summary refs log tree commit diff
path: root/pkgs/os-specific/linux/systemd
Commit message (Collapse)AuthorAge
* systemd: Patch CVE-2021-33910Janne Heß2021-07-20
|
* systemd: don't manually enableParallelBuildingAlyssa Ross2021-05-12
| | | | This is automatic for Meson builds.
* Merge master into staging-nextgithub-actions[bot]2021-05-08
|\
| * Merge pull request #114374 from oxalica/lib/platform-support-checkSilvan Mosberger2021-05-08
| |\ | | | | | | lib.meta: introduce `availableOn` to check package availability on given platform
| | * lib.meta: introduce `availableOn`oxalica2021-04-02
| | |
* | | systemd: fix buildAlyssa Ross2021-04-30
|/ /
* / systemd: 247.3 -> 247.6Jörg Thalheim2021-04-01
|/
* systemd: correct path to modprobe@.serviceGraham Christensen2021-03-09
| | | | The unit hard-codes a path to modprobe which is obviously invalid.
* systemd: drop /etc/systemd-mutableFlorian Klink2021-02-12
| | | | | | | | | | This has only been used by Dysnomia, which has been removed from Nixpkgs in https://github.com/NixOS/nixpkgs/pull/110799 after being broken for more than a year. If Dysnomia comes back, it can probably just use /nix/var/nix/profiles/default/lib/systemd/system, or set its own systemd flavour looking in that location via the `systemd.package`.
* systemd: add note about nixpkgs-fmtFlorian Klink2021-02-03
|
* systemd: nixpkgs-fmtFlorian Klink2021-02-03
| | | | | | | This was recently introduced, and apparently not nixpkgs-fmt'ed. While there's no global consensus on nixpkgs-fmt'ing everything, indenting this by 2 more spaces won't hurt.
* systemd: 247.2 -> 247.3Florian Klink2021-02-03
|
* treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nixJonathan Ringer2021-01-19
| | | | | | | | | | | | | continuation of #109595 pkgconfig was aliased in 2018, however, it remained in all-packages.nix due to its wide usage. This cleans up the remaining references to pkgs.pkgsconfig and moves the entry to aliases.nix. python3Packages.pkgconfig remained unchanged because it's the canonical name of the upstream package on pypi.
* pkgs/os-specific: stdenv.lib -> libBen Siraphob2021-01-17
|
* systemd: patch runtime dlopen callsAndreas Rammhold2021-01-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | This ensures that all the features that are implemented via dlopen(3) are available (or explicitly deactivated) by pointing dlopen to the absolute store path instead of relying on the linkers runtime lookup code. All of the dlopen calls have to be handled. When new ones are introduced by upstream (or one of our patches) those must be explicitly declared, otherwise the build will fail. As of systemd version 247 we've seen a few errors like `libpcre2.… not found` when using e.g. --grep with journalctl. Those errors should become less unexpected now. There are generally two classes of dlopen calls. Those that we want to support and those that should be deactivated / unsupported. This change enforces that we handle all dlopen calls explicitly. Meaning: There is not a single dlopen call in the code source tree that we did not explicitly handle. In order to do this I introduced a list of attributes that maps from shared object name to the package that contains them. The package can be null meaning the reference should be nuked and the shared object will never be loadable during runtime (because it points at an invalid store path location).
* systemd: 247.1 -> 247.2Florian Klink2020-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains the following fixes: - 937118a5b2 journalctl: don't skip the entries that have the same seqnum - e017ac6a26 sd-bus: use SOCK_CLOEXEC on one more socket - db31432861 resolved: create stub-resolv.conf symlink with correct security label - f2ec15e2e5 efi: Only use arm flags if supported - cd43eee770 core: detect_container() may return negative errno - 04be042a1f meson: Fix reallocarray check - 5e906f483b network: do not assume address ready callback is always set to static addresses - 2ad7a2a96a network: drop assertions to check link state in netlink callback handlers - f375c8cbb5 network: do not reconfigure interface when the link gains carrier but udev not initialized it yet - 5d4909decf veritysetup: also place udev socket dep - 57ddb74245 cryptsetup: Fix crypto device missing issue after bootup - d3c224d441 network: fix SIGABRT related to unreachable route with DHCP6 - c91648cc83 network: revert previous changes to address_compare_func() - d8b5d8c8c3 udev: Fix sound.target dependency - 669107ae68 meson: specify correct libqrencode version in meson dep - c07dc6cedc udev: link_update() should fail if the entry in symlink dir couldn't have been created - 367006c806 man: document that automount units are privileged - 5129808141 logind: fix closing of button input devices - 37f06c91ef Update logind-button.c - 9e9fda0a2d async: add trivial cleanup wrapper for asynchronous_close() - 4a2ca1ca4a Silence cgroups v1 read-only filesystem warning - ed1f8f4ba2 manager: Fix HW watchdog when systemd starts before driver loaded - 383a747164 cgroup: Also set blkio.bfq.weight - 48d41091ac nss-resolve: varlink_call() set error_id only when r >= 0 - 56daba2deb missing: Define several syscall numbers for Alpha arch - f2a4b96276 Don't assume /run/systemd exists when creating unit-root - 553530fdc7 mkosi: Add findutils to Fedora config - e42990dfe3 mkosi: Add rpm to Fedora BuildPackages as it's needed by pkg-config - 6bacd1d971 mkosi: Replace iptables-dev with libiptc-dev in debian config - f1fc515c21 dissect: don't declare unused variables on archs that have no GPT discovery - 30d0c3f58c resolved: synthesize NODATA instead of NXDOMAIN if gateway exists, but of other protocol - 538ebbd7f3 local-addresses: make returning accumulated list optional - 228a22bb63 resolved: improve log message when we use TCP a bit - aa31dd9128 network: ignore broadcast address for /31 or /32 addresses - 85607cc094 network: fix verification for broadcast address - dc6ad6482a network: do not set broadcast if prefixlen is 31 or 32 - 39ee319c75 stub: don't ever respond to datagrams coming in on non-localhost addreses, on the stub - cbea0e5a83 resolved: never allow _gateway lookups to go to the network - c4df66816b resolved: lower SERVFAIL cache timeout from 30s to 10s - b5e39c20d9 dns-domain: try IDN2003 rules if IDN2008 doesn't work - 2c354cedd2 virt: Properly detect nested UML inside another hypervisor - 10f2cfb715 resolved: properly check per-link NTA list - a8437c07e4 meson: use '_' as separator in fuzz test names - 81ef7623c8 man: mention that --key= is about *secret* keys - 4ef70ecefc meson: check that cxx variable is set before using it
* systemd: 247 -> 247.1Charlotte Van Petegem2020-12-13
|
* systemd: fix pc filesJörg Thalheim2020-12-11
| | | | | upstream decided to make this non-configurable... Lets' revert to the version before.
