swendel/nixpkgs
1
0
Fork 0
mirror of https://github.com/SebastianWendel/nixpkgs.git synced 2024-10-01 01:20:17 +02:00
Code Issues Packages Projects Releases Wiki Activity
325373 commits 5 branches 0 tags 31 GiB
Commit graph

23746 commits

Author SHA1 Message Date
Jacek Galowicz 5c666cdf62 Re-RAII-ify the NixOS integration test driver's VLAN class. 
We have no usecase for manually/selectively starting or stopping VLANs
in integration tests.
By starting and stopping the VLANs with the constructor and destructor
of VLAN objects, we remove the obligation and complexity to maintain
network lifetime separately.
 2021-10-05 14:38:48 -05:00
Antoine Eiche 32face8dea nixos.tests.udisks2: state_dir is now of type pathlib.Path 2021-10-05 14:38:48 -05:00
Antoine Eiche af859d1df1 nixos.tests.usbguard: state_dir is now of type pathlib.Path 2021-10-05 14:38:48 -05:00
Maximilian Bosch 3f63e3ce65 nixos/test-driver: fix graphics for VM 
`-nographic` should only be set if no display is available. Otherwise,
tools such as `nixos-build-vms(8)` will never open up a graphical
display.
 2021-10-05 14:38:48 -05:00
Maximilian Bosch b2e59bcf77 nixos/build-vms: fix eval 2021-10-05 14:38:48 -05:00
David Arnold b0fc9da879 nixos/test/test-driver: Class-ify the test driver 
This commit encapsulates the involved domain into classes and
defines explicit and typed arguments where untyped dicts where used.

It preserves backwards compatibility through legacy wrappers.
 2021-10-05 14:38:48 -05:00
Maximilian Bosch f8feb1ad27
Merge pull request #139604 from mitchmindtree/nextcloud-objectstore 
nixos/nextcloud: Add option for using object storage as primary storage
 2021-10-05 20:52:24 +02:00
Sandro 947fb3818f
Merge pull request #140604 from obadz/earlyoom-stderr 2021-10-05 17:16:59 +02:00
obadz b4981eb8e1 earlyoom module: log stderr to journald 
(Default is to do the same as stdout which is > /dev/null)
 2021-10-05 12:03:24 +01:00
Naïm Favier c53c69ab17
nixos: fixes after #136909 2021-10-05 12:48:43 +02:00
Yureka 2384362ca7 nixos/gitea: fix eval after #136909 2021-10-05 12:35:34 +02:00
Eelco Dolstra f18bf9b9f1
Merge pull request #140519 from lovesegfault/no-auto-install 
command-not-found: remove NIX_AUTO_INSTALL
 2021-10-05 11:15:47 +02:00
Matt McHenry a2a0a58f7c
less: improve default settings (#139988) 
* less: enable by default and set LESS=-R via lesskey

* since we set PAGER=less, programs.less.enable should default to
  true.

* some programs, notably git, set a custom LESS environment if none is
  present.  using the lesskey mechanism to set LESS=-R lets such
  programs continue to run less as they see fit.

This reverts commit 0e7b4e60a8.

* less: remove use of deprecated lesskey binary format

* less: enable in environment.nix rather than less.nix

per discussion in #139988
 2021-10-05 11:13:48 +02:00
Andreas Rammhold 0873980dc8
Merge pull request #139754 from eyJhb/networkd-iaid 
nixos/networkd: added IAID, DUIDType and DUIDRawData to DHCPv6 section
 2021-10-05 10:06:05 +02:00
eyjhb f4c69e198c
nixos/bitlbee: switched to systemd DynamicUser 2021-10-05 09:52:09 +02:00
mitchmindtree c5d08ebee1 nixos/nextcloud: Fix ambiguity in objectstoreConfig string 
Previously this was a little tricky to read and had the potential to
cause some ambiguity in string parsing.
 2021-10-05 17:07:44 +10:00
Maciej Krüger 20eeb1e09e
Merge pull request #138811 from mkg20001/htop 2021-10-05 06:33:40 +02:00
Maciej Krüger a425421e28
nixos/htop: add module 
This module allows setting global configuration for htop in /etc/htoprc,

for example to disable showing userland threads by default

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

Co-authored-by: Aaron Andersen <aaron@fosslib.net>
 2021-10-05 06:00:43 +02:00
Kevin Cox ed5403efc3
nixos.mautrix-facebook: init module 
This is the first version of the mautrix-facebook module. Due to lack of secret support on NixOS as well as the requirement of a homeserver domain it requires some setup. For completeness here is my working config using NixOps secrets:

```nix
deployment.keys."mautrix-facebook-config.env" = {
	text = ''
		MAUTRIX_FACEBOOK_APPSERVICE_AS_TOKEN=${secrets.as_token}
		MAUTRIX_FACEBOOK_APPSERVICE_HS_TOKEN=${secrets.hs_token}
	'';
	destDir = "/var/keys";
};

deployment.keys."mautrix-facebook-registration.yaml" = {
	text = builtins.toJSON config.services.mautrix-facebook.registrationData;
	destDir = "/var/keys";
	user = "matrix-synapse";
};

users.users.matrix-synapse.extraGroups = ["keys"];

systemd.services.matrix-synapse.after = ["keys.service"];
systemd.services.matrix-synapse.wants = ["keys.service"];

services.mautrix-facebook = {
	enable = true;
	settings = {
		homeserver.domain = "bots.kevincox.ca";

		bridge = {
			displayname_template = "{displayname}";

			permissions = {
				"@kevincox:matrix.org" = "admin";
			};
		};
	};

	environmentFile = "/var/keys/mautrix-facebook-config.env";

	registrationData = {
		as_token = secrets.as_token;
		hs_token = secrets.hs_token;
	};
};

systemd.services.mautrix-facebook = rec {
	wants = ["keys.target"];
	after = wants;
};

services.matrix-synapse.app_service_config_files = [
	"/var/keys/mautrix-facebook-registration.yaml"
];
```
 2021-10-04 18:40:28 -04:00
Bernardo Meurer c301c1995e
command-not-found: remove NIX_AUTO_INSTALL 2021-10-04 12:43:39 -07:00
Robert Hensing 0699530f08
Merge pull request #136909 from ncfavier/cleanup-defaults-examples 
nixos/doc: clean up defaults and examples
 2021-10-04 20:37:42 +02:00
Naïm Favier 2ddc335e6f
nixos/doc: clean up defaults and examples 2021-10-04 12:47:20 +02:00
Félix Baylac-Jacqué 73846b372f
nixos/acme: add webroots to ReadWritePaths 
Since 7a10478ea7, all /var except
/var/lib/acme gets mounted in a read-only fashion. This behavior
breaks the existing acme deployments having a webroot set outside of
/var/lib/acme.

