174135 Commits

Author SHA1 Message Date
Stefan Fehrenbach
b0351c0eb9
Remove obsolete workaround that breaks chell 0.5 2019-03-15 12:07:41 +00:00
worldofpeace
92ce24853d font-manager: no aliases 2019-03-15 06:31:52 -04:00
Will Dietz
97b775cfd2 font-manager: 0.7.4.2 -> 0.7.4.3 2019-03-15 06:22:28 -04:00
Robert Schütz
be5fe39a01 abcm2ps: 8.14.2 -> 8.14.3 2019-03-15 10:39:21 +01:00
Robert Schütz
771272356c python3.pkgs.pyhomematic: 0.1.57 -> 0.1.58 2019-03-15 10:34:32 +01:00
Robert Schütz
01a7acf382 python3.pkgs.netdisco: 2.3.0 -> 2.5.0 2019-03-15 10:33:50 +01:00
Robert Schütz
6339f0b791
Merge pull request #57653 from worldofpeace/google-api-python-client
pythonPackages.weboob: add pyqt5 as native input
2019-03-15 10:21:24 +01:00
worldofpeace
fb2af2a574 python.pkgs.google_api_python_client: conditionally override for python2.7 2019-03-15 10:17:14 +01:00
Ryan Mulligan
01a84c19a0
Update pkgs/applications/audio/parlatype/default.nix
Using tag instead of specific commit revision.

Co-Authored-By: melchips <melchips@users.noreply.github.com>
2019-03-15 10:16:20 +01:00
Ryan Mulligan
f245241a84
Update pkgs/applications/audio/parlatype/default.nix
Using pname as github repository name.

Co-Authored-By: melchips <melchips@users.noreply.github.com>
2019-03-15 10:15:34 +01:00
Ryan Mulligan
8513438f5a
Update pkgs/applications/audio/parlatype/default.nix
Removing the leading 'v' on the version attribute.

Co-Authored-By: melchips <melchips@users.noreply.github.com>
2019-03-15 10:14:59 +01:00
Ryan Mulligan
eda06294c4
Update pkgs/applications/audio/parlatype/default.nix
Removing version from package name.

Co-Authored-By: melchips <melchips@users.noreply.github.com>
2019-03-15 10:14:19 +01:00
Bastian Köcher
e6d4f0a4a9 dtc: 1.4.7 -> 1.5.0 2019-03-15 09:39:30 +01:00
Pascal Wittmann
66504c0671
Merge pull request #57129 from NixOS/fix-haskellPackages-xattr
haskellPackages.xattr: fix build with attr-2.4.48 (see #53716)
2019-03-15 09:08:41 +01:00
Michael Raskin
d8d9a520b3
Merge pull request #57266 from NixOS/libreoffice-update
libreoffice: 6.1.4.2 -> 6.1.5.2, 6.2.1.2
2019-03-15 08:05:54 +00:00
Pascal Wittmann
4a51bcfde7
Merge pull request #57287 from NixOS/update-fix-ima-evm-utils
ima-evm-utils: 1.0.0 -> 1.1 and fix build
2019-03-15 08:59:17 +01:00
Vladyslav M
d738f0d7d6
Merge pull request #56560 from eadwu/bcachefs/20190228
linux_testing_bcachefs, bcachefs-tools: 2019-03-13
2019-03-15 09:44:10 +02:00
Cedric Cellier
1881bd83cc junkie: init at 2.8.0 2019-03-15 08:21:09 +01:00
Cedric Cellier
4a1ee9fc55 maintainers: add rixed 2019-03-15 08:21:09 +01:00
Will Dietz
eb55e512f1 ibm-plex: 1.2.3 -> 1.3.0
Adds Arabic support!

https://github.com/IBM/plex/releases/tag/v1.3.0
2019-03-15 00:47:53 -05:00
Ryan Mulligan
4b6a41a939
Merge pull request #57077 from callahad/brother-dsseries
dsseries: init at 1.0.5-1
2019-03-14 21:17:31 -07:00
Aaron Janse
0258cff887
nixos/manual: reword note in declarative packages section 2019-03-14 21:11:27 -07:00
Ryan Mulligan
e59fe20847
Merge pull request #57116 from marsam/init-lsd
lsd: init at 0.13.0
2019-03-14 21:08:13 -07:00
aszlig
ef553788d0
postgresql: Move socket dir to /run/postgresql
The default, which is /tmp, has a few issues associated with it:

One being that it makes it easy for users on the system to spoof a
PostgreSQL server if it's not running, causing applications to connect
to their provided sockets instead of just failing to connect.

Another one is that it makes sandboxing of PostgreSQL and other services
unnecessarily difficult. This is already the case if only PrivateTmp is
used in a systemd service, so in order for such a service to be able to
connect to PostgreSQL, a bind mount needs to be done from /tmp to some
other path, so the service can access it. This pretty much defeats the
whole purpose of PrivateTmp.

We regularily run into issues with this in the past already (one example
would be https://github.com/NixOS/nixpkgs/pull/24317) and with the new
systemd-confinement mode upcoming in
https://github.com/NixOS/nixpkgs/pull/57519, it makes it even more
tedious to sandbox services.

I've tested this change against all the postgresql NixOS VM tests and
they still succeed and I also grepped through the source tree to replace
other occasions where we might have /tmp hardcoded. Luckily there were
very few occasions.

