about summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
2023-12-16Merge pull request #270958 from MinerSebas/plasma-sambaK9001-1/+1
nixos/plasma5: Dont add samba a second time to `environment.systemPackages`
2023-12-16Merge pull request #274519 from drupol/winbox-modulePol Dellaiera2-0/+24
nixos/winbox: init
2023-12-15nixos/kubo: fix potential panic on startupLuflosi1-0/+2
This fixes a panic of the kubo daemon which could occur under certain conditions when the daemon was starting. It was caused by the `ipfs.service` unit not depending on the `ipfs-api.socket` and `ipfs-gateway.socket` units with `Wants=`. This allows the `ipfs.service` to be started manually or by `nixos-rebuild` without the sockets being set up before that. When that happens, the daemon won't know about these sockets and will only use what is set in `services.kubo.settings.Addresses.Gateway` and `services.kubo.settings.Addresses.API`. By default the `API` is an empty list in NixOS though. The daemon doesn't like this at all and panics on startup, see https://github.com/ipfs/kubo/issues/10056. With this commit, starting `ipfs.service` will first set up the two sockets before starting the actual service. Adding the `Sockets=` option implicitly adds a `Wants=` for the sockets and this is exactly what we need. See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#Implicit%20Dependencies . This can be checked with `systemctl show ipfs.service`. This should probably be upstreamed to the unit file in the Kubo repo. The problem can be reproduced in the following way: - Add `services.kubo.enable = true` to `/etc/nixos/configuration.nix` - `sudo nixos-rebuild switch` (this may already fail, not sure why it's not deterministic for me) - `sudo systemctl stop ipfs-api.socket` - `sudo systemctl stop ipfs-gateway.socket` - `sudo systemctl stop ipfs.service` - `sudo systemctl start ipfs.service` Fixes #248447.
2023-12-15Merge pull request #274321 from Luflosi/update/kuboFranz Pletz2-1/+10
kubo: 0.24.0 -> 0.25.0
2023-12-15Merge pull request #264869 from h7x4/nixos-module-cleanup-quicktunFranz Pletz3-44/+121
nixos/quicktun: clean up module, add tests
2023-12-15nixos/winbox: initPol Dellaiera2-0/+24
2023-12-15Merge pull request #274291 from wahjava/fix-drbd-serviceNick Cao1-2/+2
drbd: fix path to drbdadm
2023-12-15Merge pull request #274264 from flokli/udev-rules-allow-bin-shFlorian Klink1-1/+2
nixos/udev: allow /bin/sh in udev rules
2023-12-15Merge pull request #274409 from K900/unblock-channelsK9002-2/+3
Unblock channels
2023-12-15Merge pull request #274262 from NetaliDev/zammad-updateJanne Heß1-0/+4
zammad: 6.1.0 -> 6.2.0
2023-12-15nixos/ldso: remove string context from linker sonameK9001-2/+2
Unbreaks installer tests that otherwise start depending on i686-glibc
2023-12-15nixos/tests/containers-imperative: download more RAMK9001-0/+1
2023-12-15Merge pull request #274275 from Ma27/hardened-kernel-updatesMaximilian Bosch1-0/+1
hardened kernel: test 6.6 & remove obsolete 4.14 from patches.json
2023-12-15Merge pull request #273858 from dotlambda/nextcloud28-initMaximilian Bosch4-10/+16
nextcloud28: init at 28.0.0, nextcloud27: 27.1.4 -> 27.1.5, nextcloud26: 26.0.9 -> 26.0.10
2023-12-14Merge pull request #274110 from networkException/sysctl-net.core.wmem_maxLin Jian4-10/+21
nixos/{sysctl,caddy}: improvements for net.core.wmem_max
2023-12-15nixos/caddy: also increase socket send buffer size as recommended by upstreamnetworkException1-1/+2
this patch adjusts the `boot.kernel.sysctl."net.core.wmem_max"` to match the value suggested in the quic-go wiki, just as `"net.core.wmem_max"`. see fdfdc5df21d3df985b751bc61929e2305882dd48 see https://github.com/quic-go/quic-go/issues/3923
2023-12-15nixos/sysctl: use highest value on conflict for net.core.wmem_maxnetworkException3-9/+19
we previously defined a custom type for `boot.kernel.sysctl."net.core.rmem_max"` to resolve to the highest value set. this patch adds the same behavior to `"net.core.wmem_max"`. as this changes the type from a string to an integer, which is a breaking change this patch also includes a release note and updates the transmission module to use a number for `wmem_max`.