Collecting the webroots and adding them to the paths read/write
mounted to the systemd service runtime tree.

Fixes #139310
 2021-10-04 10:08:35 +02:00
Timothy DeHerrera 1c0a20efcf create-amis.sh: fix typo 2021-10-03 19:03:28 -07:00
Timothy DeHerrera 2d67b946b7 create-amis.sh: use status message 
The progress ID is fairly useless. Status message is more useful for
humans.
 2021-10-03 19:03:28 -07:00
Timothy DeHerrera 407998d15a create-amis.sh: add support for the ZFS AMIs 2021-10-03 19:03:28 -07:00
Timothy DeHerrera 1ff82fec9a create-amis.sh: allow uploading private AMIs 2021-10-03 19:03:28 -07:00
Timothy DeHerrera 0543f2d2f6 create-amis.sh: make vars overridable from env 2021-10-03 19:03:28 -07:00
Naïm Favier 330b1e08b8
nixos/lib/make-options-doc: implement literalDocBook 2021-10-03 17:59:44 +02:00
Guillaume Girol 2b0a7ef8f2 nixos/hqplayerd: do not make manual depend on (unfree) hqplayerd 2021-10-03 12:00:00 +00:00
OPNA2608 bfd58f3cf3 nixos/gkraken: init 2021-10-03 12:42:55 +02:00
rnhmjoj 31790c81dc
nixos: make setgid wrappers root-owned 2021-10-03 11:44:57 +02:00
mitchmindtree a539a82707 nixos/nextcloud: Account for nix_read_secret refactor in exception msg 
Previously, the `nix_read_pwd` function was only used for reading the
`dbpassFile`, however it has since been refactored to handle reading
other secret files too. This fixes the message of the exception that is
thrown in the case that the file is not present so that it no longer
refers specifically to the `dbpass` file.
 2021-10-03 17:29:13 +10:00
mitchmindtree fbffaddefe nixos/nextcloud: Make objectstore.s3.useSsl explicitly true by default 
This appears to match the nextcloud default behaviour observed here:

e2116e2fb2/lib/private/Files/ObjectStore/S3ConnectionTrait.php (L83)
 2021-10-03 16:38:56 +10:00
mitchmindtree b23d6a4113 nixos/nextcloud: Simplify objectstore.s3 options, remove submodule 
Removes the submodule in favour of using an attrset.

Also:

- Makes better use of nix's laziness in config expansion.
- Makes use of `boolToString` where applicable.
 2021-10-03 16:38:03 +10:00
Jörg Thalheim 0f5218878c
Merge pull request #140343 from Artturin/cfdynststartat 
cfdyndns: fix startAt by setting it to *:0/5 instead of 5 minutes
 2021-10-03 06:37:27 +01:00
Artturin 2e4938eb6a cfdyndns: fix startAt by setting it to *:0/5 instead of 5 minutes 
5 minutes is invalid for startAt
 2021-10-03 08:06:37 +03:00
mitchmindtree 03171ae31a nixos/nextcloud: Remove objectstore.s3.secret option 
We should discourage users from adding secrets in a way that allows for
them to end up in the globally readable `/nix/store`. Users should use
the `objectstore.s3.secretFile` option instead.
 2021-10-03 12:52:13 +10:00
mitchmindtree 1ed93ac4a1 nixos/nextcloud: Add option for using object storage as primary storage 
This allows to declaratively configure an S3 class object storage as the
primary storage for the nextcloud service. Previously, this could only
be achieved by manually editing the `config.php`.

I've started testing this today with my own digitalocean nextcloud
instance, which now points to my digitalocean S3-compatible "Space" and
all appears to be working smoothly.

My motivation for this change is my recent discovery of how much cheaper
some S3-compatible object storage options are compared to digitalocean's
"Volume" options.

Implementation follows the "Simple Storage Service" instructions here:

https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/primary_storage.html

I have neglected to implement a submodule for the OpenStack Swift
object storage as I don't personally have a use case for it or a method
to test it, however the new `nextcloud.objectstore.s3` submodule should
act as a useful guide for anyone who does wish to implement it.
 2021-10-03 12:52:06 +10:00
Domen Kožar 21b1cfe684
Merge pull request #139451 from jansol/master 
pipewire: 0.3.36 -> 0.3.38
 2021-10-02 19:30:15 -05:00
Robert Hensing c3bf08d1b0
Merge pull request #139431 from erikarvstedt/etc-simplify-source 
nixos/etc: simplify source path handling
 2021-10-03 00:50:39 +02:00
Thomas Tuegel 000e81bff6
Merge pull request #101725 from andir/master 
nixos/plasma5: Install default KDE apps for music, images and documents
 2021-10-02 15:56:12 -05:00
ajs124 352bb62051
Merge pull request #138058 from helsinki-systems/upd/varnish 
varnish6/7: updates
 2021-10-02 16:30:57 +02:00
Sandro 50b79f0270
Merge pull request #140178 from SuperSandro2000/SuperSandro2000-patch-1 2021-10-01 23:59:04 +02:00
Maximilian Bosch cdb48d75c0
Merge pull request #140159 from Ma27/nextcloud-misc 
nextcloud: misc changes
 2021-10-01 21:08:31 +02:00
Artturi 8296c4d226
Merge pull request #140096 from Artturin/gdmoptions 2021-10-01 21:27:19 +03:00
Maximilian Bosch 598ad679d8
Merge pull request #140045 from SebTM/add_tp-auto-kbbl 
tp-auto-kbbl: init at 0.1.5
 2021-10-01 19:59:06 +02:00
Artturin 33b7bd2675 nixos/gdm: switch to rfc42 style settings 2021-10-01 20:53:49 +03:00
Sandro 5d53e38d24
nixos/gitea: switch default log level to Info 2021-10-01 19:52:35 +02:00
Maximilian Bosch d022b4987a
Merge pull request #140089 from yayayayaka/nextcloud-21.0.5 
nextcloud: 20.0.12 -> 20.0.13, 21.0.4 -> 21.0.5, 22.1.1 -> 22.2.0
 2021-10-01 18:40:06 +02:00
Lassulus 1b94d11c92
Merge pull request #102354 from erikarvstedt/extra-container 
extra-container: init at 0.8
 2021-10-01 17:57:47 +02:00
Maximilian Bosch 10703a8c92
nixos/nextcloud: run tests against each Nextcloud instance 2021-10-01 17:03:32 +02:00
Maximilian Bosch 66edc1e846
nixos/nextcloud: use php8 where possible 2021-10-01 17:03:09 +02:00
Maximilian Bosch 675e262f5a
nixos/nextcloud: temp fix for MariaDB >=10.6 
The MariaDB version 10.6 doesn't seem supported with current Nextcloud
versions and the test fails with the following error[1]:

