212168 Commits

Author SHA1 Message Date
Maximilian Bosch
e9d9603754
Merge pull request #78837 from r-ryantm/auto-update/teamviewer
teamviewer: 15.0.8397 -> 15.1.3937
2020-02-05 08:12:09 +01:00
edef
6ceebc441c google-cloud-sdk: strip the Cython gRPC library
This reduces output size by 21 MiB.
2020-02-05 01:59:09 +00:00
edef
b7641eaa5a google-cloud-sdk: compact all the JSON
This reduces output size by 20 MiB.
2020-02-05 01:59:09 +00:00
edef
dbaafbbf73 google-cloud-sdk: remove tests directories
This reduces output size by 4.5 MiB.
2020-02-05 01:59:09 +00:00
edef
c484d6376c google-cloud-sdk: remove crcmod_osx as well
Both third_party/crcmod_osx and third_party/crcmod are only used in the
PYTHONPATH, and we already replace them with dependencies from nixpkgs.
2020-02-05 01:59:09 +00:00
Emily
6d046e1079 openresty: rebase on top of nginx package
The primary motivation of this change was to allow third-party modules
to be used with OpenResty, but it also results in a significant
reduction of code duplication.
2020-02-04 19:30:40 -06:00
Emily
db3182a65d nginxModules.brotli: v0.1.2 -> unstable
The fork was merged back upstream but has yet to see a formal release.
2020-02-04 19:30:40 -06:00
Marek Fajkus
6d1e9c08e0 urweb: Fix icu headers include path
Since https://github.com/NixOS/nixpkgs/pull/62266
urweb fails to resolve <unicode/utypepes.h> in runtime (during
compilation of project).
upstream commit: c2a217f912

resolves #79218
2020-02-04 19:30:15 -06:00
Mario Rodas
3d48206fad
bazelisk: 1.2.1 -> 1.3.0
Changelog: https://github.com/bazelbuild/bazelisk/releases/tag/v1.3.0
2020-02-04 20:20:20 -05:00
Florian Klink
3c74e48d9c nixos/filesystems: ensure keys gid on /run/keys mountpoint
boot.specialFileSystems is used to describe mount points to be set up in
stage 1 and 2.

We use it to create /run/keys already there, so sshd-in-initrd scenarios
can consume keys sent over through nixops send-keys.

However, it seems the kernel only supports the gid=… option for tmpfs,
not ramfs, causing /run/keys to be owned by the root group, not keys
group.

This was/is worked around in nixops by running a chown root:keys
/run/keys whenever pushing keys [1], and as machines had to have pushed keys
to be usable, this was pretty much always the case.

This is causing regressions in setups not provisioned via nixops, that
still use /run/keys for secrets (through cloud provider startup scripts
for example), as suddenly being an owner of the "keys" group isn't
enough to access the folder.

This PR removes the defunct gid=… option in the mount script called in
stage 1 and 2, and introduces a tmpfiles rule which takes care of fixing
up permissions as part of sysinit.target (very early in systemd bootup,
so before regular services are started).

In case of nixops deployments, this doesn't change anything.
nixops-based deployments receiving secrets from nixops send-keys in
initrd will simply have the permissions already set once tmpfiles is
started.

