Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2023-01-05 | modules: add mkPackageOptionMD | pennae | 1 | -1/+1 | |
another transitional option factory, like mkAliasOptionModuleMD. | |||||
2022-12-30 | Merge pull request #208033 from ncfavier/systemd-boot-skip-regression | Naïm Favier | 2 | -6/+15 | |
2022-12-29 | nixos/systemd-boot: skip EFI update to 252 | Naïm Favier | 2 | -6/+15 | |
That version has a regression that leaves some machines unbootable. While we wait for the fix (252.2) to land in master, this is a workaround that should save people some pain. | |||||
2022-12-28 | Merge pull request #132694 from arcnmx/binfmt-interp-sandbox | Anderson Torres | 1 | -8/+8 | |
nixos/binfmt: add interpreter path to sandbox | |||||
2022-12-28 | Merge pull request #204254 from raphaelr/initrd-openvpn | Jörg Thalheim | 1 | -4/+1 | |
nixos/tests/initrd-network-openvpn: fix | |||||
2022-12-24 | systemd-stage-1: Improve test-instrumentation output | Will Fancher | 1 | -0/+11 | |
2022-12-23 | Merge pull request #207163 from NixOS/rfc0125-improvements | Ryan Lahfa | 2 | -3/+6 | |
nixos/activation/bootspec: make initrd optional, serialize system, precise extensions' type | |||||
2022-12-22 | nixos/activation/bootspec: fix document output path | Cole Helbling | 2 | -3/+3 | |
The RFC currently stipulates the document will be available at `$out/boot.json`. | |||||
2022-12-21 | nixos/activation/bootspec: make initrd optional, serialize system, precise ↵ | Raito Bezarius | 2 | -3/+6 | |
extensions' type | |||||
2022-12-20 | nixos/stage-1: Examine binaries for libraries in a consistent order | Thomas Watson | 1 | -2/+3 | |
To reduce size, stage 1 (the initrd) is populated by copying specific binaries in, then copying the libraries specifically needed by those binaries. `patchelf` is then used to make the binaries search in the directory where these libraries are copied to instead of their original store paths. Some filesystems (e.g. ZFS) do not guarantee that copying the same files in the same order into a given directory will result in `find` returning them in any particular order (though the order appears consistent so long as the directory is not modified). Therefore, when the binaries are scanned for libraries to copy in, they might be scanned in a different order each time the derivation is built. If two binaries need two different libraries with the same name, then a different instance of the library might be copied in first, changing the derivation contents and breaking reproducibility. This turns out to be the case with `libudev.so.1` from both `systemd` (needed by e.g. `mdadm`) and `systemdMinimal` (needed by e.g. `dmsetup`). This issue is fixed by sorting the list of binaries to be scanned instead of relying on filesystem order so that the same instance always gets seen and copied first. Both before this change (at least on ext4) and after this change (without any options that affect stage 1), this is the `libudev.so.1` from `systemdMinimal` by way of `dmsetup`. Whether this is appropriate and how much the two different systemd configurations and udev libraries need to be involved is a topic left for future work. | |||||
2022-12-17 | Merge pull request #172237 from DeterminateSystems/bootspec-rfc | Jörg Thalheim | 6 | -0/+251 | |
Support external bootloader backends (RFC-0125) | |||||
2022-12-15 | lib.replaceChars: warn about being a deprecated alias | Artturin | 1 | -1/+1 | |
replaceStrings has been in nix since 2015(nix 1.10) so it is safe to remove the fallback https://github.com/nixos/nix/commit/d6d5885c1567454754a0d260521bafa0bd5e7fdb | |||||
2022-12-09 | Merge pull request #204780 from Ma27/kernel-maintenance-docs | Maximilian Bosch | 1 | -0/+5 | |
nixos/manual: document kernel backporting policy and implications of it | |||||
2022-12-09 | Merge pull request #203956 from Artturin/addforbiddendependenciesregex | Artturi | 2 | -1/+58 | |
nixos/top-level.nix: add forbiddenDependenciesRegex option | |||||
2022-12-08 | nixos/activation/bootspec: fixup improper $out substitution | Cole Helbling | 1 | -2/+2 | |
2022-12-08 | nixos/activation/bootspec: refactor the generator script | Cole Helbling | 1 | -19/+32 | |
We separate the different steps (injecting the toplevel and injecting the specialisations) so that it's easy to document what each snippet is actually doing. | |||||
2022-12-08 | nixos/activation/bootspec: drop problematic comment, only generate bootspec ↵ | Cole Helbling | 2 | -2/+2 | |
when bootspec is enabled | |||||
2022-12-08 | nixos/activation/bootspec: DocBook -> Markdown, add description for ↵ | Cole Helbling | 1 | -2/+13 | |
extensions field | |||||
2022-12-08 | nixos/boot/external: fixup typo in generated docs, regenerate docs | Cole Helbling | 2 | -3/+3 | |
2022-12-08 | nixos/boot/external: DocBook -> Markdown | Cole Helbling | 1 | -2/+2 | |
2022-12-08 | nixos/activation/bootspec: add some comments to explain the delicate ↵ | Raito Bezarius | 1 | -1/+4 | |
manipulations | |||||
