about summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
2017-11-26nixos/qemu-guest: Ensure virtio_mmio is available in initrdTuomas Tynkkynen1-1/+1
ARM and AArch64 might use virtio_mmio in some cases.
2017-11-26nixos/qemu: Add virtio-rng-pci to test-driverTuomas Tynkkynen1-0/+1
Otherwise AArch64 KVM guests don't have enough entropy at boot.
2017-11-26nixos/qemu-vm: Use different serial port on ARM/AArch64Tuomas Tynkkynen2-9/+20
2017-11-26nixos/qemu-vm: Don't try enabling graphics/mouse on non-x86Tuomas Tynkkynen1-1/+3
Needs to be figured out some day, just disable them for now.
2017-11-26nixos/qemu-vm: Set QEMU command line depending on architectureTuomas Tynkkynen1-2/+7
2017-11-25buildkite-agent: secrecy improvements: non-store, non-Nix provisioning of ↵Kosyrev Serge1-23/+41
secrets
2017-11-25Merge pull request #31283 from michalrus/per-user-profiles-buildEnvJörg Thalheim1-4/+6
users-groups module: use `buildEnv` in per-user profiles
2017-11-25Merge pull request #31048 from LumiGuide/fix-owncloudJoachim F3-12/+74
Fix some but not all errors in owncloud
2017-11-25Merge pull request #31995 from jtojnar/xserver-libinputOrivej Desh2-1/+7
Use libinput for all input devices when enabled
2017-11-25nixos/xserver: let X choose the xkb rulesJan Tojnar1-1/+0
With libinput used for keyboard, base rules produce incorrect keyboard layouts. We are removing the option as recommended in the XKB configuration guide [1] to let X server choose the ruleset. It looks like it chooses evdev rules which seem to work for some reason [1]: https://www.x.org/releases/X11R7.6/doc/xorg-docs/input/XKB-Config.html#id2521360
2017-11-25nixos/munin: fix broken plugin wrappersKjetil Orbekk1-37/+31
The munin-node service used wrapProgram to inject environment variables. This doesn't work because munin plugins depend on argv[0], which is overwritten when the executable is a script with a shebang line (example below). This commit removes the wrappers and instead passes the required environment variables to munin-node. Eliminating the wrappers resulted in some broken plugins, e.g., meminfo and hddtemp_smartctl. That was fixed with the per-plugin configuration. Example: The plugin if_eth0 is a symlink to /.../plugins/if_, which uses $0 to determine that it should monitor traffic on the eth0 interface. if_ is a wrapped program, and runs `exec -a "$0" .if_-wrapped` .if_-wrapped has a "#!/nix/.../bash" line, which results in bash changing $0, and as a result the plugin thinks my interface is called "-wrapped".
2017-11-25nixos/fwupd: disable by defaultOrivej Desh1-1/+1
It causes building during evaluation when enabled, and it is hardly useful without GNOME or the awareness of the system operator.
2017-11-25nixos.tests.installer.swraid: increase drive sizeVladimír Čunát1-4/+4
The latest staging caused this test not to fit anymore. I'm all for keeping closure sizes under control, but I don't think *this* is a good place.
