3216 Commits

Author	SHA1	Message	Date
Russell O'Connor	29b7d76ec8	Remove use of && in fetch-ssh-keys service. ... Scripts are run with -e so will abort when a command fails.	2015-05-29 19:53:58 +00:00
Russell O'Connor	4744e3541a	[GCE] Put temp files for fetch-ssh-keys service in /run	2015-05-29 19:53:57 +00:00
Russell O'Connor	1badfabc4d	Use mktemp to create temporary files to hold ssh host keys and authorized keys when downloading them from the metadata server.	2015-05-29 19:53:57 +00:00
Rob Vermaas	fd1fb0403c	Set boot.loader.grub.configurationLimit to 1 for gce/azure/amazon images. Setting to 0 results in empty grub config.	2015-05-29 19:36:16 +00:00
rushmorem	9c7fae83ee	Make it easy to override the marathon framework user ... Currently the module hardcodes the systemd service user to "marathon". With this change one would not need to create an extra systemd config to override the user. So why would one need to override the Marathon user? Some apps require root access to run. You can't run those with Marathon unless you override the default user to root. Marathon also provides a `--mesos_user` command line flag which allows you to run apps using arbitrary users. You need to run the framework as root to enable this functionality.	2015-05-29 18:07:07 +02:00
lethalman	cb02d37c31	Merge pull request #8034 from ragnard/apache-kafka-exit-code ... apache-kafka: Treat exit code 143 as success.	2015-05-28 11:59:06 +02:00
Ragnar Dahlén	9f25762d29	apache-kafka: Treat exit code 143 as success. ... JVMs exit with exit code 128+signal when receiving a (terminating) signal. This means graceful termination of a JVM will result in 143, so add that to `SuccessExitStatus` in systemd service unit.	2015-05-28 10:52:50 +01:00
Wout Mertens	ab0ac154f9	Merge pull request #7302 from ragnard/mesos-slave-without-docker ... mesos-slave: Docker optional & IP address configurable	2015-05-28 11:43:01 +02:00
Ragnar Dahlén	045e93e0a6	mesos-slave: docker and IP address config options ... - Usage of docker containerizer is currently hardcoded, this PR makes it optional. Default is to enable it if docker is enabled. - Make IP address to listen on part of service configuration.	2015-05-28 06:58:12 +01:00
Nikolay Amiantov	7355066bfe	nixos: add support for exfat filesystem	2015-05-27 18:59:33 +03:00
lethalman	71fc9aac4d	Merge pull request #7992 from ip1981/mwlib ... Added mwlib services	2015-05-27 16:59:57 +02:00
Igor Pashev	7ed1fb30e2	Added mwlib services ... Simple local usage: mwlib = { nserve = { enable = true; }; qserve = { enable = true; }; }; For MediaWiki: $wgCollectionMWServeURL = 'http://localhost:8899'; $wgCollectionFormats = array( 'rl' => 'PDF', 'odf' => 'ODT', ); $wgCollectionPortletFormats = array ( 'odf', 'rl' );	2015-05-27 14:55:22 +00:00
Arseniy Seroka	43690ae4ee	Merge pull request #7987 from magnetophon/das_watchdog-master ... add das_watchdog: a realtime watchdog	2015-05-27 11:47:15 +03:00
Eelco Dolstra	2a1c342887	Disable the manual in the minimal profile	2015-05-26 20:20:53 +02:00
Ian-Woo Kim	ae2279bcdb	nixos-containers: bindMounts: change default to readOnly. use EXTRA_NSPAWN_FLAGS	2015-05-26 13:41:31 +00:00
Bart Brouns	c3b7a8b053	add das_watchdog: a realtime watchdog	2015-05-26 15:13:59 +02:00
Ian-Woo Kim	4d551227c9	nixos-container: rename extraBinds to bindMounts and use attribute set format.	2015-05-26 11:56:42 +00:00
Mateusz Kowalczyk	1113efec5e	Merge pull request #7559 from offlinehacker/openvswitch/ipsec ... openvswitch: ipsec support	2015-05-26 11:26:02 +01:00
Mateusz Kowalczyk	4fd0f2cf4d	Merge pull request #7558 from offlinehacker/nixos/docker/typefix ... nixos/docker: set extraOptions to separatedString type	2015-05-26 11:22:50 +01:00
Mateusz Kowalczyk	a35e1ddfb2	Merge pull request #7566 from offlinehacker/nixos/node-docker-registry/module ... nixos: add node docker registry server	2015-05-26 11:07:22 +01:00
Mateusz Kowalczyk	002c687edf	nova-image: Delete no longer used comment	2015-05-26 11:05:52 +01:00
Mateusz Kowalczyk	0d454d863f	Merge pull request #7876 from rzetterberg/issue-7869 ... nixos: Fixes eval and build error of nova image builder	2015-05-26 11:05:06 +01:00
lethalman	aff1c293ef	Merge pull request #7998 from dezgeg/pr-ddclient-ssl ... ddclient: Set SSL_CERT_FILE environment variable	2015-05-26 10:25:47 +02:00
William A. Kennington III	b07d2a447b	nixos/grub: Fix assertion	2015-05-25 23:03:31 -07:00
Tuomas Tynkkynen	2966068968	ddclient: Set SSL_CERT_FILE environment variable ... Otherwise connection to SSL hosts fails like this: May 26 06:44:05 kbuilder ddclient[17084]: WARNING: cannot connect to dynamicdns.park-your-domain.com:443 socket: IO::Socket::IP configuration failed SSL connect attempt failed with unknown error error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed	2015-05-26 06:45:25 +03:00
William A. Kennington III	fd5b273e82	nixos/grub: Add the ability to mirror grub to multiple partitions	2015-05-25 20:23:06 -07:00
William A. Kennington III	f42d2503d7	Merge pull request #7643 from Shados/fix-grub-efi-only ... grub2: Fix EFI-only installation	2015-05-25 13:55:20 -07:00
Ian-Woo Kim	c4f66eb85d	unify extraBindsRW/RO into extraBinds. Now arbitrary mount point is supported.	2015-05-25 19:09:53 +00:00
Aristid Breitkreuz	4835763e13	Trackpoint scrolling on T450s et al	2015-05-25 20:00:35 +02:00
Jonathan Glines	847f8297fc	Added config options for systemd-coredump functionality.	2015-05-24 18:22:53 -06:00
Ian-Woo Kim	cac38c8664	extraBindsRO/extraBindsRW	2015-05-24 16:31:59 +00:00
Peter Simons	50fa9d8eea	Merge pull request #7941 from peti/allow-custom-ssh-moduli-file ... nixos: add config.services.openssh.moduliFile option so that users can replace the default file from OpenSSH	2015-05-22 20:51:42 +02:00
Peter Simons	86d299bc6e	nixos: add config.services.openssh.moduliFile option so that users can replace the default file from OpenSSH ... The man page for ssh-keygen(1) has a section "MODULI GENERATION" that describes how to generate your own moduli file. The following script might also be helpful: | #! /usr/bin/env bash | | moduliFiles=() | | generateModuli() | { | ssh-keygen -G "moduli-$1.candidates" -b "$1" | ssh-keygen -T "moduli-$1" -f "moduli-$1.candidates" | rm "moduli-$1.candidates" | } | | for (( i=0 ; i <= 16 ; ++i )); do | let bitSize="2048 + i * 128" | generateModuli "$bitSize" & | moduliFiles+=( "moduli-$bitSize" ) | done | wait | | echo >moduli "# Time Type Tests Tries Size Generator Modulus" | cat >>moduli "${moduliFiles[@]}" | rm "${moduliFiles[@]}" Note that generating moduli takes a long time, i.e. several hours on a fast machine! This patch resolves https://github.com/NixOS/nixpkgs/pull/5870.	2015-05-22 16:28:45 +02:00
viric	bcfa84cae2	Merge pull request #7878 from dezgeg/pr-extlinux ... generic-extlinux-compatible: Add new bootloader for ARM	2015-05-22 16:02:22 +02:00
Eelco Dolstra	09d06f5ffd	Merge remote-tracking branch 'origin/master' into systemd-219 ... Conflicts: pkgs/development/libraries/libseccomp/default.nix	2015-05-22 15:57:36 +02:00
Eelco Dolstra	588b92a7d2	systemd: Update to 220	2015-05-22 15:34:08 +02:00
William A. Kennington III	31a273cb14	nixos/tinc: users are system users	2015-05-21 20:11:13 -07:00