2023-12-15Merge pull request #274315 from emilylange/fix-nixos-node-redWeijia Wang1-1/+1
nixos/node-red: fix `cfg.package` default value
2023-12-15Merge pull request #257504 from SuperSandro2000/postgres-docThomas Gerbet1-1/+1
nixos/postgresql: point doc link to current like all others
2023-12-14nixos/tests/kubo: test socket activation for the GatewayLuflosi1-0/+7
Add a new test to check that accessing the Gateway socket also starts the daemon via socket activation.
2023-12-14nixos/tests/kubo: disable broken FUSE testLuflosi1-1/+3
The FUSE functionality is completely broken in Kubo v0.24.0. See https://github.com/ipfs/kubo/issues/10242.
2023-12-14nixos/node-red: fix `cfg.package` default valueemilylange1-1/+1
This fixes the following eval error: ``` error: nodePackages.node-red cannot be found in pkgs ``` when having `services.node-red.enable = true;` without specifying `services.node-red.package`, just like the nixos VM test. Follow-up of f509382c11ed445b52f249efa6e2fe66d1b56fa7, which attempted to fix this as well. Breakage introduced in 0a37316d6cfea44280f4470b6867a711a24606bd.
2023-12-15drbd: fix path to drbdadmAshish SHUKLA1-2/+2
props: @cody4k for the fix Fixes #268172
2023-12-14Merge pull request #274273 from Ma27/include-rl2405Silvan Mosberger1-0/+1
nixos/doc: include section for 24.05
2023-12-14nixos/tests/kernel-generic: test hardened 6.6Maximilian Bosch1-0/+1
2023-12-14nixos/doc: include section for 24.05Maximilian Bosch1-0/+1
People are actively writing release notes already and with this it's ensured that the contents are actually valid. Also, when writing release notes for something, I'd like to be able to see a preview.
2023-12-14nixos/udev: allow /bin/sh in udev rulesFlorian Klink1-1/+2
Using `/bin/sh` in udev rules is fine (as it's guaranteed to point to a (bash) shell on NixOS), and actually is better than hardcoding absolute paths, at least in cases where these rules are also added to the (systemd-based) initrd (via boot.initrd.services.udev.rules). To allow this, we need to update the check routine that assembles the list of files needing fixup, to explicitly exclude `/bin/sh` occurences. To do this, we convert the pattern to a PCRE regex (which requires "/" to be escaped), and add `(?!/bin/sh\b)` as a negative lookahead. This subsequently allows udev rules to (start using) `/bin/sh` again, so they'll work in-initrd.
2023-12-14nixos/tests/zammad: set memory limit to 2048 MBnetali1-0/+4
It seems like Zammad and the postgreSQL need more then 1 GB memory after the update to Zammad 6.2.0. So this commit sets the memory limit to 2 GB.
2023-12-14nixos/doc: mention nc28Maximilian Bosch2-1/+7
2023-12-14nixos/nextcloud: updates for nc28Maximilian Bosch1-5/+2
* Always use PHP 8.2: at the time of writing, Nextcloud also suggests to use 8.2 rather than 8.3 in the manual for v28. One contributing factor is probably that all plugins need new releases to declare PHP 8.3 support. * Fix upgradeWarning for installing v27 now that v28 is out. * Drop upgrade warning for v24. This one is EOL for quite a while already, so right now everybody should've switched (or carefully studied the release notes in case they were upgrading from <23.05) and we can clean up the module a little bit. v25 was dropped not so long ago, so if it's still referenced (because somebody didn't declare `services.nextcloud.package` and has `system.stateVersion = "22.11";`) it's appropriate to still give a specialized error.
