39744 commits

Author	SHA1	Message	Date
Ryan Lahfa	ae07fcb07b	Merge pull request #293271 from nikstur/test-instrumentation-without-usr-bin-env ... nixos/test-instrumentation: use full path to env	2024-03-18 13:57:37 -07:00
Tony Zorman	240c39ef2e	nixos/xmonad: add slotThe as a maintainer	2024-03-18 20:27:15 +01:00
Martin Weinelt	00e2713c5b	Merge remote-tracking branch 'origin/master' into staging-next	2024-03-18 19:59:23 +01:00
Yueh-Shun Li	e9fd4389d2	writeClosure: init, replacing writeReferencesToFile ... Replace writeReferencesToFile with writeClosure. Make writeClosure accept a list of paths instead of a path. Re-implement with JSON-based exportReferencesGraph interface provided by __structuredAttrs = true. Reword the documentation. Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io> Co-authored-by: Robert Hensing <roberth@users.noreply.github.com> Co-authored-by: Someone Serge <sergei.kozlukov@aalto.fi>	2024-03-19 02:45:50 +08:00
Will Fancher	99587a3411	Merge pull request #209964 from Majiir/fix-initrd-systemd-closure ... nixos/systemd/initrd: follow init param symlinks	2024-03-18 14:39:37 -04:00
Florian Klink	70d7abc09c	Merge pull request #296924 from flokli/document-servers-empty-fallback ... nixos/timesyncd: further document services.timesyncd.servers	2024-03-18 20:08:22 +02:00
Jon Seager	ffc736695c	Merge pull request #296937 from MinerSebas/scrutiny-collector-ordering	2024-03-18 17:16:40 +00:00
Martin Weinelt	03fcd060ff	Merge pull request #296921 from patka-123/engelsystem-cleanup ... engelsystem: cleanup	2024-03-18 17:14:59 +01:00
Patka	93aba53a08	engelsystem: cleanup ... The custom php with extensions is not needed. The default already has all the needed extensions enabled by default.	2024-03-18 17:08:01 +01:00
K900	823897dde8	wireplumber: 0.4.17 -> 0.5.0	2024-03-18 18:57:05 +03:00
MinerSebas	9d384c350b	nixos/scrutiny: Order scrutiny-collector after scrutiny	2024-03-18 16:30:51 +01:00
Florian Klink	78d8e2ca11	nixos/timesyncd: further document services.timesyncd.servers ... Running systemd-timesyncd with an empty list of timeservers to sync from does not work. In case an empty list is configured here, systemd will fall back to its compiled-in defaults, which NixOS sets to `{0..4}.nixos.pool.ntp.org`, as per https://github.com/systemd/systemd/blob/main/docs/DISTRO_PORTING.md#ntp-pool This has caused some confusion. Explicitly document this, and describe how to disable timesyncd.	2024-03-18 17:23:55 +02:00
github-actions[bot]	d5491af22d	Merge master into staging-next	2024-03-18 12:01:22 +00:00
Sandro	124ec2d9d6	nixos/xserver: don't conflict pinentry package with DEs	2024-03-18 11:22:48 +01:00
nikstur	a1c4f0a754	Merge pull request #282022 from ElvishJerricco/gpt-auto-root ... nixos: Support systemd-gpt-auto-root	2024-03-18 10:27:22 +01:00
github-actions[bot]	819a14ad05	Merge master into staging-next	2024-03-18 06:01:21 +00:00
github-actions[bot]	ac91cf83c1	Merge master into staging-next	2024-03-18 00:02:20 +00:00
Alex Martens	bdb6849a32	nixos/llama-cpp: fix binary path	2024-03-17 16:48:51 -07:00
Sandro	ca0de94ebb	Merge pull request #276816 from majiru/nixos-tests-build-discrepancy ... Nixos tests build discrepancy	2024-03-17 23:59:58 +01:00
Sandro	1f212fd6e6	Merge pull request #289025 from tcheronneau/issue-288907 ... nixos/tinyproxy: fix the quotes around the filter path	2024-03-17 23:33:42 +01:00
Will Fancher	486e837cbe	Merge pull request #293710 from B4dM4n/networkd-policy-rule-port-range ... nixos/networkd: allow RoutingPolicyRule port ranges	2024-03-17 12:36:30 -07:00
github-actions[bot]	100b3bb178	Merge master into staging-next	2024-03-17 18:00:54 +00:00
