Commit graph

39728 commits

Author SHA1 Message Date
Jörg Thalheim 721c6579d2
Merge pull request #295407 from Stunkymonkey/nixos-murmur-registerPassword-fix
nixos/murmur: fix writing registerPassword to config
2024-03-12 22:47:26 +01:00
Fabián Heredia Montiel da8768347e
Merge pull request #293950 from DCsunset/nixos-hoogle
nixos/hoogle: add extraOptions
2024-03-12 14:57:30 -06:00
Felix Buehler 1e22e7d75e nixos/murmur: fix writing registerPassword to config 2024-03-12 21:19:24 +01:00
Arian van Putten 16526f454f nixos/binfmt: fix race condition between systemd-tmpfiles and systemd-binfmt
We need to make sure systemd-tmpfiles-setup.service ran before we
start systemd-binft.service. Otherwise it might fail to start
due to non-existant files

Fixes #295365
2024-03-12 21:08:03 +01:00
Pol Dellaiera 734b199708
Merge pull request #295197 from abysssol/ollama-tests
nixos/ollama: add tests
2024-03-12 20:28:16 +01:00
github-actions[bot] 6b78f024b2
Merge staging-next into staging 2024-03-12 18:01:46 +00:00
Azat Bahawi d3e30a442b
nixos/incus: fix systemd service path
Fixes a regression introduced in #294754.
2024-03-12 20:03:36 +03:00
Jacob Moody 112a71eef7 nixos/tests: remove builtints.currentSystem from make-test-python.nix
When build using 'nix build' if we hit this default we will fail to
evaluate. Most instances that this should break have been fixed so
we remove this to prevent this from happening further in the future.
2024-03-12 10:09:59 -05:00
Jacob Moody 4db920ed4f nixos/tests: fix discrepancy between nix-build and nix build 2024-03-12 10:09:59 -05:00
Peder Bergebakken Sundt 285d2dcf3c nixos/spotifyd: update configuration documentation url 2024-03-12 16:07:48 +01:00
Sandro e220724911
Merge pull request #292141 from SuperSandro2000/plasma-out-xserver 2024-03-12 13:55:27 +01:00
K900 21adc4f16a
Merge pull request #295092 from K900/more-heinous-crimes
nixos/iso-image: extremely cursed performance optimization for Hydra
2024-03-12 15:45:38 +03:00
K900 77536af43b nixos/iso-image: extremely cursed performance optimization for Hydra
Right now the worst case chain of events for building an ISO on Hydra is

    - copy everything to squashfs builder
    - run squashfs builder
    - download squashfs from builder
    - compress squashfs
    - upload squashfs to S3
    - copy squashfs to ISO builder
    - run ISO builder
    - download ISO from builder
    - compress ISO
    - upload ISO to S3

This inlines the squashfs build into the ISO build, which makes it

    - copy everything to ISO builder
    - run ISO builder
    - download ISO from builder
    - compress ISO
    - upload ISO to S3

Which should reduce queue runner load by $alot per ISO, which we have four of on small channels
(one release, one test per arch) and a lot more than four of on large channels (with various desktops)
2024-03-12 15:41:59 +03:00
github-actions[bot] 1cef2a1be7
Merge staging-next into staging 2024-03-12 12:01:40 +00:00
nikstur da05945c74
Merge pull request #295096 from jmbaur/uki-dtb
nixos/uki: add ".dtb" section if devicetree is used
2024-03-12 12:57:15 +01:00
Sandro Jäckel b07cdeb1b3
nixos/plasma6: move out of x11
This release focuses on wayland, lets give that justice
2024-03-12 10:49:42 +01:00
github-actions[bot] 0917422ffe
Merge staging-next into staging 2024-03-12 06:01:24 +00:00
abysssol efed30f903 nixos/ollama: add test for the ollama service 2024-03-11 21:37:48 -04:00
cmspam 701fcd7982 nixos/incus: add openvswitch support
1. Added openvswitch integration to incus service.
2. Added tests to test openvswitch functionality with incus.
2024-03-12 01:03:39 +00:00
github-actions[bot] fd6d62aa3d
Merge staging-next into staging 2024-03-12 00:02:37 +00:00
Jared Baur 2837c0d9aa
nixos/uki: add ".dtb" section if devicetree is used
This ensures a ".dtb" PE section makes it into the UKI so systemd-stub
can install the correct devicetree for use by the Linux kernel. This is
often needed on systems that boot with u-boot since the devicetree used
by u-boot is often a paired down version of what the Linux kernel needs.
On those kinds of boards, the lack of this PE section means that u-boot
will end up installing its internal devicetree into the UEFI
configuration table, which is what the Linux kernel ends up using.
2024-03-11 12:42:21 -07:00
Cosima Neidahl a44e09da5e
Merge pull request #294555 from r-ryantm/auto-update/miriway
miriway: unstable-2024-02-14 -> unstable-2024-03-06
2024-03-11 19:04:18 +01:00
github-actions[bot] 06e5eb63d3
Merge staging-next into staging 2024-03-11 18:01:53 +00:00
emilylange 08c37ba899 nixos/lldap: set service UMask=0027 and StateDirectoryMode=0750
While `/var/lib/lldap` isn't technically accessible by unprivileged
users thanks to `DynamicUser=true`, a user might prefer and change it to
`DynamicUser=false`.

There is currently also a PR open that intends to make `DynamicUser`
configurable via module option.

As such, `jwt_secret_file`, if bootstrapped by the service start
procedure, might be rendered world-readable due to its permissions
(`0644/-rw-r--r--`) defaulting to the service's umask (`022`) and
`/var/lib/lldap` to `0755/drwxr-xr-x` due to `StateDirectoryMode=0755`.

This would usually be fixed by using `(umask 027; openssl ...)` instead
of just `openssl ...`.

However, it was found that another file (`users.db`), this time
bootstrapped by `lldap` itself, also had insufficient permissions
(`0644/-rw-r--r--`) inherited by the global umask and would be left
world-readable as well.

Due to this, we instead change the service's to `027`.

