b5756c8660
kibana service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
94ed3de09e
elasticsearch service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
b6e5c620a3
marathon service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
3826c19392
chronos service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
5a2a3510b9
zerobin service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
c7ed675fe3
xinetd service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
cda9af6eb8
wpa-supplicant service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
768b333dc1
tinc service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
795defaae0
tcpcrypt service: remove use of network-interfaces.target
2016-09-13 11:19:22 +02:00
67d9369e5d
radicale service: network-interfaces.target -> network{,-online}.target
2016-09-13 11:19:22 +02:00
652e0b4b8a
oidentd service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
ae71667451
cjdns service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
69e15b7ba5
bind service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
22976bc951
openafs-client service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
1a60210561
nagios service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
b38c0c94ab
graphite service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
c2d007e0f7
zookeeper service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
4c7f53e9b4
svnserve service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
9b1177f69d
mesos-slave service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
2d48f1c487
mesos-master service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
ebc8e082e9
folding-at-home service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
5a085caea3
apache-kafka service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
54b3e4fdf6
neo4j service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
167eef2bab
influxdb service: network-interfaces.target -> network.target
2016-09-13 11:19:22 +02:00
926428bdb5
cassandra service: network-interfaces.target -> network.target
2016-09-13 11:19:21 +02:00
6ff44c571b
mumble: fix failing vm tests
...
modify tests to not fail if the event handlers are
registered too slowly or if the wrong window is in focus
(cherry picked from commit e087b0d12f97604ee1fdd09ef3d78b772c12468e)
Signed-off-by: Domen Kožar <domen@dev.si>
2016-09-13 09:45:08 +02:00
896b2916ab
nixos: fix typo in networking.interfaces.<name?>.virtual ( #18548 )
2016-09-13 08:04:00 +02:00
06b2897c40
networking.dhcpcd: Don't add to system closure when using networkd ( #18436 )
2016-09-13 07:55:17 +02:00
eea4af1c4c
nixos/virtualbox-image: Fix path to virtualbox
...
VirtualBox user space binaries now no longer reside in linuxPackages, so
let's use the package for the real user space binaries instead.
Tested using the following command:
nix-build nixos/release.nix -A ova.x86_64-linux
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-09-13 07:26:59 +02:00
b023e8f303
haveged module: clean up service configuration ( #18513 )
...
Switches from the forking service type to simple by running haveged in
the foreground. Also restricts the execution environment a bit (these
are inspired by the Debian service file).
2016-09-13 07:07:46 +02:00
b32252ddfa
NixOS manual: add module option types doc ( #18525 )
2016-09-13 07:04:02 +02:00
4a44eca07d
nixos/release-notes: Add VirtualBox changes
...
The change is backwards-compatible for users of the NixOS module but not
if people were using the package directly, so let's warn users about
that.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-09-13 06:34:33 +02:00
8bd89c922d
virtualbox: Split kernel modules into own package
...
Putting the kernel modules into the same output path as the main
VirtualBox derivation causes all of VirtualBox to be rebuilt on every
single kernel update.
The build process of VirtualBox already outputs the kernel module source
along with the generated files for the configuration of the main
VirtualBox package. We put this into a different output called "modsrc"
which we re-use from linuxPackages.virtualbox, which is now only
containing the resulting kernel modules without the main user space
implementation.
This not only has the advantage of decluttering the Nix expression for
the user space portions but also gets rid of the need to nuke references
and the need to patch out "depmod -a".
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-09-13 06:12:38 +02:00
79f72966e6
systemd module: optionSet -> submodule
2016-09-13 12:56:36 +09:00
78858f2f8d
networkd module: optionSet -> submodule
2016-09-13 12:56:05 +09:00
69713a882c
containers module: optionSet -> submodule
2016-09-13 12:54:59 +09:00
062928c3ad
network-interfaces module: optionSet -> submodule
2016-09-13 12:54:40 +09:00
12a1de8305
etc module: optionSet -> submodule
2016-09-13 12:53:13 +09:00
96f5788346
luksroot module: optionSet -> submodule
2016-09-13 12:53:13 +09:00
55e437806a
grub module: optionSet -> submodule
2016-09-13 12:53:12 +09:00
03ee88f666
zope2 module: optionSet -> submodule
2016-09-13 12:53:12 +09:00
c16d03ddc5
winstone module: optionSet -> submodule
2016-09-13 12:53:12 +09:00
7e5a24c23a
i2pd module: optionSet -> submodule
2016-09-13 12:53:12 +09:00
b73ca0df27
tinc module: optionSet -> submodule
2016-09-13 12:53:12 +09:00
8d58771b94
openvpn module: optionSet -> submodule
2016-09-13 12:53:11 +09:00
775d98acbc
xinet module: optionSet -> submodule
2016-09-13 12:53:11 +09:00
819524a0d3
supplicant module: optionSet -> submodule
2016-09-13 12:53:11 +09:00
48d6fa933c
sshd module: optionSet -> submodule
2016-09-13 12:53:11 +09:00
d89a718baf
prosody module: optionSet -> submodule
2016-09-13 12:53:11 +09:00
c3bdee3c39
nat module: optionSet -> submodule
2016-09-13 12:53:10 +09:00
1b3c03b49c
tahoe module: optionSet -> submodule
2016-09-13 12:53:10 +09:00
981df6387c
ups module: optionSet -> submodule
2016-09-13 12:53:10 +09:00
06c11a62b3
smartd module: optionSet -> submodule
2016-09-13 12:53:10 +09:00
ef04462ea9
rippled module: optionSet -> submodule
2016-09-13 12:53:10 +09:00
c1cad56c6e
logcheck module: optionSet -> submodule
2016-09-13 12:53:09 +09:00
495a24d912
brscan4 module: optionSet -> submodule
2016-09-13 12:53:09 +09:00
09a3ea1abf
bacula module: optionSet -> submodule
2016-09-13 12:53:09 +09:00
fff4a9ee01
pam module: optionSet -> submodule
2016-09-13 12:53:09 +09:00
3acf336f15
acme module: optionSet -> submodule
2016-09-13 12:53:09 +09:00
77f572f072
users-groups module: optionSet -> submodule
2016-09-13 12:53:09 +09:00
9b26cb92e3
Merge branch 'displaylink'
...
