| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Package currently doesn't evaluate because:
> Package xpdf-4.02 in ... is marked as insecure, refusing to evaluate.
>
> Known issues:
> - CVE-2018-7453: loop in PDF objects
> - CVE-2018-16369: loop in PDF objects
> - CVE-2019-9587: loop in PDF objects
> - CVE-2019-9588: loop in PDF objects
> - CVE-2019-16088: loop in PDF objects
While this might be fixed in the future, I'm removing the package
anyway, because I'm using zathura for quite a while (since mid 2016 to
be exact) and never used xpdf a single time since then.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
| |
The option has been moved[1] out of services.gnome3 since quite a while,
so let's actually use the new option "services.gvfs.enable" instead.
[1]: https://github.com/NixOS/nixpkgs/commit/67ad8a788fe0a8c22910d68d470416b6f5626740
Signed-off-by: aszlig <aszlig@nix.build>
Reported-by: @dwenola
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This fixes the following evaluation error:
The option `services.xserver.displayManager.slim' can no longer be
used since it's been removed. The SLIM project is abandoned and their
last release was in 2013.
Because of this it poses a security risk to your system.
Other issues include it not fully supporting systemd and logind
sessions.
Please use a different display manager such as LightDM, SDDM, or GDM.
You can also use the startx module which uses Xinitrc.
Here is the nixpkgs upstream pull request removing SLiM:
https://github.com/NixOS/nixpkgs/pull/73251
Since I was using a custom theme for SLiM and actually liked the
minimalism, it's probably time to start patching LightDM soon. For now
however, I'll stay with a default LightDM configuration and wait until
I'm getting annoyed :-)
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
`runCommandLocal` was added to nixpkgs in
https://github.com/NixOS/nixpkgs/pull/74642
to speed up trivial `runCommand` derivations by always building them
locally. We have a few places where that’s good to use.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is the "Witchcraft Compiler Collection", which is VERY useful for
reverse-engineering, especially when looking back at the work I've done
with game packaging here in Vuizvui, I would have needed something like
this a ton of times.
I've mainly used radare2 for dissecting the binaries, but especially the
"Witchcraft Shell" is quite useful to have.
Thanks to @Profpatsch for pointing this out to me.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The usage of DHCP is no longer global since a while[1] and we now have
to explicitly enable it for the interfaces in question.
This actually is a good thing and makes it far less problematic if we
use tunnel interfaces and other more complicated networking
configuration.
I added the definitions for all machines where I actually know which
interfaces are in use and disabled useNetworkd for shakti, because I
don't know the interface names for that machine and the machine
currently isn't in use anyway, so we can add it later if needed.
[1]: https://github.com/NixOS/nixpkgs/pull/69302
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
The upstream service was shut down at September 11th 2019, so there
really is no need anymore for this package.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The services.redshift.{latitude,longitude} options are deprecated and
the replacement for them are the location.{latitude,longitude} options
that have been introduced since a while[1].
Both of the new options now use floating point numbers instead of
strings, which I changed accordingly (and also rounded them a bit).
[1]: https://github.com/NixOS/nixpkgs/commit/c4de0bf49289bc6b1448420dea39d7a5b0f3c374
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Since a while ago[1], the setting of ZSH options is now done after
interactiveShellInit, so using unsetopt SHARE_HISTORY doesn't work
anymore because it is set *afterwards*.
Instead of setting these options, we now use the setOptions option
instead and override it with exactly the options I want to be set.
Additionally, compinit is also no longer necessary, because it is done
by default and invoking it on our own is just redundant.
[1]: https://github.com/NixOS/nixpkgs/pull/58012
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
After using Gajim for years now, I got really frustrated by all its
warts, which mainly boil down the lack of type safety and its
interactions with its plugins.
Of course, I could also rip apart the plugin mechanism and Nixify them,
but in the end, the issues would still persist without a myriad of
tests that I don't have time right now to write.