And to lower the impact for already bootstrapped files on existing
instances like `users.db`, set `StateDirectoryMode=0750`.
2024-03-11 17:34:29 +01:00
emilylange 61a651e362 nixos/lldap: bootstrap jwt_secret if not provided
If not provided, lldap defaults to `secretjwtsecret` as value which is
hardcoded in the code base.

See https://github.com/lldap/lldap/blob/v0.5.0/server/src/infra/configuration.rs#L76-L77

This is really bad, because it is trivially easy to generate an admin
access token/cookie as attacker, if a `jwt_secret` is known.
2024-03-11 17:34:29 +01:00
Sandro 869ec01e56
Merge pull request #294286 from SuperSandro2000/unbound-remote-config-check 2024-03-11 16:06:31 +01:00
WilliButz a2c0efbf5e
Merge pull request #274307 from thillux/esdm-1.0.1
esdm: update module after 1.0.1 changes
2024-03-11 15:11:05 +01:00
Markus Theil 36f1c0c2b3 nixos/esdm: simplify module
ESDM 1.0.1 fixed bugs related to Linux compatibility layer with CUSE.

During these fixes, the compatibility layer was simplified behind a
target in order to start the necessary services together or none of
them (services.esdm.linuxCompatServices).

Furthermore, a small helper was added to ESDM 1.0.1 in order to deal
with resume/suspend/hibernate (FUSE needs to be unblocked).

Removed options are marked.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-03-11 14:28:26 +01:00
Maximilian Bosch 8d0e5a3402
postgresqlPackages.anonymizer: init at 1.3.1 2024-03-11 14:09:17 +01:00
github-actions[bot] 339816cfdf
Merge staging-next into staging 2024-03-11 12:01:42 +00:00
Pierre Allix cf625fe5f0 nixos/networkmanager: add doc about nm profiles interaction with resolvconf 2024-03-11 12:55:27 +01:00
Sandro 80ec88edec
Merge pull request #292025 from RaHoni/baculaTls 2024-03-11 12:01:19 +01:00
OPNA2608 a49c3d2689 nixos/tests/miriway: Be more lenient when identifying the terminal prompts 2024-03-11 11:37:49 +01:00
Atemu ce8ddcd321
Merge pull request #281192 from diogotcorreia/pgvecto.rs
postgresqlPackages.pgvecto-rs: init at 0.2.1
2024-03-11 07:12:52 +00:00
Guanran Wang 84bbdc744e
nixos/mihomo: add tests 2024-03-11 09:51:36 +08:00
Guanran Wang a5d09a41b0
nixos/mihomo: add release note 2024-03-11 09:51:36 +08:00
Guanran Wang a6857b00fe
nixos/mihomo: init 2024-03-11 09:51:36 +08:00
Diogo Correia 6b97ba66a4
nixos/tests/pgvecto-rs: init 2024-03-11 01:02:17 +00:00
github-actions[bot] e5f37c0e88
Merge staging-next into staging 2024-03-11 00:02:46 +00:00
Sandro 88c9f04d1a
Merge pull request #294771 from flokli/yubikey-agent-eval
nixos/yubikey-agent: fix eval error
2024-03-11 00:15:31 +01:00
Guanran Wang 0a5801395a nixos/clash-verge: add cfg.package 2024-03-10 20:16:41 +01:00
github-actions[bot] 43d40d2ee7
Merge staging-next into staging 2024-03-10 18:01:43 +00:00
Florian Klink b437b19f54 nixos/yubikey-agent: fix eval error
This has been refactored in https://github.com/NixOS/nixpkgs/
pull/133542, but this reference wasn't updated.
2024-03-10 19:08:23 +02:00
Pol Dellaiera 2bd0c18d98
Merge pull request #282160 from gaykitty/stargazer-debug-mode
nixos/stargazer: add missing debugMode setting
2024-03-10 14:31:06 +01:00
github-actions[bot] 973ef4b818
Merge staging-next into staging 2024-03-10 06:01:30 +00:00
Peder Bergebakken Sundt 4a4a70ca31
Merge pull request #280836 from numinit/nebula-port-zero
nixos/nebula: default to port 0 for hosts other than lighthouse/relay
2024-03-10 05:01:04 +01:00
Peder Bergebakken Sundt 3021170dfe
Merge pull request #265687 from iblech/patch-test-socks
nixos/tests/privoxy: Verify socks support
2024-03-10 04:27:38 +01:00
Peder Bergebakken Sundt 298957b767
Merge pull request #283238 from D3vil0p3r/patch-1
doc: add note in Partitioning and formatting section
2024-03-10 04:01:18 +01:00
Will Fancher f592a7ea77
Merge pull request #293720 from vkleen/fix/systemd-boot-random-seed
nixos/systemd: Only include systemd-boot-random-seed if the unit exists
2024-03-09 21:01:35 -05:00
github-actions[bot] 3ce29d4386
Merge staging-next into staging 2024-03-10 00:02:48 +00:00
éclairevoyant 6b80044d9d
Merge pull request #294584 from MinerSebas/plasma-samba
nixos/plasma6: Dont add samba a second time to environment.systemPackages
2024-03-09 23:40:45 +00:00
Sandro c86e8fd7a0
Merge pull request #133542 from fpletz/refactor/pinentry-remove-multiple-outputs
pinentry: remove multiple outputs
2024-03-09 23:57:27 +01:00
Weijia Wang 8ca489efef
Merge pull request #292396 from wegank/unrar-bump
unrar: 6.2.12 -> 7.0.7
2024-03-09 22:54:53 +01:00
Bernardo Meurer 6bb56dc681
Merge pull request #294544 from lilyinstarlight/fix/fwupd-uefi-capsule-settings 2024-03-09 16:31:44 -05:00
Emily 8b7eef367c
Merge pull request #292304 from networkException/unix-socket-sliding-sync-bindaddr
nixos/matrix-sliding-sync: improve unix socket support
2024-03-09 20:12:48 +01:00
github-actions[bot] 1966fd4ba6
Merge staging-next into staging 2024-03-09 18:01:41 +00:00
Lily Foster 1801583855
nixos/fwupd: fix silent failure for uefiCapsuleSettings to ever be added
Bug was introduced in 28ea07d4e3.
2024-03-09 12:44:46 -05:00
Maciej Krüger 8b8bc2c64b
Merge pull request #294497 from cmspam/patch-1
incus.ui: Added incus-specific patches to fix branding and API
2024-03-09 18:32:40 +01:00
Maciej Krüger 8a274e0c18
nixosTests.incus.*: enable nftables to fix tests 2024-03-09 17:23:03 +01:00
MinerSebas cf3a468eee nixos/plasma6: Dont add samba a second time to environment.systemPackages 2024-03-09 17:06:25 +01:00
gaykitty 366147b86d nixos/stargazer: add missing debugMode setting 2024-03-09 11:04:27 -05:00
networkException f0097cf1d9
nixos/matrix-sliding-sync: create runtime directory in /run/matrix-sliding-sync
this patch enables the creation of a runtime directory with the default
mode 0755 in /run/matrix-sliding-sync to offer a simple option for
SYNCV3_BINDADDR when using unix sockets.
2024-03-08 23:16:05 +01:00
Franz Pletz a270c43ea1
treewide: use sensible pinentry flavor 2024-03-08 23:09:02 +01:00
github-actions[bot] c05ba82277
Merge staging-next into staging 2024-03-08 18:01:49 +00:00
Leona Maroni 399dc3f09e
Merge pull request #290925 from r-vdp/networkd_use_gateway
systemd-networkd: add missing UseGateway key in the DHCPv4 section
2024-03-08 16:38:14 +01:00
Sandro Jäckel 67c1193fab
nixos/unbound: disable checkconf when remote-control is used
Closes #293001
2024-03-08 15:34:00 +01:00
nikstur 4fc409b977
Merge pull request #294096 from WilliButz/repart-image/overridability
systemd-repart: improve overridability of image builder
2024-03-08 15:23:45 +01:00
K900 73e3a5866a
Merge pull request #294269 from K900/test-driver-mypy-fixes
nixos/lib/test-driver: fix mypy errors after staging-next merge
2024-03-08 15:35:59 +03:00
K900 7764fc5335 nixos/lib/test-driver: fix mypy errors after staging-next merge 2024-03-08 15:33:48 +03:00
Maciej Krüger 53c527b694
Merge pull request #292817 from mkg20001/steam-team
teams.steam: add - ref #289561
2024-03-08 13:26:02 +01:00
github-actions[bot] 1d176721c2
Merge staging-next into staging 2024-03-08 12:01:49 +00:00
K900 7b8d88fa05 nixos/steam: fix eval after #293564 2024-03-08 14:42:31 +03:00
Vladimír Čunát 335c734226
Merge #292500: staging-next 2024-03-01 2024-03-08 12:35:06 +01:00
Maciej Krüger 26c09016b9
modules/steam: transfer maintainership to steam team 2024-03-08 12:25:03 +01:00
Thiago Kenji Okada 488f218407
Merge pull request #293564 from Shawn8901/steam-compat-tools
steam: add extraCompatPackages
2024-03-08 11:06:15 +00:00
maxine b587c07865
Merge pull request #292847 from jwillikers/linger-hotfix
Fix the update-lingering activation script to not fail when a user is removed
2024-03-08 09:54:44 +00:00
r-vdp 4c26c97d21
nixos/networkd: add missing UseGateway key in the DHCPv4 section 2024-03-08 10:54:03 +01:00
maxine d231374084
Merge pull request #288873 from amaxine/networkmanager_1.46
networkmanager: 1.44.2 → 1.46.0
2024-03-08 09:52:14 +00:00
Weijia Wang 4acc19b18c
Merge pull request #291581 from Luflosi/nixos/memcached/clarify-setting
nixos/memcached: clarify behaviour of `enableUnixSocket`
2024-03-08 10:25:10 +01:00
Weijia Wang 9dd105625d unrar: 6.2.12 -> 7.0.7 2024-03-08 09:57:11 +01:00
Viktor Kleen 0aed32b9dd
nixos/systemd: Only include systemd-boot-random-seed if the unit exists
The unit file is only present if systemd was built with bootloader support.
2024-03-08 08:52:11 +00:00
Jack Kelly dc158268f7 nixos/amazon-image: Enable Amazon SSM Agent by default
Amazon-provided EC2 images do this.

