summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Merge pull request #131587 from hyperfekt/systemd-pstoreajs1242021-07-27
|\ | | | | nixos/filesystems: succeed mount-pstore.service without backend
| * nixos/filesystems: succeed mount-pstore.service without backendhyperfekt2021-07-26
| |
* | Merge pull request #110742 from siraben/deprecate-foldBen Siraphob2021-07-27
|\ \
| * | treewide: fold -> foldrBen Siraphob2021-01-26
| | |
* | | Merge pull request #131118 from etu/sanoid-syncoid-improvementsElis Hirwing2021-07-26
|\ \ \ | | | | | | | | nixos/{syncoid,sanoid}: Improve ZFS permission delegation
| * | | nixos/tests/sanoid: Improve tests by checking that no permissions are left ↵Elis Hirwing2021-07-26
| | | | | | | | | | | | | | | | behind
| * | | nixos/rl-notes/21.11: Add note about remaining syncoid permissionsElis Hirwing2021-07-26
| | | |
| * | | nixos/syncoid: Drop ~[at]sync from the systemcallfilter to avoid coredumpsElis Hirwing2021-07-26
| | | |
| * | | nixos/sanoid: Reformat file with nixpkgs-fmtElis Hirwing2021-07-26
| | | |
| * | | nixos/syncoid: Reformat file with nixpkgs-fmtElis Hirwing2021-07-26
| | | |
| * | | nixos/sanoid: Use a function to build allow/unallow commandsElis Hirwing2021-07-26
| | | |
| * | | nixos/syncoid: Build unallow commands as a post job to drop permissionsElis Hirwing2021-07-26
| | | |
| * | | nixos/sanoid: Extract datasets rather than poolsElis Hirwing2021-07-25
| | | | | | | | | | | | | | | | | | | | When making new snapshots we only need to delegate permissions to the specific dataset rather than the entire pool.
| * | | nixos/syncoid: Extract datasets rather than poolsElis Hirwing2021-07-25
| | | | | | | | | | | | | | | | | | | | | | | | When sending or receiving datasets with the old implementation it wouldn't matter which dataset we were sending or receiving, we would always delegate permissions to the entire pool.
* | | | nixos/tests/chromium: Drop the workaround for Chrome GPU crashesMichael Weiss2021-07-25
| | | | | | | | | | | | | | | | This regression was fixed by 51d83077ffb.
* | | | nixos/tests/chromium: Check the version and that it's an official buildMichael Weiss2021-07-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This also prints and screenshots the output of chrome://version which contains useful information. Outputs (stable, beta, ungoogled, chrome-stable, chrome-beta, chrome-dev): Chromium 92.0.4515.107 (Official Build) (64-bit) Chromium 92.0.4515.107 (Official Build) (64-bit) Chromium 91.0.4472.164 (Official Build, ungoogled-chromium) (64-bit) Google Chrome 92.0.4515.107 (Official Build) (64-bit) Google Chrome 92.0.4515.107 (Official Build) beta (64-bit) Google Chrome 93.0.4577.8 (Official Build) dev (64-bit)
* | | | Merge pull request #124431 from hyperfekt/systemd-pstoreLuke Granger-Brown2021-07-25
|\ \ \ \ | |/ / / |/| | / | | |/ | |/| nixos/filesystems: mount-pstore.service improvements
| * | nixos/filesystems: await builtin pstore module backend in mount-pstorehyperfekt2021-05-30
| | | | | | | | | | | | | | | | | | | | | If the pstore module is builtin, it nonetheless can take considerable time to register a backend despite /sys/fs/pstore already appearing mounted, so the condition is moved into the main script to extend waiting for the backend to this case.
| * | nixos/filesystems: condition mount-pstore.service on pstore modulehyperfekt2021-05-30
| | | | | | | | | | | | | | | | | | systemd's modprobe@.service does not require success so mount-pstore executed despite a non-present pstore module, leading to an error about the /sys/fs/pstore mountpoint not existing on CONFIG_PSTORE=n systems.