Close #18041
2016-09-13 01:59:47 +03:00
bc493ccfcc
displaylink service: init
2016-09-13 00:30:35 +03:00
a769e0ffae
nixos manual: mention gtk-related alias changes
2016-09-12 18:26:06 +03:00
25a7ded89c
audio services: use mkEnableOption ( #18524 )
2016-09-12 04:47:08 +02:00
80f38e9032
prometheus service: move to separate folder
2016-09-11 23:20:26 +02:00
5a7e5537aa
Merge pull request #18298 from teh/prometheus-service
...
Prometheus service
2016-09-11 23:18:36 +02:00
b4e2b6bc6a
nixos/lib/testing: Fix unsetting $xchg
...
Regression introduced by 4dcb685af9
2016-09-11 17:31:12 +02:00
4ac7b7d5de
nixos/modules/rename: Remove docker-registry
...
This is a follow-up to 9c1cdedcbafed3501b07https://github.com/NixOS/nixpkgs/issues/18209#issuecomment-245968857
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @domenkozar
Issue: #18209
2016-09-11 16:51:20 +02:00
5c38882f38
toxvpn service: doesn't require online network
...
Tested that it detects network changes quickly.
2016-09-11 08:16:55 +02:00
c58654e2b7
treewide: fix fallout of ip-up deprecation
...
See #18319 for details. Starting network-online.target manually does not
work as it hangs indefinitely.
Additionally, don't treat avahi and dhcpcd special and sync their systemd units
with the respective upstream suggestion.
2016-09-11 08:13:04 +02:00
e934231029
gocd-server: add startupOptions, empty extraOptions
...
The extraOptions option has default values which seems surprising. This
moves those values to startupOptions (which is what gocd-agent uses) and
empties out the default extraOptions.
The gocd-agent startupOptions description was also changed to remove the
mention of the example (given there isn't one).
2016-09-10 17:52:06 -04:00
0dbfb0fc48
Merge commit 'bd6e40c' from staging into master
...
Major changes being pulled in:
- mesa: maintenance 12.0.1 -> 12.0.2
- texlive: 2015 -> 2016
2016-09-10 23:23:44 +03:00
0a6221578a
mpd service: replace script with serviceConfig.ExecStart
2016-09-10 18:30:14 +02:00
009c1848c2
mpd service: add types to all options
2016-09-10 18:30:14 +02:00
77cedff4e7
ympd service: init ( #18371 )
...
ympd provides a web ui, it is suitable to be run as a service.
Fixes #17878 .
service has no requirements b/c user might be using remote mpd
instance.
2016-09-10 18:23:39 +02:00
27bc34f1e4
treewide: deprecate ip-up.target ( #18319 )
...
Systemd upstream provides targets for networking. This also includes a target network-online.target.
In this PR I remove / replace most occurrences since some of them were even wrong and could delay startup.
2016-09-10 18:03:59 +02:00
be33fc8973
Merge pull request #18446 from siddharthist/docs/ipv6-per-interface
...
nixos manual: disable ipv6 per interface
2016-09-10 17:08:30 +02:00
bd6e40c27d
Merge #16391 : texlive: 2015 -> 2016
...
Mirroring isn't finalized, but we'll have to fix that on the go.
2016-09-10 12:04:25 +02:00
9c1cdedcba
Remove test leftover from docker-registry
...
(cherry picked from commit d171c59926b77564089964f06ba761609b9a477e)
Signed-off-by: Domen Kožar <domen@dev.si>
2016-09-10 10:49:55 +02:00
4dcb685af9
runInMachine: Unset another variable
...
Thanks @cstrahan.
2016-09-09 20:02:56 +02:00
fed3501b07
Remove docker-registry as it's deprecated #18209
2016-09-09 18:50:42 +02:00
63f9ef9f19
tomcat service: bump default tomcat to 8.5
...