See: https://docs.aws.amazon.com/systems-manager/latest/userguide/ami-preinstalled-agent.html
2024-03-08 16:24:00 +10:00
éclairevoyant 2319821137
nixos/scrutiny: default collector api endpoint port to point at web app port 2024-03-07 23:21:53 -05:00
éclairevoyant fc5116d75c
nixos/scrutiny: clean up mkEnableOption definitions 2024-03-07 23:21:53 -05:00
éclairevoyant ce5dbf1b7b
nixos/scrutiny: inherit lib bindings 2024-03-07 23:21:52 -05:00
éclairevoyant 4e710d5221
nixos/scrutiny: remove redundant lib.mdDoc 2024-03-07 23:21:52 -05:00
~noodlez1232 555aad70c0 nixos/joycond-cemuhook: fix missing module
It seems that the joycond-cemuhook.nix module was missing from the
module-list.nix. This commit should fix that problem.
2024-03-07 17:17:46 -08:00
github-actions[bot] bca99088c2
Merge master into staging-next 2024-03-08 00:02:17 +00:00
Peder Bergebakken Sundt 5f9689332a
Merge pull request #278537 from wfdewith/syncoid-permissions
nixos/syncoid: add missing ZFS mount permission
2024-03-08 00:11:39 +01:00
Yt 0340f82b24
Merge pull request #292873 from ghthor/tabby
Tabby: bump 0.7.0 -> 0.8.3 and add systemd service
2024-03-07 21:51:06 +00:00
WilliButz 82ef47d3b7
nixos/repart-image: add options to specify mkfs parameters
This new option makes it easier to specify extra mkfs parameters for the
systemd-repart builder.