github-actions[bot]	c222aba0b8	Merge master into staging-next	2024-03-17 12:01:55 +00:00
Patka	c4e1ffb96b	engelsystem: 3.4.1 -> 3.5.0 ... Release notes: https://github.com/engelsystem/engelsystem/releases/tag/v3.5.0	2024-03-17 12:24:29 +01:00
Maximilian Bosch	6af7e814af	Merge pull request #292993 from wolfgangwalther/postgresql-refactor ... postgresql: refactor and cleanup	2024-03-17 10:00:07 +00:00
Sandro	62748bdf42	Merge pull request #295891 from Stzx/pinentry-conflict ... pinentry: fix DM option and user conflict	2024-03-17 08:50:13 +01:00
github-actions[bot]	2178d8d857	Merge master into staging-next	2024-03-17 00:02:17 +00:00
Adam C. Stephens	79edbc3691	Merge pull request #295376 from adamcstephens/incus/test-zfs ... nixos/tests/incus: add storage test and exercise zfs integration	2024-03-16 16:31:15 -07:00
Martin Weinelt	2b003c0269	nixos/pretix: make state directory world-readable ... Pretix creates static files in its state directory, that nginx needs to serve, so locking down the permissions that hard is not going to work.	2024-03-16 23:44:37 +01:00
Atemu	44a3dd2ef4	Merge pull request #296009 from Atemu/steamcompattools ... proton-ge-bin: init at 9-1, nixos/steam: use steamcompattool output for extraCompatPackages	2024-03-16 20:57:05 +00:00
Robert Scott	41c8713b58	Merge pull request #296229 from NickCao/pdns ... pdns: 4.8.4 -> 4.9.0	2024-03-16 20:05:10 +00:00
Jon Seager	bfa0fb2dbe	Merge pull request #296463 from MinerSebas/scrutiny-split	2024-03-16 19:41:40 +00:00
Daniel Sidhion	a1581a3647	doc: fix and simplify stylesheets for the manuals, fix nrd bug (#295847) ... * doc: fix and simplify stylesheets for the manuals, fix nrd bug * Add anchorjs script to add links on section headers * Fix another nrd bug, address style changes * Use span instead of a for inline span syntax	2024-03-16 20:16:59 +01:00
Will Fancher	3758681200	nixos/tests/hibernate: Use EFI ... So that resumeDevice isn't needed to make systemd stage 1 work.	2024-03-16 15:12:15 -04:00
Nick Cao	0537bbd042	pdns: 4.8.4 -> 4.9.0 ... Changelog: https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.0 Upgrade Notes: https://doc.powerdns.com/authoritative/upgrading.html#to-4-9-0	2024-03-16 12:09:08 -07:00
Marcus Ramberg	11855d0fe1	tests/nimdow: init	2024-03-16 19:32:47 +01:00
Marcus Ramberg	20eec34036	nixos/nimdow: Make package configurable, ensure nimdow can start a terminal in it's default config	2024-03-16 19:32:34 +01:00
github-actions[bot]	60fbf92c10	Merge master into staging-next	2024-03-16 18:01:00 +00:00
Pol Dellaiera	5ebdb3eda7	Merge pull request #296465 from Janik-Haag/networkmanager-ensure-profiles ... nixos/networkmanager: ensure-profiles, make sure networkmanager is running	2024-03-16 18:46:12 +01:00
Janik H.	847a53742c	nixos/networkmanager: ensure-profiles, make sure networkmanager is running	2024-03-16 18:11:58 +01:00
MinerSebas	2210ac7764	nixos/scrutiny: Order scrutiny.service after influxdb2.service	2024-03-16 18:02:17 +01:00
MinerSebas	7d6917088c	nixos/scrutiny: Dont enable influxdb when only using scrutiny-collector	2024-03-16 18:02:10 +01:00
Atemu	bdc55d2f86	nixos/steam: provide example in extraCompatPackages	2024-03-16 17:59:27 +01:00
Atemu	2b619c2314	nixos/steam: use steamcompattool output for extraCompatPackages ... This sets a standard for Steam compat tools in NixOS where they must have the compat tool in a special steamcompattool output. proton-ge-bin was adjusted to conform with it.	2024-03-16 17:59:27 +01:00
Arian van Putten	d211b80d29	Merge pull request #294493 from endgame/ec2-image-ssm-agent ... nixos/amazon-image: Enable Amazon SSM Agent by default	2024-03-16 17:57:42 +01:00
