about summary refs log tree commit diff
path: root/nixos
AgeCommit message (Collapse)AuthorFilesLines
2017-09-23Merge pull request #21077 from xtruder/nixos/programs/npm/addJaka Hudoklin2-0/+45
npm module: add npm module for global npm config
2017-09-23npm module: add npm as nixos programJaka Hudoklin2-0/+45
2017-09-23nixos-generate-config: add programs options examplesFranz Pletz1-1/+7
2017-09-23nixos/install: disable kernel debug console loggingFranz Pletz2-18/+42
Add another option for debugging instead. Lots of users have been complaining about this default behaviour. This patch also cleans up the EFI bootloader entries in the ISO.
2017-09-23encrypted devices: add label set assertion (#29651)Silvan Mosberger1-0/+7
2017-09-23fanctl, fan module: removeRobin Gloster2-61/+0
This has been broken nearly all the time due to the patches needed to iproute2 not being compatible with the newer versions we have been shipping. As long as Ubuntu does not manage to upstream these changes so they are maintained with iproute2 and we don't have a maintainer updating these patches to new iproute2 versions it is not feasible to have this available.
2017-09-23Revert "nixos: add option for bind to not resolve local queries (#29503)"Peter Simons4-14/+3
This reverts commit 670b4e29adc16e0a29aa5b4c126703dcca56aeb6. The change added in this commit was controversial when it was originally suggested in https://github.com/NixOS/nixpkgs/pull/29205. Then that PR was closed and a new one opened, https://github.com/NixOS/nixpkgs/pull/29503, effectively circumventing the review process. I don't agree with this modification. Adding an option 'resolveLocalQueries' to tell the locally running name server that it should resolve local DNS queries feels outright nuts. I agree that the current state is unsatisfactory and that it should be improved, but this is not the right way. (cherry picked from commit 23a021d12e8f939cd0bfddb1c7adeb125028c1e3)
2017-09-23nixos/gitolite: use group 'gitolite' instead of 'nogroup'Bjørn Forsman2-1/+11
Having files (git repositories) owned by 'nogroup' is a bad idea.
2017-09-22nixos/lock-kernel-modules: fix deferred fileSystem mountsJoachim Fasting1-0/+8
Ensure that modules required by all declared fileSystems are explicitly loaded. A little ugly but fixes the deferred mount test. See also https://github.com/NixOS/nixpkgs/issues/29019
2017-09-22nixos/hardened test: add failing test-case for deferred mountsJoachim Fasting1-0/+19
2017-09-22nixos/hardened: simplify scriptJoachim Fasting1-2/+2
2017-09-22nixos/gitolite: customize .gitolite.rc declarativelyPavel Goran1-15/+111
Add the `extraGitoliteRc` option to customize the `.gitolite.rc` configuration file declaratively. Resolves #29249.
2017-09-22Merge pull request #29344 from ↵Jörg Thalheim2-1/+12
Moredread/fix/fileystem-encrypted-keyfile-missing-initrd-support nixos/fileystems: Fix boot fails with encrypted fs
2017-09-22Merge pull request #29581 from eqyiel/fix-rpc-gssdJörg Thalheim1-0/+6
nixos/nfs: allow setting the path to krb5.keytab
2017-09-21fuse3: init at 3.1.1Michael Weiss3-2/+6
This includes fuse-common (fusePackages.fuse_3.common) as recommended by upstream. But while fuse(2) and fuse3 would normally depend on fuse-common we can't do that in nixpkgs while fuse-common is just another output from the fuse3 multiple-output derivation (i.e. this would result in a circular dependency). To avoid building fuse3 twice I decided it would be best to copy the shared files (i.e. the ones provided by fuse(2) and fuse3) from fuse-common to fuse (version 2) and avoid collision warnings by defining priorities. Now it should be possible to install an arbitrary combination of "fuse", "fuse3", and "fuse-common" without getting any collision warnings. The end result should be the same and all changes should be backwards compatible (assuming that mount.fuse from fuse3 is backwards compatible as stated by upstream [0] - if not this might break some /etc/fstab definitions but that should be very unlikely). My tests with sshfs (version 2 and 3) didn't show any problems. See #28409 for some additional information. [0]: https://github.com/libfuse/libfuse/releases/tag/fuse-3.0.0
2017-09-21Merge pull request #27340 from bachp/glusterfs-tlsJoachim F1-0/+61
glusterfs service: add support for TLS communication
2017-09-21Merge pull request #29285 from bachp/node-exporter-docsJörg Thalheim1-1/+1
node-exporter service: fix documentation for enabledCollectors
2017-09-21gluster service: use str instead of path for private keyPascal Bach1-3/+3
This pervents the user from accidently commiting the key to the nix store. If providing a path instead of a string.