Signed-off-by: aszlig <aszlig@nix.build>
Cc: @ocharles, @thoughtpolice, @danbst
2019-03-15 04:52:35 +01:00
Ryan Mulligan
795bb9edae
Merge pull request #57046 from nyanloutre/jellyfin
jellyfin: init at 10.2.2
2019-03-14 20:36:35 -07:00
Dmitry Kalinkin
d41fe18ea5
Merge pull request #57530 from artemist/factorio
factorio: experimental 0.17.6 → 0.17.12
2019-03-14 23:32:41 -04:00
aszlig
d13ad389b4
nixos/confinement: Explicitly set serviceConfig
My implementation was relying on PrivateDevices, PrivateTmp,
PrivateUsers and others to be false by default if chroot-only mode is
used.

However there is an ongoing effort[1] to change these defaults, which
then will actually increase the attack surface in chroot-only mode,
because it is expected that there is no /dev, /sys or /proc.

If for example PrivateDevices is enabled by default, there suddenly will
be a mounted /dev in the chroot and we wouldn't detect it.

Fortunately, our tests cover that, but I'm preparing for this anyway so
that we have a smoother transition without the need to fix our
implementation again.

Thanks to @Infinisil for the heads-up.

[1]: https://github.com/NixOS/nixpkgs/issues/14645

Signed-off-by: aszlig <aszlig@nix.build>
2019-03-15 04:13:01 +01:00
Ryan Mulligan
943239b387
Merge pull request #57657 from iblech/patch-kfind
kfind: init at 18.12.1
2019-03-14 20:01:04 -07:00
Ryan Mulligan
a2028529f3
Merge pull request #57676 from delroth/tpm2-tools-3.1.4
tpm2-tools: 3.1.3 -> 3.1.4
2019-03-14 19:04:26 -07:00
Maximilian Bosch
bc34c15a56
Merge pull request #57345 from r-ryantm/auto-update/offlineimap
offlineimap: 7.2.2 -> 7.2.3
2019-03-15 02:50:53 +01:00
Pierre Bourdon
abe667ce06
tpm2-tools: 3.1.3 -> 3.1.4 2019-03-15 01:34:24 +01:00
Silvan Mosberger
fb879ae920
Merge pull request #57174 from worldofpeace/pantheon/cleanup
nixos/pantheon cleanup
2019-03-15 01:26:49 +01:00
Ryan Mulligan
2e76e35df6
Merge pull request #53422 from leenaars/bang
pythonPackages.dockerfile-parse: init at 0.0.13
2019-03-14 15:48:42 -07:00
Ryan Mulligan
2151df528b
Merge pull request #57672 from eadwu/glava/1.6.3
glava: 1.6.0 -> 1.6.3
2019-03-14 15:43:46 -07:00
Silvan Mosberger
aa5df94660
Merge pull request #56765 from RubenAstudillo/stepmania-5.1
stepmania: 5.0.12 -> 5.1.0-b2
2019-03-14 23:38:20 +01:00
Edmund Wu
9d9203140c
glava: 1.6.0 -> 1.6.3 2019-03-14 18:22:04 -04:00
Wael Nasreddine
a0e4f44006
Merge pull request #57080 from kalbasit/nixpkgs_create-build-go-module
buildGoModule: building Go binaries in two phases
2019-03-14 15:12:51 -07:00
Artemis Tosini
580e29fcd7
factorio: experimental 0.17.11 → 0.17.12 2019-03-14 22:03:46 +00:00
Jos van Bakel
2c4e220e71 pythonPackages.pyrr: 0.10.1 -> 0.10.2 (#57661) 2019-03-14 22:19:48 +01:00
talyz
3f1fdb8bf5 gitAndTools.gitRemoteGcrypt: Add missing dependencies (#57637)
Add the runtime dependencies coreutils, gawk, gnused and gnugrep.
2019-03-14 22:16:40 +01:00
Stephen
fb81978ed3 altcoins.freicoin: fix build (#57647) 2019-03-14 22:11:58 +01:00
Michael Raskin
6553ae0fff
Merge pull request #57640 from oxij/tree/typos
treewide: fix some typos
2019-03-14 21:08:33 +00:00
Dmitry Kalinkin
0b3975038f
Merge pull request #56990 from status-im/nsis
nsis: init at 3.04
2019-03-14 16:57:01 -04:00
Michael Weiss
02fb221307
androidStudioPackages.beta: 3.4.0.15 -> 3.4.0.16 2019-03-14 21:44:15 +01:00
Edmund Wu
143cf54f81
linux_testing_bcachefs: 4.20.2019.02.20 -> 4.20.2019.03.13 2019-03-14 16:25:49 -04:00
Edmund Wu
f1844ac441
bcachefs-tools: 2019-02-09 -> 2019-03-13 2019-03-14 16:25:23 -04:00
Will Dietz
f22aa01c7b
Merge pull request #57607 from dtzWill/update/lab-0.15.2
gitAndTools.lab: 0.14.0 -> 0.15.2
2019-03-14 15:01:10 -05:00
Meghea Iulian
4f74e248c5 avocode: 3.6.2 -> 3.6.12 (#57658) 2019-03-14 20:52:28 +01:00
Pedro Pombeiro
ab9f31114b
nsis: use sourceforge mirrors 2019-03-14 20:32:53 +01:00
Dmitry Kalinkin
d5f97ae600
Merge pull request #57650 from stephengroat/patch-4
apmplanner2: fix build
2019-03-14 15:28:57 -04:00