about summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
4 daysMerge pull request #304362 from Stunkymonkey/ec2-data-chmod-installAleksana1-2/+1
ec2-data: prefer 'install/umask' over 'chmod'
4 daysMerge pull request #324320 from tomaskala/add-package-option-to-blockyAaron Andersen1-1/+3
nixos/blocky: Add an option for the package to be used
4 dayscloudflare-dyndns: configurable systemd frequencyHraban Luyat1-1/+12
4 daysnixos/gdm: Fix fingerprint auth rulesJan Tojnar1-1/+5
We introduced the gdm-fingerprint.pam in 9d41fe6fcc4df838a56b1cfb2512b65e5e655958. We used the [upstream Arch config] as a template, which contains an extended control field that jumps over **one** immediately-following `auth` rule unless `pam_gdm.so` succeeds. But we decided to not include `pam_gnome_keyring.so` so there was no rule to skip over, resulting in a broken control flow and the PAM module failing with “PAM bad jump in stack”, breaking the fingerprint authentication in GDM. Let’s actually add `pam_gnome_keyring.so`, like the Arch config does. Because we are creating the PAM file using the `text` option, `security.pam.services.gdm-fingerprint.enableGnomeKeyring` does not do anything so we need to do it manually. For the case where gnome-keyring is not enabled, we could add a no-op rule like `optional pam_permit.so` after `pam_gdm.so` so that the branching always has something to jump over but it will be simpler to just make the both conditional. There are no further `auth` rules that could benefit from `pam_gdm.so` doing something so it should be fine. Unlike in Arch, we are not going to invoke `pam_gnome_keyring.so` in a `session` rule since that is already done by the included `login` module. [upstream Arch config]: https://gitlab.gnome.org/GNOME/gdm/-/blob/81ee658c11381912131dd4a29e84190f7f9cd039/data/pam-arch/gdm-fingerprint.pam
4 daysnixos/gdm: Clean up gdm-fingerprint pam moduleJan Tojnar1-1/+3
The `optional pam_permit.so` comes from the [upstream Arch config] we used as a template in 9d41fe6fcc4df838a56b1cfb2512b65e5e655958. But I do not think it does anything in this position – see also the discussion at https://bbs.archlinux.org/viewtopic.php?id=245892 – so let’s just remove it. Let’s also add a comment about disabling `fprintAuth` and a blank line for clarity. [upstream Arch config]: https://gitlab.gnome.org/GNOME/gdm/-/blob/81ee658c11381912131dd4a29e84190f7f9cd039/data/pam-arch/gdm-fingerprint.pam
4 daysec2-data: prefer 'install/umask' over 'chmod'Felix Buehler1-2/+1
4 daysMerge pull request #306730 from ShamrockLee/apptainer-default-pathSomeone2-5/+33
apptainer, singularity: precede system-level bin paths in `defaultPath` and fix `singularity` image running
4 daysRevert "nixos/gnome-keyring: unlock keyring with gdm-password, gdm-autologin"Jan Tojnar1-9/+1
`gdm-autologin` and `gdm-password` PAM modules are defined using the `text` option, so the option here is a no-op. Furthermore, `gdm-password` already includes `login` for all module types, and that invokes `pam_gnome_keyring.so` in the same way Arch’s `gdm-password` module would: https://gitlab.gnome.org/GNOME/gdm/-/blob/81ee658c11381912131dd4a29e84190f7f9cd039/data/pam-arch/gdm-password.pam This reverts commit c24c7933ba2e5266d91978f1eaefdd81c760af67.
4 daysRevert "nixos/gnome-keyring: enable gnome-keyring for fingerprint ↵Jan Tojnar1-3/+0
authentication'" `gdm-fingerprint` PAM module is defined using the `text` option, so the option here is a no-op. This reverts commit 6bb516d45f2cbb56a817adf4c7f0ee680e3cf9e9.
4 daysMerge branch 'master' into staging-nextVladimír Čunát3-0/+6
4 daysMerge pull request #317457 from rawkode/fix/espanso-optsAleksana1-0/+1
nixos/espanso: fix wayland option
4 daysnixos/espanso: fix wayland optionDavid Flanagan1-0/+1
Co-authored-by: Aleksana <alexander.huang.y@gmail.com>
4 daysnixos/doc/rl-2411: Document programs.envisionGavin John1-0/+2
4 daysnixos/envision: init moduleGavin John2-0/+44
4 daysMerge pull request #324114 from NyCodeGHG/renovate-unix-socketOTABI Tomoya1-0/+1
nixos/renovate: allow AF_UNIX access
4 daysMerge pull request #322597 from ↵Sandro1-0/+4
tomodachi94/drop/vscode-css-json-html-languageserver-bin
4 daysMerge master into staging-nextgithub-actions[bot]4-22/+40
4 daysMerge pull request #323728 from michaelfranzl/add-regression-test-libvirt-nssFlorian Klink1-0/+5
Regression test for libvirt NSS modules
4 daysnixos/snapper: fix timeline options typeAlexandre Badez1-12/+12
4 daysnixos/snapper: add maintainerAlexandre Badez1-0/+2
4 daysnixos/blocky: Add an option for the package to be usedTomas Kala1-1/+3
Previously, the blocky package was hardcoded to the one in pkgs. This change allows to set it, so the user can configure the blocky service to run blocky from nixpkgs-unstable, for example.