2022-12-08 | nixos/activation/bootspec: add bootspec chapter in NixOS manual | Raito Bezarius | 1 | -1/+1 | |
2022-12-08 | nixos/activation/bootspec: remove SB extension example in Cue schema | Raito Bezarius | 1 | -6/+0 | |
2022-12-08 | nixos/boot/external: add @raitobezarius as maintainer and allow initrd secrets | Raito Bezarius | 1 | -2/+2 | |
2022-12-08 | nixos/activation/bootspec: module-ify | Raito Bezarius | 3 | -23/+80 | |
This does the following: * turns bootspec into a NixOS module * validates bootspecs with Cue * exposes internal knobs | |||||
2022-12-08 | nixos/activation/bootspec: fix slurping specialisation bootspecs | Raito Bezarius | 1 | -1/+1 | |
2022-12-08 | nixos/activation: don't generate bootspec for containers | K900 | 1 | -1/+3 | |
2022-12-08 | nixos/activation/bootspec: embed the document into a bootspec subdir | Graham Christensen | 1 | -1/+3 | |
2022-12-08 | nixos/activation/bootspec: embed the entire contents of specialisation's ↵ | Graham Christensen | 1 | -17/+21 | |
bootspecs into the parent See: https://github.com/NixOS/rfcs/pull/125#discussion_r871222614 | |||||
2022-12-08 | nixos/boot/external: init | Cole Helbling | 3 | -0/+105 | |
This allows supporting external bootloader backends. | |||||
2022-12-08 | nixos/activation/bootspec: init bootspec support (RFC-0125) | Cole Helbling | 2 | -0/+60 | |
2022-12-06 | nixos/kernel: link manual (with backport policies) from boot.kernelPackages | Maximilian Bosch | 1 | -0/+5 | |
Yes I know it's dirty to link the rendered HTML, but linking `#sec-kernel-config` breaks the manual build for me with the following error: element link: validity error : IDREF attribute linkend references an unknown ID "sec-kernel-config" This is something that should probably be fixed, but for the current change I'd argue that this is good enough (in fact even the `nix.settings`-option uses that hack). | |||||
2022-12-05 | Merge pull request #202956 from arcnmx/systemd-networkd-wait-online | Naïm Favier | 1 | -0/+15 | |
2022-12-04 | Merge pull request #167871 from asymmetric/doc-networkd | Naïm Favier | 1 | -0/+2 | |
2022-12-04 | nixos/networkd: doc activation of systemd.networkd | Lorenzo Manacorda | 1 | -0/+2 | |
2022-12-03 | initrd-ssh: add ignoreEmptyHostKeys option | phaer | 1 | -1/+10 | |
2022-12-03 | nixos/tests/initrd-network-openvpn: fix | Raphael Robatsch | 1 | -4/+1 | |
- The default cipher is BF-CBC, which openvpn refuses to use by default. Switched to AES-256-CBC. - openvpn does not require an external "ip" executable anymore, and does not support the "ipconfig" option by default, so remove that option. | |||||
2022-12-02 | nixos/networkd: add wait-online.enable option | arcnmx | 1 | -0/+15 | |
When no interfaces are managed by systemd-networkd, it will unconditionally fail. This option allows it to be disabled in those situations where it prevents system switches from succeeding. | |||||
2022-12-02 | nixos/top-level.nix: add forbiddenDependenciesRegex option | Artturin | 2 | -1/+58 | |
useful for making sure that there's no dev outputs in the system | |||||
2022-12-01 | nixos/binfmt: mkDefault auto-detected interpreter | arcnmx | 1 | -5/+5 | |
2022-12-01 | nixos/binfmt: add interpreter path to sandbox | arcnmx | 1 | -4/+4 | |
2022-11-30 | nixos: nix.readOnlyStore -> boot.readOnlyNixStore | Andrew Marshall | 2 | -3/+13 | |
The placement of this option under `nix` was misleading, as it is not configuration of the Nix daemon, but rather configuration of the NixOS boot process and how it mounts the Nix store. As such, make it an option of `boot` to clarify what it actually affects, and imply that it will only take effect on a reboot. Since it no longer has the context of nix, adjust the name to include it. | |||||
2022-11-29 | nixos: disable systemd-oomd when enableUnifiedCgroupHierarchy is false | Bjørn Forsman | 1 | -0/+4 | |
Or else systemd-oomd gets marked as failed due to "Userspace Out-Of-Memory (OOM) Killer was skipped because of a failed condition check (ConditionControlGroupController=v2)." and cause the system to enter degraded state. Ref https://github.com/NixOS/nixpkgs/issues/195085 | |||||
2022-11-24 | nixos/modprobe: replace boot.isContainer with boot.modprobeConfig.enable | Sandro Jäckel | 1 | -1/+4 | |
2022-11-19 | Merge pull request #197254 from Atemu/fstab-escape-options | Martin Weinelt | 1 | -1/+9 | |
2022-11-15 | nixos: Add util-linux to systemd PATH to fix fsck with systemd 251.6 | Will Fancher | 1 | -1/+2 | |
This is an alternative to the reverted d9b1bde390eb133a3da66c8abd902ea2b754938c, which broke systemd stage 1 | |||||
2022-11-14 | boot.loader.systemd-boot: add extraInstallCommands option (#200715) | Markus Partheymueller | 1 | -1/+23 | |
2022-11-12 | Merge pull request #197917 from SuperSandro2000/kernel-enable | Sandro | 2 | -2/+5 | |
2022-11-10 | treewide: use `types.port` in nixos modules | Daniel Nagy | 1 | -1/+1 | |
2022-11-09 | nixos/kernel: replace boot.isContainer with boot.kernel.enable | Sandro Jäckel | 2 | -2/+5 | |