about summary refs log tree commit diff
Commit message (Collapse)AuthorAgeFilesLines
* games/starbound: Update to version 1.4.4aszlig2020-11-102-19/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I already updated the game a while ago, but didn't commit it yet and since the update has been out since a year, I think it's time to actually update it here as well (shame on me). This essentially includes the "new" bounty hunter update from June 2019, which has a lot of changes. So instead of including the changelog here, I'm hereby referring to the upstream release announcement: https://playstarbound.com/starbound-1-4-bounty-hunter-update/ I also changed the -Werror flag in the preloader to -Wall, since the errors/warnings we're getting are false-positives: error: '__builtin_strncpy' specified bound depends on the length of the source argument [-Werror=stringop-overflow=] While a warning like this usually is a concern, it's not in our case, since the size of the destination *also* depends on the length of the source argument. Additionally, I changed the test to use the new networking.interfaces.*.ipv4.addresses option instead of the legacy one which has been deprecated for ages. Signed-off-by: aszlig <aszlig@nix.build>
* games/gog: Add "The Longing"aszlig2020-11-102-0/+14
| | | | | | | Another game that I already finished (in less than 400 days obviously) but haven't yet committed so far. Signed-off-by: aszlig <aszlig@nix.build>
* games/gog: Add Always Awakening/Legacyaszlig2020-11-103-0/+28
| | | | | | | I've already packaged both games a while ago and already finished them, so this is basically to get rid of a dirty Git working tree. Signed-off-by: aszlig <aszlig@nix.build>
* programs/vim: Remove sensible and enable settingsdevhell2020-11-091-17/+18
| | | | | The `sensible` plugin doesn't work for me. I think setting things manually is probably better for now.
* profiles/packages: Remove taskelldevhell2020-11-091-1/+0
| | | | It's marked as broken and I've been using `smos` more lately anyway.
* machines/hildr: Remove Nord theme from xrdbdevhell2020-11-081-48/+0
|
* programs/vim: Add sleuth plugindevhell2020-11-061-0/+1
| | | | Fully automatic indentation, why not.
* {machines,modules}: Enable Podman everywheredevhell2020-11-063-4/+3
| | | | | I'm finding myself use containers more and more these days, primarily for testing stuff, so it's useful to have the tools installed.
* machines/gunnr: Remove Nord theme from xrdbdevhell2020-11-061-48/+0
| | | | | | Trying to figure out a better, more consistent approach to theming my terminals and terminal programs, so let's start from scratch and remove as much as possible.
* machines/gunnr: Add amdvlk to opengldevhell2020-11-051-1/+1
| | | | Let's see if this does anything good.
* modules/vim: Add cursorlinedevhell2020-11-051-0/+1
|
* profiles/packages: Remove xscreensaverdevhell2020-11-051-1/+0
| | | | Forgot I had this still in here.
* machines/{hildr,gunnr}: Enable my Vim configdevhell2020-11-052-1/+2
| | | | | As I move from one machine to another I'll be removing SpaceVim and enabling my Vim.
* modules/programs: Fix Vimdevhell2020-11-051-55/+70
| | | | | | | This config works now. Huge thanks to aszlig for helping! This is only a bare-bones configurations. There are some parts of SpaceVim I really enjoy, so over time I'll try to get my Vim configuration to emulate those parts.
* modules/programs: Add vimdevhell2020-11-033-0/+59
| | | | | | This is in preparation of me leaving SpaceVim behind and not having to rely on external sources for certain programs, such as Vim, when installing a new machine.
* flake.nix: Expose packages as legacyPackagesaszlig2020-11-021-1/+5
| | | | | | | | | | | While the "packages" within Nix Flakes does make a few things a bit simpler it also only allows us to export a flat structure. However, in Vuizvui we want to use namespaces for the corresponding package sets, since different packages could have different overrides depending on the namespace of the corresponding author. Signed-off-by: aszlig <aszlig@nix.build>
* profile/packages: Replace scrot with maimdevhell2020-10-301-1/+1
| | | | | | | I'm not sure when this started, but `scrot -s` introduces artefacts in the screenshot because the selection border is captured with the screenshot which is pretty annoying. It looks like `maim` doesn't have this issue.
* machines/{gunnr,hildr,sigrun}: Remove xscreensaverdevhell2020-10-283-3/+0
| | | | | I really love the screensavers, but unfortunately more often than not it's hugely distracting for my mode of work.