William A. Kennington III	4f943ef237	nixos/lightdm: More changes	2015-05-21 20:10:52 -07:00
Arseniy Seroka	f134150180	Merge pull request #7857 from rushmorem/marathon-module-update ... Update Marathon module	2015-05-21 16:52:14 +03:00
rushmorem	b5820a5ebd	Update Marathon module ... The new module makes it possible to pass extra commandline arguments to Marathon as well as environment variables.	2015-05-21 15:45:13 +02:00
William A. Kennington III	4ed8cdc3d4	nixos/bird: Fix doc compilation	2015-05-20 18:53:54 -07:00
William A. Kennington III	acdc3e6c9a	nixos/lightdm: Some fixups	2015-05-20 18:32:12 -07:00
Arseniy Seroka	a9171953c6	Merge pull request #7860 from Lassulus/bird ... nixos: add bird module	2015-05-21 03:24:20 +03:00
Eelco Dolstra	e98da673e4	nixos-checkout: Add nixpkgs-channels as a remote ... This way, you can do things like git checkout channels/nixos-14.12 to get the latest tested and built version of NixOS.	2015-05-20 14:16:36 +02:00
Evgeny Egorochkin	8ed3ab50ea	azure-image: common: add sg3_utils	2015-05-20 13:25:01 +03:00
Evgeny Egorochkin	2fe9084397	azure-image: fix, split into bootstrap and regular configurations ... Conflicts: nixos/modules/virtualisation/azure-image.nix	2015-05-20 13:24:38 +03:00
Bjørn Forsman	db991a4024	nixos/libvirtd: remove --verbose flag ... Because it spams the log: .libvirtd-wrapp[1950]: OBJECT_UNREF: obj=0x7f5d900b4200 .libvirtd-wrapp[1950]: EVENT_POLL_UPDATE_HANDLE: watch=874 events=13 .libvirtd-wrapp[1950]: OBJECT_UNREF: obj=0x7f5d900b4200 .libvirtd-wrapp[1950]: EVENT_POLL_RUN: nhandles=24 timeout=-1 .libvirtd-wrapp[1950]: EVENT_POLL_DISPATCH_HANDLE: watch=874 events=1 .libvirtd-wrapp[1950]: OBJECT_REF: obj=0x7f5d900b4200 .libvirtd-wrapp[1950]: [137B blob data]	2015-05-20 12:14:18 +02:00
Bjørn Forsman	3d2d78cb39	nixos/libvirtd: add 'extraOptions' option ... And move the '--verbose' flag to extraOptions, so that users can easily disable it.	2015-05-20 12:14:18 +02:00
Nikolay Amiantov	3e35ea305f	postgresql-backup: cleanup	2015-05-19 18:35:22 +03:00
lassulus	9d07c54fa1	nixos: add bird module ... patch bird to look in /var/run for birc.ctl	2015-05-19 15:42:24 +02:00
Luca Bruno	25f9555599	Drop GNOME 3.12	2015-05-18 12:24:08 +02:00
Eelco Dolstra	c8501a4218	Set up /etc/machine-id before starting systemd ... Otherwise, systemd will try to populate /etc, which we don't want.	2015-05-18 11:35:00 +02:00
Tuomas Tynkkynen	6d176afe5e	generic-extlinux-compatible: Add new bootloader for ARM ... This module generates a /boot/extlinux/extlinux.conf bootloader configuration file that is supported by e.g. U-Boot: http://git.denx.de/?p=u-boot.git;a=blob;f=doc/README.distro;hb=refs/heads/master With this, all ARM boards supported by U-Boot can be booted in a common way (a single boot file generator, all boards booting via initrd like x86) and with same boot menu functionality as GRUB has. -- sample extlinux.conf file -- # Generated file, all changes will be lost on nixos-rebuild! # Change this to e.g. nixos-42 to temporarily boot to an older configuration. DEFAULT nixos-default TIMEOUT 50 LABEL nixos-default MENU LABEL NixOS - Default LINUX ../nixos/n7vxfk60nb5h0mcbhkwwxhcz2q2nvxzv-linux-4.1.0-rc3-cpufreq-zImage INITRD ../nixos/0ss2zs8sb6d1qn4gblxpwlxkfjsgs5f0-initrd-initrd FDTDIR ../nixos/n7vxfk60nb5h0mcbhkwwxhcz2q2nvxzv-linux-4.1.0-rc3-cpufreq-dtbs APPEND systemConfig=/nix/store/469qvr43ln8bfsnk5lzcz6m6jfcgdd4r-nixos-15.06.git.0b7a7a6M init=/nix/store/469qvr43ln8bfsnk5lzcz6m6jfcgdd4r-nixos-15.06.git.0b7a7a6M/init loglevel=8 console=ttyS0,115200n8 drm.debug=0xf LABEL nixos-71 MENU LABEL NixOS - Configuration 71 (2015-05-17 21:32 - 15.06.git.0b7a7a6M) LINUX ../nixos/n7vxfk60nb5h0mcbhkwwxhcz2q2nvxzv-linux-4.1.0-rc3-cpufreq-zImage INITRD ../nixos/0ss2zs8sb6d1qn4gblxpwlxkfjsgs5f0-initrd-initrd FDTDIR ../nixos/n7vxfk60nb5h0mcbhkwwxhcz2q2nvxzv-linux-4.1.0-rc3-cpufreq-dtbs APPEND systemConfig=/nix/store/469qvr43ln8bfsnk5lzcz6m6jfcgdd4r-nixos-15.06.git.0b7a7a6M init=/nix/store/469qvr43ln8bfsnk5lzcz6m6jfcgdd4r-nixos-15.06.git.0b7a7a6M/init loglevel=8 console=ttyS0,115200n8 drm.debug=0xf	2015-05-17 23:38:03 +03:00
Richard Zetterberg	bd5011fc34	Fixes eval and build error of nova image builder	2015-05-17 20:55:07 +02:00
Arseniy Seroka	0b3e2becca	Merge pull request #7829 from joamaki/vmware_guest ... VMWare guest support and open-vm-tools package	2015-05-15 15:13:30 +03:00
Jussi Maki	6a0d21eb86	VMWare guest support and open-vm-tools package	2015-05-15 12:43:21 +02:00
Arseniy Seroka	946e7dca61	Merge pull request #7842 from dezgeg/pr-nix-serve ... nix-serve: Add nixos module	2015-05-14 22:44:43 +03:00
lethalman	1103392dd9	Merge pull request #7794 from womfoo/kbdlight ... Add kbdlight package and setuid wrapper	2015-05-14 17:09:28 +02:00
Tuomas Tynkkynen	fd8cb1ff2d	nix-serve: Add nixos module ... This allows sharing the Nix store of the machine as a binary cache simply by setting 'services.nix-serve.enable = true'.	2015-05-14 12:27:28 +03:00
Eelco Dolstra	fc8011ad8d	Ensure that nscd, sshd are created as system users ... c0f70b4694 removed the fixed uid assignment, but then it becomes necessary to set isSystemUser. http://hydra.nixos.org/build/22182588	2015-05-13 16:23:36 +02:00
Nikolay Amiantov	e9679ce32a	postgresql-backup: use system postgresql package	2015-05-13 16:06:50 +03:00
William A. Kennington III	2806491cc4	nixos/consul: Add shell for health checks	2015-05-11 17:44:07 -07:00
William A. Kennington III	b6e26aa8df	nixos/consul: Support a config directory for health checks	2015-05-11 16:45:04 -07:00
William A. Kennington III	1938dc9b54	nixos/consul: Remove the joinNodes and joinRetries options as they are now built in consul options	2015-05-11 16:27:53 -07:00
Eelco Dolstra	388dac478d	stage-1: Shut up warnings about swap devices that don't exist yet	2015-05-11 18:18:36 +02:00
Eelco Dolstra	76055df52d	Allow systemd-journald to be restarted ... With systemd 219, this is fine because systemd will cause the new journald to re-use the file descriptors of the old one. So existing connections to the journal are unaffected.	2015-05-11 18:18:36 +02:00
Eelco Dolstra	b978df019a	stage-2: Don't run hwclock in containers	2015-05-11 18:18:36 +02:00
Eelco Dolstra	c8ef598945	stage-1: Don't mount /dev/shm if it's already mounted	2015-05-11 18:18:36 +02:00
Eelco Dolstra	f19b58fb6a	Create systemd-{network,resolve} user/group unconditionally ... This shuts up this error from dbus: May 11 13:52:16 machine dbus-daemon[259]: Unknown username "systemd-network" in message bus configuration file May 11 13:52:16 machine dbus-daemon[259]: Unknown username "systemd-resolve" in message bus configuration file which happens because the D-Bus config for networkd/resolved is enabled unconditionally, and we don't have an easy way to turn it off.	2015-05-11 18:18:36 +02:00
Eelco Dolstra	c52a983806	Use ConditionVirtualization to disable some services in containers	2015-05-11 18:18:35 +02:00
Eelco Dolstra	fe952a42a7	systemd: Update to 219	2015-05-11 18:18:35 +02:00
Arseniy Seroka	26492cdba3	Merge pull request #7434 from Forkk/plex-media-server ... plex: add support for managing plugins via Nix	2015-05-11 14:48:30 +03:00