See migration changelogs at
- 7.0 -> 8.0: https://tomcat.apache.org/migration-8.html
- 8.0 -> 8.5: https://tomcat.apache.org/migration-85.html
2016-09-09 18:29:12 +02:00
a01d4ee3f4
tomcat: add danbst as maintainer
2016-09-09 18:29:12 +02:00
f1072611a4
tomcat service: call shutdown in preStop, because postStop is too late (systemd kills process)
2016-09-09 18:29:12 +02:00
0c2d943529
tomcat: split default webapps to separate output (~6M)
2016-09-09 18:29:12 +02:00
e5a79b0eae
nixos/tests/kde5: rename from sddm-kde5 and run by default
...
(cherry picked from commit 701f02a6eed902835e3d2a27838723cd9a7bb66a)
2016-09-09 10:12:38 -05:00
0fdaae8be4
nixos/tests/sddm-kde5: don't run tests through krunner
...
(cherry picked from commit 1f510dc7cd1dbb67bbf6574983de1dc5ebde1a1d)
2016-09-09 10:12:31 -05:00
127924954b
Linux-kernel: Workaround for https://github.com/NixOS/nixpkgs/issues/18451
...
remove after upstream gets fixed
2016-09-09 11:47:48 +02:00
2ab6020930
nixos manual: disable ipv6 per interface
...
from a discussion on #13293
2016-09-08 18:12:05 +00:00
5537503dec
nixos/tests/pump.io: Fix systemd unit config
...
Ref #18209
(cherry picked from commit 3fd603c02f339778c8ea24c2fadacb91185eb1c7)
2016-09-08 17:06:49 +01:00
75baee8523
runInMachine: Support passAsFile
...
We need to rewrite attributes passed via files to their location in
/tmp/xchg in the VM. Otherwise functions like runCommand don't work.
2016-09-08 15:38:56 +02:00
f39f829441
nixos: unbreak influxdb test (due to new API)
...
Data from the documentation example[1] was used.
[1] https://docs.influxdata.com/influxdb/v1.0/guides/writing_data/
[Bjørn: change commit message.]
2016-09-08 15:01:10 +02:00
bf371a8b06
radicale service: use "simple" service type ( #18406 )
...
Radicale can run as a foreground service and will then emits logging and
errors on the standard output. This helps the logging end up in the
systemd journal.
2016-09-08 12:34:22 +02:00
23b76b23f5
support user config
2016-09-08 16:40:54 +08:00
6dc9ed317c
Merge pull request #18244 from DamienCassou/emacs-gtk_data_prefix
...
emacs module: Fix to get properly themed GTK apps
2016-09-08 09:05:11 +02:00
dd98b6fb9f
nixos/stage2: Fix mounting special filesystems
...
This partially reverts commit ab9537ca22
2016-09-07 18:10:08 +02:00
2410608814
NixOS 17.03 will be called Gorilla
2016-09-07 15:05:00 +00:00
75efdc6502
nixos/tests/blivet: Fix btrfs-related tests
...
The loopback-based tests use a storage size of 102400 blocks (one block
is 1024 bytes), which doesn't seem to fit for btrfs volumes in recent
btrfs versions. I'm setting this to 409600 (400 MB) now so that it
should be enough for later versions in case they need even more space
for subvolumes.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-09-07 16:32:12 +02:00
fb46df8a9a
nixos: Fix ordering of firewall.service
...
Follow-up to the following commits:
abdc5961c3cdf9f5893ea1e91ba08ff5089f53a4: Fix starting the firewall
e090701e2d09aec3e8866ab9a8e53c37973ffeb4: Order before sysinit
Solely use sysinit.target here instead of multi-user.target because we
want to make sure that the iptables rules are applied *before* any
socket units are started.
The reason I've dropped the wantedBy on multi-user.target is that
sysinit.target is already a part of the dependency chain of
multi-user.target.
To make sure that this holds true, I've added a small test case to
ensure that during switch of the configuration the firewall.service is
considered as well.
Tested using the firewall NixOS test.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @edolstra
2016-09-07 15:11:24 +02:00
e090701e2d
firewall: Order before sysinit
...
Suggested by @aszlig.
2016-09-07 14:42:30 +02:00
abdc5961c3
Fix starting the firewall
...
Probably as a result of 992c514a20http://hydra.nixos.org/build/39965589
2016-09-07 14:30:11 +02:00
d8625f6d25
Make the NFSv4 tests release-critical
...
We can probably drop NFSv3...
2016-09-07 14:15:57 +02:00
58b028f9ee
nfs module: Fix dependency on statd and idmapd
...
http://hydra.nixos.org/build/40038016
2016-09-07 14:15:57 +02:00
015c984537
nfs module: Improve descriptions
2016-09-07 14:15:57 +02:00
b7237abc08
avahi-daemon: remove default browse-domains
...
These domains are not actually default but examples. See
https://github.com/lathiat/avahi/blob/master/avahi-daemon/avahi-daemon.conf#L24
for default config.
2016-09-07 13:58:21 +02:00
03b888e205
Merge branch 'stage2-generalise-containers' of https://github.com/rickynils/nixpkgs
2016-09-07 05:39:22 -04:00
70be99c645
Merge pull request #18365 from NixOS/fix-sshd-failure
...