* | | Merge pull request #128724 from fortuneteller2k/nixos/iwdAaron Andersen2021-07-24
|\ \ \ | | | | | | | | nixos/iwd: add settings option
| * | | nixos/iwd: add settings optionfortuneteller2k2021-07-23
| | | |
* | | | Merge pull request #98455 from ju1m/syncoid-splitElis Hirwing2021-07-24
|\ \ \ \ | | | | | | | | | | nixos/syncoid: split in multiple systemd services and harden them
| * | | | nixos/syncoid: split in multiple systemd servicesJulien Moutinho2021-07-24
| | | | |
* | | | | nixos/postgresql: use postgres 13 for 21.11 (#131018)Yuka2021-07-24
| | | | | | | | | | | | | | | Co-authored-by: Kim Lindberger <kim.lindberger@gmail.com>
* | | | | Merge pull request #131173 from zhaofengli/klipper-cfg-listBernardo Meurer2021-07-23
|\ \ \ \ \ | | | | | | | | | | | | nixos/klipper: Allow lists as values for gcode_macro
| * | | | | nixos/klipper: Allow lists as values for gcode_macroZhaofeng Li2021-07-22
| | | | | |
* | | | | | Merge pull request #131215 from Ma27/bump-grocySandro2021-07-23
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | grocy: 3.0.1 -> 3.1.0
| * | | | | grocy: 3.0.1 -> 3.1.0Maximilian Bosch2021-07-23
| | | | | | | | | | | | | | | | | | | | | | | | ChangeLog: https://github.com/grocy/grocy/releases/tag/v3.1.0
* | | | | | tuxguitar: 125945 (#131028)Benjamin Asbach2021-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * tuxguitar: Ensure that tuxguitar is launched with java 8 comtabilbe jre and libraries as greate java version is not supported * tuxguitar: Added test to verify application starts without problems * tuxguitar: 1.5.2 -> 1.5.4
* | | | | | Merge pull request #129732 from nivadis/patch-2Maximilian Bosch2021-07-23
|\ \ \ \ \ \ | | | | | | | | | | | | | | nextcloud: remove expires header
| * | | | | | nextcloud: remove expires headerValentin Conrad2021-07-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | nextcloud default nginx config did not include the expires config see: https://docs.nextcloud.com/server/latest/admin_manual/installation/nginx.html
* | | | | | | Merge pull request #129408 from kurnevsky/swap-luks-discardsJörg Thalheim2021-07-23
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nixos/swap: allow luks discards if swap discards are enabled
| * | | | | | | nixos/swap: allow luks discards if swap discards are enabledEvgeny Kurnevsky2021-07-06
| | | | | | | |
* | | | | | | | Merge pull request #131190 from primeos/nixos-tests-chromiumMichael Weiss2021-07-23
|\ \ \ \ \ \ \ \ | |_|_|/ / / / / |/| | | | | | | chromium: Check the text rendering
| * | | | | | | chromium: Check the text renderingMichael Weiss2021-07-23
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This should catch regressions like #131074 in the future. In that case a glibc update caused a regression that caused most of the text to become invisible (just not the "Web Store" we've already been checking for).
* | | | | | | Merge pull request #128032 from Artturin/add-swap-optionsRobert Hensing2021-07-23
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | nixos/swap: add options option
| * | | | | | nixos/swap: add options optionArtturin2021-07-20
| | | | | | |
* | | | | | | Merge pull request #131151 from tomfitzhenry/patch-1Samuel Dionne-Riel2021-07-23
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nixos/iio: mention iio-sensor-proxy in option description
| * | | | | | | nixos/iio: mention iio-sensor-proxy in option descriptionTom2021-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In https://github.com/NixOS/nixpkgs/pull/131094 I mistakenly created a new NixOS module for iio-sensor-proxy because I did not know about `hardware.sensor.iio`. To help people find `hardware.sensor.iio`, include the string "iio-sensor-proxy" in the description. To search for an iio-sensor-proxy module, I tried in vain: * `find -iname '*iio-sensor-proxy*'` * https://search.nixos.org/options?channel=unstable&from=0&size=50&sort=relevance&query=iio-sensor-proxy * This PR will ensure this search query finds `hardware.sensor.iio`
* | | | | | | | Merge pull request #130503 from flokli/nss-fix-orderingFlorian Klink2021-07-23
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | nixos/systemd: fix NSS database ordering
| * | | | | | | | nixos/systemd: fix NSS database orderingFlorian Klink2021-07-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - The order of NSS (host) modules has been brought in line with upstream recommendations: - The `myhostname` module is placed before the `resolve` (optional) and `dns` entries, but after `file` (to allow overriding via `/etc/hosts` / `networking.extraHosts`, and prevent ISPs with catchall-DNS resolvers from hijacking `.localhost` domains) - The `mymachines` module, which provides hostname resolution for local containers (registered with `systemd-machined`) is placed to the front, to make sure its mappings are preferred over other resolvers. - If systemd-networkd is enabled, the `resolve` module is placed before `files` and `myhostname`, as it provides the same logic internally, with caching. - The `mdns(_minimal)` module has been updated to the new priorities. If you use your own NSS host modules, make sure to update your priorities according to these rules: - NSS modules which should be queried before `resolved` DNS resolution should use mkBefore. - NSS modules which should be queried after `resolved`, `files` and `myhostname`, but before `dns` should use the default priority - NSS modules which should come after `dns` should use mkAfter.
* | | | | | | | | Merge pull request #129644 from NixOS/home-assistantMartin Weinelt2021-07-23
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | nixos/home-assistant: allow serial access for the zwave componentMartin Weinelt2021-07-23
| | | | | | | | | |
* | | | | | | | | | Merge pull request #130853 from mweinelt/pppdMartin Weinelt2021-07-22
|\ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | nixos/pppd: allow AF_NETLINKMartin Weinelt2021-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The pppd daemon starting with version 2.4.9 uses rtnetlink to configure the ipv6 peer address on the ppp interface. It therefore requires allowing AF_NETLINK sockets.
| * | | | | | | | | | nixos/pppd: replace CAP_SYS_ADMIN with CAP_BPFMartin Weinelt2021-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The kernel before version 5.7 required CAP_SYS_ADMIN to conduct BPF operations. After that a separate capability CAP_BPF was created, which should be sufficient in this scenario and will further tighten the sandbox around our pppd service. Tested on my personal DSL line.
* | | | | | | | | | | Merge pull request #128841 from Artturin/udevilSandro2021-07-22
|\ \ \ \ \ \ \ \ \ \ \ | |_|/ / / / / / / / / |/| | | | | | | | | |
| * | | | | | | | | | nixos/devmon: add systemd serviceArtturin2021-07-08
| | | | | | | | | | |
* | | | | | | | | | | Merge pull request #128649 from nrdxp/fix-unstable-nix-zsh-completionsMaximilian Bosch2021-07-22
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | zsh: fix nixUnstable completions
| * | | | | | | | | | | zsh: include completions for nix-* commandsTimothy DeHerrera2021-07-21
| | | | | | | | | | | |