See https://github.com/systemd/systemd/blob/v255/docs/ENVIRONMENT.md?plain=1#L575-L577
2024-03-07 22:50:56 +01:00
Soenke Klinger d0a888c315
doc: added nvidiaLegacy driver version 470 to available options in nixos manual (#290231)
Its possible to install the nvidiaLegacy470 driver for the slightly outdated GPUs, but the documentation only has the hints how to install the drivers for the even older GPUs.
2024-03-07 22:29:13 +01:00
Sandro 5f39678474
Merge pull request #292552 from diogotcorreia/oci-containers-fix-stop-one-shot
nixos/oci-containers: ignore nonexistent container when stopping
2024-03-07 21:23:51 +01:00
Maximilian Bosch 3c8f4e06e6
Merge pull request #287602 from Ma27/drop-postgres-ensurePermissions
nixos/postgresql: drop ensurePermissions option
2024-03-07 19:50:44 +00:00
WilliButz f88148f05e
nixos/repart-image: improve overridability, use structuredAttrs
Parameters passed to systemd-repart are now passed to the build script
via environment variable, which is defined as a list of strings in
combination with `__structuredAttrs = true`. This should make it easier
to customize the image build using `overrideAttrs`.

Both the script used to amend the repart definitions and the amended
definitions are now available via passthru.
2024-03-07 18:27:11 +01:00
Martin Weinelt 1371fe6327
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/servers/home-assistant/default.nix
2024-03-07 17:12:13 +01:00
Emily 2ab0d96297
Merge pull request #293251 from nesteroff/chromium-initial-prefs
nixos/chromium: add the ability to set initial preferences
2024-03-07 16:33:09 +01:00
Nick Cao b4f564dbff
Merge pull request #293821 from NickCao/knot-test-quic
nixosTests.knot: test zone transfer over quic
2024-03-07 09:43:04 -05:00
Will Owens d9188fc882
nixos/tabby: init module
- Enable tabby to run as a systemd service
- Document standard tabby configuration
2024-03-07 06:29:12 -05:00
DCsunset 38261d9556 nixos/hoogle: add extraOptions 2024-03-06 22:12:41 -05:00
github-actions[bot] e0fd83a658
Merge master into staging-next 2024-03-07 00:02:06 +00:00
Robert Hensing f32e786e98
Merge pull request #292099 from hercules-ci/update-nixops_unstable
nixops_unstable to nixops_unstable_minimal.withPlugins migration + update
2024-03-07 00:46:59 +01:00
Robert Hensing 76fc2db1f5 nixosTests.nixops_unstable: Set memorySize to 2G
Give the evaluator some breathing room.
2024-03-06 22:47:23 +01:00
Robert Hensing 663b3d4be7 nixops_unstable*: Make withPlugins.*.tests.nixos behave correctly 2024-03-06 22:47:22 +01:00
Philip Taron 86ae7a6243
Remove top level with lib; in docs (#293829) 2024-03-06 22:35:43 +01:00
Yuri Nesterov 960f93fd4f nixos/chromium: add the ability to set initial preferences 2024-03-06 21:32:18 +02:00
Shawn8901 93a891f0e8 steam: add extraCompatPackages 2024-03-06 20:24:55 +01:00
Nick Cao 3b7625845b
nixosTests.knot: test zone transfer over quic 2024-03-06 13:41:24 -05:00
Peder Bergebakken Sundt 715b2ae92e
Merge pull request #292608 from onemoresuza/hare-crosscomp
hare: enable cross-compilation
2024-03-06 19:36:45 +01:00
github-actions[bot] 8a8a630460
Merge master into staging-next 2024-03-06 18:01:19 +00:00
Sandro e656679228
Merge pull request #286523 from MarcelCoding/listmonk
listmonk: 2.5.1 -> 3.0.0
2024-03-06 18:49:20 +01:00
Coutinho de Souza 478cff8d32
haredoc: init at 0.24.0
Also add a mention to the release notes of 24.05 about `hare` and
`haredoc` being split into different packages.
2024-03-06 11:57:55 -03:00
superherointj ac497db437
Merge pull request #292418 from superherointj/k3s-to-k3s_1_29
k3s: k3s_1_28 -> k3s_1_29
2024-03-06 11:10:02 -03:00
Franz Pletz f05e5f3a51
Merge pull request #285807 from MinerSebas/prometheus-restic-exporter
prometheus-restic-exporter: 1.4.0 -> 1.5.0
2024-03-06 14:35:24 +01:00
github-actions[bot] d6370b05b5
Merge master into staging-next 2024-03-06 12:01:15 +00:00
Leona Maroni 182053a2cf
Merge pull request #293595 from SuperSandro2000/git-io-remove
treewide: stop using deprecated git.io shortlink service
2024-03-06 11:14:14 +01:00
Fabian Möller f753e58e6e
nixos/networkd: allow RoutingPolicyRule port ranges
Linux and Systemd allow port ranges to be used in routing policy rules.