Eelco Dolstra	492471b453	Apply some overrides to upstream systemd units ... This removes the need for the following patches: 9a6cade993 9f7e832c90	2015-05-11 12:43:35 +02:00
Arseniy Seroka	c0727fb751	Merge pull request #7788 from Lassulus/charybdis ... add charybdis nixos module	2015-05-11 12:57:58 +03:00
lassulus	304cab2b46	add charybdis nixos module	2015-05-11 11:38:53 +02:00
Domen Kožar	bb4d658f64	Merge branch 'master' into staging ... Conflicts: nixos/doc/manual/release-notes/rl-unstable.xml nixos/modules/services/printing/cupsd.nix pkgs/applications/misc/calibre/default.nix pkgs/development/haskell-modules/hackage-packages.nix pkgs/development/libraries/libsodium/default.nix pkgs/misc/emulators/wine/unstable.nix pkgs/top-level/all-packages.nix	2015-05-11 10:05:23 +02:00
Kranium Gikos Mendoza	6f634e3c3a	Add kbdlight package and setuid wrapper ... update nixos/modules/programs/kbdlight.nix to use mkEnableOption	2015-05-11 13:23:01 +08:00
Ricardo M. Correia	aa75bb25d8	grsecurity: Update stable and test patches ... stable: 3.1-3.14.41-201505072056 -> 3.1-3.14.41-201505101121 test: 3.1-4.0.2-201505072057 -> 3.1-4.0.2-201505101122	2015-05-11 02:45:38 +02:00
Charles Strahan	ba186ec4b9	mesos service: only pass --zk if quorum > 0 ... The ZooKeeper URL is not necessary when using in-memory slave registration.	2015-05-10 19:36:20 -04:00
Charles Strahan	760169663e	mesos: fix indentation in service definition	2015-05-10 17:23:33 -04:00
Jascha Geerds	19dbe42aeb	Revert "cups: Rename "browsing" config option to "advertise"" ... This reverts commit 48e65cec4e.	2015-05-10 20:47:50 +02:00
Jascha Geerds	652d06207d	cups: Rename "browsing" config option to "advertise"	2015-05-10 13:46:32 +02:00
Jascha Geerds	6f69dd46d7	cups: Add defaultShared, browsing and webInterace config option	2015-05-10 13:46:32 +02:00
Jascha Geerds	f4d9c9043c	cups: Remove deprecated config options from cupsd.conf	2015-05-10 13:46:32 +02:00
Jascha Geerds	e9cf6cd34f	cups: Use systemd files provided by CUPS	2015-05-10 13:46:32 +02:00
Jascha Geerds	48e65cec4e	cups: Rename "browsing" config option to "advertise"	2015-05-10 12:41:21 +02:00
Jascha Geerds	2cc8d15653	cups: Add defaultShared, browsing and webInterace config option	2015-05-10 12:41:21 +02:00
Jascha Geerds	3710dbec05	cups: Remove deprecated config options from cupsd.conf	2015-05-10 12:41:20 +02:00
Jascha Geerds	4ac95ab328	cups: Use systemd files provided by CUPS	2015-05-10 12:41:20 +02:00
Lluís Batlle i Rossell	21dd114f82	Revert "Making nixos keep a ref to its stdenv" ... This reverts commit d170c98d13. niksnut argues that we need smaller system closures, not bigger. So users facing the trouble of getting gcc rebuilds after nix-collect-garbage for any minimal nixos configuration change should use other means of not losing the stdenv output. One way is to keep one somewhere: nix-build -A stdenv -o stdenv '<nixpkgs>'. Another may be to use nix.conf options like gc-keep-outputs, gc-keep-derivations or env-keep-derivations.	2015-05-09 21:11:49 +00:00
Lluís Batlle i Rossell	d170c98d13	Making nixos keep a ref to its stdenv ... This will help a lot on ARM, where nix-collect-garbage erases gcc; then, any change to a small system config file requires rebuilding gcc again. I don't know why it does not happen on x86. Maybe it just pulls the gcc from hydra, if garbage is collected.	2015-05-09 20:19:34 +00:00
Lluís Batlle i Rossell	d8a2bb86c0	Raspberry Pi 2 changes to make it boot. ... It boots, but some things still don't work: 1) Installation of DTBs 2) Boot of initrd Booting still needs a proper config.txt in /boot, which could probably be managed by NixOS.	2015-05-09 17:05:24 +00:00
William A. Kennington III	c9395e1e92	Merge branch 'master' into staging	2015-05-08 05:59:50 -07:00
Rob Vermaas	650d3f8fc4	Revert restartIfChanged on fetch-ec2-data, as it breaks deployments that set ec2.metadata = true, as the existing (default) blackhole will not be cleared. ... (cherry picked from commit ccf672ca6b055e5e862e45b65d122754c16cf7d1)	2015-05-07 08:51:38 +00:00
William A. Kennington III	074c4a7f78	Merge remote-tracking branch 'upstream/master' into staging	2015-05-07 01:44:49 -07:00
Joachim Schiele	7aed6ddbb4	Merge pull request #7482 from qknight/mysql_socket_permissions ... /run/mysqld now 0755 (instead 0700)	2015-05-07 01:55:00 +02:00
Joachim Schiele	db79335c07	mysql: /run/mysql now 0755 (instead 0700) ... see https://github.com/NixOS/nixpkgs/pull/7482	2015-05-07 01:51:05 +02:00
Pascal Wittmann	40b9e938b6	postfix service: description enhancement ... closes #7651	2015-05-06 21:53:39 +02:00
Stephen Weinberg	a6ebccfbb8	Sane default configuration for sabnzbd module ... Added option to set user. Use unpriviledged user by default. Add sane default for configuration location.	2015-05-05 00:18:22 -04:00
Aristid Breitkreuz	5ccbfb2dcc	tarsnap: fix up permissions of existing cache directories	2015-05-04 18:58:35 +00:00
Eelco Dolstra	4239e276ea	fetch-ec2-data: Don't restart ... This service only needs to run once on system startup, so it doesn't need to be restarted by switch-to-configuration.	2015-05-04 16:56:46 +02:00
Eelco Dolstra	28e49dcb41	Style fix	2015-05-04 14:18:14 +02:00
Eelco Dolstra	c2bf9c3ee3	Typo	2015-05-04 14:16:19 +02:00
lethalman	f2870bd77d	Merge pull request #7601 from cstrahan/iso-name-fix ... nixos: fix infinite recursion in isoImage.isoName	2015-05-04 10:24:38 +02:00
Thomas Tuegel	2325791c2b	plasma53: patch upstream startkde ... Rather than shipping our own startkde script, we will go back to patching upstream's script. This will be less confusing to potential contributors.	2015-05-03 17:09:50 -05:00
Philip Potter	2216728979	add support for pam_u2f to nixos pam module ... This adds support for authenticating using a U2F device such as a yubikey neo.	2015-05-03 19:22:00 +01:00
Steven Shaw	2a8577d7fe	Correct spelling	2015-05-03 19:15:03 +10:00
Domen Kožar	00ef77f426	Merge pull request #7565 from offlinehacker/nixos/confd/module ... nixos: add confd module	2015-05-02 14:43:02 +02:00
William A. Kennington III	00df204c82	Merge remote-tracking branch 'upstream/master' into staging	2015-05-01 15:57:09 -07:00
Charles Strahan	ba50d48400	mbpfan: service improvements ... * add verbosity setting * don't set mbpfan as a setuid program	2015-05-01 17:11:55 -04:00
Charles Strahan	d83399dcd9	mgpfan: new service	2015-04-30 21:21:15 -04:00
Jascha Geerds	6823b5e657	Merge pull request #7636 from bramd/brltty ... Added BRLTTY package	2015-05-01 00:21:49 +02:00
Alexei Robyn	60da99ea2a	grub module: removed invalid device check for grub EFI installation	2015-04-30 19:28:34 +10:00
aszlig	4cdb4a4fef	networkd: Fix evaluation of systemd.network units. ... During the refactor of the networkd stuff in f8dbe5f, a lot of the options are now needed by systemd.nix as well as networkd.nix but weren't moved by that commit as well. For now, this fixes all networkd VM tests except for the macvlan one and thus it should fix #7505 for at least DHCP-based configuration. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-04-30 06:49:10 +02:00
