about summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
2023-04-03go-ethereum: 1.10.26 -> 1.11.5David Dunn1-0/+2
Release notes: https://github.com/ethereum/go-ethereum/releases/tag/v1.11.5 Removes `puppeth`, as noted in the `Removed Features` section of the release notes for v1.11.0: https://github.com/ethereum/go-ethereum/releases/tag/v1.11.0
2023-04-03Merge pull request #218870 from Uthar/lisp27c6f434c2-2/+4
lisp-modules: replace with an implementation based on github:uthar/nix-cl
2023-04-03Merge pull request #216737 from FedericoSchonborn/budgieBobby Rong5-1/+256
Budgie Desktop
2023-04-02nixos/doc: add release note for Budgie DesktopFederico Damián Schonborn2-2/+2
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-02nixos/tests/budgie: initFederico Damián Schonborn2-0/+54
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-03Merge pull request #224418 from jtojnar/users-validate-passwords-with-optionsMartin Weinelt1-1/+2
nixos/users-groups: Fix password scheme validation
2023-04-03nixos/users-groups: Fix password scheme validationJan Tojnar1-1/+2
0d7cd666520621ebb3f2fb0e590064e8621e249e broke validation for hashes with options such as those generated with `mkpasswd --method=sha-512 --rounds=1000000`: $6$rounds=1000000$xpzZ6Rfg873gZnDY$RxS7lpVnohfDrrKG3lt9UFHED1KoiPGzH7zQv/HzwalZepo/IfFtxw05ap25duEJSKYhC14.Fn9eXszEpWVtF. This fixes it.
2023-04-02nixos/atuin: add maxHistoryLength0x4A6F1-0/+7
2023-04-02lisp-modules: add release note about the new manual and the interfaceKasper Gałkowski1-0/+2
2023-04-02nixos/grafana-image-renderer: fix setting nameK9001-1/+1
2023-04-02chatgpt-retrieval-plugin: init modulehappysalada2-0/+107
2023-04-02Merge pull request #224255 from Kiskae/patch-1Nick Cao1-1/+1
nixos/nvidia: use correct attribute
2023-04-02Merge pull request #224170 from mvnetbiz/ddclientSandro1-0/+1
2023-04-02Merge pull request #224272 from mattmelling/cloudlog-no-ifdSandro1-1/+2
2023-04-02Merge pull request #223091 from Izorkin/update-nginx-compressionSandro1-8/+12
2023-04-01nixos/budgie: initFederico Damián Schonborn2-1/+202
Signed-off-by: Federico Damián Schonborn <fdschonborn@gmail.com>
2023-04-01Merge pull request #215493 from Izorkin/fix-dhcpcd-ipv6rsSandro2-2/+16
2023-04-01Merge pull request #207248 from Izorkin/update-nginxLuke Granger-Brown4-12/+64
nginxQuic: 3be953161026 -> 0af598651e33
2023-04-01nixos/nvidia: use correct attributeKiskae1-1/+1
2023-04-01nixos/tests/nginx: update nginx-http3 testIzorkin1-1/+5
2023-04-01Merge pull request #223939 from Kiskae/patch-1Nick Cao1-1/+3
linuxPackages.nvidia_x11_production: 525.89.02 -> 525.105.17
2023-04-01nixos/nvidia: allow package to override IBT supportKiskae1-1/+3
2023-04-01nixos/nginx: update description in compression modulesIzorkin1-8/+12
2023-04-01nixos/dhcpcd: add IPv6rs optionIzorkin2-2/+16
2023-04-01nixos/nginx: update quic configurationIzorkin3-11/+59
2023-04-01Merge #224143: nixos/qtile: fix manual buildVladimír Čunát1-2/+1
(the build is OK on unstable/master but not on 22.11)
2023-03-31nixos/ddclient: add iproute2 to unit path if using "if" methodMatt Votava1-0/+1
2023-04-01Merge pull request #163082 from ettom/zeypleSandro2-0/+126
2023-03-31nixos/qtile: fix manual buildLily Foster1-2/+1
2023-03-31Merge pull request #223843 from simplejack-src/nixos_manual_desktop_itemSilvan Mosberger1-1/+2
nixos/documentation: Fix desktopIcon, GenericName/Comment
2023-03-30maintainers: Update houstdav000 -> cyntheticfoxDavid Houston1-1/+1
2023-03-30Merge pull request #221964 from randomnetcat/sanoid-service-packageIlan Joselevich2-2/+6
sanoid/syncoid: Add package options
2023-03-30Merge pull request #223754 from IndeedNotJames/nixos-lokiIlan Joselevich1-2/+4
nixos/loki: add `package` option
2023-03-30Merge pull request #223760 from K900/nicer-pure-eval-errorK9001-0/+6
nixos/system: disallow system.copySystemConfiguration in pure eval mode
2023-03-30nixos/loki: add `package` optionIndeedNotJames1-2/+4
2023-03-30nixos/k3s: start after network-onlinesuperherointj1-2/+2
2023-03-29nixos/documentation: Fix desktopIcon, GenericName/Commentsimeplejack-src1-1/+2
2023-03-29Merge pull request #223548 from enc0urage/fix-graphene-hardenedRobert Scott1-0/+1
nixos/malloc: set vm.max_map_count when using graphene-hardened
2023-03-29(nixos/sanoid, nixos/syncoid): Add package optionsJanet Cobb2-2/+6
Allows changing the sanoid package to be used for these services.