* systemd: 246.6 -> 247-rc2Jörg Thalheim2020-12-02
|
* Merge master into staging-nextFrederik Rietdijk2020-11-27
|\
| * systemd: use withPortabled in mesonFlagsFlorian Klink2020-11-25
| | | | | | | | | | | | | | No matter what withPortabled was being set, we always passed -Dportabled=false in mesonFlags. Fix this. Also, nixpkgs-fmt the file for consistency.
| * utillinux: rename to util-linuxGraham Christensen2020-11-24
| |
* | systemd: switch to unified cgroup hierarchy by defaultFlorian Klink2020-11-19
|/ | | | | | | | | | | | | See https://www.redhat.com/sysadmin/fedora-31-control-group-v2 for details on why this is desirable, and how it impacts containers. Users that need to keep using the old cgroup hierarchy can re-enable it by setting `systemd.unifiedCgroupHierarchy` to `false`. Well-known candidates not supporting that hierarchy, like docker and hidepid=… will disable it automatically. Fixes #73800
* systemd: Add an option for homedFinn Behrens2020-11-03
| | | | | This is disabled by default to indicate that is hasn't been adiquately tested with NixOS yet.
* systemd: set withRemote true by defaultAntoine Eiche2020-11-02
| | | | | This also adds the libmicrohttpd as a `buildInput` when `withRemote` is true.
* systemd: stop substituting inside fsck.c, stop substituting mke2fsFlorian Klink2020-10-28
| | | | | fsck.c doesn't refer to any of these binaries anymore, and the whole systmed codebase not to /sbin/mke2fs.
* systemd: add withPCRE2 optionFlorian Klink2020-10-28
|
* systemd: add withApparmor optionFlorian Klink2020-10-28
|
* systemd: add libgpgerror only to buildInputs if we build with resolved supportFlorian Klink2020-10-28
|
* systemd: drop libffi from buildInputsFlorian Klink2020-10-28
| | | | This isn't used anywhere.
* systemd: add withMachined flagFlorian Klink2020-10-28
|
* systemd: add withNss flagFlorian Klink2020-10-28
|
* systemd: add withUserDb flagFlorian Klink2020-10-28
|
* systemd: add withDocumentation flagFlorian Klink2020-10-28
|
* systemd: add withShellCompletions flagFlorian Klink2020-10-28
|
* systemd: add withPolkit optionFlorian Klink2020-10-28
|
* systemd: disable efi if we don't build with withEfi is set to falseFlorian Klink2020-10-28
|
* systemd: withEfi: move gnu-efi check into assertionFlorian Klink2020-10-28
|
* systemd: make gcrypt optionalFlorian Klink2020-10-28
|
* systemd: add withAnalyze flagFlorian Klink2020-10-28
|
* systemd: add withCoredump flagFlorian Klink2020-10-28
| | | | … and default it to false for systemdMinimal
* systemd: drop duplicate -Dlocaled=…Florian Klink2020-10-28
| | | | This is already configurable above.
* systemd: introduce withCompression flagFlorian Klink2020-10-28
| | | | | This will build systemd without some compression utils, useful for systemdMinimal.
* systemd: cleanup cryptsetup inputFlorian Klink2020-10-28
| | | | | use lib.getDev to retrieve the dev output. Don't pass it to buildInputs if we don't build with withCryptsetup set to true.
* systemd: add withRemote option (default to false), make curl optionalFlorian Klink2020-10-28
| | | | | | This makes curl optional if both remote and importd are disabled, and makes some assertions more robust by switching from curl.dev != null to lib.getDev curl != null.
* systemd: build without iptables when networkd is disabledFlorian Klink2020-10-28
| | | | | | | upstreams TODO mentions iptables-dev (libiptc) is also used for nspawn, but it seems like it only makes use of this via networkd anyways (or does these days) - at least systemdMinimal compiles successfully without iptables in the build closure.
* systemd: remove perl from nativeBuildInputsFlorian Klink2020-10-28
| | | | | | | This was only used to patch a circular output reference from lib to out on aarch64, but was removed in b68bddfbda2092c5fde2c4cece2f4bcf0eb214a1, This commit forgot to remove perl, so remove it now.
* systemd: nixpkgs-fmtFlorian Klink2020-10-28
|
* systemd: reorder buildInputsFlorian Klink2020-10-28
| | | | These are all unconditianally anyways.
* systemd: stdenv.lib -> libFlorian Klink2020-10-28
| | | | This is a no-op and makes things a bit smaller.