2017-09-21gitlab: 9.5.2 -> 9.5.5Robin Gloster1-0/+1
2017-09-21kmscon: reset ExecStart to allow overridePeter Hoeg1-0/+1
The getty@.service unit already has an ExecStart so we cannot simply set a new one in order to override it or we will get this error: systemd[1]: getty@tty1.service: Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing. Instead "reset" ExecStart by setting it to empty which is the systemd way of doing it.
2017-09-21nixos/tests/virtualbox: Fix netcat invocationaszlig1-4/+4
This is a backwards-incompatibility in netcat-openbsd introduced due to bumping the netcat version to 1.130 in a72ba661acf54d1beb2b4e306acba7d6f45621c4. Version 1.130 no longer exits on EOF but now needs to be passed the -N flag in order to exit on EOF. The upstream change reads[1] like this: Don't shutdown nc(1)'s network socket when stdin closes. Matches *Hobbit*'s original netcat and GNU netcat; revert to old behaviour with the new -N flag if needed. After much discussion with otto deraadt tedu and Martin Pelikan. ok deraadt@ Here is the diff of this change: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/nc/netcat.c.diff?r1=1.110&r2=1.111&f=h [1]: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/nc/netcat.c?rev=1.111&content-type=text/x-cvsweb-markup Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-09-21xonsh: fix typo ("xnosh") in "enable" descriptionRaphael Das Gupta1-1/+1
2017-09-20gitlab module: fix shell hook pathRobin Gloster1-3/+3
2017-09-20nfs-utils: set /etc/krb5.keytab as default path for rpc-gssdRuben Maher1-0/+6
Currently the `rpc-gssd.service` has a `ConditionPathExists` clause that can never be met, because it's looking for stateful data inside `/nix/store`. `auth-rpcgss-module.service` also only starts if this file exists. Fixes NixOS/nixpkgs#29509.
2017-09-20Make sure dummy kernel module is loaded for hologram-agent.Rob Vermaas1-0/+2
(cherry picked from commit eb873f6c78e1c5306956b4c9fd651b25a6b9c40c)
2017-09-19nixos/dnscache: add moduleMatt McHenry2-0/+87
with improvements suggested by Jörg Thalheim <joerg@thalheim.io>
2017-09-19nixos/tinydns: add moduleMatt McHenry2-0/+54
with improvements suggested by Jörg Thalheim <joerg@thalheim.io>
2017-09-18Merge pull request #29521 from aneeshusa/ease-radicale-upgradeFranz Pletz3-14/+90
Ease radicale upgrade
2017-09-18nixos: add option for bind to not resolve local queries (#29503)gwitmond4-3/+14
When the user specifies the networking.nameservers setting in the configuration file, it must take precedence over automatically derived settings. The culprit was services.bind that made the resolver set to 127.0.0.1 and ignore the nameserver setting. This patch adds a flag to services.bind to override the nameserver to localhost. It defaults to true. Setting this to false prevents the service.bind and dnsmasq.resolveLocalQueries settings from overriding the users' settings. Also, when the user specifies a domain to search, it must be set in the resolver configuration, even if the user does not specify any nameservers. (cherry picked from commit 670b4e29adc16e0a29aa5b4c126703dcca56aeb6) This commit was accidentally merged to 17.09 but was intended for master. This is the cherry-pick to master.