2023-03-29nixos/system: disallow system.copySystemConfiguration in pure eval modeK9001-0/+6
This is already broken, so let's give it a better error message.
2023-03-29Merge pull request #222422 from mdarocha/remove-dotnet-3ajs1241-1/+1
dotnet-sdk_3: remove
2023-03-29Merge pull request #222336 from motiejus/master_synapse_signing_key_pathK9001-2/+2
matrix-synapse: fix signing key path in fix-permissions script
2023-03-29Merge pull request #223661 from filakhtov/resolvconf-disableBernardo Meurer1-2/+2
2023-03-29Merge pull request #221851 from Ma27/postgresql-jit-supportSandro7-9/+118
postgresql: implement opt-in JIT support
2023-03-29nixos/postgresql: fix enableJITMaximilian Bosch2-6/+13
Make sure that JIT is actually available when using services.postgresql = { enable = true; enableJIT = true; package = pkgs.postgresql_15; }; The current behavior is counter-intuitive because the docs state that `enableJIT = true;` is sufficient even though it wasn't in that case because the declared package doesn't have the LLVM dependency. Fixed by using `package.withJIT` if `enableJIT = true;` and `package.jitSupport` is `false`. Also updated the postgresql-jit test to test for that case.
2023-03-29nixos/tests/postgresql: fix deprecation warningMaximilian Bosch1-1/+1
2023-03-29postgresql: pass through JIT-enabled variant of non-JIT postgres and vice versaMaximilian Bosch3-7/+47
This is useful if your postgresql version is dependant on `system.stateVersion` and not pinned down manually. Then it's not necessary to find out which version exactly is in use and define `package` manually, but just stay with what NixOS provides as default: $ nix-instantiate -A postgresql /nix/store/82fzmb77mz2b787dgj7mn4a8i4f6l6sn-postgresql-14.7.drv $ nix-instantiate -A postgresql_jit /nix/store/qsjkb72fcrrfpsszrwbsi9q9wgp39m50-postgresql-14.7.drv $ nix-instantiate -A postgresql.withJIT /nix/store/qsjkb72fcrrfpsszrwbsi9q9wgp39m50-postgresql-14.7.drv $ nix-instantiate -A postgresql.withJIT.withoutJIT /nix/store/82fzmb77mz2b787dgj7mn4a8i4f6l6sn-postgresql-14.7.drv I.e. you can use postgresql with JIT (for complex queries only[1]) like this: services.postgresql = { enable = true; enableJIT = true; }; Performing a new override instead of re-using the `_jit`-variants for that has the nice property that overlays for the original package apply to the JIT-enabled variant, i.e. with import ./. { overlays = [ (self: super: { postgresql = super.postgresql.overrideAttrs (_: { fnord = "snens"; }); }) ]; }; postgresql.withJIT.fnord still gives the string `snens` whereas `postgresql_jit` doesn't have the attribute `fnord` in its derivation. [1] https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-JIT-ABOVE-COST
2023-03-29postgresql: implement opt-in JIT supportMaximilian Bosch4-1/+63
Closes #150801 Note: I decided against resuming directly on #150801 because the conflict was too big (and resolving it seemed too error-prone to me). Also the `this`-refactoring could be done in an easier manner, i.e. by exposing JIT attributes with the correct configuration. More on that below. This patch creates variants of the `postgresql*`-packages with JIT[1] support. Please note that a lot of the work was derived from previous patches filed by other contributors, namely dasJ, andir and abbradar, hence the co-authored-by tags below. Effectively, the following things have changed: * For JIT variants an LLVM-backed stdenv with clang is now used as suggested by dasJ[2]. We need LLVM and CLang[3] anyways to build the JIT-part, so no need to mix this up with GCC's stdenv. Also, using the `dev`-output of LLVM and clang's stdenv for building (and adding llvm libs as build-inputs) seems more cross friendly to me (which will become useful when cross-building for JIT-variants will actually be supported). * Plugins inherit the build flags from the Makefiles in `$out/lib/pgxs/src` (e.g. `-Werror=unguarded-availability-new`). Since some of the flags are clang-specific (and stem from the use of the CLang stdenv) and don't work on gcc, the stdenv of `pkgs.postgresql` is passed to the plugins. I.e., plugins for non-JIT variants are built with a gcc stdenv on Linux and plugins for JIT variants with a clang stdenv. Since `plv8` hard-codes `gcc` as `$CC` in its Makefile[4], I marked it as broken for JIT-variants of postgresql only. * Added a test-matrix to confirm that JIT works fine on each `pkgs.postgresql_*_jit` (thanks Andi for the original test in #124804!). * For each postgresql