https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#SourcePort=
2024-03-06 09:11:54 +01:00
Jacek Galowicz 3b2b12769d
Merge pull request #293573 from hercules-ci/nixos-running-tests-requirements
nixos/doc: Describe NixOS test system requirements
2024-03-06 07:51:02 +01:00
github-actions[bot] 8660ec23c7
Merge master into staging-next 2024-03-06 00:02:17 +00:00
Sandro Jäckel 04d33b98e1
treewide: stop using deprecated git.io shortlink service 2024-03-05 22:58:29 +01:00
Sandro 911b4015d2
Merge pull request #283319 from phaer/etebase-server
etebase: fix runtime crash due to wrong pydantic..
2024-03-05 21:37:21 +01:00
Robert Hensing eb787006d7 nixos/doc/running-nixos-tests: Describe system requirements 2024-03-05 20:51:10 +01:00
github-actions[bot] ac779b472e
Merge master into staging-next 2024-03-05 18:01:25 +00:00
Adam C. Stephens a51a27a78b
Merge pull request #291554 from jnsgruk/homepage-config
nixos/homepage-dashboard: support structured config
2024-03-05 09:48:19 -05:00
Jon Seager 0b39e86cbc
nixosTests.homepage-dashboard: test managed and unmanaged configs 2024-03-05 14:38:53 +00:00
Jon Seager 183bc82cca
nixos/homepage-dashboard: add breaking change notice to release notes 2024-03-05 14:38:52 +00:00
Jon Seager c0330351a0
nixos/homepage-dashboard: support structured config 2024-03-05 14:38:52 +00:00
Arian van Putten 3e98d57895 nixos/doc: Add 24.05 release notes for AMIs 2024-03-05 10:03:49 +01:00
github-actions[bot] 16bca48d25
Merge master into staging-next 2024-03-05 06:01:12 +00:00
adisbladis 5cdb38bb16
Merge pull request #288579 from blitz/vbox-kvm-2
virtualboxKvm: init
2024-03-05 18:58:57 +13:00
Mikael Voss fe639ca418 nixos/tests/akkoma: Adapt to latest toot release 2024-03-05 05:27:40 +01:00
github-actions[bot] 100a9b96ce
Merge master into staging-next 2024-03-05 00:01:58 +00:00
Someone 46b75bf589
Merge pull request #291828 from SomeoneSerge/refactor/cdi-nvidia
nixos/cdi.dynamic.nvidia: expose driverLink
2024-03-04 18:32:34 +00:00
github-actions[bot] fe2479b166
Merge master into staging-next 2024-03-04 18:00:55 +00:00
nikstur c0feba86fb nixos/test-instrumentation: use full path to env
It is sometimes useful to have a seprate /usr partition to make systemd
tools happy (e.g. repart, sysupdate, gpt-auto-generator etc.). The test
script should not depend on usrbinenv to make this possible.
2024-03-04 16:12:56 +01:00
Nick Cao 8e19126885
Merge pull request #289009 from 999eagle/feat/miniflux-no-db
nixos/miniflux: add option to disable configuring a local postgresql db
2024-03-04 09:47:14 -05:00
github-actions[bot] 6620dd578c
Merge master into staging-next 2024-03-04 12:06:01 +00:00
Brian McKenna 40bebc8749 extest: refactor to use mkEnableOption 2024-03-04 19:18:20 +11:00
Brian McKenna 5dffe7eebf extest: init at 1.0.2 2024-03-04 19:18:20 +11:00
Sophie Tauchert cb5f2a8e87
nixos/tests/miniflux: add test for external database 2024-03-04 09:07:21 +01:00
Sophie Tauchert 1f8385d6d1
nixos/miniflux: add option to disable configuring a local postgresql db 2024-03-04 09:07:20 +01:00
github-actions[bot] 1a3380fec6
Merge master into staging-next 2024-03-04 06:10:33 +00:00
Robert Schütz e67761b6f6
Merge pull request #292854 from SuperSandro2000/vaultwarden-bitwarden_rs
vaultwarden: cleanup maintainers, nixos/vaultwarden: drop aliases
2024-03-04 00:36:06 +00:00
github-actions[bot] 7869e723ac
Merge master into staging-next 2024-03-04 00:02:16 +00:00
Sandro Jäckel 06a6371247
nixos/vaultwarden: set meta.maintainers to package maintainer 2024-03-04 00:41:56 +01:00
Cosima Neidahl c981cb00dd
Merge pull request #248972 from codifryed/coolercontrol-0.17.0
coolercontrol: init at 1.1.1
2024-03-03 19:31:59 +01:00
Martin Weinelt f09b7dc6a5
Merge pull request #289961 from leona-ya/vikunja-0.23.0
vikunja: 0.22.1 -> 0.23.0
2024-03-03 19:15:35 +01:00
github-actions[bot] 3d632fe115
Merge master into staging-next 2024-03-03 18:01:09 +00:00
Jordan Williams 8558d7b1ce
nixos/users-groups: Fix the update-lingering activation script failing
The update-lingering activation script currently fails during rebuilds.
This happens when removing a user with linger enabled.
The call to loginctl disable-linger runs for the non-existent user.
This returns an error code which causes the failure.

To mitigate this, this PR removes any residual linger files.
These are files named for the user in /var/lib/systemd/linger.
A simple check for user existence determines whether to delete the file.
This happens before the call to disable-linger to avoid any errors.

Fixes #283769.
2024-03-03 12:00:25 -06:00
Guillaume Girol 5b274d5f01 nixos/nix: add workaround for https://github.com/NixOS/nix/issues/9487
Nix has a suprising behavior where if the option `extra-foo` is set before `foo`, then setting `foo` overwrites the setting for `extra-foo`. This is reported as https://github.com/NixOS/nix/issues/9487, and will likely not be fixed any time soon.

This works around this issue by always putting `extra-*` settings after non-extra ones in the nixos-generated `/etc/nix.conf`.
2024-03-03 17:03:46 +01:00
Guillaume Girol dc9a74e61e
Merge pull request #291934 from e1mo/bird-lg-1-3-5
bird-lg: 1.3.1 -> 1.3.5
2024-03-03 15:50:42 +01:00
Guillaume Girol 9887be970b
Merge pull request #292437 from deviant/nixos-nixseparatedebuginfod-nix2.3
nixos/nixseparatedebuginfod: fix compatibility with Nix 2.3
2024-03-03 14:12:27 +01:00
github-actions[bot] 0d466b7ac7
Merge master into staging-next 2024-03-03 12:01:17 +00:00
Pascal Bach 8240cbf81b
Merge pull request #292124 from r-ryantm/auto-update/minio
minio: 2024-02-24T17-11-14Z -> 2024-02-26T09-33-48Z
2024-03-03 11:22:22 +01:00
Pascal Bach 7305821c58 tests/minio: fix broken minio test
Since last update minio pre allocates 2GiB of memory, so the test VM
needs more than that to not run out of memory.