Guillaume Girol	119099506c	Merge pull request #292477 from nu-nu-ko/nixos-komga-hardening ... nixos/komga: add service hardening and misc format changes.	2024-03-16 17:34:45 +01:00
Martin Weinelt	fe8d02e2bc	Merge pull request #296180 from mweinelt/pretix ... pretix: init at 2024.2.0	2024-03-16 17:28:20 +01:00
Jörg Thalheim	56db90d274	Merge pull request #296164 from bubuntux/ivsc-option ... Add ivsc-firmware to ipu6 option	2024-03-16 16:14:05 +01:00
Martin Weinelt	a01acbcefe	nixos/tests/pretix: init	2024-03-16 14:50:57 +01:00
Martin Weinelt	b05a529fd6	nixos/pretix: init	2024-03-16 14:50:56 +01:00
Bobby Rong	3b48b3aaa9	Merge pull request #289062 from bobby285271/upd/mate ... MATE 1.28	2024-03-16 21:38:24 +08:00
github-actions[bot]	9db4d84312	Merge master into staging-next	2024-03-16 12:01:19 +00:00
Pol Dellaiera	4285a30496	Merge pull request #295837 from abysssol/ollama-env-vars ... nixos/ollama: add option to set environment variables	2024-03-16 08:02:55 +01:00
Bobby Rong	fc3d133b48	Merge pull request #296347 from bobby285271/upd/budgie-tests ... nixosTests.budgie: Extend the test	2024-03-16 14:40:35 +08:00
Bobby Rong	41fdcd0303	nixosTests.budgie: Extend the test	2024-03-16 13:25:05 +08:00
Adam Stephens	9d411861b5	nixos/tests/incus: add storage test and exercise zfs integration	2024-03-15 20:39:54 -04:00
github-actions[bot]	7006358e6a	Merge master into staging-next	2024-03-16 00:02:02 +00:00
Will Fancher	f1731f2e28	nixos: Support systemd-gpt-auto-root	2024-03-15 18:22:04 -04:00
Guillaume Girol	1f26e67560	Merge pull request #278064 from symphorien/nix_config_extra ... nixos/nix: add workaround for https://github.com/NixOS/nix/issues/9487	2024-03-15 22:46:51 +01:00
Pol Dellaiera	21456ee2a7	Merge pull request #296183 from laalsaas/etebase-server-fix ... etebase-server: create required tmpdir	2024-03-15 22:08:15 +01:00
Wolfgang Walther	4b6bce5c31	postgresql: refactor to remove "this" argument ... This was proposed by abbradar in #150801, but left out of the follow up PR #221851 by Ma27 to reduce the size of the diff. Compared to the initial proposal this includes the callPackage call in the recursion, which avoids breaking the withJIT/withoutJIT helpers. In terms of nixpkgs, this is a pure refactor, no derivations change. However, this makes downstream expressions like the following possible: (postgresql.override { jitSupport = true; }).pkgs.postgis This would have not worked before without passing another "this" argument, which is error prone as can be seen in this example: https://github.com/PostgREST/postgrest/pull/3222/files	2024-03-15 21:11:09 +01:00
Wolfgang Walther	14b3ea2789	postgresql: refactor to pass jitSupport/llvm via scope instead of passthru ... This makes it less error-prone to use the llvm package in extensions, because it will always match the package used by the postgresql derivation itself. Previously, you could've accidentally used llvm instead of postgresql.llvm with a different result.	2024-03-15 21:11:09 +01:00
Maximilian Bosch	0d17fd9524	Merge pull request #292473 from networkException/fix-synapse-unix-socket-permissions ... nixos/matrix-synapse: allow synapse to write to directories of unix socket paths	2024-03-15 18:53:04 +00:00
Janik H.	fc060cc3cb	nixos/resolvconf: add ::1 as local dns resolver	2024-03-15 19:31:37 +01:00
github-actions[bot]	00729a3d21	Merge master into staging-next	2024-03-15 18:01:19 +00:00
laalsaas	1d4c8cb0ff	etebase-server: create required tmpdir	2024-03-15 16:52:21 +01:00
Maciej Krüger	bda93c2221	Merge pull request #294258 from mkg20001/oil-fix ... oil: apply renames as requested by upstream	2024-03-15 15:44:43 +01:00