    nextcloud # [   14.950034] nextcloud-setup-start[1001]: Error while trying to initialise the database: An exception occurred while executing a query: SQLSTATE[HY000]: General error: 4047 InnoDB refuses to write tables with ROW_FORMAT=COMPRESSED or KEY_BLOCK_SIZE.

According to a support-thread in upstream's Discourse[2] this is because
of a missing support so far.

Considering that we haven't received any bugreports so far - even though
the issue already exists on master - and the workaround[3] appears to
work fine, an evaluation warning for administrators should be
sufficient.

[1] https://hydra.nixos.org/build/155015223
[2] https://help.nextcloud.com/t/update-to-next-cloud-21-0-2-has-get-an-error/117028/15
[3] setting `innodb_read_only_compressed=0`
 2021-10-01 15:25:31 +02:00
Sebastian Sellmeier f0d1af9bd4
tp-auto-kbbl: init at 0.1.5 2021-10-01 13:12:58 +02:00
Jörg Thalheim 2aaf072d27
Merge pull request #138548 from queezle42/master 
lirc: Set a writable lockdir
 2021-10-01 08:23:51 +01:00
Raymond Gauthier 953bbc0d73
nixos/teamviewer: fix issue #44307 
Move to a forefront launch of the daemon. Doing so allowed us
to move the service from forking to simple to avoid the
missing pid  error log.

Also:

 -  Make the dbus dependency explicit.
 2021-09-30 19:36:45 -04:00
Erik Arvstedt a807cd3a00
nixos/extra-container: init 2021-09-30 22:52:14 +02:00
Raymond Gauthier 200e959995
nixos/teamviewer: fix issue #96633 
Add teamviewer package as a dbus package now that the
client / server communication depends on dbus.
 2021-09-30 16:08:57 -04:00
ajs124 145f628f69 varnish65*: drop because it is EOL upstream 
varnish66 could be introduced, but I don't think it's worth the effort
 2021-09-30 20:26:39 +02:00
happysalada 8346dc04b3 pict-rs: add initial module 2021-09-30 21:32:25 +09:00
Thomas Tuegel bf84010052
Merge pull request #139537 from CertainLach/plasma5-load-kwayland-integration 
plasma5: load kwayland-integration plugin
 2021-09-29 20:32:02 -05:00
Samuel Dionne-Riel eaf85fe8c7
Merge pull request #139957 from samueldr/fix/126289-regression 
Provide submodule to `security.wrappers` for older kernels
 2021-09-29 18:30:50 -04:00
Samuel Dionne-Riel 110165b784 Provide submodule to security.wrappers for older kernels 
Fixes a regression from #126289
 2021-09-29 16:10:27 -04:00
Michele Guerini Rocco b73d851b30
Merge pull request #139844 from rnhmjoj/qemu-fixup 
nixos/qemu: use set -e in shell script
 2021-09-29 19:01:44 +02:00
Michele Guerini Rocco 28e1ca8ebf
Merge pull request #139907 from rnhmjoj/test-fixes 
nixos/tests: fix for memorySize being an integer
 2021-09-29 16:54:32 +02:00
rnhmjoj 58be230026
nixos/tests/custom-ca: falkon -> qutebrowser 
Use qutebrowser as the QtWebEngine test case because falkon has been
broken for a while.
 2021-09-29 16:35:08 +02:00
Steve Purcell 4b518f4aa9 n8n: remove systemd option incompatible with nodejs 
The MemoryDenyWriteExecute systemd option is widely known to be
incompatible with nodejs, and causes service crashes as reported in #119687.

Fixes #119687.
 2021-09-29 14:21:13 +00:00
rnhmjoj 7960244eb1
nixos/tests: fix for memorySize being an integer 2021-09-29 15:51:06 +02:00
Alyssa Ross d69583c6c2 opencv2: don't build unfree libraries by default 
In opencv 2.x, unfree libraries are built by default.  The package
should therefore have been marked as unfree, but wasn't.