We also remove the time based tests as it makes the test non deterministic
2024-03-03 11:20:44 +01:00
github-actions[bot] 26d76ed9a5
Merge master into staging-next 2024-03-03 00:02:18 +00:00
Pol Dellaiera f480f9f47e
Merge pull request #292823 from SuperSandro2000/paperless-too-many-open-files
nixos/paperless: fix too many open files
2024-03-02 23:51:11 +01:00
Pol Dellaiera 6e201a6d91
Merge pull request #292850 from newAM/llama-cpp-module-list
nixos/llama-cpp: add to module-list
2024-03-02 23:49:14 +01:00
Leona Maroni 46ad1987b9
Merge pull request #278698 from bachp/photoprism-update
photoprism: 231011-63f708417 -> 231128-f48ff16ef
2024-03-02 23:03:49 +01:00
Arian van Putten cc04ae5878 nixos/amazon-ec2-amis: Add NixOS 23.11
Note that this list will stop being updated from now on.
Please use https://nixos.github.io/amis/ and https://nixos.github.io/amis/images.json instead.
We are working on integrating this in the https://nixos.org/ website
These get updated for every channel bump.
2024-03-02 22:40:50 +01:00
Maximilian Bosch a9bcd3b8b7
Merge pull request #292825 from SuperSandro2000/nextcloud-with-apps-local
nixos/nextcloud: build with-apps local
2024-03-02 21:39:36 +00:00
Julien Malka 4ee410d8f8
Merge pull request #283547 from r-vdp/boot_sort_key 2024-03-02 22:17:52 +01:00
nikstur b6401f808a
Merge pull request #292636 from RaitoBezarius/smm-works-for-something-else-than-x86-actually
OVMF: remove invalid `assert` on SMM
2024-03-02 21:04:12 +01:00
Sandro Jäckel 4264ded76e
nixos/vaultwarden: drop aliases 2024-03-02 20:18:55 +01:00
Alex Martens aafa54a1a8 nixos/llama-cpp: add to module-list 2024-03-02 10:46:24 -08:00
github-actions[bot] 81198fd201
Merge master into staging-next 2024-03-02 18:01:04 +00:00
Sandro Jäckel 907b5ebcee
nixos/nextcloud: build with-apps local 2024-03-02 18:01:38 +01:00
K900 633a090546
Merge pull request #292822 from xNaxdy/work/plasma6-install-sshfs
programs/kdeconnect: install sshfs
2024-03-02 19:59:13 +03:00
Sandro Jäckel da1ccb628f
nixos/paperless: fix too many open files
paperless-web-start[658743]: kombu.exceptions.OperationalError: [Errno 24] Too many open files: '/nix/store/k6h0pihpi3ih31zjk6ragqcp4mjz4pjs-python3.11-concurrent-log-handler-0.9.24/lib/python3.11/site-packages/concurrent_log_handler-0.9.24.dist-info/entry_points.txt'
2024-03-02 17:52:18 +01:00
Naxdy bc910886a1
programs/kdeconnect: install sshfs 2024-03-02 17:51:04 +01:00
Maciej Krüger 55ead8c56a
Merge pull request #290976 from adamcstephens/incus/nft
nixos/incus: assert nftables is used when firewall is enabled
2024-03-02 17:40:44 +01:00
Paul Meyer a217ccfe1f
Merge pull request #292773 from attilaolah/patch-1
Add missing closing parens
2024-03-02 17:32:16 +01:00
Franz Pletz 764d15f59f
pinentry: remove multiple outputs package
fixes #133156 #124753
2024-03-02 17:16:53 +01:00
Nick Cao 2646fba84d
Merge pull request #292702 from NickCao/fcitx5-plasma6
nixos/fcitx5: enable plasma6Support by default if plasma6 is enabled
2024-03-02 10:54:19 -05:00
K900 57746ceea5
Merge pull request #292748 from K900/sycoca-oof
nixos/plasma6: nuke sycoca on activation
2024-03-02 15:21:39 +03:00
github-actions[bot] f51807feea
Merge master into staging-next 2024-03-02 12:01:28 +00:00
Yt 492678349b
Merge pull request #292412 from bobrippling/fix/ebusd-logging
ebusd: fix logging overrides
2024-03-02 11:46:35 +00:00
Attila Oláh ac4441fabd
Add missing closing parens.
https://xkcd.com/859
2024-03-02 12:40:40 +01:00
K900 d7a4bf5998 nixos/plasma6: nuke sycoca on activation
This is not the right solution, but it should get us going for now.
2024-03-02 11:26:41 +03:00
github-actions[bot] 9819563ca9
Merge master into staging-next 2024-03-02 06:00:53 +00:00
Gabriella Gonzalez b8698cd8d6
macOS support for NixOS tests (#282401)
Closes #193336
Closes #261694
Related to #108984

The goal here was to get the following flake to build and run on
`aarch64-darwin`:

```nix
{ inputs.nixpkgs.url = <this branch>;

  outputs = { nixpkgs, ... }: {
    checks.aarch64-darwin.default =
      nixpkgs.legacyPackages.aarch64-darwin.nixosTest {
        name = "test";

        nodes.machine = { };

        testScript = "";
      };
  };
}
```

… and after this change it does.  There's no longer a need for the
user to set `nodes.*.nixpkgs.pkgs` or
`nodes.*.virtualisation.host.pkgs` as the correct values are inferred
from the host system.
2024-03-02 06:33:14 +01:00
annalee a04ddbe327
Merge remote-tracking branch 'upstream/master' into sn-remove 2024-03-02 04:08:10 +00:00
Nick Cao 48e5de444b
nixos/fcitx5: enable plasma6Support by default if plasma6 is enabled 2024-03-01 22:43:56 -05:00
r-vdp a8ab8b59a7
systemd-boot: introduce options to set a sort-key for systemd-boot entries
Without sort-keys specified on entries, the entries are sorted only by
file name (in decreasing order, so starting at the end of the alphabet!),
without taking any other fields into account (see
[the boot loader specification reference][1]).
Moreover, entries without a sort-key are always ordered after all
entries with a sort-key, so by not adding a sort-key to the NixOS ones,
we cannot add a sort-key to any other entry while keeping it below the
NixOS entries.

So currently we have options to set the file names for additional entries like
memtest and netbootxyz.
However, as mentioned above, the sorting by file name is not very intuitive and
actually sorts in the opposite order of what is currently mentioned in the option
descriptions.

With this commit, we set a configurable sort-key on all NixOS entries,
and add options for setting the sort-keys for the memtest and netbootxyz
entries.
The sorting by sort-key is more intuitive (it starts at the start of the
alphabet) and also takes into account the machine-id and version for entries
with identical sort-keys.

We use a bootspec extension to store the sort keys, which allows us to
redefine the sort key for individual specialisations without needing any
special casing.