Julio Gutierrez	811872a489	Add ivsc-firmware to ipu6 option	2024-03-15 09:29:46 -05:00
Peder Bergebakken Sundt	3399de5396	Merge pull request #295342 from pbsds/spotifyd-url-1710255988 ... nixos/spotifyd: update configuration documentation url	2024-03-15 13:03:01 +01:00
github-actions[bot]	4aac48ff7f	Merge master into staging-next	2024-03-15 06:01:09 +00:00
Mario Rodas	e6aefe20a1	Merge pull request #292533 from flyingcircusio/init-postgresql-anonymizer ... postgresqlPackages.anonymizer: init at 1.3.1; add me & osnyx to flyingcircus team	2024-03-14 20:53:36 -05:00
Bobby Rong	9254f99be6	Merge pull request #296019 from bobby285271/upd/budgie ... nixos/budgie: Fix default fonts	2024-03-15 08:35:12 +08:00
github-actions[bot]	2bffd64e73	Merge master into staging-next	2024-03-15 00:01:59 +00:00
Bobby Rong	f7f3a3ec53	nixos/budgie: Fix default fonts ... Always install noto fonts and hack font.	2024-03-15 07:56:02 +08:00
Christian Kögler	f56c78f50a	Merge pull request #295443 from ck3d/machinectl-routable ... nixos.test.machinectl: add routable network and shared store	2024-03-14 22:46:14 +01:00
Christian Kögler	f4f99bf8cc	nixos/tests/machinectl: Add declarative shared container	2024-03-14 22:07:58 +01:00
Ilan Joselevich	09078fd022	Merge pull request #295932 from Kranzes/nextcloud ... nixos/nextcloud: remove opcache.enable_cli=1	2024-03-14 21:36:09 +02:00
github-actions[bot]	c160165e60	Merge master into staging-next	2024-03-14 18:01:26 +00:00
Ilan Joselevich	9353fb2309	nixos/nextcloud: remove opcache.enable_cli=1 ... Upstream no longer recommends enabling the opcache cli. See the following: - https://github.com/nextcloud/documentation/issues/1439 - https://github.com/nextcloud/server/pull/15468	2024-03-14 18:36:11 +02:00
Bobby Rong	dff5e178f6	nixos/rl-2405: Mention desktop environment updates I've done so far ... Too lazy to open a new PR for Cinnamon, hopefully fine since I maintain both DEs.	2024-03-14 23:34:13 +08:00
Bobby Rong	596f75bf1f	nixosTests.mate-wayland: init	2024-03-14 23:34:12 +08:00
Bobby Rong	abd9d0bec5	nixosTests.mate: Add trivial tests for MATE 1.28 changes	2024-03-14 23:34:12 +08:00
Bobby Rong	398cce395c	nixos/mate: Add enableWaylandSession option ... Make this an opt-in for now since the session is in early stage and introduces a new set of wayfire closure.	2024-03-14 23:34:11 +08:00
Bobby Rong	b45faa9834	nixos/mate: Add extraPanelApplets, extraCajaExtensions option ... Hopefully this is more user-friendly.	2024-03-14 23:34:10 +08:00
Bobby Rong	a323f4f828	mate: Install mate-panel-with-applets by default	2024-03-14 23:34:06 +08:00
Bobby Rong	c87f6b5591	mate: Install caja-with-extensions by default	2024-03-14 23:34:05 +08:00
Martin Weinelt	5abc981e0b	Merge pull request #295626 from superherointj/k3s-1_24_remove ... k3s_1_24, k3s_1_25: remove	2024-03-14 15:54:16 +01:00
Stzx	8bf5cc2666	pinentry: fix DM option and user conflict	2024-03-14 21:54:35 +08:00
Maciej Krüger	c1a6b4015e	release-notes: update oil shell	2024-03-14 13:15:08 +01:00
abysssol	b5e7a05bb7	nixos/ollama: add option to set environment variables	2024-03-14 04:21:36 -04:00
github-actions[bot]	c866a07331	Merge master into staging-next	2024-03-14 06:01:12 +00:00
Bobby Rong	830f5f84e6	Merge pull request #295798 from bobby285271/adopt/budgie ... budgie: add myself as maintainer	2024-03-14 13:28:15 +08:00
Bobby Rong	1d3d0d6a89	budgie: add myself (bobby285271) as maintainer ... Let's hope this package set is not too hard to maintain.	2024-03-14 12:29:36 +08:00
Bobby Rong	180575819a	Merge pull request #295696 from FedericoSchonborn/drop-federicoschonborn ... maintainers: drop federicoschonborn	2024-03-14 12:13:07 +08:00