aszlig	49fa00cded	networkd: Fix disabled networkd units. ... In f8dbe5f, the default value for networking unit "enabled" option suddenly flipped to false. I have no idea of whether this happened by accident, but I'm setting it to true again, because it essentially breaks systemd networking support and we have systemd.network.enable to have a "turn the world off" switch. And of course, because the mentioned commit obviously wasn't done with even a run of the simplest run of one of the network VM tests, we now get an evaluation error if we switch useNetworkd to true. Fixes the core issue of #7505. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-04-30 06:49:10 +02:00
Bram Duvigneau	9a535b9023	Added BRLTTY package	2015-04-29 23:02:09 +02:00
Domen Kožar	ff88f4bcda	nixos-install: correctly detect stdin	2015-04-29 18:48:21 +02:00
Thomas Tuegel	1fe28a1132	Merge remote-tracking branch 'upstream/master' into staging	2015-04-29 11:33:28 -05:00
Rob Vermaas	ad0bd73775	Work around infinite recursion issue in nixops.	2015-04-29 09:55:20 +00:00
Arseniy Seroka	8150cf11b0	Merge pull request #7605 from ip1981/wiki ... Mediawiki updates	2015-04-28 19:00:27 +03:00
Ricardo M. Correia	f5e7190572	nixos.system_tarball_pc: Fix evaluation ... It was broken due to 57b05765c9. ZFS requires `networking.hostId` to be set.	2015-04-28 17:15:02 +02:00
Herwig Hochleitner	8233fd5c6a	i2p: add service to module-list	2015-04-28 14:35:36 +02:00
Jaka Hudoklin	f5bc58d733	Merge pull request #7545 from offlinehacker/pkgs/kubernetes/fixes ... kubernetes: update to 0.15, module fixes	2015-04-28 14:12:53 +02:00
Jaka Hudoklin	7b878a7ca9	Merge pull request #7555 from offlinehacker/nixos/nginx/reload ... nixos/nginx: enable service/config reload	2015-04-28 14:12:21 +02:00
Jaka Hudoklin	ef6b88690d	Merge pull request #7549 from offlinehacker/nixos/ripple-data-api/importmode ... nixos/ripple-data-api: add import mode option	2015-04-28 14:10:50 +02:00
Jookia	71910be9ea	nixos-install: Fix chroot flag not defaulting to Bash outside NixOS. ... Passing the chroot flag to nixos-install without arguments should now give you a Bash shell as intended rather than try an empty path. This was masked by the user's shell (usually /bin/bash) being defaulted to by chroot, and being found since their paths used NixOS conventions.	2015-04-28 06:37:04 -04:00
Jookia	7b37a5f168	nixos-install: Fix password prompt failing outside NixOS. ... When bootstrapping from other distributions, nixos-install is unable to find various tools in the chroot since their paths aren't aware of NixOS conventions. This makes a small change to existing code by specifying nixpkgs/nixos instead of just nixos when running nix-instantiate in the chroot. I haven't tested this outside of bootstrapping, but the same specification is used elsewhere in the code so I don't see why it wouldn't work.	2015-04-28 06:34:47 -04:00
Igor Pashev	4855b0b3fb	Mediawiki 1.23.9	2015-04-28 08:05:16 +00:00
Igor Pashev	bca76e46f0	Apache servedFiles: fixed a typo in example	2015-04-28 08:05:15 +00:00
Igor Pashev	8388bd3280	wiki: do not rewrite served files	2015-04-28 08:05:08 +00:00
Charles Strahan	a64e90bdef	nixos: fix infinite recursion in isoImage.isoName	2015-04-27 23:10:53 -04:00
Herwig Hochleitner	c600f5af25	gnome3: move definition of package sets into pkgs	2015-04-28 02:54:14 +02:00
Eelco Dolstra	19366a10fc	Remove redundant i18n.supportedLocales setting ... This is already set in profiles/minimal.nix. Probably fixes #7589.	2015-04-27 19:21:28 +02:00
Eelco Dolstra	534b84a9ac	Don't require sslServerChain to be set	2015-04-27 18:24:16 +02:00
lethalman	9807dbc142	Merge pull request #7486 from oxij/actkbd-and-media-keys ... add actkbd; nixos: add support for volume control with media keys	2015-04-27 12:31:15 +02:00
Vladimír Čunát	30f31c9afc	Merge 'master' into staging ... (relatively simple conflicts)	2015-04-26 22:52:08 +02:00
Domen Kožar	ff12c3274a	Merge pull request #7548 from offlinehacker/etcdfix ... nixos/etcd: fix enable type, so it could be enabled on multiple places	2015-04-25 22:14:55 +02:00
Jaka Hudoklin	a9cd286cd0	Merge pull request #7546 from offlinehacker/nixos/panamax/reload ... nixos/fluentd: add support for config reload	2015-04-25 16:29:34 +02:00
Jaka Hudoklin	ffea231652	Merge pull request #7550 from offlinehacker/nixos/rippled/changes ... nixos/rippled: new options, fixes	2015-04-25 16:28:15 +02:00
Jaka Hudoklin	b7d8d5dd30	Add graphite beacon package and module	2015-04-25 16:25:26 +02:00
Jaka Hudoklin	ff095f5002	nixos: add node docker registry server	2015-04-25 16:16:34 +02:00
Jaka Hudoklin	6ca12344b3	nixos: add confd module	2015-04-25 16:10:49 +02:00
Emery Hemingway	34f1c39fe0	nixos: fix cjdns json config ... filter extraneous attributes from config modules	2015-04-25 09:40:44 -04:00
Jaka Hudoklin	ec6ecce8cf	nixos/openvswitch: add ipsec gre tunnels support	2015-04-25 15:35:02 +02:00
Jaka Hudoklin	b5114de4ac	nixos: add racoon ipsec IKE deamon	2015-04-25 15:31:27 +02:00
Jaka Hudoklin	d6660af8ac	nixos/docker: set extraOptions to separatedString type ... This change is needed if you want to pass extraOptions to docker in multiple nixos modules.	2015-04-25 15:25:15 +02:00
Jaka Hudoklin	fb8bc4da21	nixos/etcd: fix enable type, so it could be enabled on multiple places	2015-04-25 15:21:49 +02:00
Jaka Hudoklin	494d1820e3	nixos/nginx: enable service/config reload	2015-04-25 15:17:06 +02:00
Jaka Hudoklin	54ddf2176b	nixos/rippled: new options, fixes	2015-04-25 14:39:24 +02:00
Jaka Hudoklin	5984c04f1f	nixos/ripple-data-api: add import mode option	2015-04-25 14:38:05 +02:00
Jaka Hudoklin	b7cb0420ca	nixos/docker-registry: docker independant docker registry	2015-04-25 14:26:35 +02:00
Jaka Hudoklin	f6bb49ad4a	nixos/fluentd: add support for config reload	2015-04-25 14:21:27 +02:00
Jaka Hudoklin	6cb195a83d	nixos/kubernetes: fix module	2015-04-25 14:18:25 +02:00
Luca Bruno	db3b86560f	GNOME 3.16.1, closes #7357	2015-04-25 12:02:33 +02:00
Edward Tjörnhammar	4ea47155af	Merge pull request #7498 from k0ral/sslh ... sslh: argument to -F can no longer be separated from the option by a space	2015-04-23 21:35:46 +02:00
Dan Peebles	81d8074881	Add hologram service	2015-04-23 14:30:12 -04:00
Oliver Matthews	a498b28322	wait for filesystem before starting btsync; bump to latest package version	2015-04-23 13:09:34 +00:00
koral	88ce17b6e1	sslh: argument to -F can no longer be separated from the option by a space	2015-04-21 16:29:25 +00:00
Nicolas B. Pierron	7585d42d2b	Fix #7354 - Accept _module attributes added to every submodule.	2015-04-20 23:58:32 +02:00
Jan Malakhovski	57ab189e78	nixos: add actkbd module and sound.enableMediaKeys option	2015-04-20 17:11:19 +00:00
Nikolay Amiantov	0f5d5f9d12	lambdabot: add named pipe for incoming commands	2015-04-20 18:56:48 +03:00
Eelco Dolstra	d5f187de03	Typo	2015-04-20 16:12:28 +02:00
Eelco Dolstra	d4d6b8cc61	Grmbl	2015-04-20 14:24:42 +02:00
Eelco Dolstra	fc91ba52df	ntfs.nix: Remove copypasta jfs stuff ... Thanks to @wizeman for spotting this!	2015-04-20 14:06:44 +02:00
Eelco Dolstra	11a9774c75	Use "mkdir -p" when creating ~/.nix-defexpr ... Otherwise, simultaneous invocations of /etc/profile can fail, e.g. mkdir: cannot create directory ‘/.nix-defexpr’: File exists	2015-04-20 13:03:04 +02:00
