about summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
2024-02-14nixos/garage: allow all available log levels in `cfg.logLevel`emilylange1-1/+1
`error` and `warn` have always been valid log levels. But because the upstream docs never mentioned those, we simply didn't add them to the enum of our module option. The upstream docs have been updated and now mention `error` and `warn` as well. Upstream PR: https://git.deuxfleurs.fr/Deuxfleurs/garage/pulls/716 (cherry picked from commit 993083f0ab6663ca914177082f423acf4e1d46f9)
2024-02-11nixos/fwupd: mark enableTestRemote as internalMaxine Aubrey1-0/+1
2024-02-11Merge pull request #286739 from JulienMalka/backport-278609Julien Malka1-4/+3
2024-02-10nixos/installation-device: enable polkitBjørn Forsman1-0/+3
Polkit enables running 'reboot' and 'poweroff' in the installer without being root, and non-root is the default login for a few NixOS releases now. There's no size increase in the minimal ISO: $ git checkout nixpkgs-unstable $ nix-build -A config.system.build.isoImage -I nixos-config=nixos/modules/installer/cd-dvd/installation-cd-minimal.nix nixos/default.nix && du -sc ./result/iso/*.iso /nix/store/bfvbvrrqjmnqqhyqyxc0w32gagdz2rya-nixos-24.05.git.1149dab64e7-x86_64-linux.iso 998404 ./result/iso/nixos-24.05.git.1149dab64e7-x86_64-linux.iso 998404 total $ git checkout THIS_COMMIT $ nix-build -A config.system.build.isoImage -I nixos-config=nixos/modules/installer/cd-dvd/installation-cd-minimal.nix nixos/default.nix && du -sc ./result/iso/*.iso /nix/store/l9x9rwlvfddnri70h1ifx865q0cvka5l-nixos-24.05.git.1149dab64e7-x86_64-linux.iso 998404 ./result/iso/nixos-24.05.git.1149dab64e7-x86_64-linux.iso 998404 total (cherry picked from commit dadc54aabee276e3535e5bac85d906b07756363e)
2024-02-07nixos/services.gitlab: loosen the coupling between gitlab and postgres/ ↵Oliver Schmidt2-9/+7
redis to avoid restarts and races Gitlab stays running at redis and postgresql restarts as if these components were on a different host anyways. Handling reconnetctions is part of the application logic. Co-authored-by: Kim Lindberger <kim.lindberger@gmail.com> for formatting fixes and test failure debugging. (cherry picked from commit 13ba002dd0be470f182eee16f9e791d76875c771)
2024-02-06nixos/photoprism: fix typoPablo Andres Dealbera1-1/+1
(cherry picked from commit 14a1f867916c39577e8512e2ff179872bec2c0b5)
2024-02-06boot/loader/systemd-boot: BootSpec makes `initrdSecrets` optionalRaito Bezarius1-4/+3
A bootspec could remove the `initrdSecrets` attribute and is a perfectly valid bootspec, as can be seen in the bootspec.cue. This makes the builder not fail upon missing `initrdSecrets`.
2024-02-03Merge pull request #285305 from NixOS/backport-249523-to-release-23.11Peder Bergebakken Sundt1-136/+142
[Backport release-23.11] Seafile 10
2024-02-03nixos/incus: add zfs/lib/udev to pathAdam Stephens1-1/+4
Incus needs to find zvol_id for some operations, but zfs does not put this executable in the bin directory. Exposing lib/udev into the Incus path solves discovery of the executable https://github.com/lxc/incus/blob/e5690705e842d3961d8a1d18c0ec002c25345af8/internal/server/storage/drivers/driver_zfs_volumes.go#L1820C1-L1820C41 (cherry picked from commit 7585f26855f12bd56b82e170617454443eb39a4e)
2024-02-01nixos/modules/security/wrappers: limit argv0 to 512 bytes (#285593)github-actions[bot]1-0/+7
This mitigates CVE-2023-6246, crucially without a mass-rebuild. Change-Id: I762a0d489ade88dafd3775d54a09f555dc8c2527 (cherry picked from commit b4c9840652ec2fa8ac59b14a9b0349f5e474e07c) Co-authored-by: edef <edef@edef.eu>
2024-02-01nixos/strongswan-swanctl: add includes option for secrets (#285590)github-actions[bot]1-2/+11
(cherry picked from commit a3f06727985162348e09baab2b076f5c1f759d12) Co-authored-by: Yureka <yuka@yuka.dev>
2024-01-31nixos/photoprism: use nsenter to call photoprism bin with correct UID and PIDPablo Andres Dealbera1-0/+3
(cherry picked from commit bb40443e7790d568058be9b8cd4a8e667b520f34)