I've disabled the non-free libraries by default, and added an option
to enable them.  There are three programs in Nixpkgs that depend on
opencv2: mathematica, pfstools, and p2pvc.  pfstools requires the
non-free libraries if it's built with opencv support, so I've disabled
opencv by default there and added an option to enable it.  p2pvc links
fine, so presumably doesn't need the non-free libraries.  I can't test
mathematica, so I'm just going to leave it alone.
 2021-09-29 13:39:52 +00:00
Artturi 759ffe33a0
Merge pull request #139890 from Artturin/bootfixflag 2021-09-29 16:31:06 +03:00
Robert Hensing 286c71a230
Merge pull request #139892 from hercules-ci/dockerTools-test-pullImage 
dockerTools: test pullImage
 2021-09-29 15:27:49 +02:00
Robert Hensing ae03fb8121
Merge pull request #80068 from jbedo/docker 
dockerTools: fix export
 2021-09-29 14:55:21 +02:00
Robert Hensing 16a4da9127 dockerTools: Test pullImage fetcher whenever its implementation changes 2021-09-29 14:41:08 +02:00
Artturin c34905f516 nixos/boot: qemu-flags -> qemu-common 
and dont use with import ...
 2021-09-29 15:37:24 +03:00
Justin Bedo 020e88bf7a
nixos/tests/docker-tools: check explicitly for file in exportImage 2021-09-29 21:40:31 +10:00
Michele Guerini Rocco e68eba2dba
Merge pull request #134618 from rnhmjoj/wpa-safe 
nixos/wpa_supplicant: add safe secret handling
 2021-09-29 13:35:29 +02:00
Maximilian Bosch 7d890267d1
Merge pull request #139665 from Ma27/drop-linux-5.13 
linux_5_13: drop
 2021-09-29 13:10:10 +02:00
Sandro 8c56eae689
Merge pull request #139823 from sorpaas/patch-3 2021-09-29 11:32:53 +02:00
rnhmjoj 3a0437d2b0
nixos/release-notes: document wpa_supplicant changes 2021-09-29 09:10:39 +02:00
rnhmjoj 62126f8c15
nixos/tests/wpa_supplicant: init 2021-09-29 09:10:39 +02:00
rnhmjoj 52b9dd7bf6
nixos/wpa_supplicant: add safe secret handling 2021-09-29 09:10:39 +02:00
rnhmjoj 1497e8f5f5
nixos/qemu: use set -e in shell script 
Also fix this: https://github.com/koalaman/shellcheck/wiki/SC2166
 2021-09-29 08:46:03 +02:00
Justin Bedo 0319228a45
docker-tools: add example for exportImage functionality and test 2021-09-29 15:35:21 +10:00
Jens Nolte e66332826a lirc: Set a writable lockdir 2021-09-29 05:36:56 +02:00
Timothy DeHerrera 895f3956d2
Merge pull request #127933 from rnhmjoj/qemu-restoration 
Qemu restoration
 2021-09-28 21:35:23 -06:00
Wei Tang 3158087c78
tarsnap: always ping ipv4 address in preStart 2021-09-29 03:09:13 +02:00
Benjamin Staffin 5c7c38f61d
Merge pull request #139420 from Flakebi/dex 
dex-oidc: 2.28.1 -> 2.30.0 and add module
 2021-09-28 16:52:35 -04:00
Doron Behar 6cd8d67251
Merge pull request #117890 from milahu/patch-3 
locate.nix: write /etc/updatedb.conf
 2021-09-28 16:03:21 +00:00
eyjhb 4b8bd41060
nixos/networkd: added IAID, DUIDType and DUIDRawData to DHCPv6 section 2021-09-28 15:33:06 +02:00
Peter Hoeg aed860f876 nixos/zoneminder: not using zoneminder any longer 2021-09-28 09:21:08 +08:00
Maximilian Bosch 01eb8ec98a
linux_5_13: drop 
5.13.19 was the last 5.13 release and the version is now EOL[1].

[1] https://lwn.net/Articles/869747/
 2021-09-27 23:29:53 +02:00
Pavel Borzenkov 80f7656229 calibre-web: 0.6.12 -> 0.6.13 
calibre-web no longer starts without proper calibre DB path configured,
so the default testcase (completely unconfigured) is removed.
 2021-09-27 20:51:30 +02:00
Elis Hirwing fb55c86904
Merge pull request #138742 from etu/zfs-syncoid-parent-permission-delegation 
nixos/syncoid: Delegate permissions to parent dataset if target is missing
 2021-09-27 19:55:32 +02:00
Elis Hirwing f5f386d297
nixos/syncoid: Delegate permissions to parent dataset if target is missing 
This is to address a regression introduced in #131118.

When syncing the first dataset, syncoid expects that the target
dataset doesn't exist to have a clean slate to work with. So during
runtime we'll check if the target dataset does exist and if it doesn't
- delegate the permissions to the parent dataset instead.

But then, on unallow, we do the unallow on both the target and the
parent since the target dataset should have been created at this
point, so the unallow can't know which dataset that got permissions
just by which datasets exists.
 2021-09-27 19:29:14 +02:00
Graham Christensen 6c88e85807
Merge pull request #133726 from deshaw/fastly-exporter 
prometheus-fastly-exporter: init at v6.1.0
 2021-09-27 11:09:33 -04:00
markuskowa e3e5fc9bf1
Merge pull request #136925 from Artturin/snapperfix 
nixos/snapper: change timer wantedBy to timers.target & add snapshotOnBoot
 2021-09-27 14:13:34 +02:00
Michele Guerini Rocco d64827a3a1
Merge pull request #139594 from deviant/postfix-virtual-section 
nixos/postfix: Fix virtual alias manpage section
 2021-09-27 13:43:41 +02:00
Brecht Savelkoul 8a585fd5c5 nixos/lighttpd: support new authentication modules 2021-09-27 07:33:27 +02:00
V cc49c13a6b nixos/postfix: Fix virtual alias manpage section 
virtual(8) is for virtual mailboxes, not aliases.
 2021-09-27 06:39:27 +02:00
Jörg Thalheim 59cb7a87d7
Merge pull request #137124 from helsinki-systems/feat/activation-script-restart 
nixos/switch-to-configuration: Allow activation scripts to restart units
 2021-09-26 15:46:38 +01:00
Yaroslav Bolyukin de5ffe51f6
plasma5: load kwayland-integration plugin 
Signed-off-by: Yaroslav Bolyukin <iam@lach.pw>
 2021-09-26 17:26:23 +03:00
Aaron Andersen 57f1ee46e4
Merge pull request #136233 from MayNiklas/owncast 
nixos/owncast: init at 0.0.8
 2021-09-25 15:25:13 -04:00
Mikael Voss 5f9e069984
modules/nix-daemon: Explain nice level limitations 2021-09-25 20:43:06 +02:00
Jan Solanti c12e8a63ba pipewire: 0.3.36 -> 0.3.37 2021-09-25 17:51:39 +03:00
MayNiklas 69cb5e3dc6 nixos/owncast: release notes 2021-09-25 16:28:06 +02:00
Leo Maroni e95a50a64b
nixos/networkd: add ActivationPolicy option 2021-09-25 16:03:42 +02:00
happysalada 0f9a1d70fa meilisearch: add docs 2021-09-25 21:45:52 +09:00
Erik Arvstedt 654f41435b
nixos/etc: simplify source path handling 
This change is strictly functionally equivalent because we're just
lifting the transformation of `source` out of `mapAttrs` to the single point of
use (in escapeShellArgs).