Federico Damián Schonborn	91a2510d05	maintainers: drop federicoschonborn ... Signed-off-by: Federico Damián Schonborn <federicoschonborn@disroot.org>	2024-03-13 16:21:10 -03:00
github-actions[bot]	f4c4bfc9fc	Merge master into staging-next	2024-03-13 18:00:53 +00:00
superherointj	bfe2b97cac	rl-2405/k3s: notify removal of k3s_1_26, k3s_1_27, k3s_1_28	2024-03-13 13:10:35 -03:00
Maximilian Bosch	0cdaede144	pg-dump-anon: init at 1.3.1 ... This is a Go program inside the sources of `postgresql_anonymizer` that allows to perform database dumps, but with anonymized data. I figured that it's a little awkward to have a client program to be part of the extension package. So I decided to create a second package called `pg-dump-anon`. Since it's one repository, both share `version` & `src`. Also extended the VM test to make sure we're getting properly anonymized data when dumping with `pg_dump_anon`.	2024-03-13 16:15:54 +01:00
nikstur	7f175e69ca	Merge pull request #295370 from arianvp/fix-295365 ... nixos/binfmt: fix race condition between systemd-tmpfiles and systemd-binfmt	2024-03-13 14:52:24 +01:00
Sandro	db55012fa3	Merge pull request #291455 from SuperSandro2000/hydra-starman-worker	2024-03-13 13:57:12 +01:00
github-actions[bot]	cecf050e96	Merge master into staging-next	2024-03-13 12:01:25 +00:00
Pol Dellaiera	55251f1ffc	Merge pull request #295547 from Janik-Haag/unbound ... nixos/unbound: drop networkmanager since it doesn't support unbound anymore	2024-03-13 10:33:52 +01:00
Janik H.	4147e50f18	nixos/unbound: drop networkmanager since it doesn't support unbound anymore	2024-03-13 09:50:56 +01:00
Pol Dellaiera	c35c016e5d	Merge pull request #295529 from Janik-Haag/networkmanager-drop-unbound ... nixos/networkmanager: drop unbound form dns servers	2024-03-13 09:04:58 +01:00
Pol Dellaiera	6710011819	Merge pull request #295199 from blakesmith/gotosocial_14_2 ... gotosocial 0.14.1 -> 0.14.2	2024-03-13 08:53:37 +01:00
Jon Seager	b31e87640a	Merge pull request #295501 from eclairevoyant/scrutiny	2024-03-13 07:32:37 +00:00
Janik H.	a97e56ae28	nixos/networkmanager: drop unbound form dns servers ... upstream dropped unbound in 5da17c689b	2024-03-13 08:31:52 +01:00
annalee	68befa13bb	Merge remote-tracking branch 'upstream/master' into staging-next	2024-03-13 06:02:24 +00:00
éclairevoyant	e7db1f299c	nixos/scrutiny: fix timer not auto-starting	2024-03-12 22:25:54 -04:00
Anton Dyudin	811ec16c8a	doc: Fix test in writing-nixos-tests.section.md (#294902) ... * Fix test in writing-nixos-tests.section.md That paren couldn't possibly have been in the right place. (I do not have nix set up to generate `writing-nixos-tests.section.xml` or verify the test or anything, please do whatever is appropriate with this trivial change) * doc: fix numpy example test value Making the test test the right thing made it fail see PR discussion	2024-03-12 19:19:54 -07:00
Blake Smith	b0529146b9	nixos/gotosocial: add blakesmith as a maintainer	2024-03-12 21:13:22 -05:00
annalee	8e038835fe	Merge remote-tracking branch 'upstream/master' into staging-next	2024-03-13 00:38:07 +00:00
Rok Garbas	6f11ba9ffe	Merge branch 'master' into amazon-ec2-amis	2024-03-13 00:37:12 +01:00
Christian Kögler	bdd7e48646	nixos/test/machinectl: Add test for shared nix store	2024-03-12 23:27:45 +01:00
Christian Kögler	de52b2b49e	nixos/tests/machinectl: Make network routable	2024-03-12 23:27:45 +01:00
Jörg Thalheim	721c6579d2	Merge pull request #295407 from Stunkymonkey/nixos-murmur-registerPassword-fix ... nixos/murmur: fix writing registerPassword to config	2024-03-12 22:47:26 +01:00
Fabián Heredia Montiel	da8768347e	Merge pull request #293950 from DCsunset/nixos-hoogle ... nixos/hoogle: add extraOptions	2024-03-12 14:57:30 -06:00