Eelco Dolstra	d69b205527	Remove sysvtools from the system path ... All programs in sysvtools (except killall5) are also provided by util-linux or procps. Issue #7117.	2015-04-20 11:33:42 +02:00
Eelco Dolstra	56f66dad97	Fix #7476	2015-04-20 11:32:29 +02:00
Eelco Dolstra	650492c5c8	minimal.nix: Get rid of most Glibc locales ... This cuts ~100 MB from the system closure. Issue #7117.	2015-04-20 11:32:28 +02:00
Eelco Dolstra	bad3211893	Disable some more unnecessary stuff in containers	2015-04-20 11:32:28 +02:00
Eelco Dolstra	abeb4a9c96	stage-2-init: Don't depend on sysvtools	2015-04-20 11:32:28 +02:00
Eelco Dolstra	e66970417b	Remove obsolete "eject" entry from the system path ... It's an alias for util-linux, so included anyway.	2015-04-20 11:21:20 +02:00
Eelco Dolstra	3d2b24d161	Remove pciutils and usbutils from the default system path ... Issue #7117.	2015-04-20 11:21:20 +02:00
Cray Elliott	479f5f4ae6	fix rebuild when using ntfs partitions ... needed to define inInitrd, used vfat.nix as a template	2015-04-19 15:17:23 -07:00
Eelco Dolstra	2b6d011bec	Include cifs-utils only when needed ... Issue #7117.	2015-04-19 22:06:45 +02:00
Eelco Dolstra	1cb5583c05	container.nix -> docker-container.nix	2015-04-19 22:06:45 +02:00
Eelco Dolstra	57b05765c9	Don't include ntfs-3g by default ... Issue #7117.	2015-04-19 22:06:45 +02:00
Eelco Dolstra	c0f70b4694	Remove fixed uids for nscd, sshd ... These services don't create files on disk, let alone on a network filesystem, so they don't really need a fixed uid. And this also gets rid of a warning coming from <= 14.12 systems.	2015-04-19 22:06:45 +02:00
Eelco Dolstra	c87977e97d	Don't include networkd units unless enabled ... Otherwise, the enabled -> disabled transition won't be handled correctly (switch-to-configuration currently assumes that if a unit is running and exists, it should be restarted).	2015-04-19 22:06:45 +02:00
Eelco Dolstra	f8dbe5f376	systemd: Move networkd into separate modules ... The systemd module was getting rather bloated.	2015-04-19 22:06:45 +02:00
Tobias Geerinckx-Rice	1f513c21f9	Merge pull request #7461 from dezgeg/pr-ddclient-unit-type ... ddclient: Fix capitalization of systemd unit keys	2015-04-19 15:27:21 +02:00
Tuomas Tynkkynen	e7843efe12	ddclient: Fix incorrectly capitalized systemd unit key ... This avoids the following warning: Apr 19 10:53:48 xen systemd[1]: [/nix/store/...-unit-ddclient.service/ddclient.service:19] Unknown lvalue 'type' in section 'Service' As `Type=simple` is the default in systemd, the assignment to the service type can be simply dropped.	2015-04-19 15:58:34 +03:00
lethalman	e6b664cafe	Merge pull request #7443 from ts468/fixgrub ... Fix grub for "nodev" targets.	2015-04-18 21:19:04 +02:00
Mateusz Kowalczyk	5676e8b391	lightdm: allow the user to specify extra Seat opts	2015-04-18 20:14:10 +01:00
Mateusz Kowalczyk	1713184b11	xserver.nix: fix indentation issues under Device	2015-04-18 19:04:03 +01:00
Mateusz Kowalczyk	d7810b4303	Hard tabs be gone!	2015-04-18 18:52:15 +01:00
Mateusz Kowalczyk	70aa758c34	Fix RightOf for xrandrHeads ... Closes #7441	2015-04-18 18:34:28 +01:00
Thomas Strobel	66c73da5f9	Fix grub for "nodev" targets.	2015-04-18 19:22:25 +02:00
Forkk	771c7fb496	plex: add support for managing plugins via Nix ... Added support for managing Plex plugins via Nix. This is done via an "extraPlugins" configuration option which takes a list of paths to plugin bundles, which are then symlinked into Plex's plugin directory when the service is started.	2015-04-17 14:45:49 -05:00
Forkk	079da8cdcd	plex: init at 0.9.11.16.958 ... Added a package and module for Plex Media Server, an application for managing media collections across multiple devices.	2015-04-17 12:11:30 -05:00
Jonathan Glines	cdb174c18d	Added NixOS module for Asterisk server	2015-04-16 17:41:37 -06:00
Nikolay Amiantov	405e4bd099	nixos.samba: update required mounts	2015-04-16 20:18:03 +03:00
Nikolay Amiantov	0d38958b61	nixos.samba: fix booleans in smb.conf	2015-04-16 20:17:59 +03:00
Eelco Dolstra	a0f69df10e	dnsmasq: Add some types	2015-04-16 19:13:26 +02:00
Eelco Dolstra	5a5a43ea25	dbus: Reload if /etc/dbus-1 changes ... Specifically, this fixes dnsmasq, which failed with Apr 16 19:00:30 mandark dnsmasq[23819]: dnsmasq: DBus error: Connection ":1.260" is not allowed to own the service "uk.org.thekelleys.dnsmasq" due to security policies in the configuration file Apr 16 19:00:30 mandark dnsmasq[23819]: DBus error: Connection ":1.260" is not allowed to own the service "uk.org.thekelleys.dnsmasq" due to security policies in the configuration file after being enabled, due to dbus not being reloaded.	2015-04-16 19:13:20 +02:00
Nikolay Amiantov	1d6723c085	lambdabot: add nixos service	2015-04-16 13:33:40 +03:00
Edward Tjörnhammar	dfc8e5ab05	ihaskell: cleanup wrapper and service	2015-04-15 23:00:03 +02:00
lethalman	09f9178a78	Merge pull request #7392 from joelmo/master ... Some i2p changes	2015-04-15 17:13:15 +02:00
Oliver Matthews	0144849f67	Allow allowing local access to mysql socket	2015-04-15 14:35:38 +00:00
lethalman	8330d64af4	Merge pull request #7372 from dezgeg/getty-autologin ... [nixos] agetty: Add autologinUser config option	2015-04-15 15:37:12 +02:00
Joel Moberg	5b075eb400	i2p: add nixos service	2015-04-15 12:52:06 +02:00
Arseniy Seroka	4dd1b8cc22	Merge pull request #7347 from sargon/pr-x11 ... services.x11: Add option for additional InputClass sections.	2015-04-14 18:23:29 +03:00
Peter Simons	65822005f0	Merge pull request #7314 from edwtjo/ihaskell-fixups ... IHaskell fixes	2015-04-14 14:21:44 +02:00
Peter Simons	6edc3022ef	Merge pull request #7345 from joachifm/conditional-shadow-setuids ... nixos: condition shadow setuid-wrappers on mutableUsers	2015-04-14 13:23:19 +02:00
Eelco Dolstra	3fe102b797	Merge pull request #7349 from aszlig/custom-channels ... Make it easy to add system-wide custom channels.	2015-04-14 13:00:34 +02:00
Tuomas Tynkkynen	25062f56d4	Installation CD: automatic log in at virtual consoles	2015-04-14 12:51:24 +03:00
Tuomas Tynkkynen	7d916bb27e	agetty: Add autologinUser config option ... This option causes the specified user to be automatically logged in at the virtual console. While at it, refactor and make a helper function for building the getty command line.	2015-04-14 10:45:28 +03:00
Joachim Fasting	75ab7bf960	nixos: condition shadow setuid-wrappers on mutableUsers ... Having junk setuid wrappers in PATH is annoying.	2015-04-14 00:27:11 +02:00
Austin Seipp	8d3b8d0dc8	Merge pull request #7149 from joachifm/grsec-gradm-optional ... grsecurity module: configure gradm iff RBAC is enabled	2015-04-13 17:11:29 -05:00
Austin Seipp	b86f6a3ed6	Merge pull request #7148 from joachifm/grsec-trivial ... grsecurity module: trivial improvements	2015-04-13 17:10:47 -05:00
Austin Seipp	409da39c08	Merge pull request #7163 from joachifm/tarsnap-bandwidth-options ... tarsnap module: add options for controlling bandwidth	2015-04-13 17:10:04 -05:00
Eelco Dolstra	574173f0e6	Merge pull request #7027 from ecraven/apache-sslchain ... apache-httpd: adding support for sslServerChain	2015-04-13 16:48:20 +02:00