This is also much faster because we can skip a map over all `etc` items.
 2021-09-25 14:44:38 +02:00
Flakebi 6ca43a69cc
dex-oidc: add module 2021-09-25 13:12:51 +02:00
Michele Guerini Rocco 828a3b5d93
Merge pull request #139367 from andersk/gnome-shell-wrapped 
nixos/gnome: Fix broken .gnome-shell-wrapped wrapper
 2021-09-25 10:12:51 +02:00
Anders Kaseorg 98fe3260c6 nixos/gnome: Fix broken .gnome-shell-wrapped wrapper 
The owner and group options are required after #126289.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
 2021-09-24 17:58:08 -07:00
Kim Lindberger 0686c40309
Merge pull request #139180 from ryantm/dev/ryantm/discourse-tmp 
discourse: enable restoring backups bigger than RAM
 2021-09-24 14:31:46 +02:00
Ryan Burns 40299257cc Merge branch 'master' into staging-next 2021-09-23 18:43:00 -07:00
Sandro 3d2ed13aaa
Merge pull request #139189 from yurrriq/helm-3.7.0 2021-09-23 21:29:10 +02:00
Kim Lindberger 3d3b1a7039
Merge pull request #138852 from ryantm/dev/ryantm/discourse-skip-create 
nixos/discourse: add discourse.admin.skipCreate option
 2021-09-23 19:09:59 +02:00
Ryan Mulligan f933c68374 discourse: enable restoring backups bigger than RAM 
When restoring a backup, discourse decompresses the backup archive in
the /share/discourse/tmp dir. Before this change, it is linked to /run
which is typically backed by memory, so the backup will fail to
restore if you do not have enough memory on your system to contain the
backup. This has already happened to me on two small forums.

This moves tmp to the StateDirectory /var/lib/discourse/tmp which is
typically backed by disk.
 2021-09-23 09:59:31 -07:00
Eric Bailey bbdb34607e kubernetes-helm: 3.6.3 -> 3.7.0 2021-09-23 11:26:20 -05:00
Michele Guerini Rocco 51bcdc4cda
Merge pull request #139026 from rnhmjoj/kube-fix 
nixos/kubernetes: fix containerd settings
 2021-09-23 17:35:13 +02:00
rnhmjoj 5ca89402ee
nixos/trafficserver: avoid input from derivation 
Using builtins.readFile to load upstream defaults is a clever trick, but
it's not allowed in restricted evaluation mode: which means it fails on
Hydra, for example. Besides - in Nixpkgs - depending on derivation as
inputs is considered bad practice and should be avoided.
 2021-09-23 12:52:31 +02:00
MayNiklas 1f934dad30 nixos/owncast: init owncast service 2021-09-23 10:48:29 +02:00
Thomas Hobson 69c606bcc9
transmission: fix error when watch-dir is enabled 2021-09-23 20:47:23 +12:00
Artturin 7001a46766 nixos/snapper: services.snapperd sync serviceConfig with upstream 2021-09-23 05:54:19 +03:00
Artturin 25d3e6d01f nixos/snapper: add snapshotRootOnBoot option 2021-09-23 05:54:11 +03:00
github-actions[bot] 796a5df129
Merge master into staging-next 2021-09-23 00:01:50 +00:00
rnhmjoj 6de529c64a
nixos/kubernetes: fix containerd settings 
mkDefault must be applied to each setting individually, otherwise a
single change to `containerd.settings` replaces the whole attribute set.
 2021-09-23 00:21:40 +02:00
rnhmjoj b6fbbe768d
nixos/containerd: use v2 settings by default 
Kubernetes is using v2 setting names and is the only module
in Nixpkgs using containerd, so it makes sense to upgrade.
 2021-09-23 00:18:58 +02:00
Rickard Nilsson d30701f2f1
nixos/opensmtpd: Add missing brackets in config (#138989) 
* nixos/opensmtpd: Add missing brackets in config

Without this commit, you end up missing the sendmail suid wrapper,
because the "program" attribute would not override the right thing.

* Update nixos/modules/services/mail/opensmtpd.nix

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2021-09-22 22:01:39 +02:00
Maximilian Bosch e4e5deaa34
Merge pull request #138931 from Ma27/safeeyes-appdata 
nixos/safeeyes: misc improvements
 2021-09-22 20:36:33 +02:00
github-actions[bot] 09a7436fcc
Merge master into staging-next 2021-09-22 18:01:01 +00:00
Vladimír Čunát 8be5516756
Merge #138918: Fix several NixOS errors in Hydra evaluation 
In particular, this should unblock the trunk-combined jobset.
 2021-09-22 17:28:37 +02:00
rnhmjoj 5abd562a18
nixos/kubernetes: fix deprecation warning 
The option `containerd.configFile` has been replaced by an equivalent
`settings` attribute set.
 2021-09-22 16:11:49 +02:00
rnhmjoj 22d05f8fa2
nixos/plotinus: fix evaluation 
Apparently setting a variable via `environment.variables` when the same
is already present in `environment.sessionVariables` (that is merged
into the former option) creates a conflict.