4 daysMerge pull request #324102 from johannwagner/fix/cloud-init-fixesJonas Chevalier1-1/+10
nixos/cloud-init: Bug fix and enhancements
4 daysMerge pull request #318659 from mweinelt/fastly-exporterMartin Weinelt2-21/+25
nixos/prometheus-fastly-exporter: unwrap execstart
5 daysMerge master into staging-nextgithub-actions[bot]2-14/+79
5 daysMerge pull request #318818 from flyingcircusio/acme-accounts-compatibility-hashSandro1-5/+36
5 daysnixos/scion: improve robustness testingmatthewcroughan1-9/+43
Adds random process kills, crashes and reboots etc to the testing of the SCION module
5 daysMerge master into staging-nextgithub-actions[bot]1-2/+2
5 daysMerge pull request #324163 from SuperSandro2000/271914Aleksana1-2/+2
nixos/kmscon: fix eval
5 daysMerge master into staging-nextgithub-actions[bot]3-18/+1
5 daysMerge pull request #307910 from r-ryantm/auto-update/pixelfedWeijia Wang1-1/+1
pixelfed: 0.11.13 -> 0.12.1
5 daysnixos/kmscon: fix evalSandro Jäckel1-2/+2
5 daysMerge pull request #324101 from hexchen/drop-hexchenRyan Lahfa2-17/+0
maintainers: remove myself
5 daysMerge branch 'master' into staging-nextWeijia Wang11-92/+211
5 daysMerge pull request #318599 from pacien/nixos-fcgiwrap-isolationThomas Gerbet7-81/+186
nixos/fcgiwrap: refactor to fix permissions
5 daysMerge pull request #321061 from SomeoneSerge/prosody-logsSandro1-1/+12
nixos/prosody: provide an (internal) escape hatch for overriding the …
5 daysMerge pull request #314767 from Guanran928/mihomoSandro1-6/+6
nixos/mihomo: add assertion for configFile
5 daysMerge pull request #297826 from anthonyroussel/update-tomcat_connectorsSandro1-1/+1
apacheHttpdPackages.mod_jk: 1.2.48 -> 1.2.49, rename from tomcat_connectors
5 daysMerge pull request #313984 from yayayayaka/gitlab-17.0.1Sandro2-3/+6
gitlab: 16.11.5 -> 17.1.1
5 daysnixos/renovate: allow AF_UNIX accessMarie Ramlow1-0/+1
renovate can update nix dependencies, which results in nix trying to communicate with the nix-daemon over a unix socket.
5 daysMerge remote-tracking branch 'origin/master' into staging-nextK9007-29/+79
5 daysMerge pull request #323419 from Ma27/bump-grafanaK9004-20/+22
grafana: 11.0.0 -> 11.1.0
5 daysMerge pull request #307459 from Stunkymonkey/freshrss-extensionsFelix Bühler3-9/+57
freshrss-extensions: init
5 daysdecklink, blackmagic-desktop-video: drop package and modulehexchen2-17/+0
I am the singular maintainer for these packages. They are difficult to maintain and are going to start to bitrot pretty much as soon as BMD releases new software versions. Therefore, I am not only removing myself as the maintainer but dropping them entirely.
5 daysnixos/cloud-init: Allow additional packages in cloud-init moduleJohann Wagner1-0/+9
5 daysnixos/cloud-init: Allow systemd.network to be enabled if cloud-init.network ↵Johann Wagner1-1/+1
is disabled
5 daysGitlab-Runner: Add `--post-get-sources-script`Florian Sesser1-0/+9
`--post-get-sources-script` has been added a while ago. This makes it available via the nix configuration. See https://about.gitlab.com/blog/2023/03/27/changes-to-the-preclonescript/
5 dayspreCloneScript is now preGetSourcesScriptFlorian Sesser1-3/+3
The --pre-clone-script service configuration has been deprecated (https://docs.gitlab.com/ee/update/deprecations.html#deprecation-and-planned-removal-for-ci_pre_clone_script-variable-on-gitlab-saas) and replaced by --pre-get-sources-script (https://about.gitlab.com/blog/2023/03/27/changes-to-the-preclonescript/).
5 daysMerge master into staging-nextgithub-actions[bot]2-1/+10
5 daysMerge pull request #323996 from hercules-ci/journald.conf-linkFlorian Klink1-1/+1
nixos/journald: Link to journald manpage
5 daysnixos/syncthing: implement folder type (#308832)Cat1-0/+9
* Syncthing: implemented folder type * Syncthing: fix syntax (via @johnhamelink ) This commit should be rebased/squashed into the previous one if ofborg cleares it! Co-authored-by: John Hamelink <me@johnhame.link> --------- Co-authored-by: John Hamelink <me@johnhame.link>
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-07 21:36:05 +0000