Make /var/empty immutable (with chattr +i)
2016-09-07 11:18:49 +02:00
8f95e6f6aa
hardcode e2fsprogs, idempotent chmod, remove care condition
2016-09-07 10:49:27 +02:00
ab9537ca22
nixos: Generalise the container tests in stage-2 boot
...
This way, stage-2 behaves correctly also for libvirt-lxc containers.
Some more discussion on this:
a7a08188bfbfe46a653b
2016-09-07 07:50:04 +00:00
492a90f1c9
dovecot service: require mail{User,Group} with sieveScripts
...
fixes #17702 .
2016-09-07 01:50:59 +00:00
aed2cd32f8
nixos containers: hopefully fix test failures
...
Closes #18377 .
2016-09-07 02:55:48 +03:00
9190dbcc0e
Merge pull request #18366 from groxxda/acme-loop
...
security.acme: require networking for client, remove loop without fallbackHost
2016-09-06 23:02:07 +02:00
3877ec5b2f
Make /var/empty immutable
...
Fixes #14910 and #18358
Deployed to an existing server, restarted sshd and polkit to verify
they don't fail.
2016-09-06 20:13:33 +02:00
caac16a924
Merge pull request #18362 from ericsagnes/fix/im-description
...
input-methods modules: fix engine description
2016-09-06 11:42:28 -05:00
e84b803300
security.acme: remove loop when no fallbackHost is given
2016-09-06 17:47:00 +02:00
7f98dca782
security.acme: the client really needs networking
...
Actually this can be improved since the client only needs network
connectivity if it needs to renew the certificate.
2016-09-06 17:47:00 +02:00
98102ebd92
Enable the runuser command from util-linux
...
Fixes #14701 .
2016-09-06 17:23:27 +02:00
f2ddf2a9be
nix: 1.11.3 -> 1.11.4
2016-09-06 16:15:22 +02:00
1fef99942e
nixos-rebuild: Move the Nix fallback store paths into a separate file
2016-09-06 16:07:47 +02:00
314c30cbf1
input-methods modules: fix engine description
2016-09-06 22:53:15 +09:00
3f1ceae281
Partially revert "Revert "nixos: remove rsync from base install and add explicit path in nixos-install""
...
This partially reverts commit 0aa75206700aa7520670
2016-09-06 11:49:03 +01:00
520cb14f16
Fix infinite recursion introduced by f3c32cb2c1
2016-09-05 18:17:22 +02:00
1a1a31c9d8
Merge pull request #18321 from groxxda/cleanup
...
various: minor cleanup
2016-09-05 17:11:45 +02:00
5b5c2fb9c0
Make the default fonts conditional on services.xserver.enable
...
We were pulling in 44 MiB of fonts in the default configuration, which
is a bit excessive for headless configurations like EC2
instances. Note that dejavu_minimal ensures that remote X11-forwarded
applications still have a basic font regardless.
2016-09-05 15:51:37 +02:00
f3c32cb2c1
Let services.openssh.forwardX11 imply programs.ssh.setXAuthLocation
2016-09-05 15:38:42 +02:00
53f3c2a278
systemd: add some missing upstream units
2016-09-05 15:03:46 +02:00
322c823193
agetty: remove override for container-getty@.service since it's upstream
...
Added in systemd/systemd@68ac53e
2016-09-05 15:03:35 +02:00
2fd6b36c51
networkd.module: remove before network-online
...
this is already upstream default
2016-09-05 15:03:35 +02:00
992c514a20
(network,remote-fs)-pre: remove duplicate wantedBy and before
...
this is part of (network,remote-fs).target, repectively
2016-09-05 15:03:35 +02:00
ab49ebe6fa
Make it possible to disable "info"
2016-09-05 14:53:27 +02:00
5e5df88457
modules/profiles/minimal.nix: Disable "man"
2016-09-05 14:53:27 +02:00
ba70ce28ae
no-x-libs.nix: Ensure that dbus doesn't use X11
...
It appears that packageOverrides no longer overrides aliases, so
aliases like
dbus_tools = self.dbus.out;
dbus_daemon = self.dbus.daemon;
now use the old, non-overriden version of dbus. That seems like a
pretty serious regression in general, but for this particular problem,
I've fixed it by replacing dbus_daemon by dbus.daemon and dbus_tools
by dbus.
2016-09-05 13:45:59 +02:00
0aa7520670
Revert "nixos: remove rsync from base install and add explicit path in nixos-install"
...
This reverts commit 582313bafe
2016-09-05 13:45:59 +02:00
ee501fd49a
networkmanager: add information from wiki to docs ( #18245 )
...
* networkmanager: add information from wiki to docs
Specifically:
* mention nmcli, nmtui
* mention gtk and kde applets
fixes #13273
2016-09-05 11:13:47 +02:00
269f739ded
grsecurity module: set nixpkgs.config.grsecurity = true
2016-09-05 00:56:17 +02:00
d459916501
prometheus service: rename values to match prometheus 1.0 naming.
2016-09-04 20:03:45 +01:00
58869cf310
prometheus service: add
...
This is based on @benleys work: https://github.com/NixOS/nixpkgs/pull/8216
I updated changed the user and group ids.
2016-09-04 20:03:32 +01:00
393e646e4f
setuid-wrappers: correctly umount the tmpfs
2016-09-04 17:56:00 +02:00
c083ab99b2
Merge pull request #17969 from offlinehacker/pkgs/etcd/update-3.0.6
...