Peter Feigl	3837ef82ad	fixing documentation	2015-04-13 15:42:01 +02:00
Peter Feigl	e5b3918f85	apache-httpd: adding support for sslServerChain	2015-04-13 15:41:10 +02:00
Peter Feigl	69b18fc4b6	fixing indentation	2015-04-13 13:46:42 +02:00
Peter Feigl	44ea83b986	changed config to only include the minimum necessary	2015-04-13 13:10:04 +02:00
Peter Feigl	49eb77b26c	apache-httpd: adding subservice moodle	2015-04-13 13:06:39 +02:00
aszlig	df31a338dc	nixos-rebuild: Conditionally update channels. ... This partially reverts commit 3a4fd0bfc6. Addresses another concern by @edolstra that users might not want to update *all* channels. We're now reverting to the old behaviour but after updating the "nixos" channel, we just check whether the channel ships with a file called ".update-on-nixos-rebuild" and if it exists, we update that channel as well. Other channels than these are not touched anymore. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-04-13 12:54:19 +02:00
Eelco Dolstra	4466707ddf	switch-to-configuration: Better error checking	2015-04-13 12:28:12 +02:00
aszlig	5075cbe696	nixos: Put root's channels to the end of NIX_PATH. ... My original reason to put it at the beginning of NIX_PATH was to allow shipping a particular version <nixpkgs> with a channel. But in order to do that, we can still let the channel expression ship with a custom version of nixpkgs by something like <channel/nixpkgs> and the builder of the channel could also rewrite self-references. So the inconvenience is now shifted towards the maintainer of the channel rather than the user (which isn't nice, but better err on the side of the developer rather than on the user), because as @edolstra pointed out: Having the channels of root at the beginning of NIX_PATH could have unintended side-effects if there a channel called nixpkgs. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-04-13 12:20:58 +02:00
Joachim Schiele	85c454ab1d	Merge pull request #6785 from qknight/wordpress ... zef hemel's wordpress.nix adapted to extraSubservices	2015-04-13 10:27:55 +02:00
aszlig	3a4fd0bfc6	nixos-rebuild: Update all channels of user root. ... Should make it even easier to use custom channels, because whenever the user does a "nixos-rebuild --upgrade", it will also upgrade possibly used ("used" as in referenced in configuration.nix) channels besides "nixos". And if you also ship a channel tied to a particular version of nixpkgs or even remove the "nixos" channels, you won't run into unexpected situations where the system is not updating your custom channels. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-04-13 00:09:00 +02:00
aszlig	65e569cc37	nixos: Add all of root's channels to NIX_PATH. ... This is very useful if you want to distribute channels (and thus expressions as well) in a similar fashion to Debians APT sources (or PPAs or whatnot). So, for example if you have a channel with some additional functions or packages, you simply add that channel with: sudo nix-channel --add https://example.com/my-nifty-channel foo And you can access that channel using <foo>, for example in your configuration.nix: { imports = [ <foo/modules/shiny-little-module> ]; environment.systemPackages = with import <foo/pkgs> {}; [ bar blah ]; services.udev.extraRules = import <foo/lib/udev/mkrule.nix> { kernel = "eth*"; attr.address = "00:1D:60:B9:6D:4F"; name = "my_fast_network_card"; }; } Within nixpkgs, we shouldn't have <nixos> used anywhere anymore, so we shouldn't get into conflicts. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-04-12 23:50:20 +02:00
Daniel Ehlers	057f01b11e	services.x11: Add option for additional InputClass sections. ... Implement support for additional InputClass sections, e.g. for non keyboard input devices.	2015-04-12 23:49:48 +02:00
Edward Tjörnhammar	7d0ddbd154	nixos: add ihaskell service	2015-04-11 00:09:31 +02:00
Rickard Nilsson	3620b27a66	mpd: Make it possible to specify db file path	2015-04-10 23:10:14 +02:00
Eelco Dolstra	d923a6eab5	Make environment.checkConfigurationOptions an alias ... NixOps uses it, and we can't change it there for backward-compatibility reasons.	2015-04-10 16:11:07 +02:00
Nicolas B. Pierron	9647a72835	Fix amazon default configuration.nix file.	2015-04-09 22:18:13 +02:00
Vladimír Čunát	5aa9b72400	nixos: typo in docker option description	2015-04-09 20:58:20 +02:00
Nicolas B. Pierron	296e6c4991	Fix #7252 - NixOS Manual: Carry the current system value to evaluation of the manual.	2015-04-08 23:14:19 +02:00
Nicolas B. Pierron	3eef61a6eb	NixOS Manual: Do not use unfree packages as default value.	2015-04-08 23:14:19 +02:00
Joachim Fasting	c5ec6ef609	window-managers: add missing import ratpoison	2015-04-08 14:14:37 +02:00
William A. Kennington III	6ffd44c4c3	nvidia: 346.47 -> 346.59	2015-04-07 13:24:55 -07:00
Oliver Matthews	09179b603f	allow changing minecraft data dir + allow opening firewall	2015-04-07 14:10:13 +00:00
Eelco Dolstra	a38f130126	Revert "Set stricter permissions on /nix/store" ... This reverts commit 066758758e7c0768ff8da51d208cdae0f33b368c because it breaks NixOS VM tests.	2015-04-07 15:10:41 +02:00
Domen Kožar	42c421adc3	Merge pull request #7180 from jagajaga/fix_generator ... Fixing nixos-generate-config	2015-04-07 12:24:04 +02:00
Arseniy Seroka	e52e160190	Merge pull request #7215 from cwoac/btsync2 ... Add support for btsync 2.x branch	2015-04-06 18:50:05 +03:00
Oliver Matthews	0539ed4771	Add support for btsync 2.x branch	2015-04-06 15:31:40 +00:00
Domen Kožar	ad197d89ae	Merge pull request #7181 from jagajaga/teamviewer ... Teamviewer	2015-04-06 14:13:07 +02:00
Tobias Geerinckx-Rice	f02651ee9b	Merge pull request #7204 from fpletz/fix/hotplug_helper ... Check if /proc/sys/kernel/hotplug exists before writing	2015-04-06 13:55:29 +02:00
Domen Kožar	7c7f426b3f	Merge pull request #7164 from rzetterberg/master ... Fixes minetest mesa 10.* incompatibility, adds minetest server service	2015-04-06 10:46:26 +02:00
Franz Pletz	16d25f4fa6	Check if /proc/sys/kernel/hotplug exists before writing ... If a kernel without CONFIG_UEVENT_HELPER set is used with NixOS, the file /proc/sys/kernel/hotplug does not exist. Before writing to it to disable this deprecated mechanism, we have to ensure it actually exists because otherwise the activation script will fail.	2015-04-06 09:23:58 +02:00
Arseniy Seroka	0998212640	impl: teamviewer daemon	2015-04-05 20:47:01 +03:00
Arseniy Seroka	b11f662617	fix https://github.com/NixOS/nixpkgs/issues/3560	2015-04-05 16:12:14 +03:00
William A. Kennington III	b3c423757e	nixos/rdnssd: Major refactoring ... This updates rdnssd to the following: * Using the systemd interfaces directly * Using the rdnssd user instead of the root user * Integrating with resolvconf instead of writing directly to /etc/resolv.conf	2015-04-04 21:20:07 -07:00
Richard Zetterberg	0b1f994f29	Adds minetest server service	2015-04-04 12:36:43 +02:00
Joachim Fasting	66bfc3bbe6	tarsnap module: add options for controlling bandwidth ... Annoyingly, these do not appear to accept SI prefixes.	2015-04-04 12:03:02 +02:00
Joachim Fasting	7cb7c57132	tarsnap module: inline optionalNullStr	2015-04-04 11:34:37 +02:00
