212197 Commits

Author SHA1 Message Date
Vladimír Čunát
e3edb004c6
knot-resolver: 5.0.0 -> 5.0.1
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v5.0.1
2020-02-05 16:53:40 +01:00
Maximilian Bosch
f8a0576f6c
linuxPackages.wireguard: 0.0.20200128 -> 0.0.20200205
https://lists.zx2c4.com/pipermail/wireguard/2020-February/004962.html
2020-02-05 16:47:41 +01:00
Maximilian Bosch
696829ff69
documize-community: 3.6.0 -> 3.7.0
https://github.com/documize/community/releases/tag/v3.7.0
2020-02-05 16:37:19 +01:00
Will Dietz
ed8c6393d0 electron_8: init at 8.0.0 2020-02-05 10:21:06 -05:00
Will Dietz
8e8285d9ca electron*: refactor 4+ to common expression, add 7, updates
* print-hashes.nix uses upstream-provided SHA256SUMS file
* electron_4: 4.2.8 -> 4.2.12
* electron_5: 5.0.8 -> 5.0.13
* electron_6: 6.0.1 -> 6.1.7
* electron_7:: init at 7.1.10

FWIW:
electron_4 previously did not include at-spi2-core, only at-spi2-atk.
Both are now included, matching other versions for a slightly simpler
expression.
2020-02-05 10:21:06 -05:00
Ryan Mulligan
67143ec938
Merge pull request #79231 from r-ryantm/auto-update/SPAdes
SPAdes: 3.13.1 -> 3.14.0
2020-02-05 06:54:45 -08:00
Graham Christensen
943516a16a
Merge pull request #79262 from tilpner/sudo-update
sudo: 1.8.30 -> 1.8.31
2020-02-05 09:37:22 -05:00
Tim Steinbach
e9a21da6a1
oh-my-zsh: 2020-02-04 -> 2020-02-04 2020-02-05 08:31:36 -05:00
Tim Steinbach
ab0e69030e
linux: 5.5.1 -> 5.5.2 2020-02-05 08:30:01 -05:00
Tim Steinbach
447c14e62f
linux: 4.9.212 -> 4.9.213 2020-02-05 08:29:45 -05:00
Tim Steinbach
5b5f9d23f4
linux: 4.4.212 -> 4.4.213 2020-02-05 08:29:30 -05:00
Silvan Mosberger
3ab846e34a
Merge pull request #35188 from sorki/overlayfs
use overlayfs by default for netboot and iso
2020-02-05 13:46:04 +01:00
tilpner
f58c90fa8d
sudo: 1.8.30 -> 1.8.31 2020-02-05 13:39:07 +01:00
worldofpeace
d7b56dda7f
Merge pull request #79166 from wucke13/master
paraview: add wrapQtAppsHook
2020-02-05 07:08:32 -05:00
Symphorien Gibol
4600fe67c5 nixos/roundcube: add release notes for #77532 2020-02-05 12:00:00 +00:00
Leonhard Markert
42a2668eb0 lorri: unstable-2020-01-09 -> 1.0 2020-02-05 12:12:02 +01:00
worldofpeace
dc708dfbf5
Merge pull request #79226 from mmahut/sequoia
sequoia: 0.11.0 -> 0.13.0
2020-02-05 05:35:45 -05:00
foxit64
d5fd6bb066 telegraf 1.13.2 -> 1.13.3 2020-02-05 11:34:30 +01:00
Samuel Dionne-Riel
968d075bd9 imlib2: Add webp support
And better document why id3 is there