Update etcd, improve nixos module, fix nixos tests
2016-09-04 16:31:50 +02:00
095c7aefe1
nixos/manual: mentioning other zsh options at program.zsh.enable
...
fixes #13224
2016-09-04 16:31:29 +02:00
2217b328f9
texlive: rename the directory texlive-new -> texlive
2016-09-04 14:53:30 +02:00
94dd66882f
ferm: fix race condition in integration test ( #18288 )
...
curl sent the request faster then nginx bound the port in some cases
2016-09-04 14:34:06 +02:00
8d977ead38
setuid-wrappers : Prepare permissions for running wrappers
...
The new setuid-wrappers in /run cannot be executed by users due to:
1) the temporary directory does not allow access
2) the /run is mounted nosuid
2016-09-04 03:19:32 +02:00
1542bddcc8
nixos-install.sh: Create /var ( #18266 )
...
Got lost in a6670c1a0b
2016-09-03 19:17:44 +02:00
78b4b632ae
Merge pull request #18085 from Mic92/ferm
...
ferm: add integration test
2016-09-03 17:27:38 +02:00
3db5311be9
Merge pull request #18207 from tavyc/quagga-module
...
quagga service: init
2016-09-03 16:23:23 +02:00
ff5fd1ec40
etcd-cluster: split up openssl commands
2016-09-03 13:59:28 +02:00
f96cd1ea64
emacs module: Fix to get properly themed GTK apps
2016-09-03 08:25:25 +02:00
e2c6740c37
Merge commit 'adaee73' from staging into master
...
This one was already merged into release-16.09, so let's not have the
stable branch is ahead of master and confuse things. In addition to
that, currently we have an odd situation that master has less things
actually finished building than in staging.
Conflicts:
pkgs/data/documentation/man-pages/default.nix
2016-09-03 01:02:51 +03:00
02217bf697
Merge #17838 : postgresql: Fix use with extensions
2016-09-02 20:09:40 +02:00
eb14130934
quagga test: Add test for the quagga service.
2016-09-02 14:00:32 +03:00
a30d4654f2
quagga service: New NixOS module.
2016-09-02 13:59:51 +03:00
d6dbe43af2
bightbox-image.nix: use lib in stead of stdenv.lib. Fixes #18208
2016-09-02 10:04:09 +00:00
5b8072fff6
postgresql: Fix use with extensions
...
Fixes #15512 and #16032
With the multi output, postgresql cannot find at runtime what is its
basedir when looking for libdir and pkglibdir. This commit fixes that.
2016-09-02 11:51:21 +02:00
608ee1c7b3
mjpg-streamer service: restart on failure
2016-09-02 11:44:16 +03:00
15bb6bb9d6
Merge pull request #15893 from groxxda/fix/accountsservice
...
accountsservice: refactor package and service
2016-09-02 08:16:10 +00:00
b84b523baf
unstable is now 17.03
2016-09-02 08:47:21 +02:00
a6670c1a0b
Fixes #18124 : atomically replace /var/setuid-wrappers/ ( #18186 )
...
Before this commit updating /var/setuid-wrappers/ folder introduced
a small window where NixOS activation scripts could be terminated
and resulted into empty /var/setuid-wrappers/ folder.
That's very unfortunate because one might lose sudo binary.
Instead we use two atomic operations mv and ln (as described in
https://axialcorps.com/2013/07/03/atomically-replacing-files-and-directories/ )
to achieve atomicity.
Since /var/setuid-wrappers is not a directory anymore, tmpfs mountpoints
were removed in installation scripts and in boot process.
Tested:
- upgrade /var/setuid-wrappers/ from folder to a symlink
- make sure /run/setuid-wrappers-dirs/ legacy symlink is really deleted
2016-09-01 20:57:51 +02:00
78cd9f8ebc
virtualbox: add headless build (without Qt dependency) ( #18026 )
2016-09-01 20:54:58 +02:00
d163882770
Merge pull request #18172 from Profpatsch/startAt-type
...
systemd-unit-options: startAt can be a list
2016-09-01 20:44:32 +02:00
1529641b52
accountsservice: add support for mutableUsers = false
...
Add code to accountsservice that returns an error if the environment
variable NIXOS_USERS_PURE is set. This variable is set from the nixos
accountsservice module if mutableUsers = false
2016-09-01 15:25:28 +02:00
6df8de50f3
unbound service: whitespace fixes
2016-09-01 14:51:33 +02:00
03c2c87ed6
unbound service: use mkEnableOption
2016-09-01 14:51:32 +02:00
8c4aeb1780
Merge staging into master
...
Brings in:
- changed output order for multiple outputs:
https://github.com/NixOS/nixpkgs/pull/14766
- audit disabled by default
https://github.com/NixOS/nixpkgs/pull/17916
Conflicts:
pkgs/development/libraries/openldap/default.nix
2016-09-01 13:27:27 +03:00
d02e5a7d8f
nixos/filesystems: Drop compat code for filesystems.*.options type
2016-09-01 12:18:33 +03:00
8172cd734c
docdev -> devdoc
...