2017-11-24Merge branch 'staging' (older one)Vladimír Čunát1-2/+1
Hydra seems OK-ish, except that some aarch64 jobs need restarting after qt4 timing out for the first time: https://hydra.nixos.org/eval/1412641?compare=1412561
2017-11-24Merge pull request #31371 from gnidorah/swayFranz Pletz1-1/+4
sway module: passthrough sway binary when needed
2017-11-24Merge pull request #31839 from bluescreen303/fix-rpfilterFranz Pletz1-0/+3
firewall: fix rpfilter blocking dhcp offers when no ip was bound yet
2017-11-24Merge pull request #30252 from jtojnar/fwupdJan Tojnar2-0/+91
fwupd: 0.9.6 → 1.0.1
2017-11-24nixos/libinput: load configuration fileJan Tojnar1-0/+7
In order for libinput to be used with Xorg, its configuration file needs to be added to environment similarly to how evdev one’s is. Closes: #31670
2017-11-23Merge pull request #31972 from bkchr/copyfilefromhost_missing_documentationGraham Christensen1-1/+11
Adds missing documentation for copyFileFromHost in NixOS tests
2017-11-23Adds missing documentation for copyFileFromHost in NixOS testsBastian Köcher1-1/+11
2017-11-23Merge pull request #31973 from grahamc/options-fix-inginiousGraham Christensen1-1/+1
inginious: fix options eval
2017-11-23inginious: fix options evalGraham Christensen1-1/+1
2017-11-23Merge pull request #27513 from lukeadams/prl-tools-fixJörg Thalheim1-2/+46
[NixOS] Fix + update `hardware.parallels` config option
2017-11-23Merge pull request #31941 from Rovanion/masterJörg Thalheim1-5/+5
user-mgmt.xml: extraUsers => users
2017-11-23nixos/manual: extraUsers -> users in user-mgmt.xmlRovanion Luckey1-5/+5
Changed extraUsers -> users and one case of extraGroups -> groups in nixos manual chapter 7. According to chatter on IRC these are the proper names for these configuration options nowadays. Modified based on feedback from Jörg Talheim.
2017-11-23nixos/services.fwupd: allow adding trusted keysJan Tojnar1-1/+15
2017-11-22nixos/doc/manual: print context on failing xmllint validationProfpatsch1-7/+37
Previously only the line numbers of a giant, internally generated XML file were printed, without any kind of debuggability. Now at least the mentioned lines are printed with a little bit of surrounding context (to have something to grep for). ``` manual-combined.xml:4863: element para: Relax-NG validity error : Did not expect element para there 4859 <chapter xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xi="http://www.w3.org/2001/XInclude" version="5.0" xml:id="sec-writing-modules"> 4860 4861 <title>Writing NixOS Modules</title> 4862 4863 <para>NixOS has a modular system for declarative configuration. This 4864 system combines multiple <emphasis>modules</emphasis> to produce the 4865 full system configuration. One of the modules that constitute the ```
2017-11-22hydra: 2017-10-26 -> 2017-11-21Domen Kožar1-6/+7
2017-11-22nixos: init module: restya-boardThomas Strobel2-0/+385
2017-11-22ixos ids: reserve restya-boardThomas Strobel1-0/+2
2017-11-21Merge pull request #31850 from herrwiese/evilwmJoachim F1-0/+25
evilwm: implement NixOS WM module
2017-11-21Merge branch 'master' into stagingOrivej Desh3-14/+40
* master: (80 commits) lkl: Supports aarch64 wimlib: nitpicks gitAndTools.git-codeowners: 0.1.1 -> 0.1.2 wimlib: init at 1.12.0 kernel: improve modDirVersion error message releaseTools.sourceTarball: Clean up temporary files dotnetPackages.SmartIrc4net: rehash source migmix: make it a fixed-output derivation vm: Create /dev/full samba: 4.6.8 -> 4.6.11 to address CVEs CVE-2017-14746 & CVE-2017-15275 microcodeIntel: 20170707 -> 20171117 sshd: Remove ripemd160 MACs kernel config: Enable MEDIA_CONTROLLER linux: 4.4.99 -> 4.4.100 linux: 4.9.63 -> 4.9.64 nix-bash-completions: 0.4 -> 0.5 linux: 4.14 -> 4.14.1 linux: 4.13.14 -> 4.13.15 nix-zsh-completions: 0.3.3 -> 0.3.5 dns-root-data: use a stable URL that I maintain anyway ...