For reference: this started with the change in #101274.
 2021-09-22 15:53:29 +02:00
rnhmjoj a8576d4053
nixos/tests/mpv: remove deprecated mpv-with-scripts 
It has been replaced by wrapMpv in 2020-05-22.
 2021-09-22 15:40:59 +02:00
rnhmjoj cbd515e44c
nixos/tests/atop: remove top-level string 
Attributes in the top-level of a test should be derivations,
otherwise they will cause an evaluation failure in hydra.
 2021-09-22 15:07:15 +02:00
rnhmjoj 699b8d671d
nixos/tests/wasabibackend: fix bitcoind config 
Since c6017d98 services.bitcoind is submodule.
 2021-09-22 14:48:14 +02:00
Maximilian Bosch f59c862770
nixos/safeeyes: add safeeyes to the global path 
This will be needed for e.g. the settings dialog to work properly.
 2021-09-22 13:12:27 +02:00
Maximilian Bosch 693ccbac67
nixos/safeeyes: add alsa-utils for aplay to the service's path 
This is needed in order to use the `audiblealert`-plugin which requires
`aplay` to be available to work.
 2021-09-22 13:07:33 +02:00
rnhmjoj df49f6565c
nixos/tests/pantheon: fix missing lib 2021-09-22 12:59:09 +02:00
rnhmjoj c744ecb69f
nixos/tests/systemd-networkd-ipv6-prefix-delegation: fix wrapper 
The owner,group options are mandatory after #126289.
 2021-09-22 12:40:03 +02:00
rnhmjoj b53a5b91b9
nixos/atop: fix broken wrapper 
The setuid,owner,group options are mandatory after #126289.
 2021-09-22 12:38:19 +02:00
Alyssa Ross b898e958da
Merge remote-tracking branch 'nixpkgs/master' into staging-next 
Conflicts:
	pkgs/os-specific/linux/libfabric/default.nix
	pkgs/tools/filesystems/btrfs-progs/default.nix
 2021-09-22 10:07:27 +00:00
rnhmjoj 196621010c
nixos/tests/mariadb-galera-rsync: fix nogroup 
This fixes the evaluation after for #133166.
 2021-09-22 11:49:11 +02:00
rnhmjoj 113cc7b136
nixos/tests/mariadb-galera-mariabackup: fix nogroup 
This fixes the evaluation after for #133166.
 2021-09-22 11:46:30 +02:00
rnhmjoj 20ad669618
nixos/tests/minio: fix deprecation warning 
The `accessKey` and `secretKey` options have been deprecated in favour
of the new `rootCredentialsFile`.
 2021-09-22 11:35:22 +02:00
rnhmjoj 87d76b1783
nixos/tests/mysql: fix nogroup 
This fixes the evaluation after for #133166.
 2021-09-22 11:20:30 +02:00
rnhmjoj 08cd8667ee
nixos: filalex77 -> Br1ght0ne 
The maintainers has changed username in 512c3c0a.
 2021-09-22 11:20:30 +02:00
rnhmjoj 1f55c7e022
nixos/tests: drop latestKernel.hardened 
The latest kernel does not guarantee a hardened version anymore,
see ga5341beb for the motivation.
 2021-09-22 11:20:30 +02:00
rnhmjoj 88b3c29cf1
nixos: heimdalFull -> heimdal 
The package has been renamed in 2018-05-01.
 2021-09-22 11:20:30 +02:00
rnhmjoj 3f10924949
nixos/flannel: pkgs.etcdctl -> pkgs.etcd 
The package has been renamed in 2018-04-25.
 2021-09-22 11:20:30 +02:00
rnhmjoj 1f826a7164
nixos/tests/ec2: fix conflicting option values 2021-09-22 11:20:30 +02:00
rnhmjoj e2a668224f
nixos/tests/enlightenment: fix renamed options 
All program-specific `autoLogin` options have been unified under
`displayManager.autoLogin`.
 2021-09-22 11:20:29 +02:00
rnhmjoj 56ad0a49c8
nixos/dnscrypt-wrapper: fix nogroup 
The group was actually there but I didn't add it by mistake.
This fixes the evaluation after for #133166.
 2021-09-22 11:20:24 +02:00
rnhmjoj 169cd512d4
nixos/tests/cntr: fix evaluation 
The maintainer email address is srk@48.io, hence srk, but the attribute
name in the maintainer list is actually sorki.
 2021-09-22 09:06:50 +02:00
rnhmjoj 78b0883e2f
nixos/tests/prometheus-exporters: fix nogroup 
Add a group after the removal of the nogroup default in #133166.
 2021-09-22 09:06:50 +02:00
rnhmjoj 5b4f8afae4
nixos/tests: stdenv.lib -> lib 
These must have been reintroduced by mistake after the deprecation.
 2021-09-22 09:06:50 +02:00
Ryan Mulligan 6a9003f316 nixos/discourse: add discourse.admin.skipCreate option 2021-09-21 16:45:59 -07:00
Jörg Thalheim 5c34515b99
Merge pull request #138544 from Izorkin/fix-netdata 
nixos/netdata: fix working with disabled ipmi plugin
 2021-09-22 00:43:58 +01:00
Sandro bfc38d3d0d
Merge pull request #125966 from ju1m/apparmor 2021-09-21 22:10:10 +02:00
Sandro f18f2d87f3
Merge pull request #135284 from legendofmiracles/weylus 2021-09-21 22:04:38 +02:00
Sandro 41e2ef1012
Merge pull request #138731 from illdefined/feature/memoryallocator-mimalloc 2021-09-21 20:06:35 +02:00
github-actions[bot] 611b805c53
Merge master into staging-next 2021-09-21 18:01:16 +00:00
embr 023239912c nixos/mastodon: Add configurable web- and streaming concurrency 
Might as well do this while I'm at it.
 2021-09-21 16:35:17 +02:00
embr 8c1e6a8598 nixos/mastodon: Fix sidekiq's DB_POOL, add configurable concurrency 
The `services.mastodon` module currently hardcodes sidekiq's concurrency
to 25, but doesn't set a DB pool size, which defaults to 5 or the number
of configured web threads.

(This behaviour is very strange, and arguably a mastodon bug.)