It's "developer documentation", not "documentation developer" after
all.
2016-09-01 11:07:23 +02:00
f5271680c4
Fixes #14831 by using full path for binaries used in install-grub.pl
...
Both btrfs-progs and utillinux are ~5MB, we may discuss in future
to handle this better but I see no better way at the moment than
increaing purity in the install process.
2016-09-01 10:36:38 +02:00
2a7293fd9d
install-grub.pl: fix a double slash prefix bug
2016-09-01 10:14:44 +02:00
5e5b0d039c
install-grub.pl: add comments
2016-09-01 10:14:44 +02:00
488f0d9cb3
systemd-unit-options: startAt can be a list
...
OnCalendar entrys can be specified multiple times in a systemd timer, to
make more complex scheduling possible.
Tested by manually checking the timer generated by the following:
systemd = {
services.huhu = {
description = "meh";
wantedBy = [ "default.target" ];
serviceConfig.ExecStart = "/bin/sh -c 'printf HUHU!'";
startAt = [ "*:*:0/30" "*:0/1:15" ];
};
};
It prints HUHU to the log at seconds 0, 15 and 30 of each minute.
2016-09-01 00:39:36 +02:00
838c75398c
release notes: Fix unclosed tag
2016-09-01 01:11:50 +03:00
5ad122b500
release notes: Add note about audit being disabled by default
2016-08-31 23:15:47 +03:00
16b3e26da4
audit: Disable by default
...
Because in its default enabled state it it causes a global performance
hit on all system calls (https://fedorahosted.org/fesco/ticket/1311 ) and
unwanted spam in dmesg, in particular when using Chromium
(https://github.com/NixOS/nixpkgs/issues/13710 ).
2016-08-31 23:15:41 +03:00
5eff0b990c
audit service: Explicitly call auditctl to disable everything
...
Otherwise, journald might be starting auditing.
Some reading:
- https://fedorahosted.org/fesco/ticket/1311
- https://github.com/systemd/systemd/issues/959
- 64f83d3087
2016-08-31 23:15:32 +03:00
a3621b1047
nixos/…/swap.nix: add some safety assertions for randomEncryption
2016-08-31 15:29:11 +01:00
d8d75ddec6
Revert "setuid-wrappers: Update wrapper dir atomically."
...
This reverts commit ee535056ce
2016-08-31 16:25:18 +02:00
4499a505ed
hidepid service: use new boot.specialFileSystems
2016-08-31 17:16:41 +03:00
a4879c44c9
Merge pull request #18160 from obadz/swap-encryption
...
nixos/…/swap.nix: remove backslashes from deviceName
2016-08-31 17:59:45 +04:00
7fa8c424bd
nixos filesystems: move special filesystems to a dedicated option
...
Fixes #18159 .
2016-08-31 16:50:13 +03:00
a7d238136d
nixos/…/swap.nix: remove backslashes from deviceName
...
Fixes #8277
Prior to this, backslashes would end up in fstab and the swap partition
was not activated. Swap files seemed to work fine.
2016-08-31 14:40:21 +01:00
ee535056ce
setuid-wrappers: Update wrapper dir atomically.
...
Fixes #18124 .
2016-08-31 08:00:57 -04:00
17dbfeb450
Merge pull request #18152 from roblabla/bugfix-zeroTierOneConfigurablePackage
...
zerotierone: make package configurable
2016-08-31 12:34:59 +01:00
caa1350e07
zerotierone: make package configurable
2016-08-31 12:39:55 +02:00
da421bc75f
Fix #4210 : Remove builderDefs
...
This was one of the ways to build packages, we are trying
hard to minimize different ways so it's easier for newcomers
to learn only one way.
This also:
- removes texLive (old), fixes #14807
- removed upstream-updater, if that code is still used it should be in
separate repo
- changes a few packages like gitit/mit-scheme to use new texlive
2016-08-31 11:34:46 +02:00
40d2fa2a1b
Don't break grow-partition
2016-08-31 03:06:46 +00:00
f503f648b3
virtualbox-image module: enable partition / filesystem growth
2016-08-30 16:48:05 -04:00
346c31000b
amazon-grow-partition module: rename to grow-partition
2016-08-30 16:48:04 -04:00
1de8e1b02e
amazon-grow-partition module: autodetect the root device
2016-08-30 16:48:04 -04:00
509733a343
Merge pull request #17822 from abbradar/systemd-mounts
...
nixos filesystems: unify special filesystems handling
2016-08-30 22:42:19 +04:00
e561edc322
update-users-groups.pl: correctly guard duplicate uids for declarative users
...
Verified that following nixos configuration:
users.users.foo = {
uid = 1000;
name = "foo";
};
users.users.bar = {
name = "bar";
};
Before this commit both users will get uid of 1000, after it's applied
bar will correctly get 1001.
