull request #104052 from TredwellGit/nixos/mallocJoachim F2020-11-21
|\ | | | | nixos/malloc: fix Scudo
| * nixos/malloc: fix ScudoTredwellGit2020-11-17
| | | | | | | | | | Fixes segmentation faults. https://github.com/NixOS/nixpkgs/issues/100799
* | nixos test-driver: fix single line docstrings, fixes #104467Frederik Rietdijk2020-11-21
| | | | | | | | | | Single line docstrings should have the """ on a single line according to PEP 8. It seems support for this landed in the latest version of Black.
* | Merge master into staging-nextFrederik Rietdijk2020-11-21
|\ \
| * \ Merge pull request #102235 from symphorien/paperwork2Guillaume Girol2020-11-20
| |\ \ | | | | | | | | Paperwork 2.0
| | * | nixos: add release notes for the paperwork update.Symphorien Gibol2020-11-15
| | | |
| * | | Merge pull request #98544 from Mic92/unfuck-update-user-groupGraham Christensen2020-11-20
| |\ \ \ | | | | | | | | | | nixos/update-user-groups: Fix encoding issues + atomic writes
| | * | | nixos/update-users-groups: write files truly atomicJörg Thalheim2020-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Having the .tmp suffix is broken w.r.t. to multiple writers, as they would overwrite existing files. using the atomic flag will make write_file to create a unique temporary file it gets renamed to its target.
| | * | | nixos/update-users-groups: fix encoding of json databaseJörg Thalheim2020-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | The issue here is that updateFile expects a unicode string while encode_json returns a binary string unlike to_json.
| | * | | nixos/update-users-group: treat all file as utf-8Jörg Thalheim2020-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | Ideally we would treat everything as bytes however our database is already utf-8 encoded so we need to stay compatible.
| * | | | Merge pull request #104374 from adisbladis/dockertools-cross-aarch64adisbladis2020-11-20
| |\ \ \ \ | | | | | | | | | | | | dockerTools: Always cross compile for another arch in the cross example
| | * | | | dockerTools: Always cross compile for another arch in the cross exampleadisbladis2020-11-20
| | | | | | | | | | | | | | | | | | | | | | | | The example fails to build on aarch64, so lets cross build for gnu64.
| * | | | | nix: 2.3.8 -> 2.3.9Eelco Dolstra2020-11-20
| |/ / / /
* | | | | Merge master into staging-nextFrederik Rietdijk2020-11-20
|\| | | |
| * | | | nixos: release-combined: only build the amazon image for ↵Graham Christensen2020-11-19
| | | | | | | | | | | | | | | | | | | | x86_64,aarch64-linux -- exclude i686
* | | | | Merge branch 'master' into staging-nextJan Tojnar2020-11-20
|\| | | |
| * | | | Merge pull request #104322 from grahamc/amazon-imageGraham Christensen2020-11-19
| |\ \ \ \ | | | | | | | | | | | | nixos/release-small: add amazonImage
| | * | | | nixos/release-small: add amazonImageGraham Christensen2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | fixup breakage from #104193
| * | | | | Merge pull request #104193 from grahamc/ec2-metadata-imdsv2Graham Christensen2020-11-19
| |\ \ \ \ \ | | | | | | | | | | | | | | NixOS EC2 AMI: Support IMDSv2
| | * | | | | nixos: release: add amazonImage as a channel blockerGraham Christensen2020-11-19
| | | | | | |
| | * | | | | nixos ami: preflight the imds tokenGraham Christensen2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to Freenode's ##AWS, the metadata server can sometimes take a few moments to get its shoes on, and the very first boot of a machine can see failed requests for a few moments.
| | * | | | | nixos: ec2 ami: support IMDSv2Graham Christensen2020-11-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | AWS's metadata service has two versions. Version 1 allowed plain HTTP requests to get metadata. However, this was frequently abused when a user could trick an AWS-hosted server in to proxying requests to the metadata service. Since the metadata service is frequently used to generate AWS access keys, this is pretty gnarly. Version two is identical except it requires the caller to request a token and provide it on each request. Today, starting a NixOS AMI in EC2 where the metadata service is configured to only allow v2 requests fails: the user's SSH key is not placed, and configuration provided by the user-data is not applied. The server is useless. This patch addresses that. Note the dependency on curl is not a joyful one, and it expand the initrd by 30M. However, see the added comment for more information about why this is needed. Note the idea of using `echo` and `nc` are laughable. Don't do that.
| | * | | | | nixos: openstack: have its own metadata fetcher expressionGraham Christensen2020-11-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | These two APIs have diverged over time and are no longer compatible.
| * | | | | | Merge pull request #104271 from adisbladis/dockertools-crossRobert Hensing2020-11-19
| |\ \ \ \ \ \ | | |_|/ / / / | |/| | | | | dockerTools.buildLayeredImage: Fix cross compilation
| | * | | | | dockerTools: Add cross compilation testadisbladis2020-11-19
| | | | | | |
* | | | | | | Merge master into staging-nextFrederik Rietdijk2020-11-19
|\| | | | | |
| * | | | | | Merge pull request #104105 from spacefrogg/openafs-1.9Jörg Thalheim2020-11-19
| |\ \ \ \ \ \ | | |/ / / / / | |/| | | | |
| | * | | | | openafs: remove 1.6; point to openafs_1_8Michael Raitza2020-11-17
| | | | | | |
| * | | | | | Merge pull request #96371 from asdf8dfafjk/fcitx_commitRobert Hensing2020-11-19
| |\ \ \ \ \ \ | | | | | | | | | | | | | | | | fcitx: Add test (Unicode input, table input, m17n)
| | * | | | | | Copy config file, no via-store, short config_2020-08-26
| | | | | | | |
| | * | | | | | fcitx: Add test (Unicode input, table input, m17n)_2020-08-26
| | | | | | | |
| * | | | | | | Merge pull request #98980 from JustinLovinger/idmapdSilvan Mosberger2020-11-18
| |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | nixos/nfs: add idmapd.settings option
| | * | | | | | | nixos/nfs: add idmapd.settings optionJustin Lovinger2020-10-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Co-authored-by: Aaron Andersen <aaron@fosslib.net>
| * | | | | | | | nixos/telegraf: fix testJörg Thalheim2020-11-18
| | | | | | | | |
| * | | | | | | | nixos/telegraf: make example a bit more compactJörg Thalheim2020-11-18
| | | | | | | | |
| * | | | | | | | nixos/telegraf: null value for environmentFiles is invalidJörg Thalheim2020-11-18
| | |_|_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | it's also not needed given that empty list covers all use cases.
* | | | | | | | Merge staging-next into stagingFrederik Rietdijk2020-11-18
|\| | | | | | |