This also makes sidekiq's concurrency configurable, because 25 is a tad
high for the hardware I'm running it on.
 2021-09-21 16:35:17 +02:00
github-actions[bot] fd3d37414d
Merge master into staging-next 2021-09-21 12:01:29 +00:00
Sandro e80237d8f4
Merge pull request #138609 from trofi/fix-smokeping 
nixos/smokeping: drop dangling fping6 suid swapper
 2021-09-21 13:44:54 +02:00
Michele Guerini Rocco 806e2b3643
Merge pull request #138748 from dschrempf/localtimed_nogroup 
nixos/localtimed: nogroup fix
 2021-09-21 13:35:30 +02:00
Souvik Sen 2f669293bf prometheus-fastly-exporter: init at v6.1.0 2021-09-21 04:05:18 -04:00
Michele Guerini Rocco 5d76e62fd0
Merge pull request #138754 from rnhmjoj/vmware-fix 
nixos/vmware-guest: fix setuid wrapper
 2021-09-21 08:36:04 +02:00
github-actions[bot] fa2601f3b2
Merge master into staging-next 2021-09-21 06:01:04 +00:00
Artturi 3b2440afd0
Merge pull request #100120 from unode/cpupower-gui 
linuxPackages.cpupower-gui: init at 1.0.0
 2021-09-21 03:37:10 +03:00
rnhmjoj 74c572d2f8
nixos/vmware-guest: fix setuid wrapper 
Since 904f68fb0, setuid/owner/group are required.
 2021-09-20 23:49:46 +02:00
Dominik Schrempf fade6648c7
nixos/localtimed: nogroup fix 2021-09-20 22:16:09 +02:00
github-actions[bot] ecf5e75910
Merge master into staging-next 2021-09-20 18:01:12 +00:00
Mikael Voss 5437b17b8e
nixos/malloc: add mimalloc 2021-09-20 19:10:28 +02:00
Jonathan Ringer 82ff732055
nixosTests.pantheon: fix evaluation 2021-09-20 09:37:09 -07:00
Michele Guerini Rocco 2fcef20cb1
Merge pull request #138600 from austinbutler/tpm2-tss-group 
nixos/tpm2: define group, fix after #133166
 2021-09-20 18:34:39 +02:00
Guillaume Girol f50fc9e7b2
Merge pull request #138582 from DarkDNA/greetd-nonogroup 
nixos/greetd: Fix for nogroup removal.
 2021-09-20 16:30:05 +00:00
Guillaume Girol f0fac59a17
nixos/tpm2: remove tss static gid 2021-09-20 16:24:33 +00:00
davidak d64c54199d
Merge pull request #138599 from bobby285271/pantheon-manual 
nixos/panthoen: mention appcenter changes in manual
 2021-09-20 18:10:29 +02:00
Michele Guerini Rocco ea1eae5b47
Merge pull request #138516 from rnhmjoj/lock-kernel-fix 
nixos/lock-kernel-modules: reorder before/after
 2021-09-20 15:13:12 +02:00
github-actions[bot] 9e5021eef4
Merge master into staging-next 2021-09-20 12:01:15 +00:00
happysalada bdd04deff5 meilisearch: module cleanup 2021-09-20 16:12:29 +09:00
happysalada 6903737a8c meilisearch: nixpkgs-fmt 2021-09-20 16:12:29 +09:00
Oleksii Filonenko be72fadd54 nixosTests.meilisearch: init 
(cherry picked from commit 4cc2d55f6ac2440843ef3387909dbc703f65397d)
 2021-09-20 16:12:29 +09:00
Oleksii Filonenko 811fe35a66 nixos/meilisearch: init 
Reviewed-by: Aaron Andersen <aanderse@users.noreply.github.com>
(cherry picked from commit 5844ea85c3ad96b8a2df9da50374c530e86a904d)
 2021-09-20 16:12:29 +09:00
Sergei Trofimovich 9000350994 nixos/smokeping: drop dangling fping6 suid swapper 
After recent change `services.smokeping.enable = true;` system
started failing the build as:

```
nixpkgs-master $ nix build --no-link -f nixos system --keep-going
...
Checking that Nix store paths of all wrapped programs exist... FAIL
The path /nix/store/kr2sr80g9ny74im6m6dyh9v44hnzm261-fping-5.0/bin/fping6 does not exist!
Please, check the value of `security.wrappers."fping6".source`.
```

`fping` does not provide `fping6` binary for a while. Let's just remove it.