2024-01-31nixos/seafile: support 9.0 to 10.0 migrationGreizgh1-136/+142
(cherry picked from commit a312393f1432d5b39a7215ef8d847c13c007ede3)
2024-01-31nixos/keyd: Allow service to call nice syscallDaniel Schaefer1-3/+3
Otherwise it'll be killed by systemd with Main process exited, code=killed, status=31/SYS Signed-off-by: Daniel Schaefer <git@danielschaefer.me> (cherry picked from commit 6591d332f93422e388ef6337f6b362b4ff8d0724)
2024-01-31nixos/dublin-traceroute: initArthur Gautier4-0/+96
(cherry picked from commit 070bcf9da438a76495f624fc31b2be8036ee7a30)
2024-01-29nixos/kresd: fix port only regexLeona Maroni1-1/+1
The output is expected to be a list [ hostname, port, optional ipv6 scope ], but the current regex only outputs [ port ], when only a port is given as address. (cherry picked from commit 9abc79018cab8176643fbad06928b65760501cf7)
2024-01-29linux/hardened/patches/6.7: init at 6.7.2-hardened1Fabián Heredia Montiel1-0/+1
(cherry picked from commit 026757fe78f987768ca4e9a09a973d10d4461b81)
2024-01-28mastodon: set LimitNOFILEIsa1-0/+1
(cherry picked from commit 24930dadca021613f2a20a0fcdd656e5be371749)
2024-01-28Merge pull request #284395 from NixOS/backport-281055-to-release-23.11Nick Cao1-0/+24
[Backport release-23.11] nixos/resolved: add dnsovertls option
2024-01-28nixos/resolved: add dnsovertls optionJacob Moody1-0/+24
(cherry picked from commit dfc87b9048ebf19902077ce045d2e465880b35e1)
2024-01-27nixos/systemd-boot: move builder script in bin folderJulien Malka1-3/+4
(cherry picked from commit ceeddc5b159fe20d4c186bf43e0c8e1c534db9ab)
2024-01-26Merge pull request #283269 from adamcstephens/incus/202401-bpAdam C. Stephens16-39/+60
[Backport release-23.11] incus: 0.2 -> 0.4, fix missing deps
2024-01-24nixos/knot: allow specifying the `clear` sectionVladimír Čunát1-0/+1
It was added in 3.3.4. I'm not sure if it will be useful with NixOS services, but I added it in the usual way anyway. (cherry picked from commit 7f979aeb86f2b3a31e02f06ce25496ebaaa2db38)
2024-01-24nixos/tests/gitlab: download even more RAMK9001-1/+1
Also remove the 32-bit conditional as it already fails on 4GB. (cherry picked from commit aa3cd9c9552880a7ce9e456631218b5e97a45a44)
2024-01-23nixos/lxc: remove with libAdam Stephens1-14/+9
2024-01-23nixos/lxcfs: remove with libAdam Stephens1-5/+3
2024-01-23treewide/lxc: set lxc team as maintainerAdam Stephens16-20/+48
2024-01-21elasticsearch: 7.17.10 -> 7.17.16Thomas Gerbet1-3/+3
Fixes CVE-2023-31417, CVE-2023-31418, CVE-2023-31419, CVE-2023-46673 and CVE-2023-46674. Security announces: https://www.elastic.co/guide/en/security/7.17/release-notes-header-7.17.0.html#release-notes-7.17.16 Release notes: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.16.html https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.15.html https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.14.html https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.13.html https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.12.html https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.11.html (cherry picked from commit afb57ff041463ed5586b2d350afa4fedf96c85e1)
2024-01-20nixos/emacs: drop custom emacsclient desktop fileLin Jian1-20/+1
This custom emacsclient desktop file was added[1] to Nixpkgs when the upstream did not provide one. Since an emacsclient desktop file is provided[2] by the upstream now, we should remove our custom one from Nixpkgs to reduce maintenance burden[3]. Fixes https://github.com/NixOS/nixpkgs/issues/245533 [1]: https://github.com/NixOS/nixpkgs/pull/35896 [2]: https://git.savannah.gnu.org/cgit/emacs.git/commit/etc/emacsclient.desktop?id=1a845a672dc73c8e98e6cb9bb734616e168e60ba [3]: https://git.savannah.gnu.org/cgit/emacs.git/commit/etc/emacsclient.desktop?id=1500e4b4329d4d3d0141263230d74e1b314373b1 (cherry picked from commit 20f07b4aa90974a569b313e889c6d21df6612415)
2024-01-19nixos/tests/podman: firewall now opened by moduleFranz Pletz1-2/+0
