about summary refs log tree commit diff
path: root/modules
Commit message (Collapse)AuthorAgeFilesLines
* hardware/t100ha: Explicitly enable CONFIG_MATOMaszlig2016-07-101-0/+2
| | | | | | | | | | This adds a few #ifdefs for Atom platforms, however I don't remember what exactly it fixed/changed for the T100HA. Nevertheless it's probably a good idea to optimize for that architecture because we're going to compile our custom kernel anyway. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* programs/vim: Associate *.tt with filetype tt2htmlaszlig2016-07-101-0/+1
| | | | | | | | While hacking on Hydra, this gets quite annoying, because all of these template toolkit files don't get properly highlighted whenever I edit them, so I always had to set the file type manually. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* programs/vim: Change indentation to 2 spacesaszlig2016-07-101-2/+2
| | | | | | | | | | HTML already is such a verbose markup language, so having 4 spaces just makes it look even more shifted to the right than it's mostly is. And in the past I've already set ts=2 sw=2 in HTML files every time I edited them anyway. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* Merge remote-tracking branch 'origin/master'Profpatsch2016-07-083-2/+69
|\
| * gajim: Add python-axolotl as a runtime dependencyaszlig2016-07-041-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is needed to run the OMEMO plugin: https://github.com/omemo/gajim-omemo I'm using drvAttrs directly here, so that we can pass propagatedBuildInputs properly to the wrapper (without duplicating the dependencies all over the place). Ideally, this will be fixed in <nixpkgs> but in a much more fine-grained way in that we are going to have Nix expressions for every single plugin and its dependencies. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
| * gajim: Provide more complete fix for GnuPG 2.1.13aszlig2016-07-041-3/+53
| | | | | | | | | | | | | | | | | | | | | | | | The previous attempts only fixed the KEY_CONSIDERED status line for a few specific GnuPG functions, but after looking up the GnuPG source code the status line can happen on virtually *any* function that looks up one or more keys. So this time, we're going to add handling of KEY_CONSIDERED to every single status line handler. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
| * gajim: Fix patch for fixing with GnuPG 2.1.13aszlig2016-07-041-10/+9
| | | | | | | | | | | | | | | | | | | | | | The previous patch didn't handle the KEY_CONSIDERED status at the correct position, because the status will be returned during signing and not during verification. So this time, let's handle it during signing and actually test it (I did and it worked). Signed-off-by: aszlig <aszlig@redmoonstudios.org>
| * taalo-build: Set pipefail for nix-instantiateaszlig2016-07-041-0/+1
| | | | | | | | | | | | | | | | If the nix-instantiate step in taalo-build should fail, we want it to fail altogether rather than just going on and bailing out very late (with an exit status of 0) when the readlink call fails. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
| * gajim: Fix against GnuPG 2.1.13aszlig2016-07-042-1/+13
| | | | | | | | | | | | | | | | | | | | | | | | GnuPG 2.1.13 has introduced a KEY_CONSIDERED status, which isn't really picked up well by Gajim: https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000390.html There is also a new NOTATION_FLAGS status, but that shouldn't have an effect on Gajim. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | modules/openlab: factor out base configurationProfpatsch2016-07-083-54/+78
|/
* modules/gnupg: Don't close/remove sockets on stopaszlig2016-06-261-24/+78
| | | | | | | | | | | | | | | | | | | | | | When using systemctl restart or systemctl stop on any of the GnuPG services, the sockets were closed and removed. However we are using socket activation, so a simple restart of for example the agent would cause the socket to be closed and removed and afterwards the gpg-agent service is unable to pick up the socket again, thus failing to start. This in turn has led to GnuPG starting the agent by its own, entirely bypassing socket activation and our shiny service module. In order to cope with this, we need to provide LD_PRELOAD wrappers also for remove() and close(), so that we can prevent GnuPG from closing the systemd file descriptors. I've also added a small subtest to ensure this won't happen again in the future. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* modules/gnupg: Support sockets in XDG_RUNTIME_DIRaszlig2016-06-261-7/+16
| | | | | | | | | | | | | | | | | | | Since GnuPG version 2.1.13 (NixOS/nixpkgs@b586b00), there is support for XDG_RUNTIME_DIR so the sockets are in /run/user/gnupg instead of ~/.gnupg. The full announcement can be found here: https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000390.html Unfortunately the fix is a bit more complicated, because if GNUPGHOME is set to a non-default location, the sockets are to be found within the directory specified in $GNUPGHOME instead. So we also need to check the version of GnuPG so that we can properly split up the socket directory from the GNUPGHOME. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* Switch to pulseaudioFull for most of my machinesaszlig2016-06-261-0/+1
| | | | | | | | The default (light) package doesn't contain all the modules I need from time to time, so having te replace the running pulseaudio daemon with the full one is more of a hassle than worth keeping the light package. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* machines/labtops: arduinoProfpatsch2016-06-181-2/+3
|
* profiles/workstation: Disable Microsoft fontsaszlig2016-06-071-1/+0