* pkgs/librxtx-java: Fix build with newer JDKaszlig2020-10-221-2/+8
| | | | | | | | | | | | | | This is actually needed to build the axbo program, which I have rarely used during the past years. However, I'm not absolutely sure that I won't be using this again so I decided to fix it, since all that needed to be done is take an additional patch from Debian that fixes compatibility with newer JDK versions. Since the patch changes configure.in and Makefile.am, we need to regenerate all the files for autotools as well and since there were old m4 files laying around I deleted them in preAutoreconf. Signed-off-by: aszlig <aszlig@nix.build>
* core/tests: Remove runInMachineaszlig2020-10-221-3/+0
| | | | | | | | | | | | | | | | | The test is not essential for running any real NixOS machines and the tests just checks whether the runInMachine function for building derivations inside a VM works. I was very much reluctant to just remove this test before I actually fixed the issue upstream because this would mean that it's highly likely that I'm never going to do it. However, since all the channels on our side are currently blocking on this test, which isn't relevant either, I'm going to risk possibly never fixing runInMachine upstream since I'd have removed that test anyway for the aforementioned reason. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/packages: Add 'so'devhell2020-10-201-0/+1
| | | | This is incredibly useful if you don't want to leave the terminal.
* profiles/packages: Add bottom, remove othersdevhell2020-10-201-6/+1
|
* profiles/packages: Add batdevhell2020-10-151-0/+1
| | | | Neat. Like cat, just better in certain circumstances.
* Revert "Revert "profiles/base: Allow mpd to access pulseaudio""devhell2020-10-141-0/+1
| | | | | | | Well, that was a bit too hasty, I forgot that MPD runs as its own user and therefore can't talk to pulseaudio if this isn't set. This reverts commit dc4882e92f84c157d682b860365644ffd1f5c0d6.
* profiles/packages: Add smosdevhell2020-10-131-0/+1
| | | | | This seems like an immensely useful tool in conjunction with `taskwarrior`.
* core/tests: Remove all tests from the "tested" jobaszlig2020-10-041-248/+5
| | | | | | | | | | | | | | | | | | | | The upstream Hydra channels are based on the "tested" job in release-combined.nix, which already contain a bunch of tests that must succeed for the channel to advance. Since evaluation time has skyrocketed for us within the last few months, we now even don't get *any* evaluation since a while since we hit a timeout of 10 hours. I have no idea which changes resulted in this spike of evaluation time but right now I'm too busy with other things to do a proper investigation. To hopefully mitigate this, I decided to base our vuizvui jobset on the "nixos-unstable" channel and we now only run *additional* tests not already tested by the upstream channel. Signed-off-by: aszlig <aszlig@nix.build>
* profiles/packages: Add dufdevhell2020-10-011-0/+1
| | | | | Reat that muesli made this lovely little tool, so naturally had to add it.
* machines/gunnr: Remove proxydevhell2020-09-301-4/+0
| | | | | We've finally arrived in the 21st century and don't require a proxy anymore. Hurrah!
* machines/hildr: Switch back to wpa_supplicantdevhell2020-09-291-2/+2
| | | | | | | | | | IWD seems to have an issue with the re-configured eduroam I frequently use. Every other OS has no issues with the new configuration, only IWD does. They did some background work on the CA cert, and even gave me the public CA PEM to integrate in the configuration directly, and yet IWD complains of `bad_certificate`. I don't have time to dig deeper, so I'm switching to `wpa_supplicant` again until I have time to test it again with a newer version of IWD.
* machines/shiki: alock -> i3lockProfpatsch2020-09-211-3/+13
| | | | | | | | | alock is really bad locking software. It is slow, it becomes transparent, it even crashes sometimes. All the things a good lock screen should never do. i3lock is the trusted “standard” featureless locksceen, so this switch has been procrastinated for way too long.