Fixes #42344

[1]: 884d6c3994/nixops/backends/__init__.py (L267-L269)
2020-02-05 01:53:26 +01:00
Florian Klink
2ec5c4adf9
Merge pull request #79244 from r-ryantm/auto-update/yubico-piv-tool
yubico-piv-tool: 1.7.0 -> 2.0.0
2020-02-05 01:11:40 +01:00
Florian Klink
cbbb81c830
Merge pull request #79135 from dtzWill/fix/moby-now-linuxkit
moby: remove, merged into linuxkit in 2018
2020-02-05 01:09:15 +01:00
Silvan Mosberger
c4e912ac79
Merge pull request #79243 from Infinisil/remove-hostresolvconf
nixos/resolvconf: Remove useHostResolvConf option
2020-02-05 00:53:53 +01:00
Will Dietz
3e83806771
moby: remove, merged into linuxkit in 2018
Don't alias linuxkit, as linuxkit is not a drop-in replacement.
Instead, throw with an explanation.
(thanks reviewers!)
2020-02-04 17:51:03 -06:00
Jan Tojnar
f40a8a09fb
Merge pull request #78913 from jtojnar/cus-fixes
common-updater-scripts: Support SRI-style hash
2020-02-05 00:47:35 +01:00
R. RyanTM
25f50a9197 yubico-piv-tool: 1.7.0 -> 2.0.0 2020-02-04 23:44:36 +00:00
Florian Klink
b8a8fd0fd5
Merge pull request #79165 from sikmir/xournalpp
xournalpp: 1.0.16 -> 1.0.17
2020-02-05 00:38:55 +01:00
Silvan Mosberger
97ff64e351
nixos/resolvconf: Remove useHostResolvConf option
Never had any effect
2020-02-05 00:28:32 +01:00
Silvan Mosberger
b4cc413928
Merge pull request #77594 from Frostman/fix-grub-extrafiles-mirroredboots
Fix boot.loader.grub.extraFiles when used with mirroredBoots
2020-02-05 00:22:35 +01:00
Michael Weiss
272041b85a
chromium: 79.0.3945.130 -> 80.0.3987.87
https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html

This update includes 56 security fixes.

CVEs:
CVE-2020-6381 CVE-2020-6382 CVE-2019-18197 CVE-2019-19926 CVE-2020-6385
CVE-2019-19880 CVE-2019-19925 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389
CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394
CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-2020-6398 CVE-2020-6399
CVE-2020-6400 CVE-2020-6401 CVE-2020-6402 CVE-2020-6403 CVE-2020-6404
CVE-2020-6405 CVE-2020-6406 CVE-2019-19923 CVE-2020-6408 CVE-2020-6409
CVE-2020-6410 CVE-2020-6411 CVE-2020-6412 CVE-2020-6413 CVE-2020-6414
CVE-2020-6415 CVE-2020-6416 CVE-2020-6417
2020-02-05 00:20:16 +01:00
Florian Klink
b27f806da8
Merge pull request #79173 from chkno/nerd-fonts
nerdfonts: 2.0.0 -> 2.1.0
2020-02-05 00:17:39 +01:00
markuskowa
8148b20300
Merge pull request #79238 from markuskowa/upd-snapper
snapper: 0.8.8 -> 0.8.9
2020-02-04 23:53:18 +01:00
Damien Bihel
9f64b84739 ber_metaocaml: fix install order.
Indeed, all standard modules with compiler-libs are not included (
eg. Optcompile).