Closes: https://github.com/NixOS/nixpkgs/issues/138581
 2021-09-20 07:57:56 +01:00
github-actions[bot] f666c4d10f
Merge master into staging-next 2021-09-20 06:01:17 +00:00
happysalada b51e813153 elasticsearch: support version 6 2021-09-20 14:31:02 +09:00
Bobby Rong 2610f6e0df
nixos/panthoen: mention appcenter changes in manual 2021-09-20 10:06:22 +08:00
Amanda Cameron bd28ff08d3 nixos/greetd: Fix for nogroup removal. 2021-09-19 17:37:27 -04:00
Austin Butler b88b46b830 nixos/tcsd: make group uid dynamic 2021-09-19 12:42:46 -07:00
Austin Butler 8b6fa3c821 nixos/tpm2: define group, fix after NixOS#133166 2021-09-19 12:40:54 -07:00
github-actions[bot] 78ca5a3e45
Merge master into staging-next 2021-09-19 18:01:13 +00:00
Guillaume Girol 07d82812bc
Merge pull request #138441 from symphorien/nonogroup-fixes-2 
Fixes after #133166
 2021-09-19 17:15:02 +00:00
Alyssa Ross e2bb7997c4
Merge remote-tracking branch 'nixpkgs/master' into staging-next 
Conflicts:
	nixos/doc/manual/release-notes/rl-2111.section.md
 2021-09-19 17:08:00 +00:00
Izorkin 1e54f84012
nixos/netdata: fix working with disabled ipmi plugin 2021-09-19 19:15:49 +03:00
Aaron Andersen 559449530f
Merge pull request #132319 from onny/opensnitch 
nixos/opensnitch: Add module for opensnitch
 2021-09-19 11:31:21 -04:00
Jeremy Kolb cb9167139e
vmware-guest: Use vmware-vmblock-fuse for drag-and-drop synchronization (#131278) 2021-09-19 18:15:41 +03:00
Michele Guerini Rocco 108986ab71
Merge pull request #138515 from rnhmjoj/fix-physlock 
nixos/physlock: fix broken wrapper
 2021-09-19 17:06:38 +02:00
rnhmjoj 1bd7260adb
nixos/lock-kernel-modules: reorder before/after 
Moving the service before multi-user.target (so the `hardened` test
continue to work the way it did before) can result in locking the kernel
too early. It's better to lock it a bit later and changing the test to
wait specifically for the disable-kernel-module-loading.service.
 2021-09-19 12:06:00 +02:00
rnhmjoj 64f5d681d9
nixos/physlock: fix broken wrapper 
- `user` doesn't exist -> `owner`
- set `setuid,group` as well (no longer optional)
 2021-09-19 11:53:41 +02:00
davidak dfa2dd95c2
Merge pull request #138434 from bobby285271/pantheon-team 
treewide: switch from pantheon.maintainers to lib.teams.pantheon
 2021-09-19 02:58:11 +02:00
davidak a0d68379c2
Merge pull request #138428 from bobby285271/pantheon-tweaks 
pantheon-tweaks: init at 1.0.1
 2021-09-19 02:47:37 +02:00
Michele Guerini Rocco 1cf01b5215
Merge pull request #138207 from rnhmjoj/layouts 
nixos/extra-layouts: avoid all rebuilds
 2021-09-19 01:10:55 +02:00
Guillaume Girol ceb2e6667b
Merge pull request #126289 from rnhmjoj/wrappers 
nixos/security/wrappers: make well-typed
 2021-09-18 15:28:49 +00:00
Bobby Rong 0fd8cc3908
treewide: switch from pantheon.maintainers to lib.teams.pantheon 2021-09-18 23:07:00 +08:00
rnhmjoj bd3cb03c6f
nixos/docs: document new qemu-vm features 2021-09-18 16:58:16 +02:00
rnhmjoj e4e5d4d899
nixos/documentation: always show qemu-vm options 2021-09-18 16:58:16 +02:00
rnhmjoj b29c2f97c3
nixos/lib/qemu-flags: rename to qemu-common 
The current name is misleading: it doesn't contain cli arguments,
but several constants and utility functions related to qemu.
This commit also removes the use of `with import ...` for clarity.
 2021-09-18 16:58:16 +02:00
Bobby Rong f126efd820
nixos/pantheon-tweaks: init 2021-09-18 22:49:53 +08:00
rnhmjoj b8bfc81d5b
nixos/qemu: add option to forward ports 2021-09-18 16:47:12 +02:00
rnhmjoj 44d95b773b
nixos/qemu: make display resolution configurable 2021-09-18 16:47:11 +02:00
rnhmjoj ec6c604b6e
nixos/qemu: make shared directories configurable 2021-09-18 16:47:11 +02:00
rnhmjoj 30f0faac22
nixos/qemu: add types to all options 2021-09-18 16:47:11 +02:00
rnhmjoj f1f434c4f7
nixos/qemu: cleaner formatting of the run-machine-vm script 2021-09-18 16:47:11 +02:00
rnhmjoj 2af5413cc6
nixos/qemu: set a reasonable msize by default 2021-09-18 16:47:10 +02:00
rnhmjoj 65e83389ef
nixos/qemu: fix deprecation warning 2021-09-18 16:47:10 +02:00
rnhmjoj c1fd51f490
nixos/qemu: fix several shellcheck issues 
- Fix shell quoting issues
- Fix unsafe cd in run-machine-vm script
 2021-09-18 16:46:20 +02:00
happysalada 47961c73be docs: fix release notes format 2021-09-18 23:39:59 +09:00
Jonas Heinrich 0dcac759f2 nixos/dokuwiki: Add support for Caddy web server 2021-09-18 23:09:21 +09:00
Raphael Megzari 62468d6ff7
Merge branch 'master' into staging-next 2021-09-18 22:46:18 +09:00
Guillaume Girol af5ba65b9f nixos/nntp-proxy: define group, fix after #133166 2021-09-18 14:42:08 +02:00
Guillaume Girol fa3664a176 nixos/logcheck: define group, fix after #133166 2021-09-18 14:42:08 +02:00
Guillaume Girol cd2b24c306 nixos/heapster: define group, fix after #133166 2021-09-18 14:42:08 +02:00
Guillaume Girol 9e94e48b94 nixos/gammu-smsd: define group, fix after #133166 2021-09-18 14:42:08 +02:00
Guillaume Girol ca2db671ba nixos/cgminer: define group, fix eval after #133166 2021-09-18 14:42:08 +02:00
Guillaume Girol 3e9520f414 nixos/cgminer: fix type of services.cgminer.config option 2021-09-18 14:42:08 +02:00
Guillaume Girol 8c2e6705b3 nixos/gpsd: define group, fix after #133166 2021-09-18 14:42:08 +02:00
Guillaume Girol 615db90f3d nixos/openntpd, nixos/ntp: define group, fix after #133166 2021-09-18 14:42:08 +02:00
Guillaume Girol 88b4ba2169 nixos/unifi: define group, fix after #133166 2021-09-18 14:42:08 +02:00
github-actions[bot] 7da057ad4e
Merge master into staging-next 2021-09-18 12:01:25 +00:00
Guillaume Girol 8ba5f8115c nixos/zope2: define group 
untested as the module is broken (attribute 'modules' missing)
 2021-09-18 12:00:00 +00:00
Guillaume Girol 23d14d89b8 nixos/tvheadend: define group, fix eval after #133166 2021-09-18 12:00:00 +00:00
Guillaume Girol fd04a872bc nixos/toxvpn: define group, fix eval after #133166 2021-09-18 12:00:00 +00:00
Guillaume Girol d09ab77588 nixos/shout: define group, fix eval after #133166 2021-09-18 12:00:00 +00:00
Guillaume Girol feeca7dd55 nixos/rippled: define group, fix eval after #133166 2021-09-18 12:00:00 +00:00
Guillaume Girol a654d779fe nixos/ripple-data-api: define group 
required after #133166
untested, the module is broken by the removal of couchdb
 2021-09-18 12:00:00 +00:00
Guillaume Girol 6cf8b27fd6 nixos/rdnssd: define group; fix after #133166 2021-09-18 12:00:00 +00:00
Bobby Rong 1b16dbeb55
nixos/rl-2111: mention pantheon 6 upgrade and touchegg module 2021-09-18 19:35:16 +08:00
Bobby Rong 4998805947
nixos/pantheon: prefer pantheon.epiphany 2021-09-18 19:33:41 +08:00
Bobby Rong dc19457a80
nixos/pantheon: remove lightlocker 
screen locker has been embedded in the compositor, see github.com/elementary/gala/pull/809
 2021-09-18 19:33:41 +08:00
Bobby Rong 158181403a
nixos/pantheon: enable touchegg by default 2021-09-18 19:33:41 +08:00
Bobby Rong b420199b87
nixos/pantheon: enable fwupd by default 
this is needed in switchboard-plug-about
 2021-09-18 19:33:41 +08:00
Bobby Rong a66bcfe997
nixos/pantheon: fix test command for wingpanel 2021-09-18 19:33:40 +08:00
Bobby Rong 3f3502ca93
nixos/pantheon: update excludePackages example in docs 2021-09-18 19:33:40 +08:00
Bobby Rong 760f7e57e4
nixos/pantheon: install elementary-mail by default 2021-09-18 19:33:40 +08:00
Bobby Rong 0366acbcd5
nixos/pantheon: add inter and open-dyslexic as preinstalled font 2021-09-18 19:33:40 +08:00
Bobby Rong 2478c8bf01
nixos/touchegg: init 2021-09-18 19:33:40 +08:00
Bobby Rong de73ad2567
pantheon.elementary-files: 4.5.0 -> 6.0.2 2021-09-18 19:33:38 +08:00