[1]: https://uapi-group.org/specifications/specs/boot_loader_specification/#sorting
2024-03-02 02:11:32 +01:00
nuko 636584b3ff
nixos/komga: use lib.getExe 2024-03-02 13:56:20 +13:00
nuko b18bcf3a04
nixos/komga: add systemd service hardening 2024-03-02 13:55:25 +13:00
nikstur ee2a53dc86 nixos/tests/systemd-boot: make secureBoot test work on different architectures 2024-03-01 23:45:07 +01:00
nikstur ce1d1f3e6c nixos/qemu-vm: remove implicit dependency on SSM
The qemu module shouldn't implicitly (and for all architectures) enable
SSM when enabling Secure Boot.

Additionally, this breaks aarch64 Secure Boot tests because this module
doesn't use the right machine type for anything but X86.
2024-03-01 23:40:36 +01:00
phaer fa34964ef1 etebase: make proper package...
and remove the ad-hoc python environment.
Also remove daphne and use uvicorn just as upstream does
2024-03-01 22:55:27 +01:00
nikstur 1df98b23f6
Merge pull request #292061 from nikstur/systemd-random-seed
nixos/systemd: include systemd-boot-random-seed.service
2024-03-01 21:46:39 +01:00
Nick Cao fcba479b33
Merge pull request #292607 from NickCao/fcitx5-nixos
nixos/fcitx5: add plasma6 support option
2024-03-01 13:36:04 -05:00
Robert Hensing 55dcd06bdb
Merge pull request #292487 from jmbaur/nixos-cross-check
nixos/nixpkgs: fix determination for cross-compiled nixos system
2024-03-01 18:19:58 +01:00
Jared Baur 3794246066
nixos/nixpkgs: fix determination for cross-compiled nixos system
Since the output of `lib.systems.elaborate` contains functions, an
equality check with `==` does not suffice, `lib.systems.equals` should
be used instead.
2024-03-01 09:05:08 -08:00
Nick Cao 6e2d4054ae
nixos/fcitx5: add plasma6 support option 2024-03-01 11:34:09 -05:00
Ryan Lahfa fae73881ba
Merge pull request #292561 from arianvp/fix-make-disk-image-systemd-boot-homeless-shelter-clobber
nixos/lib/make-disk-image.nix: fix systemd-boot-builder clobbering /homeless-shelter
2024-03-01 16:59:16 +01:00
Adam C. Stephens b52452f8c7
Merge pull request #291951 from amarshall/zfs-pkgs-renaming
zfs: rename zfsStable -> zfs_2_2; zfsUnstable -> zfs_unstable; remove enableUnstable option in favor of package
2024-03-01 10:09:12 -05:00
phaer 720a1eb5e7 modules/etebase-server: add package, pythonPackage
options, to keep the packaeges configurable
2024-03-01 14:32:46 +01:00
RaHoni 2af073f716
nixos/bacula: refactor option generation
The generation of the descriptions always used lib explicitly even
thoughit was already specified with 'with'.

Since using `with lib` is discouraged this was also changed to inherit.
2024-03-01 14:11:57 +01:00
RaHoni ad2f55dc4e
nixos/bacula: Add support for TLS
Added the majority of TLS options used for transport encryption.

This uses a submodule since all resources share the same settings.

The documentation can be found under:
https://www.bacula.org/13.0.x-manuals/en/main/Bacula_TLS_Communications_E.html
2024-03-01 14:11:57 +01:00
Sandro 5ad27da222
Merge pull request #291907 from SuperSandro2000/tailscaled-flags 2024-03-01 13:54:54 +01:00
Sandro b84bc4ea3a
Merge pull request #264087 from leonm1/matter-server-module 2024-03-01 13:51:19 +01:00
Sandro 51e92056db
Merge pull request #283660 from ocfox/transfer 2024-03-01 13:36:03 +01:00
github-actions[bot] 18bc3c64e6
Merge master into staging-next 2024-03-01 12:00:58 +00:00
Arian van Putten b75a29cb6c nixos/lib/make-disk-image.nix: fix systemd-boot-builder clobbering /homeless-shelter
systemd-boot-builder.py calls nix-env --list-generations which creates
$HOME/.nix-defexpr/channels/nixos if it doesn't exist. This would cause a folder
/homeless-shelter to show up in the final image which in turn breaks nix builds
in the target image if sandboxing is turned off (as /homeless-shelter is never
allowed to exist).
2024-03-01 12:52:48 +01:00
Diogo Correia 81f21e3936
nixos/oci-containers: ignore nonexistent container when stopping
Fixes #292551
2024-03-01 10:41:00 +00:00
K900 e758ca61fe nixos/lib/test-driver: make the warning message more noticeable 2024-03-01 13:20:09 +03:00
Marcel 896a4d62d8
listmonk: ensure correct application of data migration 2024-03-01 10:45:12 +01:00
Sarah Brofeldt 13a94ad1fb
Merge pull request #292291 from cafkafk/dockerRegistry-openFirewall
nixos/dockerRegistry: add `openFirewall` option
2024-03-01 09:57:07 +01:00
Christina Sørensen d31cbb78ca
nixos/dockerRegistry: add openFirewall option
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
2024-03-01 09:56:03 +01:00
K900 690d54ef45
Merge pull request #292326 from hcsch/pipewire-wireplumber-doc-fix
nixos/pipewire: doc fixes as a follow-up to #282377 and #291946
2024-03-01 09:28:17 +03:00
K900 b4622a277e
Merge pull request #292483 from mjm/plasma6-kcmutils
nixos/plasma6: install kcmutils
2024-03-01 09:25:51 +03:00
Matt Moriarity e59d120fc1 nixos/plasma6: install kcmutils 2024-02-29 20:12:42 -07:00
nuko 502f34f3e0
nixos/komga: rfcfmt, rm mdDoc & toplvl with lib 2024-03-01 15:13:06 +13:00
networkException 10fc05bfc1
nixos/matrix-synapse: allow synapse to write to directories of unix socket paths
this patch takes the path of all unix socket listeners and appends their
respective parent directories to the ReadWritePaths allow list for the
matrix-synapse systemd service.

previously configuring a unix socket in a directory not writable by
synapse would fail.
2024-03-01 02:36:29 +01:00
github-actions[bot] 18e39b9167
Merge staging-next into staging 2024-03-01 00:02:47 +00:00
Sandro bbabfca453
Merge pull request #263765 from numinit/armagetronad-module
nixos/armagetronad: Add module with NixOS tests
2024-03-01 00:46:34 +01:00
Sandro b8ec4c1475
Merge pull request #290449 from Kiskae/patch-2
nixos/podman: pass proxy variables to podman API
2024-03-01 00:37:27 +01:00
Sandro daa33a4bf7
Merge pull request #287299 from SuperSandro2000/unbound-checkconf
nixos/unbound: check validity of config file
2024-03-01 00:33:36 +01:00
V ff990ea66a nixos/nixseparatedebuginfod: fix compatibility with Nix 2.3
Appending to options with the `extra-` prefix was added in Nix 2.4,
which makes config validation fail on this version without the guard.