2017-09-18ssh service: add sftpFlags optionFranz Pletz1-2/+11
2017-09-18tests: add initrd-network-ssh testWilliButz2-0/+75
starts two VMs: - one with dropbear listening from initrd, waiting for a file - another connecting via ssh, creating the file
2017-09-18radicale: Test migration functionalityAneesh Agrawal2-13/+79
This also provides an example of how to migrate.
2017-09-18nixos/tests: add grafana test (#29531)WilliButz2-0/+26
2017-09-18coturn service: Fix coturn to properly come up (#29415)Robert Klotzner1-1/+2
properly also in case dhcpcd being used. Without network-online.target, coturn will fail to listen on addresses that come up with dhcpcd.
2017-09-18nixos/networking: network is online if default gw setFranz Pletz3-5/+12
Previously services depending on network-online.target would wait until dhcpcd times out if it was enabled and a static network address configuration was used. Setting the default gateway statically is enough for the networking to be considered online. This also adjusts the relevant networking tests to wait for network-online.target instead of just network.target.
2017-09-18Merge pull request #29133 from elitak/ipfsFranz Pletz2-32/+26
ipfs: workaround for upstream bug; other small fixes
2017-09-18nixos/mysql: declarative users & databasesFlorian Jacob1-0/+62
using Unix socket authentication, ensured on every rebuild.
2017-09-18influxdb service: fixup postStart script to handle TLSKranium Gikos1-1/+1
2017-09-18gollum service: initJustin Humm2-0/+93
2017-09-18radicale: Add extraArgs option to assist in data migrationAneesh Agrawal2-2/+12
2017-09-18tests: ipfs: enable autoMount testsMaximilian Güntner1-4/+2
2017-09-17ipfs: autoMount working without rootEric Litak1-8/+11
2017-09-17ipfs: workaround for upstream bug; doc fixesEric Litak1-20/+13
2017-09-17glusterfs service: add support for TLS communicationPascal Bach1-0/+61
TLS settings are implemented as submodule.
2017-09-17Merge pull request #27256 from bachp/squid-serviceFranz Pletz2-0/+170
squid service: initial service based on default config
2017-09-17nixos/gogs: Fix module when no passwords providedRodney Lorrimar1-1/+1
If neither database.password or database.passwordFile were provided, it would try and fail to coerce null to a string. This fixes the situation where there is no password for the database. Resolves #27950
2017-09-17Merge pull request #29479 from florianjacob/fix-tinc-stableJoachim F1-2/+4
nixos/tinc: Fix tinc cli wrapper for tinc 1.0
2017-09-17nixos/tinc: Fix tinc cli wrapper for tinc 1.0.Florian Jacob1-2/+4
tinc prior to 1.1 doesn't have the `tinc` executable, and `tincd` isn't of any use while the daemon already runs.
2017-09-17dockerTools.pullImage: release note regarding sha256 argument valueAntoine Eiche1-0/+9
2017-09-17nixos/dovecot: Fix createMailUser implementationaszlig3-5/+73
This option got introduced in 7904499542814b8a4d04fce8dc7ca8c383c083e7 and it didn't check whether mailUser and mailGroup are null, which they are by default. Now we're only creating the user if createMailUser is set in conjunction with mailUser and the group if mailGroup is set as well. I've added a NixOS VM test so that we can verify whether dovecot works without any additional options set, so it serves as a regression test for issue #29466 and other issues that might come up with future changes to the Dovecot service. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Fixes: #29466 Cc: @qknight, @abbradar, @ixmatus, @siddharthist
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-08-09 06:39:59 +0000