After discovering a while back that Psi development has gained some
activity I decided to take a look into it a few weeks ago and while
there is certainly always things I don't like about some detail, it's
IMO a way better base for my future XMPP client.
So goodbye Gajim and hello Psi :-)
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
I no longer use last.fm nor do I use this project (even though it's my
own one), so let's remove it.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
|
| |
When writing that module back then in 88a10f1a6e2ea172ff985f64bfcf82e2,
I had to work around a systemd limitation (which I need to check whether
this is still the case today) and hardcoded the user name for the time
being.
While it's still quite ugly, there was interest from @Profpatsch, so I
decided to add an internal option to change that username.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
This really has a few very useful commands that make working with the
shell on a daily basis less painful.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
Most of these machines have limited RAM and come to a crawl whenever
swap space needs to be used.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
The zswap module is essentially what I had here, so let's just use that
instead.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Since kernel 4.18 contains the zstd compression module in the crypto
API, it really makes sense to use that instead of the default (lzo) as
it seems to have lower CPU usage with higher compression ratios.
Another change I've made is to use z3fold for the pooling, so that 3
pages are cramped into one page of the pool. I did also have a look at
zsmalloc, but it seems to come with the cost of additional CPU usage.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
| |
Two of the applications I use (gpodder and gajim) use Gtk and the
default Adwaita theme is rather blinding me, especially at night.
So let's set the GTK_THEME environment variable globally.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
I really didn't use it at all and there is also no reason to keep it
there anyway.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
I'm no longer using Miro, so there really is no point in having this
override in there.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
D'oh, I accidentally added the original package *after* creating the
patched one.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
| |
This is needed in order to add locations to contacts in KAddressbook.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
This is probably the main part of the KDE PIM suite, so it really makes
sense to add this to managed machines as they're end user oriented.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
| |
Even though gopass is more complex than pass, it's also less fragile
because it's written in a reasonably type-safe language rather than
being a giant shell script that relies on lots of external commands.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
A lot of trash has accumulated in /tmp on some of the machines, so let's
clean it up.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
| |
The whole package actually, including the ncurses UI and web interface.
Not that I really need the UI/web stuff right now, but it might come in
handy later.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
| |
The parent commit actually introduced an eval error with meshuggah,
because the machine defined permitRootLogin.
Setting these values to priority 1000 (which is what mkDefault does)
makes sure that setting the value somewhere else always takes
precedence (unless of course it has a value >= 1000).
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
| |
It's been ages since I needed to authenticate to SSHd via a password, so
let's actually make sure we only use pubkey auth by default. If we need
more than that we can still change the value to something else on a per-
machine basis.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
The new machine (shakti) is going to use Firefox, so let's make sure
this is machine-specific.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
| |
Unfortunately people still tend to use RAR archives for whatever reason.
The unfreeAndNonDistributablePkgs is a bit wrong here though, because
Ark and unrar *are* actually redistributable. This needs to be fixed in
nixpkgs though.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
| |
This module adds udev rules for MTP devices, so in theory we do not need
it. However I can remember one occasion where this was needed, but I
don't remember exactly why. So let's better err on our side rather than
causing problems for the users.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
| |
This is clearly something that is specific to the actual hardware, so
even though both brawndo and tyree share the same CPU vendor, we will
have a third managed machine that is going to be different.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
| |
This is no longer enabled by default since
NixOS/nixpkgs@a43e33d0e48b2284ac3a2222d7f1965cef66f5e2.
Those machines are desktop machines/laptops where users expect to have
support for sound ;-)
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The config.patch doesn't apply for Gajim 1.0 anymore anyway, so let's
throw everything away, including my custom config in order to start with
a new abomination.
With the new approach, I'm going to patch the configuration defaults
*directly* into Gajim, because one of the problems with the old approach
was that whenever specifics about a configuration value has changed, I
didn't get noticed by a patch failure.
So in the end the config I was ending up was a big mess.