William A. Kennington III	c0cb4e1ef7	nixos/nvidia: Add a temporary hack to support kernel 4.0	2015-04-03 21:53:34 -07:00
Nicolas B. Pierron	6de931a0f8	Merge rename.nix changes.	2015-04-03 23:12:12 +02:00
Arseniy Seroka	8592c6c004	Merge pull request #7150 from joachifm/grsec-types ... grsecurity module: use types.enum	2015-04-03 16:03:49 +03:00
Joachim Fasting	3e847d512d	grsecurity module: configure gradm iff RBAC is enabled	2015-04-03 13:45:57 +02:00
Joachim Fasting	ba93a75724	grsecurity module: use types.enum ... Also - set desktop as default system - make virtualisationSoftware nullOr - make virtualisationConfig nullOr	2015-04-03 13:45:45 +02:00
Joachim Fasting	66c4f51046	grsecurity module: simplify assertion	2015-04-03 13:38:32 +02:00
Joachim Fasting	2e88605a91	grsecurity module: remove reference to systemd-sysctl ... First, that's not what the service is called, and secondly it's most likely irrelevant to the user.	2015-04-03 13:38:32 +02:00
Austin Seipp	1c1083345b	Merge pull request #7058 from joachifm/sysctl-kptr-restrict ... nixos: condition sysctl.kptr_restrict on features.grsecurity	2015-04-03 04:13:19 -05:00
Arseniy Seroka	4fa554e32b	Merge pull request #7017 from obadz/sg+sudo-g ... Ability to switch groups with sg and sudo -g	2015-04-02 02:11:10 +03:00
William A. Kennington III	ff21171921	Fix references to current-system/sw/sbin	2015-04-01 13:57:36 -07:00
William A. Kennington III	a9f2e107d0	Revert "Remove obsolete .../sbin directories from $PATH" ... This reverts commit 98cedb3d22.	2015-04-01 13:57:36 -07:00
aszlig	224ed7e798	nixos/hardware: Add option to enable KSM. ... This is essentially what's been done for the official NixOS build slaves and I'm using it as well for a few of my machines and my own Hydra slaves. Here's the same implementation from the Delft server configurations: f47c2fc7f8/delft/common.nix (L91-L101) Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-04-01 20:00:27 +02:00
Eelco Dolstra	1c39a47ac8	Reload, don't restart, dbus.service ... Many bus clients get hopelessly confused when dbus-daemon is restarted. So let's not do that. Of course, this is not ideal either, because we end up stuck with a possibly outdated dbus-daemon. But that issue will become irrelevant in the glorious kdbus-based future. Hopefully this also gets rid of systemd getting stuck after dbus-daemon is restarted: Apr 01 15:37:50 mandark systemd[1]: Failed to register match for Disconnected message: Connection timed out Apr 01 15:37:50 mandark systemd[1]: Looping too fast. Throttling execution a little. Apr 01 15:37:51 mandark systemd[1]: Looping too fast. Throttling execution a little. ...	2015-04-01 16:57:16 +02:00
Eelco Dolstra	98cedb3d22	Remove obsolete .../sbin directories from $PATH	2015-04-01 16:22:12 +02:00
Eelco Dolstra	fdfe4b7cde	Remove unnecessary symlinks in /nix/var/nix/gcroots	2015-04-01 14:45:02 +02:00
William A. Kennington III	8028357084	nixos/mysql: Cleanups	2015-03-31 16:17:55 -07:00
Vladimír Čunát	81fc066900	Merge #4678: nixos iso-image: support USB booting ... by using syslinux (i.e. support the dd-method in addition to unetbootin). @vcunat tidied the PR by squashing closely related changes together.	2015-03-31 15:12:16 +02:00
obadz	be7f104502	sg: add setuid wrapper. (newgrp is a symlink to sg and was already setuid). ... sudo: add ability for wheel users to change group (as well as user)	2015-03-30 23:50:45 +01:00
Nikolay Amiantov	7c03829024	Merge pull request #7060 from abbradar/nm-l2tp ... Support L2TP in NetworkManager	2015-03-30 23:05:42 +03:00
Edward Tjörnhammar	1092b9da48	Merge pull request #7066 from edwtjo/xbmc-pruning ... Remove XBMC expressions in favor of the Kodi ones	2015-03-30 21:46:29 +02:00
Edward Tjörnhammar	1345a65765	Remove XBMC expressions in favor of the Kodi ones	2015-03-30 21:43:32 +02:00
lethalman	f72b0c43f6	Merge pull request #6762 from lethalman/nixos-install ... nixos-install: support -j, --cores and --option. Closes #6755	2015-03-30 18:06:53 +02:00
lethalman	dc560b5b02	Merge pull request #7031 from cwoac/mediatomb ... Add MediaTomb service	2015-03-30 17:49:46 +02:00
Luca Bruno	eac32cf697	Revert "Merge pull request #7032 from flosse/change-option-names" ... This reverts commit c265aafb55, reversing changes made to c9bbf2228f. Breaks evaluation, see https://github.com/NixOS/nixpkgs/pull/7032#issuecomment-87641471	2015-03-30 13:45:07 +02:00
lethalman	c265aafb55	Merge pull request #7032 from flosse/change-option-names ... nixos: prosody service - rename 'enabled' to 'enable'	2015-03-30 12:47:11 +02:00
lethalman	321b2e0439	Merge pull request #7073 from oxij/x11support-dbus ... dbus: rename useX11 option into x11Support, cleanup a bit	2015-03-30 10:28:45 +02:00
William A. Kennington III	113c6c8f6a	nixos/initrd: Do a lazy library copy in hopes to save some space for replaced binaries	2015-03-29 21:53:25 -07:00
William A. Kennington III	6b3cf366d7	nixos/initrd: Allow overriding of binaries	2015-03-29 21:26:39 -07:00
Jan Malakhovski	380ee53fff	dbus: rename useX11 option into x11Support, cleanup a bit	2015-03-29 23:28:30 +00:00
William A. Kennington III	ca149f2be0	nixos/mysql: All versions of mysql have mysqld in /bin	2015-03-29 13:30:05 -07:00
Vladimír Čunát	299da40f9f	iso: make efi FS size adaptive, make deterministic ... Fixes #6795. This was co-authored with @bobvanderlinden. (cherry picked from commit e19ac248ae59fd327c32b1ae3e37792c22a7c7ac) Signed-off-by: Domen Kožar <domen@dev.si> Conflicts: nixos/modules/installer/cd-dvd/iso-image.nix	2015-03-29 22:25:41 +02:00
William A. Kennington III	553105310a	nixos/stage-1: Fix the initrd builder for shell scripts	2015-03-29 13:20:54 -07:00
Nikolay Amiantov	16f047a60f	nixos/networkmanager: support l2tp	2015-03-29 13:09:02 +03:00
William A. Kennington III	9718561589	nixos/vfat: Readd fsck.reiserfs	2015-03-28 19:07:45 -07:00
William A. Kennington III	c379847fda	nixos/vfat: Readd fsck.vfat	2015-03-28 19:06:43 -07:00
William A. Kennington III	4868649f03	nixos/initrd: Generic library copying	2015-03-28 18:37:29 -07:00
Aristid Breitkreuz	1901f3fe77	fix initrd now that cryptsetup switched to libgcrypt 1.6	2015-03-28 23:59:19 +00:00
Joachim Fasting	5cb2cee954	nixos: condition sysctl.kptr_restrict on features.grsecurity ... Conditioning `sysctl.kptr_restrict` on `features.grsecurity` supports any grsecurity enabled kernel without having to enable the grsecurity module.	2015-03-29 00:42:58 +01:00
Arseniy Seroka	a639c710ae	Merge pull request #6968 from oxij/unquestionably-good ... Easy to check to be unquestionably good changes	2015-03-28 13:16:13 +03:00
Markus Kohlhase	47aa6725e2	nixos: prosody service - rename virtualHosts option 'enabled' to 'enable'	2015-03-27 21:36:05 +00:00
Oliver Matthews	51b06c5865	Add MediaTomb service	2015-03-27 12:45:25 +01:00
Jaka Hudoklin	d3c6d4175a	Merge pull request #6940 from offlinehacker/pkgs/ripple-data-api/add ... Add ripple data api package and nixos service	2015-03-26 20:04:51 +01:00
Jaka Hudoklin	75169aabc3	Add ripple data api package and nixos service	2015-03-26 20:02:39 +01:00
Jan Malakhovski	5c6d86540b	nixos: use types.enum instead of ad-hoc check in sshd service	2015-03-26 12:43:42 +00:00