* modules/profpatsch/services/dunst: display icons by defaultProfpatsch2020-09-211-0/+2
|
* modules/profpatsch/services: add dunst user serviceProfpatsch2020-09-213-15/+134
|
* pkgs/profpatsch.de: more talkiesProfpatsch2020-09-171-1/+6
| | | | Co-Authored-By: midzer <midzer@gmail.com>
* pkgs/profpatsch.de: replace jquery by native jsProfpatsch2020-09-173-18/+7
| | | | | | | It was only used for a single use-case, by now all browsers support this functionality. It’s a pretty heavy dependency for a single use :) Co-Authored-By: midzer <midzer@gmail.com>
* aszlig/gopass: Downgrade to version 1.9.2aszlig2020-09-171-5/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Version 1.10.X switches the default to new MIME-based format which breaks interoperability with pass and other implementations. I'd gladly switch to that format, but the 1.10.0 changelog also announces plans to remove support for GnuPG and Git in the long term: > The goal is to remove the support for multiple backends and any > external dependencies, including git and gpg binaries. GnuPG and Git support is the reason why I started using pass and ultimately switched to gopass. If the latter stops being a viable password manager, switching back to pass will be much harder with the new MIME format. There is also an upstream issue[1] about this and while I haven't read through *all* the comments, other people seem to have similar reasons for switching to gopass. So far however I'm not convinced that my use case will have a future with gopass, so I'll stay at 1.9.x until I've had the time to properly research other options or maybe even stay with gopass (and go all-in with the new MIME format). [1]: https://github.com/gopasspw/gopass/issues/1365 Signed-off-by: aszlig <aszlig@nix.build>
* machines/legosi: use gzip and optimization for nginxProfpatsch2020-09-161-0/+2
|
* pkgs/profpatsch.de: use font-display: swap to improve page loadProfpatsch2020-09-161-0/+4
|
* Use attribute sets for boot.initrd.luks.devicesaszlig2020-09-147-35/+33
| | | | | | | | | | | | | | | | | | | | This was one of the places where types.loaOf was still in place and it got removed a while[1] ago and this in turn causes evaluation to fail for quite a few machines: The option value `boot.initrd.luks.devices' in `...' is not of type `attribute set of submodules'. I've not only changed all the machines to use attribute sets but also fixed the check in core/tests.nix, because comparing against a list when the actual type is an attribute set will result in all the LUKS tests to be part of *all* channels, no matter whether you're actually using LUKS. [1]: https://github.com/NixOS/nixpkgs/commit/20d491a317d9956ddca80913f07 Signed-off-by: aszlig <aszlig@nix.build> Cc: @Profpatsch Cc: @sternenseemann
* dnyarri: Enable Wacom tablet supportaszlig2020-09-141-0/+1
| | | | | | | | I've had this laying around in my configuration.nix since quite a while, but today is one of those days where I can't stand all the cruft piling up there anymore and decided to add it here. Signed-off-by: aszlig <aszlig@nix.build>
* devhell/packages: Remove gstreamer packageaszlig2020-09-141-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The package attributes for GSstreamer 0.x were dropped[1] a while ago, so evaluating the packages no longer succeeds and instead we get an error like this on Hydra: error: undefined variable 'gstreamer' at .../profiles/packages.nix:129:7 Initially I was tempted to change this to use pkgs.gst_all_1.gstreamer, but looking at the differences between the old pkgs.gstreamer, the new package only contains the relevant libraries while the old one contains a few binaries, namely gst-feedback, gst-inspect, gst-launch, gst-typefind, gst-xmlinspect, gst-xmllaunch and all of them again with a "-0.10" suffix. All of these tools are development tools and should not be used in real applications, for example from the manual[2] on gst-launch-1.0: > Please note that gst-launch-1.0 is primarily a debugging tool. You > should not build applications on top of it. For applications, use the > gst_parse_launch() function of the GStreamer API as an easy way to > construct pipelines from pipeline descriptions. While environment.systemPackages does link other directories than just $out/bin, the primary reason why you'd want to put something in there is to make it available in the system's PATH. When asking @devhell about this he didn't remember the exact reason why he put gstreamer in systemPackages, so I can only *assume* it was because of tools like gst-launch, which unfortunately even I can remember seeing recommended (instead of eg. ffmpeg) in some dark corners of the web. So if this would be really about gst-launch, we would need to put in pkgs.gst_all_1.gstreamer.dev into systemPackages, since the development tools are now where they belong. Given that @devhell doesn't know the reason anymore and *also* told me to remove it *and* it's also just a development tool which is not supposed to be used in production, I'm hereby removing the package. Should there really be applications which rely on this, they should hopefully break after this change so they can be fixed to not rely on these development tools. [1]: https://github.com/NixOS/nixpkgs/commit/4a4e642abaaa026b55f42248a7b [2]: https://gstreamer.freedesktop.org/documentation/tools/gst-launch.html Signed-off-by: aszlig <aszlig@nix.build> Cc: @devhell