I'm going to start this with a new unpatched version and someday get to
a patched version that I'm staisfied with... hopefully ;-)
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
I very rarely use this and if I want to I can still use nix run to bring
it in and it has been a lazy package anyway.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
| |
It doesn't seem to be maintained anymore.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
| |
This one is an old leftover from where I ran patched versions of NixOps,
but nowadays it is already in <nixpkgs>, so no need to keep it around.
Other than that, with Hydra now running in restricted eval mode it will
run into an eval error.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
I'm testing every fart that I push to nixpkgs, so why don't I test it
here as well? Dammit!
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
| |
This was more or less accidentally leaked to PATH and got removed in
NixOS/nixpkgs@71a8dbb956f5735030cd3982263d72f1bffdae23, so let's add it
in again.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
| |
Since NixOS/nixpkgs@a43e33d0e48b2284ac3a2222d7f1965cef66f5e2 this is no
longer enabled by default so in order to, for example, restore card
volumes we need to have this enabled.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
| |
This reverts commit 9dc27c57880db6469865dc2e6aaf295665c681a3.
The patch already was from upstream master and it found its way into the
new release, so we no longer need it.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
| |
We're using "out_to_x = false" because we only want output to stdout,
unfortunately since conky version 1.10.7, this causes a segfault which
is tracked in upstream issue brndnmtthws/conky#454.
The patch I'm using here was submitted and merged upstream in
brndnmtthws/conky#455 and it's not yet part of a release yet.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
I no longer use Chromium on a regular basis, so let's open URLs in
Firefox instead.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We no longer use the legacy SSH store protocol for taalo but the new
ssh-ng protocol, which makes the implementation of taalo-build a LOT
less clunky.
It also didn't make sense to have this as a NixOS module when we after
all just emit a static store path without any stuff depending on
configuration options.
The new implementation basically just wraps nix-build and nix-store -r
along with the right NIX_REMOTE variable.
With Nix 1.2 this can also be done with the new "nix build" command
using the --store option, but unfortunately "nix build" doesn't yet have
the same functionality as nix-build.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @Profpatsch, @bendlas
|
|
|
|
|
|
|
|
|
|
| |
This really makes sense for an end user system, so let's actually add it
to the system path. It seems that it also needs unzip and other
archivers in $PATH but I haven't actually verified if that's really the
case, because the Nix expression for ark already contains those
archivers.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
| |
This has changed in NixOS/nixpkgs@93c54acf97077567e8d6135a36f191e872b2
so that there's now an assertion to set a default.
For all the profiles I've set this properly but managed to forget it for
brawndo and tyree, which is now the case.
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
| |
I'm no longer employed by RedMoon Studios, so while I still receive
email on this address, it makes more sense to move on to nix.build :-)
Signed-off-by: aszlig <aszlig@nix.build>
|
|
|
|
|
|
|
|
|
|
|
| |
The previous GnuPG key (4DFD43EC834B6901BDA2BAAC1DE8E48E57DB5436) was
subject to the ROCA vulnerability, so I had to revoke it.
For details about this vulnerability, please visit:
https://crocs.fi.muni.cz/public/papers/rsa_ccs17
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
|
|
|
|
|
|
|
|
| |
It's a fast and less verbose alternative to find and while it won't
replace find entirely for me it certainly will be useful for less
complicated stuff or simple one-liners.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
|
|
|
|
|
|
|
|
|
|
|
| |
Reverts adding kmix as introduced in
e49eca5c0c9c27352825c455d3e1b8a938245755.
This causes two mixer icons to show up in the tray, which is kinda
redundant.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @dwenola, @BrokkoliBerta
|
|
|
|
|
|
|
|
|
|
| |
This has been introduced by NixOS/nixpkgs@c4c187ed7226e2132c13070444d0,
thanks to @pshendry.
IMHO it makes more sense to use this instead of simple-scan, because the
managed machines run KDE while simple-scan is a Gnome application.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
|