Jörg Thalheim
eadffd9154
nixos/wrappers: fix applying capabilities
...
With libcap 2.41 the output of cap_to_text changed, also the original
author of code hoped that this would never happen.
To counter this now the security-wrapper only relies on the syscall
ABI, which is more stable and robust than string parsing. If new
breakages occur this will be more obvious because version numbers will
be incremented.
Furthermore all errors no make execution explicitly fail instead of
hiding errors behind debug environment variables and the code style was
more consistent with no goto fail; goto fail; vulnerabilities (https://gotofail.com/ )
2021-01-14 08:46:57 +01:00
github-actions[bot]
d247d74ff9
Merge master into staging-next
2021-01-14 06:44:24 +00:00
Sandro
7ab8f240ba
Merge pull request #109303 from ilian/fix/openldap-maintainers-typo
...
openldap: fix typo when specifying maintainers list
2021-01-14 07:43:50 +01:00
Jan Tojnar
b813710c04
Merge branch 'master' into staging-next
2021-01-14 02:24:17 +01:00
Silvan Mosberger
ffdefb66c0
Merge pull request #108966 from pstn/murmurPswitch
...
nixos/murmur: Add overrideable package switch
2021-01-14 01:07:56 +01:00
sephalon
76fad08473
nixos/matrix-synapse: enable HTTPS in example ( #109230 )
...
The /.well-known endpoint must use HTTPS, see specification:
https://matrix.org/docs/spec/server_server/latest#resolving-server-names .
2021-01-13 22:20:17 +01:00
ilian
52a6cc02c5
openldap: fix typo in maintainers
2021-01-13 19:15:18 +01:00
adisbladis
4003f8cbc7
treewide: emacsPackages -> emacs.pkgs & emacsWithPackages -> emacs.pkgs.withPackages
...
The previous names are now aliases and shouldn't be used anywhere inside nixpkgs.
2021-01-13 17:13:10 +01:00
Vladimír Čunát
9e2880e5fa
nixos ISO image: revert another part of 8ca33835ba
2021-01-13 15:25:19 +01:00
Vladimír Čunát
1a16428c17
nixos ISO image: revert a part of 8ca33835ba
...
Thanks @ primeos. This wasn't really needed; my mistake.
2021-01-13 14:50:40 +01:00
Thiago Kenji Okada
0f762e5582
nixos/doc: document services.xserver.libinput changes
2021-01-13 10:20:38 -03:00
Thiago Kenji Okada
887386fbbe
nixos/doc: fix manual reference to libinput
2021-01-13 10:20:34 -03:00
Vladimír Čunát
8ca33835ba
nixos: fixup build of aarch64 minimal ISO ( fixes #109252 )
...
Perhaps it's not pretty nor precise; feel free to improve.
2021-01-13 14:05:45 +01:00
Thiago Kenji Okada
cd15b3a30a
nixos/libinput: separate settings by mouse/touchpad
...
This commits deprecates `services.xserver.libinput` for multiple
settings, one for each kind of device:
- `services.xserver.libinput.mouse`
- `services.xserver.libinput.touchpad`
Looking at `man 4 libinput`, they basically have the same options so I
simply replicated them, even if some options doesn't make sense for
mouse (`tapping` for example).
With this commit this is now possible:
```nix
{
services.xserver.libinput = {
enable = true;
mouse = {
accelProfile = "flat";
};
touchpad = {
naturalScrolling = true;
};
};
}
```
And you will have a mouse with no natural scrolling but with accel
profile flat, while touchpad will have natural scrolling but accel
profile adaptative (default).
It is possible to support more device types
(tablets/keyboards/touchscreens), but at least looking at the
libinput manual for those devices it doesn't seem that it has any
configuration options for them. They can still be configured using
`services.xserver.inputClassSections` though, and this will work now
since there is no rule by default that matches them.
Closes issue #75007 , while also making configuration of mouses and
touchpads using Nix attrs possible like said in PR #73785 .
2021-01-13 09:54:28 -03:00
Mark Vainomaa
b451286b1f
docker: 19.03.4 -> 20.10.2 ( #108960 )
...
This commit refactors the build process to handle Docker engine and
CLI split.
2021-01-13 11:33:14 +01:00
github-actions[bot]
318e673af0
Merge master into staging-next
2021-01-13 06:40:30 +00:00
Silvan Mosberger
0cd5058afd
Merge pull request #85842 from iblech/patch-whitebophir
...
whitebophir: init at 1.7.0 (package and service)
2021-01-13 03:06:34 +01:00
Ingo Blechschmidt
46292d7f86
nixos/whitebophir: init
2021-01-13 01:25:43 +01:00
Lucas Savva
514a0b6d8a
nixos/acme: Fix bash issue, enable debug
...
I found a logical error in the bash script, but during
debugging I enabled command echoing and realised it
would be a good idea to have it enabled all the time for
ease of bug reporting.