2023-12-14Merge pull request #274236 from flokli/udev-path-default-optionFlorian Klink1-0/+3
nixos/udev: update defaultText for services.udev.path
2023-12-14nixos/udev: update description for services.udev.pathFlorian Klink1-0/+3
services.udev.path already contains some defaults, these are however defined in the module implementation, not options. Update the description to make this more clear.
2023-12-14Merge pull request #274088 from NickCao/synapseMaximilian Bosch2-11/+11
treewide: replace references to matrix-org/synapse with element-hq/synapse
2023-12-14Merge pull request #267693 from nbraud/nixos/wpa_supplicant/umaskLinus Heckemann2-0/+12
nixos/wpa_supplicant: Ensure the generated config isn't world-readable
2023-12-14Merge pull request #270084 from Atemu/nixos/snapraid-top-levelLinus Heckemann3-4/+9
nixos/snapraid: remove from top-level
2023-12-14Merge pull request #270444 from NukaDuka/cephfs-mount-fixLinus Heckemann1-9/+12
ceph: use absolute binary paths instead of relative paths
2023-12-14Merge pull request #270523 from m-bdf/river-xdg-portal-configLinus Heckemann1-0/+3
nixos/river: add xdg.portal.config
2023-12-14Merge pull request #270704 from Avaq/avaq/vdirsync-fix-statuspathLinus Heckemann1-3/+5
nixos/vdirsyncer: fix config.statusPath option
2023-12-14Merge pull request #274013 from philiptaron/fixing-thingsLassulus1-1/+1
nixos/jigasi: update to use literalExpression
2023-12-14nixos/qmk: ensure plugdev groups existstv1-0/+1
QMK's udev rules are setting hidraw devices's group to plugdev.
2023-12-14Merge pull request #267937 from SomeoneSerge/fix/test-driver-activestateJacek Galowicz1-2/+30
nixos/lib/test-driver: make wait_for_unit ask for ActiveState only
2023-12-14nixos/users-groups: fix confusing error messageAlyssa Ross1-1/+1
If we include users with unset groups, we get this very confusing message, with invalid Nix code: - The following users have a primary group that is undefined: qyliss Hint: Add this to your NixOS configuration: users.groups. = {}; We don't need to include such users in this check, since they'll be caught anyway by this one: - users.users.qyliss.group is unset. This used to default to nogroup, but this is unsafe. For example you can create a group for this user with: users.users.qyliss.group = "qyliss"; users.groups.qyliss = {};
2023-12-13nextcloud28: init at 28.0.0Robert Schütz2-5/+8
2023-12-13nixos/matrix-synapse: update broken link to redis related docsNick Cao1-1/+1
2023-12-13nixos/matrix-synapse: replace references to matrix-org/synapse with ↵Nick Cao2-11/+11
element-hq/synapse
2023-12-13nixos/nebula: tests: revert wait_for_unitMorgan Jones1-5/+0
2023-12-13Merge pull request #273834 from ajs124/restic-wrappers-append-pathJanik1-1/+2
nixos/restic: append PATH in wrappers instead of overwriting
2023-12-13Merge pull request #269551 from tejing1/nixos-stub-ldRobert Hensing8-1/+197
nixos/stub-ld: init module
2023-12-13Merge pull request #253184 from tilpner/prometheus-headersJanne Heß1-0/+8
nixos/prometheus: add remote{Read, Write}.headers options
2023-12-13nixos/hyprland: remove enableNvidiaPatches optionMihai Fufezan1-5/+6
Hyprland now works on Nvidia without patching.