With `sshd -t` config validation for SSH is possible. Until now, the
config generated by Nix was applied without any validation (which is
especially a problem for advanced config like `Match` blocks).
When deploying broken ssh config with nixops to a remote machine it gets
even harder to fix the problem due to the broken ssh that makes reverts
with nixops impossible.
This change performs the validation in a Nix build environment by
creating a store path with the config and generating a mocked host key
which seems to be needed for the validation. With a broken config, the
deployment already fails during the build of the derivation.
The original attempt was done in #56345 by adding a submodule for Match
groups to make it harder screwing that up, however that made the module
far more complex and config should be described in an easier way as
described in NixOS/rfcs#42.
Also add back tests, don't seem broken anymore.
This is just fine:
nix-build ./nixos/release.nix -A tests.kafka.kafka_2_1.x86_64-linux -A tests.kafka.kafka_2_2.x86_64-linux
See https://github.com/browserpass/browserpass-native/issues/31
Additionally browserpass was removed from systemPackages, because it
doesn't need to be installed, browsers will get the path to the binary
from the native messaging host JSON.
Cherry-picked from: eeb175169f
Although fixed so that it actually builds.
Original message:
> I chose "semver-tool" as the path for this package because "semver" is
> extremely generic, and probably more rightly belongs to node-semver[1]
> (at least judging by GitHub stars), and because "semver-tool" is the
> name of this project's GitHub repository, and because it was the name
> used in the package request[2].
>
> Closes https://github.com/NixOS/nixpkgs/issues/50945.
>
> [1]: https://github.com/npm/node-semver
> [2]: https://github.com/NixOS/nixpkgs/issues/50945
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
Install the `kitty` command-line utility and the `kitty.app` macOS
application.
* Prefer libicns (png2icns) over Apple's non-free iconutil.
* Work around warnings from Apple headers by disabling -pedantic-errors
and -Werror.
* Work around ld not support LLVM-LTO by disabling LTO.
* Make Kitty and glfw compile for macOS 10.11 (and macOS 10.10).