In addition, review function signature formatting.
2020-02-05 10:46:34 +01:00
Samuel Dionne-Riel
b0f9922f37 imlib2: Fix license, remove global with 2020-02-05 10:46:34 +01:00
Samuel Dionne-Riel
2a8df18591 imlib2: 1.5.1 -> 1.6.1 2020-02-05 10:46:34 +01:00
Richard Marko
0c20feb231 use overlayfs by default for netboot and iso 2020-02-05 10:35:59 +01:00
Frederik Rietdijk
76a439239e Merge master into staging-next 2020-02-05 10:28:52 +01:00
Maximilian Bosch
2b3d2dbaf9
Merge pull request #79249 from marsam/update-bazelisk
bazelisk: 1.2.1 -> 1.3.0
2020-02-05 10:05:26 +01:00
Maximilian Bosch
abe70b78f3
Merge pull request #79234 from r-ryantm/auto-update/unrar
unrar: 5.8.5 -> 5.9.1
2020-02-05 09:37:56 +01:00
Maximilian Bosch
e94e5cd03f
Merge pull request #78647 from MetaDark/protontricks
protontricks: 1.3.1 -> 1.4
2020-02-05 09:30:18 +01:00
Maximilian Bosch
87d4951a82
Merge pull request #78660 from buckley310/dircolors
nixos/bash: configure $LS_COLORS for interactive shells
2020-02-05 09:08:41 +01:00
Maximilian Bosch
bf474ab2cd
Merge pull request #78354 from saksmt/jetbrains-ides
jetbrains: 2019.3.1 -> 2019.3.LATEST (1,2,3)
2020-02-05 08:57:04 +01:00
Maximilian Bosch
e9d9603754
Merge pull request #78837 from r-ryantm/auto-update/teamviewer
teamviewer: 15.0.8397 -> 15.1.3937
2020-02-05 08:12:09 +01:00
edef
6ceebc441c google-cloud-sdk: strip the Cython gRPC library
This reduces output size by 21 MiB.
2020-02-05 01:59:09 +00:00
edef
b7641eaa5a google-cloud-sdk: compact all the JSON
This reduces output size by 20 MiB.
2020-02-05 01:59:09 +00:00
edef
dbaafbbf73 google-cloud-sdk: remove tests directories
This reduces output size by 4.5 MiB.
2020-02-05 01:59:09 +00:00
edef
c484d6376c google-cloud-sdk: remove crcmod_osx as well
Both third_party/crcmod_osx and third_party/crcmod are only used in the
PYTHONPATH, and we already replace them with dependencies from nixpkgs.
2020-02-05 01:59:09 +00:00
Emily
6d046e1079 openresty: rebase on top of nginx package
The primary motivation of this change was to allow third-party modules
to be used with OpenResty, but it also results in a significant
reduction of code duplication.
2020-02-04 19:30:40 -06:00
Emily
db3182a65d nginxModules.brotli: v0.1.2 -> unstable
The fork was merged back upstream but has yet to see a formal release.
2020-02-04 19:30:40 -06:00
Marek Fajkus
6d1e9c08e0 urweb: Fix icu headers include path
Since https://github.com/NixOS/nixpkgs/pull/62266
urweb fails to resolve <unicode/utypepes.h> in runtime (during
compilation of project).
upstream commit: c2a217f912

resolves #79218
2020-02-04 19:30:15 -06:00
Mario Rodas
3d48206fad
bazelisk: 1.2.1 -> 1.3.0
Changelog: https://github.com/bazelbuild/bazelisk/releases/tag/v1.3.0
2020-02-04 20:20:20 -05:00
Florian Klink
3c74e48d9c nixos/filesystems: ensure keys gid on /run/keys mountpoint
boot.specialFileSystems is used to describe mount points to be set up in
stage 1 and 2.

We use it to create /run/keys already there, so sshd-in-initrd scenarios
can consume keys sent over through nixops send-keys.

However, it seems the kernel only supports the gid=… option for tmpfs,
not ramfs, causing /run/keys to be owned by the root group, not keys
group.

This was/is worked around in nixops by running a chown root:keys
/run/keys whenever pushing keys [1], and as machines had to have pushed keys
to be usable, this was pretty much always the case.