| | | | | | | | | | After disabling allowUnfree a while ago, I also decided that I want my machines to stay clear of proprietary stuff as much as possible. And as I particularly don't use any of the Microsoft corefonts, I don't shed a tear if they're gone :-) Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* workstation/packages: Add "santander" browseraszlig2016-06-061-0/+1
| | | | Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/workstation: Fix signingkey Git optionaszlig2016-06-051-1/+1
| | | | | | | | | The right name for it is "signingkey" instead of "signkey" and the reason this has worked for so long was that if there is no signingkey value set, Git falls back to using the users name and email address instead, which is accepted by GnuPG as well. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* taalo-build: Fix picking up derivation pathsaszlig2016-06-051-2/+2
| | | | | | | | | | | | | Regression introduced by fba5c2469bd5e95857c4ffd9db3dd0529f2485f3. The derivation paths returned by nix-instantiate are usually valid store paths, except when used with --add-root. In case of the latter, we get the root symlink back, so we need to do an additional readlink on it. We also now pass -t to mktemp so that $TMPDIR or /tmp is used instead of the current working directory. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* modules: Update my GnuPG public keyaszlig2016-06-052-2/+2
| | | | | | | | | | | Time for a new GnuPG key, this time CCID-only :-) This is the last commit you'll get using my old key (which will soon be revoked as soon as I moved everything over to use the new key), so if you're paranoid be sure to check the fingerprint against the signature of this very commit. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* programs/taalo-build: Add link to derivation fileaszlig2016-06-041-2/+10
| | | | | | | This is needed to ensure that the .drv file doesn't get garbage collected while we're transferring it to taalo. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* programs/taalo-build: Handle multiple outputsaszlig2016-06-041-1/+1
| | | | | | | We need to split off the !output from the derivation name returned by nix-instantiate, because we can't realize such a path. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/workstation: Enable GnuPG scdaemonaszlig2016-06-041-0/+1
| | | | | | This is needed to access things such as the YubiKey 4. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/packages: Add the whole aqbanking stackaszlig2016-06-041-0/+3
| | | | | | | | | | I'm doing online banking using FinTS/HBCI via a card reader, so libchipcard is needed as well. Another package I've added is gwenhywfar because it contains commands such as gct-tool, which is useful for debugging. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/workstation: Enable PCSC-Liteaszlig2016-06-041-0/+3
| | | | | | | Needed for various stuff such as YubiKey and card readers I use for online banking. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* programs/vim: Update vim-nix to latest masteraszlig2016-06-041-2/+2
| | | | | | Contains a fix for lower/greater than operators (LnL7/vim-nix#9). Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* modules/profile/base: Fix nix.useSandbox optionaszlig2016-06-041-1/+1
| | | | | | | Since NixOS/nixpkgs@7cf8daa every chroot*-option has been renamed to refer to "sandbox", because the name fits better (it's not only chroot). Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/packages: Add git-detachaszlig2016-05-291-0/+1
| | | | Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* programs/taalo-build: Split into realize and buildaszlig2016-05-291-48/+58
| | | | | | | | | | | | | | | With just taalo-build we can't realize plain .drv files, so let's use the Perl part to just realize the derivations given by the command line and provide two shell script wrappers on top of it: * taalo-build: Similar to nix-build * taalo-realize: Similar to nix-store -r Having a command like taalo-realize is very useful if evaluation is done on a different machine and the closure is just copied over to the local machine before being sent to taalo. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* tests: Remove dummy test for i3aszlig2016-05-281-2/+0
| | | | | | | | | | | | We already have an "i3wm" test in upstream <nixpkgs> which is much more thorough than the unfinished test I've made here. The intention of this test however was to specifically test the Vuizvui service module. Nevertheless, it's still just a dummy test and the "i3wm" test works much better, so let's remove it until we have a more complete implementation. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* modules/slim: Fix imagemagick/mogrify invocationaszlig2016-05-281-2/+2
| | | | | | | Since NixOS/nixpkgs@73f1f5e, we have to refer to imagemagick.out for the binaries, because we otherwise end up with the .dev output. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* aszlig/profiles/base: Disable allowUnfree globallyaszlig2016-05-171-5/+2
| | | | | | | | | | | The CPU microcode is already excempted from it and unrar is unfree but redistributable, so let's use our new unfreePkgs module attribute for that. Apart from that I haven't found anything else on my machines, but let's see what happens after Hydra evaluates the jobset. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* modules/profiles/*: Rename to modules/core/*aszlig2016-05-174-3/+3
| | | | | | | | The name "profiles" really doesn't match what these modules are for. Instead they define the very core of Vuizvui and its internal plumbing and those options are available/enabled to all machines and modules. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* modules: Add a new module for license selectionaszlig2016-05-172-0/+20