2016-08-30 17:14:14 +02:00
d3dc3d4130
Merge remote-tracking branch 'dezgeg/shuffle-outputs' into staging
...
https://github.com/NixOS/nixpkgs/pull/14766
2016-08-30 12:43:37 +03:00
83103dc267
Merge pull request #18104 from ericsagnes/feat/nixos-manual-gen-cleanup
...
nixos manual: cleanup generation
2016-08-30 10:35:18 +02:00
03fb2c1f32
doc: Document changes to multiple-output conventions
2016-08-30 04:46:59 +03:00
03b9a159fe
opensmtpd nixos module: chmod & chown until the daemon's heart's content
2016-08-30 02:13:22 +01:00
b50e627ef6
nixos manual: cleanup generation
2016-08-30 09:40:05 +09:00
dab32a1fa6
nixos manual: move chapter on grsecurity to auto-generated module docs
2016-08-29 23:48:12 +02:00
d78e0ed1f9
dnscrypt-proxy module: move detailed info to module documentation
2016-08-29 23:48:12 +02:00
68210aa772
dnscrypt-proxy module: serviceConfig.Group is redundant
...
Same as user's primary group if left unspecified
2016-08-29 23:48:12 +02:00
23a7e6e911
dnscrypt-proxy module: formatting
2016-08-29 23:48:11 +02:00
4f73633f26
treewide: stop using fontbhttf
2016-08-29 22:28:50 +02:00
3aef93e8f0
nixos/containers: Process config like toplevel options ( #17365 )
2016-08-29 18:25:50 +02:00
2755bcfa7c
In $NIX_PATH, use nixpkgs=...
...
This is required by the "nix" command to find Nixpkgs.
2016-08-29 17:50:25 +02:00
2ed6529444
ferm: add integration test
2016-08-29 15:34:30 +02:00
b74793bd1c
Merge branch 'master' into staging
...
Conflicts:
pkgs/tools/system/facter/default.nix
2016-08-29 12:44:17 +01:00
6808de76e6
nixos doc: module meta attribute section cleanup
2016-08-29 09:34:24 +00:00
aa8e663b6e
nixos doc: add modules meta-attributes ( #18078 )
2016-08-29 07:54:25 +00:00
e17bc25943
Merge remote-tracking branch 'upstream/master' into staging
2016-08-29 00:24:47 +00:00
1074c159f7
nixos/cpu-freq: list correct default governor in description
2016-08-28 17:14:37 -05:00
3846329c97
tt-rss service: Default to multiple user mode
2016-08-28 11:20:18 -07:00
789a37f0fc
tt-rss service: #15862 has been merged; enable nginx virtualhost config
2016-08-28 11:20:17 -07:00
92d929c884
Merge branch 'master' into staging
2016-08-28 14:48:02 +01:00
4f299fdd53
nixos/modules/rename.nix: fix eval error
...
cc @Profpatsch @joachifm @domenkozar
2016-08-28 14:47:24 +01:00
c7142c1aa3
Merge branch 'master' into staging
2016-08-28 13:33:13 +01:00
e01e92f12f
Merge pull request #15025 from ericsagnes/modules/manual
...
manual: automatically generate modules documentation
2016-08-28 13:57:34 +02:00
4af09e0031
Merge pull request #14311 from Profpatsch/mkRemovedOptionModule-replacement
...
mkRemovedOptionModule: add replacement argument
2016-08-28 13:55:28 +02:00
57ddc155fc
Merge branch 'master' into staging
...
Conflicts:
pkgs/games/scummvm/default.nix
2016-08-28 12:20:59 +01:00
f0da094b2e
virtualbox-image: remove raw image (hopefully fixes ova tests)
...
See also 80660f8
2016-08-28 11:33:15 +01:00
26f65ae860
nixos/redis: enforce owner/perms on /var/lib/redis ( #18046 )
...
Previously it was only set once, now it is enforced on each start-up of
redis.service. Also set _ownership_ recursively, so that the
/var/lib/redis/dump.rdb file is guaranteed to be accessible by the
currently configured redis user.
Fixes issue #9687 , where redis wouldn't start because /var/lib/redis had
wrong owner.
2016-08-28 08:05:14 +00:00
3de6e5be50
Merge branch 'master' into staging
...
Conflicts:
pkgs/applications/misc/navit/default.nix
pkgs/applications/networking/mailreaders/alpine/default.nix
pkgs/applications/networking/mailreaders/realpine/default.nix
pkgs/development/compilers/ghc/head.nix
pkgs/development/libraries/openssl/default.nix
pkgs/games/liquidwar/default.nix
pkgs/games/spring/springlobby.nix
pkgs/os-specific/linux/kernel/perf.nix
pkgs/servers/sip/freeswitch/default.nix
pkgs/tools/archivers/cromfs/default.nix
pkgs/tools/graphics/plotutils/default.nix
2016-08-27 23:54:54 +01:00
33d6371fd9
tt-rss service: Allow connecting to the database through Unix socket
2016-08-27 13:55:00 -07:00
3a4db71b35
tt-rss service: Use the correct user to run the application
2016-08-27 13:54:46 -07:00
bc9c9dd6bd
tt-rss service: Allow setting application root
2016-08-27 13:54:31 -07:00
6efcfe03ae
nixos filesystems: unify early filesystems handling
...
A new internal config option `fileSystems.<name>.early` is added to indicate
that the filesystem needs to be loaded very early (i.e. in initrd). They are
transformed to a shell script in `system.build.earlyMountScript` with calls to
an undefined `specialMount` function, which is expected to be caller-specific.