2017-11-21sshd: Remove ripemd160 MACsTim Steinbach1-1/+1
They are invalid for our OpenSSH
2017-11-20Merge pull request #31860 from rycee/nixos/bash/fix/inputrcGraham Christensen1-2/+3
nixos/bash: mark `inputrc` etc file as default
2017-11-20Merge pull request #31763 from jeaye/harden-ssh-configTim Steinbach2-12/+37
Harden ssh config defaults and remove old host key support
2017-11-20nixos/bash: mark `inputrc` etc file as defaultRobert Helgesson1-2/+3
The bash module currently sets the `/etc/inputrc` unconditionally, which prevents easy user override. This commit lowers the priority of the setting to "option default" level, which allows a user to override the value using either environment.etc."inputrc".text = … or environment.etc."inputrc".source = …
2017-11-20Merge branch 'master' into stagingOrivej Desh8-18/+141
* master: (23 commits) silver-searcher: patch bash completions location shairplay: init at 2016-01-01 ocamlPackages.rope: 0.5 -> 0.6 ocamlPackages.ocaml_gettext: 0.8.7 -> 0.8.8 mupdf: Patch openjpeg version nextcloud-client: fix build after qt updates gstreamer.gst-plugins-bad: Patch openjpeg version silver-searcher: move bash completion to etc/bash-completion.d/ neomutt: use mime.types from dedicated mime-types derivation mime_types: rename to mime-types XMLLibXML: 2.0129 -> 2.0132 fixes failing tests & CVE-2017-10672 nixos/matrix-synapse: remove unused log_file config nixos: run parted with --script option (3rd) nixos: run parted with --script option (2nd) nixos/release: add nixos/tests/switch-test.nix to tested job nixos/system: make switch-to-configuration script pure. nixos/release: include mutableUsers test to release tests. nixos/tests: Add a test for config.users.mutableUsers. corebird: 1.7.2 -> 1.7.3 nixos/matrix-synapse: make home directory configurable ...
2017-11-20Merge pull request #31812 from eqyiel/matrix-synapse-configurable-homeFranz Pletz1-9/+16
nixos/matrix-synapse: make home directory configurable
2017-11-20nixos/evilwm: allow enabling evilwm through ↵Andreas Wiese1-0/+25
services.xserver.windowManager.evilwm.*
2017-11-20nixos/matrix-synapse: remove unused log_file configRuben Maher1-1/+0
2017-11-19nixos: run parted with --script option (3rd)Bjørn Forsman1-5/+5
Doh, should have included this in previous commit. Ref. 0ff4bb5f875afe8eb208bbabb3f52dc29539d2bc ("nixos: run parted with --script option").
2017-11-19nixos: run parted with --script option (2nd)Bjørn Forsman1-5/+5
Ref. 0ff4bb5f875afe8eb208bbabb3f52dc29539d2bc ("nixos: run parted with --script option")
2017-11-19firewall: fix rpfilter blocking dhcp offers when no ip was bound yetMathijs Kwik1-0/+3
2017-11-19Merge pull request #29269 from Moredread/test_crypt_with_keyfileFranz Pletz1-0/+41
Test opening encrypted filesystem with keyfile
2017-11-19Merge pull request #31805 from gleber/make-switch-to-configuration-pureobadz5-4/+38
nixos/system: make switch-to-configuration script pure
2017-11-19Merge pull request #31569 from gleber/add-mutable-users-testFranz Pletz3-0/+41
nixos/tests: add a test for config.users.mutableUsers.
2017-11-19nixos/release: add nixos/tests/switch-test.nix to tested jobGleb Peregud2-0/+2
2017-11-19nixos/system: make switch-to-configuration script pure.Gleb Peregud3-4/+36
Fixes #28443 Fixed few invocations to `systemctl` to have an absolute path. Additionally add LOCALE_ARCHIVE so that perl stops spewing warning messages.
2017-11-19Merge branch 'master' into stagingFranz Pletz3-3/+57
2017-11-19gdm: remove old workaround for conflicts with gettyPierre Chevalier1-1/+0
- There used to be a conflict between gdm and getty both trying to access tty1 - This conflict was fixed by running gdm on tty7 instead