Change-Id: Ie253978dbaf00b228fecc08698a3dcc01cd2d82b
2024-02-29 23:10:31 +01:00
superherointj 09390b5cfe nixos/doc: release note for k3s_1_29 2024-02-29 18:38:58 -03:00
Rob Pilling 979ae4c6e5 nixos/ebusd: fix logging overrides
This fixes #292131 - currently we specify --log=all:<level>, which
overrides all other log areas. Specifying this first allows the
further log areas to be specified without being replaced.
2024-02-29 21:02:26 +00:00
github-actions[bot] c7d7e4a7a5
Merge staging-next into staging 2024-02-29 18:01:30 +00:00
Kerstin 51363e5c0d
Merge pull request #280628 from h7x4/nixos-module-update-kanidm-add-backup-dir-to-bindpaths
nixos/kanidm: declare `online_backup` options
2024-02-29 15:19:34 +01:00
Michele Guerini Rocco 11b122ec70
Merge pull request #292185 from dotlambda/searxng-mainProgram
searxng: set meta.mainProgram
2024-02-29 14:19:51 +01:00
Hans Christian Schmitz 3f86bd950c
nixos/pipewire: add docs for passthru.requiredLv2Packages 2024-02-29 13:28:04 +01:00
Hans Christian Schmitz b97450b007
nixos/wireplumber: fix incorrect option name in docs 2024-02-29 13:28:04 +01:00
github-actions[bot] 81a57dc133
Merge staging-next into staging 2024-02-29 12:02:30 +00:00
Arnout Engelen 728d2d1fd9
Merge pull request #287805 from raboof/sway-update-to-1.9
sway: 1.8.1 -> 1.9.0
2024-02-29 12:06:52 +01:00
Arnout Engelen 36e51d7cbf
sway: 1.8.1 -> 1.9.0
Co-authored-by: Phileas Lebada <norpol@users.noreply.github.com>
Co-authored-by: éclairevoyant <848000+eclairevoyant@users.noreply.github.com>
2024-02-29 11:37:30 +01:00
networkException 644eac31e6
nixos/matrix-sliding-sync: document unix socket support in SYNCV3_BINDADDR 2024-02-29 11:03:01 +01:00
Leona Maroni 3302864e6e
Merge pull request #292030 from Flakebi/paperless
paperless: fix uploading files via local folder
2024-02-29 08:10:28 +01:00
Martin Weinelt 65b31e498a Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
- pkgs/development/python-modules/influxdb/default.nix
- pkgs/development/tools/misc/binutils/default.nix
2024-02-29 07:19:15 +01:00
Robert Schütz 603c5af519 nixos/tests/searx: use configured package for static content
Also use the simple theme because upstream dropped the oscar one:
https://github.com/searxng/searxng/discussions/1167
2024-02-28 17:51:29 -08:00
Robert Schütz 3330e3c9c3 nixos/searx: use lib.getExe 2024-02-28 17:51:24 -08:00
Franz Pletz 317a383090
Merge pull request #292189 from nagisa/fixes-systemd-upheldBy-propagation 2024-02-29 02:08:56 +01:00
Silvan Mosberger 8e6598a68c
Merge pull request #286399 from benaryorg/global_ini_alt2
pkgs.formats: pkgs.formats version of lib.generators.toINIWithGlobalSection
2024-02-29 01:20:37 +01:00
Simonas Kazlauskas 34c5cc74a1 systemd: fix propagation of upheldBy option to units 2024-02-29 02:01:24 +02:00
Silvan Mosberger cd5dc76d83 substitute: Deprecate replacements, introduce replacementsList
Also:
- Add tests
- Treewide update
- Improve docs
2024-02-29 00:35:27 +01:00
abysssol 8720397720 nixos/ollama: replace incorrect use of overrideAttrs
The bug prevents nixos from compiling
if the ollama service is built with cuda enabled.
2024-02-28 17:15:30 -05:00
Adam C. Stephens 8ed07da2ed
Merge pull request #290433 from adamcstephens/consul/tests
nixos/tests/consul: enable unfree
2024-02-28 13:35:48 -05:00
Adam C. Stephens 6b834b5e9a
Merge pull request #290570 from adamcstephens/lxc/sysctl
nixos/lxc/generator: remove sysctl error handling
2024-02-28 13:34:48 -05:00
K900 ba13f3e524 nixos/doc: typo 2024-02-28 20:26:55 +03:00
Adam Stephens 5f1b65f75f
nixos/tests/incus: ensure sysctl rules apply successfully to lxc containers 2024-02-28 11:59:39 -05:00
Julian Stecklina 3661b3ee53 nixosTests.virtualbox: add happy path KVM test
The KVM support is still new and experimental. There is no point in
doing extensive testing. Just check whether it works in general.
2024-02-28 17:43:43 +01:00
Julian Stecklina 77c7ac6c35 nixosTests.virtualbox: allow additional parameters for tests 2024-02-28 17:36:22 +01:00
Julian Stecklina a9822fa200 nixos/virtualbox-host: expose option to run with KVM 2024-02-28 17:36:22 +01:00
K900 6a711189fc nixos/doc: release note for Plasma 6 2024-02-28 18:56:31 +03:00
K900 7d93928492 nixos/release: add Plasma 6 ISO variant 2024-02-28 18:49:33 +03:00
K900 2614e40893 sddm: add Wayland to the wrapper if enabled 2024-02-28 18:49:33 +03:00
K900 7b74d9a4ac sddm: 0.20.0-unstable -> 0.21.0 2024-02-28 18:49:33 +03:00