Release 23.05 (“Stoat”, 2023.05/??)
Support is planned until the end of December 2023, handing over to
23.11.
Highlights
In addition to numerous new and upgraded packages, this release
has the following highlights:
Cinnamon has been updated to 5.6, see
the
pull request for what is changed.
New Services
fzf,
a command line fuzzyfinder. Available as
programs.fzf.
Backward Incompatibilitiescarnix and cratesIO has
been removed due to being unmaintained, use alternatives such
as
naersk
and
crate2nix
instead.
The EC2 image module no longer fetches instance metadata in
stage-1. This results in a significantly smaller initramfs,
since network drivers no longer need to be included, and
faster boots, since metadata fetching can happen in parallel
with startup of other services. This breaks services which
rely on metadata being present by the time stage-2 is entered.
Anything which reads EC2 metadata from
/etc/ec2-metadata should now have an
after dependency on
fetch-ec2-metadata.serviceservices.sourcehut.dispatch and the
corresponding package
(sourcehut.dispatchsrht) have been removed
due to
upstream
deprecation.
The EC2 image module previously detected and automatically
mounted ext3-formatted instance store devices and partitions
in stage-1 (initramfs), storing /tmp on the
first discovered device. This behaviour, which only catered to
very specific use cases and could not be disabled, has been
removed. Users relying on this should provide their own
implementation, and probably use ext4 and perform the mount in
stage-2.
The EC2 image module previously detected and activated
swap-formatted instance store devices and partitions in
stage-1 (initramfs). This behaviour has been removed. Users
relying on this should provide their own implementation.
Qt 5.12 and 5.14 have been removed, as the corresponding
branches have been EOL upstream for a long time. This affected
under 10 packages in nixpkgs, largely unmaintained upstream as
well, however, out-of-tree package expressions may need to be
updated manually.
The nix.readOnlyStore option has been
renamed to boot.readOnlyNixStore to clarify
that it configures the NixOS boot process, not the Nix daemon.
Other Notable Changes
The module for the application firewall
opensnitch got the ability to configure
rules. Available as
services.opensnitch.rules
A new virtualisation.rosetta module was
added to allow running x86_64 binaries
through
Rosetta
inside virtualised NixOS guests on Apple silicon. This feature
works by default with the
UTM
virtualisation
package.
Resilio sync secret keys can now be provided using a secrets
file at runtime, preventing these secrets from ending up in
the Nix store.