(cherry picked from commit 71435c98696ec024e82c480defd31828309395d8)
2024-01-19nixos/podman: open firewall for aardvark-dnssohalt1-13/+20
(cherry picked from commit 38b27787654a6a8d429776bc91243cc2eb4dbb4c)
2024-01-18Merge release-23.11 into staging-next-23.11github-actions[bot]1-2/+3
2024-01-17Merge pull request #281375 from NixOS/backport-278179-to-release-23.11Franz Pletz1-2/+3
2024-01-17Merge release-23.11 into staging-next-23.11github-actions[bot]1-5/+10
2024-01-16nixos/network-interfaces: fix implicit dependency on underlying devicesinanmohd1-2/+3
the bug causes a hard dependency on an underlying device which might not be valid for all interfaces, also broke the example for networking.sits. this is due to calling hasAttr first and checking for null afterwards, the bug was made more apparent in commit 76a3c30 (cherry picked from commit 8314af158f26563abf1f3ff4b95812afe8521a37)
2024-01-16nixos/kubo: cleanupLuflosi1-5/+10
- Add note explaining why enabling the Kubo daemon won't fully work immediately and requires logging in again - Use `builtins.isList addrIn` instead of `builtins.typeOf addrIn == "list"` - Fix indentation (cherry picked from commit a4c451fd3757a0920bc8d4f41b8979609c2ff2a8)
2024-01-16Merge release-23.11 into staging-next-23.11github-actions[bot]1-0/+31
2024-01-15outline: 0.73.1 -> 0.74.0 (#281032)github-actions[bot]1-0/+31
(cherry picked from commit ac345ff3906965f0a711a6e78f71a902130a0e2b) Co-authored-by: Chris Moultrie <821688+tebriel@users.noreply.github.com>
2024-01-15Merge release-23.11 into staging-next-23.11github-actions[bot]2-1/+9
2024-01-14nixos/c2fmzq-server: allow setting bool settings to falseGutyina Gergő2-1/+9
(cherry picked from commit 7247d16af6a32d5bdc176d0be4858be2ad463d1f)
2024-01-14Merge release-23.11 into staging-next-23.11github-actions[bot]2-1/+4
2024-01-13nixos/c2fmzq-server: allow multiple freeform settingsGutyina Gergő2-1/+4
(cherry picked from commit 3306755683d7df4245184b2d414707ad04096b33)
2024-01-13Merge release-23.11 into staging-next-23.11github-actions[bot]2-17/+29
2024-01-12Merge pull request #278381 from NixOS/backport-274192-to-release-23.11Weijia Wang1-8/+27
[Backport release-23.11] nixos/guix: add Guix home support
2024-01-12Revert "nixos/gitlab: Add CI database connection for >=15.9" (#280396)github-actions[bot]1-8/+2
(cherry picked from commit 2e06a69fb282529a3abf2e255a2bb3f61d4753c9) Co-authored-by: Yureka <yuka@yuka.dev>
2024-01-12Revert "nixos/gitlab: fix database config when no passwordfile is defined" ↵github-actions[bot]1-1/+0
(#280393) (cherry picked from commit d4e9e3c6ccb3127c80d6486194a6ce4ea0beb853) Co-authored-by: Yureka <yuka@yuka.dev>
2024-01-12Merge release-23.11 into staging-next-23.11github-actions[bot]1-1/+9
2024-01-11nixos/netdata: add missing dependency for syslog alarmsPatrik Keller1-1/+9
Netdata depends on the `logger` utility for dispatching health alarms to syslog. This dependency was missing in the systemd units environment. Issue: https://github.com/NixOS/nixpkgs/issues/272702 Docs: https://learn.netdata.cloud/docs/alerting/notifications/agent-dispatched-notifications/syslog Docs, archived: https://archive.is/mkQa4 (cherry picked from commit 3f50868d1040827184d52173cfe59aeb8de96a50)
2024-01-11Merge release-23.11 into staging-next-23.11github-actions[bot]2-1/+3
2024-01-10nixos/gitlab: fix database config when no passwordfile is definedTom Siewert1-0/+1
In commit 41ca9c1, the database config got an additional config entry for a separate CI database connection [1]. Unfortunately, the main connection must always be the first entry. The fix for this was only applied when databasePasswordFile has been set. This commit fixes the order of the config for deployments without a databasePasswordFile. [1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated (cherry picked from commit de1ecbb67e39fa531a4fd728529506c4bcdd8806)
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-19 16:26:45 +0000