Felix Buehler	1e22e7d75e	nixos/murmur: fix writing registerPassword to config	2024-03-12 21:19:24 +01:00
Arian van Putten	16526f454f	nixos/binfmt: fix race condition between systemd-tmpfiles and systemd-binfmt ... We need to make sure systemd-tmpfiles-setup.service ran before we start systemd-binft.service. Otherwise it might fail to start due to non-existant files Fixes #295365	2024-03-12 21:08:03 +01:00
Pol Dellaiera	734b199708	Merge pull request #295197 from abysssol/ollama-tests ... nixos/ollama: add tests	2024-03-12 20:28:16 +01:00
github-actions[bot]	6b78f024b2	Merge staging-next into staging	2024-03-12 18:01:46 +00:00
Azat Bahawi	d3e30a442b	nixos/incus: fix systemd service path ... Fixes a regression introduced in #294754.	2024-03-12 20:03:36 +03:00
Jacob Moody	112a71eef7	nixos/tests: remove builtints.currentSystem from make-test-python.nix ... When build using 'nix build' if we hit this default we will fail to evaluate. Most instances that this should break have been fixed so we remove this to prevent this from happening further in the future.	2024-03-12 10:09:59 -05:00
Jacob Moody	4db920ed4f	nixos/tests: fix discrepancy between nix-build and nix build	2024-03-12 10:09:59 -05:00
Peder Bergebakken Sundt	285d2dcf3c	nixos/spotifyd: update configuration documentation url	2024-03-12 16:07:48 +01:00
Sandro	e220724911	Merge pull request #292141 from SuperSandro2000/plasma-out-xserver	2024-03-12 13:55:27 +01:00
K900	21adc4f16a	Merge pull request #295092 from K900/more-heinous-crimes ... nixos/iso-image: extremely cursed performance optimization for Hydra	2024-03-12 15:45:38 +03:00
K900	77536af43b	nixos/iso-image: extremely cursed performance optimization for Hydra ... Right now the worst case chain of events for building an ISO on Hydra is - copy everything to squashfs builder - run squashfs builder - download squashfs from builder - compress squashfs - upload squashfs to S3 - copy squashfs to ISO builder - run ISO builder - download ISO from builder - compress ISO - upload ISO to S3 This inlines the squashfs build into the ISO build, which makes it - copy everything to ISO builder - run ISO builder - download ISO from builder - compress ISO - upload ISO to S3 Which should reduce queue runner load by $alot per ISO, which we have four of on small channels (one release, one test per arch) and a lot more than four of on large channels (with various desktops)	2024-03-12 15:41:59 +03:00
github-actions[bot]	1cef2a1be7	Merge staging-next into staging	2024-03-12 12:01:40 +00:00
nikstur	da05945c74	Merge pull request #295096 from jmbaur/uki-dtb ... nixos/uki: add ".dtb" section if devicetree is used	2024-03-12 12:57:15 +01:00
Sandro Jäckel	b07cdeb1b3	nixos/plasma6: move out of x11 ... This release focuses on wayland, lets give that justice	2024-03-12 10:49:42 +01:00
github-actions[bot]	0917422ffe	Merge staging-next into staging	2024-03-12 06:01:24 +00:00
abysssol	efed30f903	nixos/ollama: add test for the ollama service	2024-03-11 21:37:48 -04:00
cmspam	701fcd7982	nixos/incus: add openvswitch support ... 1. Added openvswitch integration to incus service. 2. Added tests to test openvswitch functionality with incus.	2024-03-12 01:03:39 +00:00
github-actions[bot]	fd6d62aa3d	Merge staging-next into staging	2024-03-12 00:02:37 +00:00
Jared Baur	2837c0d9aa	nixos/uki: add ".dtb" section if devicetree is used ... This ensures a ".dtb" PE section makes it into the UKI so systemd-stub can install the correct devicetree for use by the Linux kernel. This is often needed on systems that boot with u-boot since the devicetree used by u-boot is often a paired down version of what the Linux kernel needs. On those kinds of boards, the lack of this PE section means that u-boot will end up installing its internal devicetree into the UEFI configuration table, which is what the Linux kernel ends up using.	2024-03-11 12:42:21 -07:00