| | | | | | | | | | | | This basically provides module arguments with different variations of the pkgs arguments so that it's easier to allow specific unfree packages selectively. Note that I deliberately chose "unfreeAndNonDistributablePkgs", because we really want to let those packages stand out. We want to avoid building those packages on Hydra as much as possible. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* workstation/redshift: Don't modify brightnessaszlig2016-05-141-2/+0
| | | | | | | | I found this quite annoying sometimes if the screen is so dark that you can't see anything. Just switching to red is pretty much sufficient I'd say, at least for me. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/workstation: Use services.redshiftaszlig2016-05-071-1/+10
| | | | | | | | It's a lot more controllable running as a user service rather than having it started with the X session, especially because I occasionally tend to turn it off. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/tests: Add upstream test "boot-stage1"aszlig2016-05-061-0/+3
| | | | | | | | | | | This test has been introduced by NixOS/nixpkgs@e936f7d and was part of NixOS/nixpkgs#15275. The check attribute is always true for this test, because it has to be run no matter which configuration you're using. It basically makes sure that boot stage 1 is working correctly. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* workstation/packages: Drop .docdev for stdmanpagesaszlig2016-05-061-1/+0
| | | | | | | | | The output actually doesn't exist and I got it confused with commit fdc46c027f3116c7f86fce445798b841bf850f99. The .docdev output for stdmanpages actually doesn't even make sense because it's *only* developer documentation. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* workstation/packages: Add C++ STD manual pagesaszlig2016-05-061-0/+2
| | | | | | | It's about time to add these, because using a browser to look up the definitions from a standard library function is quite annoying. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* workstation/packages: Re-add developer man pagesaszlig2016-05-061-1/+2
| | | | | | | With the merge of the closure-size branch, developer manpages are no longer in the default output of the "man-pages" package. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* aszlig/profiles/base: Use IcedTea for FireFoxaszlig2016-05-041-1/+1
| | | | | | | | | | | | | I use FireFox occasionally for whenever I'm forced to run ugly Java plugins (in particular Hetzner's Lara machines use it). I hope IcedTea is capable of running the Lara plugin, but even when not, it's not a big deal-breaker as I didn't have to use Lara consoles for a whole while now. And if it's the case, I can still look for a "fix" :-) So another step towards being free of proprietary software. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/tests: Make keymap checks more granularaszlig2016-05-031-7/+23
| | | | | | | | | | Apart from an evaluation error (because ["nixos" "keymap"] results in an attrset rather than a plain derivation), checking for the active keymap explicitly makes more sense here. For example a user of a Neo keyboard layout won't care about a failure of the Dvorak keyboard layout and vice versa. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* profiles/tests: Add new upstream testsaszlig2016-05-031-1/+30
| | | | | | | | | | | | | | | | | Adds the following missing tests which were missing for our machine-based checks: * Taskserver * bridging, IPv4 and IPv6 for containers * dnscrypt-proxy * imperative containers * keymap (only runs if not on qwerty) * netbooting These are the tests which were missing in Vuizvui as of current nixpkgs revision NixOS/nixpkgs@bf8130684878747be7b1cc393f8aa147c500f14f. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* hardware/t100ha: Switch to linux-next-20160426aszlig2016-04-262-12/+31
| | | | | | | | | | | | | | | | This reverts commit 0182e0ca12760da2aecd65de98c85a76ecdcedc6. With the latest testing kernel, the machine still gets random GPU lockups which are already fixed in linux-next, so let's get back to linux-next even though things break from time to time. We can still pin a specific next version to base our patches on once we have a base version that's stable enough. I've also fixed the backlight patch to compile against the latest next version. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* machines/labtop: standartise disk label & diskProfpatsch2016-04-251-0/+5
|
* machines/labtop: remove antimony (build fail)Profpatsch2016-04-251-1/+2
|
* modules/labtops: simplify wireless connectionProfpatsch2016-04-251-1/+4
|
* Merge remote-tracking branch 'origin/master'Profpatsch2016-04-252-3/+4
|\
| * modules/programs/mpv: Fix buildaszlig2016-04-151-0/+1
| | | | | | | | | | | | | | | | | | Since the latest upstream version, the directory $out/etc/mpv doesn't seem to get created anymore, but a quick strace shows that mpv still tries to open it upon startup, so let's just create the directories leading to mpv.conf. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
| * mmrnmhrm/dnyarri: Update kernel src/cfg to 4.6-rc3aszlig2016-04-131-3/+3
| | | | | | | | | | | | | | | | | | | | | | This is -rc3 + 17 commits ahead. Configuration is once again just to get it to compile, the only new configuration option that I really want to consider using is CONFIG_FS_ENCRYPTION, everything else is just "updating config to latest kernel". Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | machines/labnet: generic labtop configProfpatsch2016-04-252-0/+117
|/ | | | | Draws out the general config for all Labtops in its own module and creates a structure to specify the setting which are different.