This is causing regressions in setups not provisioned via nixops, that
still use /run/keys for secrets (through cloud provider startup scripts
for example), as suddenly being an owner of the "keys" group isn't
enough to access the folder.

This PR removes the defunct gid=… option in the mount script called in
stage 1 and 2, and introduces a tmpfiles rule which takes care of fixing
up permissions as part of sysinit.target (very early in systemd bootup,
so before regular services are started).

In case of nixops deployments, this doesn't change anything.
nixops-based deployments receiving secrets from nixops send-keys in
initrd will simply have the permissions already set once tmpfiles is
started.

Fixes #42344

[1]: 884d6c3994/nixops/backends/__init__.py (L267-L269)
2020-02-05 01:53:26 +01:00
Florian Klink
2ec5c4adf9
Merge pull request #79244 from r-ryantm/auto-update/yubico-piv-tool
yubico-piv-tool: 1.7.0 -> 2.0.0
2020-02-05 01:11:40 +01:00
Florian Klink
cbbb81c830
Merge pull request #79135 from dtzWill/fix/moby-now-linuxkit
moby: remove, merged into linuxkit in 2018
2020-02-05 01:09:15 +01:00
Silvan Mosberger
c4e912ac79
Merge pull request #79243 from Infinisil/remove-hostresolvconf
nixos/resolvconf: Remove useHostResolvConf option
2020-02-05 00:53:53 +01:00
Will Dietz
3e83806771
moby: remove, merged into linuxkit in 2018
Don't alias linuxkit, as linuxkit is not a drop-in replacement.
Instead, throw with an explanation.
(thanks reviewers!)
2020-02-04 17:51:03 -06:00
Jan Tojnar
f40a8a09fb
Merge pull request #78913 from jtojnar/cus-fixes
common-updater-scripts: Support SRI-style hash
2020-02-05 00:47:35 +01:00
R. RyanTM
25f50a9197 yubico-piv-tool: 1.7.0 -> 2.0.0 2020-02-04 23:44:36 +00:00
Florian Klink
b8a8fd0fd5
Merge pull request #79165 from sikmir/xournalpp
xournalpp: 1.0.16 -> 1.0.17
2020-02-05 00:38:55 +01:00
Silvan Mosberger
97ff64e351
nixos/resolvconf: Remove useHostResolvConf option
Never had any effect
2020-02-05 00:28:32 +01:00
Silvan Mosberger
b4cc413928
Merge pull request #77594 from Frostman/fix-grub-extrafiles-mirroredboots
Fix boot.loader.grub.extraFiles when used with mirroredBoots
2020-02-05 00:22:35 +01:00
Michael Weiss
272041b85a
chromium: 79.0.3945.130 -> 80.0.3987.87
https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html

This update includes 56 security fixes.

CVEs:
CVE-2020-6381 CVE-2020-6382 CVE-2019-18197 CVE-2019-19926 CVE-2020-6385
CVE-2019-19880 CVE-2019-19925 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389
CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394
CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-2020-6398 CVE-2020-6399
CVE-2020-6400 CVE-2020-6401 CVE-2020-6402 CVE-2020-6403 CVE-2020-6404
CVE-2020-6405 CVE-2020-6406 CVE-2019-19923 CVE-2020-6408 CVE-2020-6409
CVE-2020-6410 CVE-2020-6411 CVE-2020-6412 CVE-2020-6413 CVE-2020-6414
CVE-2020-6415 CVE-2020-6416 CVE-2020-6417
2020-02-05 00:20:16 +01:00
Florian Klink
b27f806da8
Merge pull request #79173 from chkno/nerd-fonts
nerdfonts: 2.0.0 -> 2.1.0
2020-02-05 00:17:39 +01:00
markuskowa
8148b20300
Merge pull request #79238 from markuskowa/upd-snapper
snapper: 0.8.8 -> 0.8.9
2020-02-04 23:53:18 +01:00