Cosima Neidahl	a44e09da5e	Merge pull request #294555 from r-ryantm/auto-update/miriway ... miriway: unstable-2024-02-14 -> unstable-2024-03-06	2024-03-11 19:04:18 +01:00
github-actions[bot]	06e5eb63d3	Merge staging-next into staging	2024-03-11 18:01:53 +00:00
emilylange	08c37ba899	nixos/lldap: set service UMask=0027 and StateDirectoryMode=0750 ... While `/var/lib/lldap` isn't technically accessible by unprivileged users thanks to `DynamicUser=true`, a user might prefer and change it to `DynamicUser=false`. There is currently also a PR open that intends to make `DynamicUser` configurable via module option. As such, `jwt_secret_file`, if bootstrapped by the service start procedure, might be rendered world-readable due to its permissions (`0644/-rw-r--r--`) defaulting to the service's umask (`022`) and `/var/lib/lldap` to `0755/drwxr-xr-x` due to `StateDirectoryMode=0755`. This would usually be fixed by using `(umask 027; openssl ...)` instead of just `openssl ...`. However, it was found that another file (`users.db`), this time bootstrapped by `lldap` itself, also had insufficient permissions (`0644/-rw-r--r--`) inherited by the global umask and would be left world-readable as well. Due to this, we instead change the service's to `027`. And to lower the impact for already bootstrapped files on existing instances like `users.db`, set `StateDirectoryMode=0750`.	2024-03-11 17:34:29 +01:00
emilylange	61a651e362	nixos/lldap: bootstrap jwt_secret if not provided ... If not provided, lldap defaults to `secretjwtsecret` as value which is hardcoded in the code base. See https://github.com/lldap/lldap/blob/v0.5.0/server/src/infra/configuration.rs#L76-L77 This is really bad, because it is trivially easy to generate an admin access token/cookie as attacker, if a `jwt_secret` is known.	2024-03-11 17:34:29 +01:00
Sandro	869ec01e56	Merge pull request #294286 from SuperSandro2000/unbound-remote-config-check	2024-03-11 16:06:31 +01:00
WilliButz	a2c0efbf5e	Merge pull request #274307 from thillux/esdm-1.0.1 ... esdm: update module after 1.0.1 changes	2024-03-11 15:11:05 +01:00
Markus Theil	36f1c0c2b3	nixos/esdm: simplify module ... ESDM 1.0.1 fixed bugs related to Linux compatibility layer with CUSE. During these fixes, the compatibility layer was simplified behind a target in order to start the necessary services together or none of them (services.esdm.linuxCompatServices). Furthermore, a small helper was added to ESDM 1.0.1 in order to deal with resume/suspend/hibernate (FUSE needs to be unblocked). Removed options are marked. Signed-off-by: Markus Theil <theil.markus@gmail.com>	2024-03-11 14:28:26 +01:00
Maximilian Bosch	8d0e5a3402	postgresqlPackages.anonymizer: init at 1.3.1	2024-03-11 14:09:17 +01:00
github-actions[bot]	339816cfdf	Merge staging-next into staging	2024-03-11 12:01:42 +00:00
Pierre Allix	cf625fe5f0	nixos/networkmanager: add doc about nm profiles interaction with resolvconf	2024-03-11 12:55:27 +01:00
Sandro	80ec88edec	Merge pull request #292025 from RaHoni/baculaTls	2024-03-11 12:01:19 +01:00
OPNA2608	a49c3d2689	nixos/tests/miriway: Be more lenient when identifying the terminal prompts	2024-03-11 11:37:49 +01:00
Atemu	ce8ddcd321	Merge pull request #281192 from diogotcorreia/pgvecto.rs ... postgresqlPackages.pgvecto-rs: init at 0.2.1	2024-03-11 07:12:52 +00:00
Guanran Wang	84bbdc744e	nixos/mihomo: add tests	2024-03-11 09:51:36 +08:00