* sandbox: Only mount new procfs instance for PID nsaszlig2020-09-112-6/+18
| | | | | | | | | | If we don't have a PID namespace, we're not allowed to mount a new procfs instance and subsequently get an error (EPERM). To cope with this, we're now bind-mounting /proc just like the other pseudo file systems IFF we're not using the CLONE_NEWPID flag. Signed-off-by: aszlig <aszlig@nix.build>
* sandbox: Allow to enable/disable namespacesaszlig2020-09-114-4/+49
| | | | | | | | | | | | | | | | | | | | While the sandbox was initially written for games, I now use the implementation for other things, such as sandboxing database management systems inside "nix develop". However, both MariaDB and PostgreSQL do not like it very much if for example IPC is too restricted and if the PID file contains the PID of the process inside the namespace. Additionally I always wanted to have a way to enable network namespaces for games as well, so this is a good occasion to make them configurable. Of course, since we need the mount and user namespaces to implement our sandbox in the first place, we can't allow users to disable these namespaces, but for everything else, we now have a new "namespaces" attribute. Signed-off-by: aszlig <aszlig@nix.build>
* modules/gnupg: Use getLib to get systemd libraryaszlig2020-09-081-1/+1
| | | | | | | | | | | | | A recent change[1] has removed the lib output from the systemd package, so our GnuPG agent wrapper no longer compiles. Using getLib falls back to the "out" output if the "lib" output is unavailable and should be backwards- and forwards-compatible (in case the "lib" output is added back someday). [1]: https://github.com/NixOS/nixpkgs/commit/b68bddfbda2092c5fde2c4cece2 Signed-off-by: aszlig <aszlig@nix.build>
* Add basic flake.nixaszlig2020-09-081-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | Unfortunately, most of the functionality can't be easily exposed via Nix Flakes, so this will be a very limited Flake with only our NixOS modules and our packages as an overlay. One of those things that are very hard to expose are our packaged games, since the availability of them are dependent on the configuration (eg. GOG, itch.io or HIB credentials). Even when it comes to buildSandbox - which is the main reason why I'm adding a flake.nix - I am not so sure what's the best way to expose it. For example on one side, this could be exposed as vuizvui.lib.buildSandbox, which in turn expects a pkgs argument, but on the other side, we want to have certain other parts that *do* depend on a locked version of nixpkgs. Using pkgs as part of a "lib" attribute also sounds a bit weird to me, since lib usually doesn't contain anything depending on stdenv. So until we have a better way of integration, I'll just expose the overlay and our NixOS modules. Signed-off-by: aszlig <aszlig@nix.build>
* modules/gnupg: Remove "with lib;" on whole moduleaszlig2020-09-081-17/+17
| | | | | | | | | | | | Using "with lib;" over such a broad scope makes it more difficult to detect early evaluation errors since we need to evaluate the whole system to check whether a non-existing attribute set is actually using the "lib" fallback or whether it really exists in the current scope. This makes "nix-instantiate --parse" feasible for detecting typos early on. Signed-off-by: aszlig <aszlig@nix.build>
* machines/eir: Remove unnecessary packagesdevhell2020-09-061-4/+0
| | | | A bit more cleanup.
* machines/haku: set NIX_PATH to filtered pkgs.pathProfpatsch2020-08-301-2/+13
| | | | | | | | | | | | This is a step towards a saner deployment for these machines. The NIX_PATH is fixed, so that everything on the running system always uses exactly the nixpkgs version the system was deployed with. The deployment is done by copying the system closure and switching to it via the `bin/switch-to-configuration` script. Uses the reference to pkgs.path, and applies filterSourceGitignore on the directory, since I often deploy from a local checkout which is half a GB without the gitignore filter.
* pkgs/profpatsch: bump nixperimentsProfpatsch2020-08-301-4/+8
| | | | Improvements to filterSourceGitignore were made.
* machines/haku: add data-seeding groupProfpatsch2020-08-301-0/+3
| | | | used for access to /data/seeding
* machines/haku: remove rtorrentProfpatsch2020-08-301-1/+0
|