2021-01-12 19:11:52 +00:00
github-actions[bot]
f47a1ddfe4
Merge master into staging-next
2021-01-12 18:47:24 +00:00
Izorkin
91e580397e
mariadb: 10.4.15 -> 10.5.8
2021-01-12 17:22:54 +03:00
Izorkin
d688f790dd
mariadb: drop build server with tokudb storage
2021-01-12 17:22:47 +03:00
Martin Potier
de02ae9350
nixos/azure-agent: fix deprecation warning
2021-01-12 13:00:38 +02:00
Julien Moutinho
7a62c0bc95
nixos/tor: fix openFirewall when ORPort isInt
2021-01-12 10:14:14 +01:00
github-actions[bot]
32a46d68f3
Merge master into staging-next
2021-01-12 01:04:47 +00:00
Kira Bruneau
a13064ae27
nixos/xdg/portal: fix loading portals from systemd service
2021-01-11 19:22:22 -05:00
Michael White
952f2c76e0
nixos/clfswm: Restore working quicklisp package
2021-01-11 17:19:50 -07:00
Graham Christensen
7092dd52f8
amazonImage: Upload disks as GP3 for cheaper & faster IO ( #109027 )
...
GP3 is always faster and cheaper than GP2, so sticking to GP2 is
leaving money on the table.
https://cloudwiry.com/ebs-gp3-vs-gp2-pricing-comparison/
2021-01-11 13:54:40 -05:00
github-actions[bot]
757ad34b82
Merge master into staging-next
2021-01-11 18:42:29 +00:00
Amine Chikhaoui
ecf84de70c
ec2-amis: 2020-11-23 update ( #104740 )
2021-01-11 12:37:14 -05:00
Michele Guerini Rocco
b1fb65a741
Merge pull request #101849 from rnhmjoj/searx
...
nixos/searx: declarative configuration
2021-01-11 18:17:10 +01:00
Jan Tojnar
2b9372b2ca
Merge branch 'master' into staging-next
2021-01-11 13:36:42 +01:00
Eelco Dolstra
187af93c19
Merge pull request #78430 from puckipedia/fix-initrd-silent
...
nixos/stage-1: Do not allow missing kernel modules in initrd
2021-01-11 13:18:45 +01:00
Jörg Thalheim
89593ae987
Merge pull request #107895 from cpcloud/prom-gce-sd-config
2021-01-11 09:41:52 +00:00
rnhmjoj
88f71722ea
nixos/doc: add searx changes to the relase notes
2021-01-11 08:41:16 +01:00
rnhmjoj
623664e84f
nixos/searx: add support for running in uWSGI
2021-01-11 08:41:15 +01:00
rnhmjoj
b7ca2d1448
nixos/tests: add searx test
2021-01-11 08:41:15 +01:00
rnhmjoj
7ec85073dd
nixos/ids: remove reserved searx ids
2021-01-11 08:41:15 +01:00
rnhmjoj
cce415c743
nixos/searx: declarative configuration
2021-01-11 08:41:15 +01:00
Doron Behar
8addce8b60
Merge pull request #108981 from doronbehar/nixos/mpd
...
nixos/mpd: use credentials only if needed
2021-01-11 09:40:49 +02:00
Doron Behar
4ce7f28508
nixos/mpd: use credentials only if needed
2021-01-11 09:07:34 +02:00
Philipp
06c0f16555
nixos/murmur: Add overrideable package switch
2021-01-11 00:08:23 +01:00
Jan Tojnar
88c998fb21
Merge branch 'staging-next' into staging
2021-01-10 23:24:57 +01:00
Jan Tojnar
dd72357155
Merge branch 'master' into staging-next
2021-01-10 23:24:33 +01:00
Florian Klink
581232454f
Merge pull request #108726 from omasanori/nixos/netgroup
...
nixos/networking: make /etc/netgroup by default
2021-01-10 23:01:12 +01:00
Guillaume Girol
0fbc0976db
Merge pull request #106082 from rnhmjoj/uwsgi
...
nixos/uwsgi: run with capabilities instead of root
2021-01-10 21:51:37 +00:00
Sandro
d085417683
Merge pull request #108970 from xaverdh/pkgs-stdenv-lib
...
treewide: simplify pkgs.stdenv.lib -> pkgs.lib
2021-01-10 22:47:38 +01:00
Florian Klink
07f8292f88
Merge pull request #108844 from dadada/dadada/redis-unix-socket
...
nixos/redis: add test for unix socket access
2021-01-10 22:08:02 +01:00
adisbladis
a7b1c82331
Merge pull request #108962 from glittershark/fprintd-use-cfg
...
fprintd: Use cfg.package instead of pkgs.fprintd
2021-01-10 21:45:14 +01:00
Dominik Xaver Hörl
25bef2d8f9
treewide: simplify pkgs.stdenv.lib -> pkgs.lib
...
The library does not depend on stdenv, that `stdenv` exposes `lib` is
an artifact of the ancient origins of nixpkgs.
2021-01-10 20:12:06 +01:00