This option is used by stage-1, stage-2 and activation script to set up and
remount those filesystems. Options for them are updated according to systemd
defaults.
2016-08-27 13:38:20 +03:00
3f70fcd4c1
Merge pull request #11484 from oxij/nixos-toposort-filesystems
...
lib: add toposort, nixos: use toposort for fileSystems to properly support bind and move mounts
2016-08-27 14:34:55 +04:00
80660f8261
virtualbox-image: use vmdk wrapper instead of vdi copy (avoids 1 disk copy)
2016-08-27 03:02:53 +01:00
58db7f508f
virtualbox-image: remove configFile to let clone-config do its job in demo
...
Fixes #13927
cc @edolstra
configFile in make-disk-image clashes with clone-config as the latter does
nothing if it finds a a /etc/nixos/configuration.nix during stage-2.
2016-08-27 02:07:47 +01:00
eba0098eab
nixos/doc/gitlab: fix build
2016-08-26 15:47:39 +02:00
0cbba7c673
Merge pull request #17941 from romildo/upd.efl
...
efl: 1.17.2 -> 1.18.0
2016-08-26 15:04:29 +02:00
d70f83e7e9
gitlab: 8.10.6 -> 8.11.2
2016-08-26 15:03:19 +02:00
8d10928ad0
Merge pull request #17908 from Mic92/ferm
...
Ferm
2016-08-25 20:38:02 -04:00
c011aa86ab
nginx module: add index and tryFiles
2016-08-25 23:27:56 +00:00
7b354ce8cc
ferm: init at 2.3
2016-08-25 21:37:19 +02:00
56a320d4a3
nixos/pulseaudio: remove stray load-modules
...
There was an additional load-modules put into `default.pa` which caused
pulse to fail.
2016-08-25 19:34:57 +02:00
fbf9162cbb
treewide: cups_filters -> cups-filters
2016-08-25 17:48:35 +02:00
0630233afa
etcd module: add test for simple one node etcd service
2016-08-25 14:42:22 +02:00
3374aa25bc
cjdns: fix assertion.
2016-08-25 08:57:18 +02:00
6cd8f48327
nixos/filesystems: update /etc/fstab comment header
2016-08-24 20:40:58 +02:00
8256c07fc0
etcd module: add support for ssl, better defaults, fix tests
2016-08-24 20:12:24 +02:00
7e48ecc0c0
Merge nixpkgs.config.perlPackageOverrides
2016-08-24 19:58:45 +02:00
e208e698f9
deleted: nixos/modules/virtualisation/qemu-opts (file likely checked in by accident)
2016-08-24 18:07:43 +01:00
697518d467
nixos-install: remove manifest related stuff
2016-08-24 16:09:30 +01:00
c0fa26ef3b
Merge remote-tracking branch 'origin/master' into hardened-stdenv
2016-08-24 11:01:53 +02:00
07c44b81c3
ldap: Add option for NSS integration
2016-08-23 21:12:51 +02:00
e04c3506eb
ldap: Add option for login PAM integration
2016-08-23 21:12:51 +02:00
b267785c43
nixos: generalize copy-paste from stage-1 and zfs to utils
2016-08-23 18:14:06 +00:00
8da59c406c
nixos: copy resize2fs only for stage-1 fileSystems
2016-08-23 18:14:05 +00:00
65d26c4dc1
nixos: apply toposort to fileSystems to support bind and move mounts
...
And use new `config.system.build.fileSystems` property everywhere.
2016-08-23 18:14:05 +00:00
2c8ca0d1bd
nixos: tasks/fileSystems: cleanup
2016-08-23 18:02:07 +00:00
1266852fd8
Revert a soon to be useless pice of "nixos/stage-1: add mechanism which lustrates all impurities from / ( #17784 )"
...
This reverts a pice of commit 3d16af70bf
2016-08-23 17:48:14 +00:00
7413278f9b
Revert "Remove lsh, broken & unmaintained"
...
This reverts commit 73f4c2bdf8
2016-08-23 15:32:41 +00:00
Joachim Fasting
Reno Reckling
Данило Глинський (Danylo Hlynskyi)
Alexander Ried
aszlig
Robert Helgesson
Eric Sagnes
Nikolay Amiantov
Kirill Boltaev
Langston Barrett
Franz Pletz
Tom von Schwerdtner
Tuomas Tynkkynen
Joachim F
Vladimír Čunát
Domen Kožar
Eelco Dolstra
Thomas Tuegel
Lengyel Balázs
Rodney Lorrimar
Peter Hoeg
Damien Cassou
Rob Vermaas
Alexey Shmalko
Shea Levy
Rickard Nilsson
obadz
Tom Hunger
Benjamin Staffin
Jaka Hudoklin
Rok Garbas
Jörg Thalheim
Karn Kallio
Graham Christensen
Octavian Cerna
Lancelot SIX
Luca Bruno
Profpatsch
zimbatm
roblabla
Mango Chutney
Nathan Zadoks
Guillaume Maudoux
Robin Gloster
Nadrieril
Bjørn Forsman
Carles Pagès
Igor Pashev
Markus Mueller
Jan Malakhovski