closes #77680
2020-02-04 16:06:24 -06:00
Florian Klink
eb09e82120
Merge pull request #79162 from misuzu/systemd-sleep-config
nixos/systemd: add `systemd.sleep.extraConfig` config option
2020-02-04 23:02:53 +01:00
Markus Kowalewski
b8fb5ddaf6
snapper: 0.8.8 -> 0.8.9 2020-02-04 22:52:34 +01:00
Maximilian Bosch
89d13541e5
mautrix-telegram: 0.7.0 -> 0.7.1
https://github.com/tulir/mautrix-telegram/releases/tag/v0.7.1
2020-02-04 22:28:15 +01:00
Maximilian Bosch
f28acbdd33
Merge pull request #79221 from Ma27/bump-oracle-sqldeveloper
sqldeveloper: {17.4.1.054.0712,18.2.0.183.1748} -> 19.4.0.354.1759
2020-02-04 22:25:44 +01:00
Profpatsch
84630a1d90
Merge pull request #68469 from uri-canva/bazel-deps
bazel-deps: remove
2020-02-04 21:14:44 +01:00
Nikolay Korotkiy
a1caeda72c
viking: 1.7 -> 1.8 2020-02-04 23:07:14 +03:00
R. RyanTM
a91faae4a6 unrar: 5.8.5 -> 5.9.1 2020-02-04 19:51:34 +00:00
Dmitry Kalinkin
a745c846d4
pythonPackages.hglib: fix tests 2020-02-04 12:47:05 -05:00
Ben Darwin
00cd1d0f21 ocamlPackages.parmap: init at 1.1 2020-02-04 17:49:45 +01:00
R. RyanTM
3c54ae5679 SPAdes: 3.13.1 -> 3.14.0 2020-02-04 16:40:50 +00:00
Michael Raskin
5660c077df lispPackages.cl-store: fix build 2020-02-04 17:22:12 +01:00
Lancelot SIX
fb37b20d4d
Merge pull request #79093 from bdesham/wee-slack-2.4.0
weechatScripts.wee-slack: 2.3.0 -> 2.4.0
2020-02-04 17:01:39 +01:00
Michael Raskin
1f0b4b19aa sbcl: reinstate 2.0.0; add sbcl_2_0_1 for 2.0.1
2.0.1 is too fresh for current Quicklisp (for example, CFFI fails)
2020-02-04 17:06:54 +01:00
worldofpeace
49fb456ece
Merge pull request #75885 from voanhduy1512/add_asus_wmi_sensors
asus-wmi-sensors: init at 0.0.1
2020-02-04 10:53:37 -05:00
Alyssa Ross
95de02942f
Revert "mailman-wrapper: crazy hack to work around the missing urllib3 dependency"
This reverts commit ce6b2419be6e16cc6b9096c99798a0d365b16486, which
was unnecessary (mailman worked just fine on its parent commit).

See #79222.
2020-02-04 15:40:37 +00:00
Tim Steinbach
3931b82775
oh-my-zsh: 2020-01-31 -> 2020-02-04 2020-02-04 09:44:47 -05:00
Edmund Wu
1d87488d08
vscode-extensions.ms-vscode.cpptools: 0.26.1 -> 0.26.3 2020-02-04 09:25:08 -05:00
Edmund Wu
9a031427eb
vscode-extensions.ms-python.python: 2019.10.44104 -> 2020.1.58038 2020-02-04 09:25:08 -05:00
Marek Mahut
5485b44d94 sequoia: 0.11.0 -> 0.13.0 2020-02-04 15:22:06 +01:00
Jörg Thalheim
6cfc7e9bd2
Merge pull request #78448 from snicket2100/irqbalance-systemd
irqbalance: systemd service config aligned with upstream
2020-02-04 14:21:04 +00:00
Jörg Thalheim
c24a2d3e32
nixos/irqbalance: re-add multi-user.target
otherwise the service is never started by us.
2020-02-04 14:20:12 +00:00
Michael Weiss
a95cfefa55
Merge pull request #79223 from primeos/pijul-fix
pijul: Fix the build (broke due to a more recent Rust version)
2020-02-04 14:52:58 +01:00
Michael Weiss
eacc771f72
gitRepo: Switch to Python 3 2020-02-04 14:45:57 +01:00
Michael Weiss
7d4b5a2154
gitRepo: 1.13.8 -> 1.13.9.1 2020-02-04 14:45:57 +01:00
Peter Simons
ce6b2419be mailman-wrapper: crazy hack to work around the missing urllib3 dependency
Please remove the explicit urllib3 dependency from this expression again once
https://github.com/NixOS/nixpkgs/issues/79222 is fixed.
2020-02-04 14:43:56 +01:00
Peter Simons
5717f312a4 mailman-web: add myself as a maintainer 2020-02-04 14:43:46 +01:00
Will Dietz
e2867af1b2
Merge pull request #77050 from r-ryantm/auto-update/editline
editline: 1.16.1 -> 1.17.0
2020-02-04 07:25:26 -06:00