version, a new attribute `postgresql_<version>_jit` (and a corresponding `postgresqlPackages<version>JitPackages`) are now exposed for better discoverability and prebuilt artifacts in the binary cache. * In #150801 the `this`-argument was replaced by an internal recursion. I decided against this approach because it'd blow up the diff even more which makes the readability way harder and also harder to revert this if necessary. Instead, it is made sure that `this` always points to the correct variant of `postgresql` and re-using that in an additional `.override {}`-expression is trivial because the JIT-variant is exposed in `all-packages.nix`. * I think the changes are sufficiently big to actually add myself as maintainer here. * Added `libxcrypt` to `buildInputs` for versions <v13. While building things with an LLVM stdenv, these versions complained that the extern `crypt()` symbol can't be found. Not sure what this is exactly about, but since we want to switch to libxcrypt for `crypt()` usage anyways[5] I decided to add it. For >=13 it's not relevant anymore anyways[6]. * JIT support doesn't work with cross-compilation. It is attempted to build LLVM-bytecode (`%.bc` is the corresponding `make(1)`-rule) for each sub-directory in `backend/` for the JIT apparently, but with a $(CLANG) that can produce binaries for the build, not the host-platform. I managed to get a cross-build with JIT support working with `depsBuildBuild = [ llvmPackages.clang ] ++ buildInputs`, but considering that the resulting LLVM IR isn't platform-independent this doesn't give you much. In fact, I tried to test the result in a VM-test, but as soon as JIT was used to optimize a query, postgres would coredump with `Illegal instruction`. A common concern of the original approach - with llvm as build input - was the massive increase of closure size. With the new approach of using the LLVM stdenv directly and patching out references to the clang drv in `$out` the effective closure size changes are: $ nix path-info -Sh $(nix-build -A postgresql_14) /nix/store/kssxxqycwa3c7kmwmykwxqvspxxa6r1w-postgresql-14.7 306.4M $ nix path-info -Sh $(nix-build -A postgresql_14_jit) /nix/store/xc7qmgqrn4h5yr4vmdwy56gs4bmja9ym-postgresql-14.7 689.2M Most of the increase in closure-size stems from the `lib`-output of LLVM $ nix path-info -Sh /nix/store/5r97sbs5j6mw7qnbg8nhnq1gad9973ap-llvm-11.1.0-lib /nix/store/5r97sbs5j6mw7qnbg8nhnq1gad9973ap-llvm-11.1.0-lib 349.8M which is why this shouldn't be enabled by default. While this is quite much because of LLVM, it's still a massive improvement over the simple approach of adding llvm/clang as build-inputs and building with `--with-llvm`: $ nix path-info -Sh $(nix-build -E ' with import ./. {}; postgresql.overrideAttrs ({ configureFlags ? [], buildInputs ? [], ... }: { configureFlags = configureFlags ++ [ "--with-llvm" ]; buildInputs = buildInputs ++ [ llvm clang ]; })' -j0) /nix/store/i3bd2r21c6c3428xb4gavjnplfqxn27p-postgresql-14.7 1.6G Co-authored-by: Andreas Rammhold <andreas@rammhold.de> Co-authored-by: Janne Heß <janne@hess.ooo> Co-authored-by: Nikolay Amiantov <ab@fmap.me> [1] https://www.postgresql.org/docs/current/jit-reason.html [2] https://github.com/NixOS/nixpkgs/pull/124804#issuecomment-864616931 & https://github.com/NixOS/nixpkgs/pull/150801#issuecomment-1467868321 [3] This fails with the following error otherwise: ``` configure: error: clang not found, but required when compiling --with-llvm, specify with CLANG= ``` [4] https://github.com/plv8/plv8/blob/v3.1.5/Makefile#L14 [5] https://github.com/NixOS/nixpkgs/pull/181764 [6] https://github.com/postgres/postgres/commit/c45643d618e35ec2fe91438df15abd4f3c0d85ca
2023-03-29Merge pull request #221108 from mrobbetts/bind_remove_allow_queryPeter Simons1-1/+0
bind: remove hard-coded `allow-query` config setting
2023-03-29nixos/modules/config/resolvconf.nix: skip systemPackages if disabledGarry Filakhtov1-2/+2
A change made in #166308 added `networking.resolvconf.package` to the `environment.systemPackages` list, so it is installed as part of the system image. However it does so unconditionally, meaning that even if the `config.networking.resolvconf.enable` is set to false the package listed in the `networking.resolvconf.package` would still be intalled. This change makes it so the package installation will depend on the status of the `config.networking.resolvconf.enable` option instead.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-11-16 07:16:36 +0000