Jan Malakhovski	dc4fa2da8a	nixos: udev: build rules locally	2015-03-26 12:43:42 +00:00
Rob Vermaas	cbb14299c9	GCE image: Remove some unnecessary lib prefixes.	2015-03-26 09:15:09 +00:00
Rob Vermaas	80202fbd25	GCE image: Add some recommended sysctl settings. Disable OS level firewall by default for GCE images (GCE provides external firewall). Disable passwordAuthentication. Related to issue #6991.	2015-03-26 09:09:40 +00:00
William A. Kennington III	8b3c7af358	Merge pull request #6981 from layus/systemd-escape-colon ... nixos/systemd: Also escape ':' characters	2015-03-25 15:33:21 -07:00
William A. Kennington III	86666893f0	nixos/microcode-amd: Update to early initrd loader	2015-03-25 14:44:36 -07:00
William A. Kennington III	b4fedf5315	nixos/intel-microcode: Support early initrd ucode loading	2015-03-25 14:14:46 -07:00
William A. Kennington III	f2655e4fa0	makeInitrd: Support prepending other initrds	2015-03-25 14:14:46 -07:00
Guillaume Maudoux	6ca7fb8f73	nixos/systemd: Also escape ':' characters	2015-03-25 22:11:35 +01:00
Bob van der Linden	58112832a7	nixos: iso-image: use label "EFIBOOT" for efi.img	2015-03-24 22:15:32 +01:00
Bob van der Linden	f0fd1c9bcf	nixos: iso-image: use memtest86 params in syslinux ... See also #6593.	2015-03-24 22:15:11 +01:00
Bob van der Linden	9ff9949896	nixos: iso-image: removed com32 entries from syslinux menu ... These entries result in incorrect entries when UNetbootin writes the image to an USB disk.	2015-03-24 22:09:06 +01:00
Bob van der Linden	af68f24003	nixos: iso-image: solve UNetbootin compatiblity ... There are a number of hidden restrictions on the syslinux configuration file that come into play when UNetbootin compatiblity is desired. With this commit these are documented.	2015-03-24 22:08:52 +01:00
Bob van der Linden	a12ddc1964	nixos: iso-image: use generic boot-loader timeout ... Syslinux uses different values than grub for timeout. It uses 1/10 seconds as its unit and it uses 0 to disable timeouts. In response to PR #5772.	2015-03-24 22:03:30 +01:00
Bob van der Linden	8d092270d2	nixos: iso-image: use syslinux bootloader for USB booting support ... This changes the bootloader for iso generation from Grub to syslinux. In addition this adds USB booting support, so that "dd" can be used to burn the generated ISO to USB thumbdrives instead of needing applications like UnetBootin.	2015-03-24 22:01:04 +01:00
Arseniy Seroka	ff22e19fc4	Merge pull request #6893 from hrdinka/nsd-config-options ... nsd: Fix automatic config options	2015-03-23 13:19:29 +03:00
Jaka Hudoklin	491c8f82b2	Merge pull request #6917 from offlinehacker/rippled/module/awesome ... rippled: expose more options, make compatible with new rippled version	2015-03-22 23:13:48 +01:00
Jaka Hudoklin	ad10db7617	Merge pull request #6882 from offlinehacker/nixos/fluentd ... Add fluentd package and module	2015-03-21 22:37:48 +01:00
Jaka Hudoklin	916aab2927	Merge pull request #6875 from offlinehacker/nixos/cadvisor/fix ... nixos/cadvisor: fixes	2015-03-21 22:36:11 +01:00
William Casarin	ea2baa8abf	spectrwm window manager	2015-03-21 11:02:44 -07:00
Jaka Hudoklin	4947bacd52	rippled: expose more options, make compatible with new rippled version	2015-03-21 12:52:06 +01:00
Edward Tjörnhammar	664592561d	nixos: added aiccu service	2015-03-20 22:01:35 +01:00
Austin Seipp	3ff22a924f	Merge pull request #6871 from joachifm/apparmor-fixups ... Apparmor fixups	2015-03-20 15:36:42 -05:00
aszlig	ea2fd84ecd	nixos/mpd: Fix creation of "mpd" group. ... The group is specified using a singleton list, so the loaOf merging is done by iterating through the list items with imap, so it enumerates every element and sets that as the default "name" attribute. From lib/types:143: name = elem.name or "unnamed-${toString defIdx}.${toString elemIdx}"; So, people get groups like "unnamed-X.Y" instead of "mpd". Signed-off-by: aszlig <aszlig@redmoonstudios.org> Reported-by: devhell <"^"@regexmail.net> Tested-by: devhell <"^"@regexmail.net>	2015-03-20 20:58:13 +01:00
Jaka Hudoklin	89f41b90fa	Merge pull request #6874 from offlinehacker/pkgs/kubernetes/update ... kubernetes: update to 0.12.1, fix module	2015-03-20 11:22:48 +01:00
Ricardo M. Correia	4d2317e6eb	nixos/zfs: Don't default to git version for kernels >= 3.19 ... Stable version 0.6.3-1.3 works with kernels 3.19.x.	2015-03-19 19:37:33 +01:00
Arseniy Seroka	9cfdeba324	Merge pull request #6611 from jagajaga/slurm ... Slurm module	2015-03-19 21:06:49 +03:00
Christoph Hrdinka	d3a2edb8ce	nsd: Fix automatic config options	2015-03-19 12:10:55 +01:00
Jaka Hudoklin	1b99f0aeb6	Merge pull request #6873 from offlinehacker/pkgs/panamax/update ... panamax: update, fix module	2015-03-19 09:18:48 +01:00
Arseniy Seroka	15f7afa6b4	Merge pull request #6885 from hrdinka/update-nsd ... nsd: Update from 4.1.0 -> 4.1.1	2015-03-19 03:15:35 +03:00
Jaka Hudoklin	fca0aa7077	Add fluentd package and module	2015-03-18 21:18:47 +01:00
Rickard Nilsson	bdbdaee3c0	scollector module: Add extraOpts option	2015-03-18 21:16:31 +01:00
Christoph Hrdinka	6db8155e37	nsd: Update from 4.1.0 -> 4.1.1	2015-03-18 21:01:35 +01:00
Luca Bruno	b94b08488f	nixos/pulseaudio: don't put 32bit libs in systemPackages ... Fixes the useless collisions in the system path. The 64bit and 32bit variants have the same files, hence it's pointless to put the 32bit pulseaudio in systemPackages.	2015-03-18 14:10:02 +00:00
Luca Bruno	cb45b7ec3e	Revert "nixos: Multiple service instances, apply to nginx. See #6784" ... This reverts commit 7ef59c4fe2. Wrong push! Sorry!	2015-03-18 14:09:24 +00:00
Luca Bruno	7ef59c4fe2	nixos: Multiple service instances, apply to nginx. See #6784	2015-03-18 14:07:29 +00:00
Jaka Hudoklin	2482b75eae	kubernetes: update to 0.12.1, fix module	2015-03-18 14:37:03 +01:00
Jaka Hudoklin	079520ced5	panamax: update, fix module	2015-03-18 14:35:24 +01:00
Jaka Hudoklin	536694bcd4	nixos/cadvisor: fixes ... - run as non root user, because of docker - run docker by default	2015-03-18 14:31:08 +01:00
Joachim Fasting	532337d673	Cleanup AppArmor module ... Remove excessive whitespace & comment sections	2015-03-18 12:07:43 +01:00
Eelco Dolstra	224d0d5302	Set stricter permissions on /nix/store ... The nixbld group doesn't need read permission, it only needs write and execute permission. (cherry picked from commit 066758758e7c0768ff8da51d208cdae0f33b368c)	2015-03-18 10:58:08 +01:00
lethalman	cdbeb7143c	Merge pull request #6832 from k0ral/icecast ... Added icecast module	2015-03-17 16:43:02 +01:00
koral	54857abfc9	Added icecast module.	2015-03-17 14:21:57 +00:00
lethalman	c91ccb4b9c	Merge pull request #6842 from philandstuff/hash-owncloud-admin-password ... owncloud: don't store plaintext adminPassword in nix store	2015-03-17 12:59:58 +01:00
lethalman	70b059fb59	Merge pull request #5936 from j-keck/nixos-container-usage ... nixos-container: add missing 'nixos-container update' in usage	2015-03-17 12:43:29 +01:00
lethalman	359bc60ec8	Merge pull request #6448 from eduarrrd/ddclient ... ddclient module: fix module	2015-03-17 12:38:12 +01:00
Philip Potter	7ad6dac43b	owncloud: don't store plaintext adminPassword in nix store ... Rather than using openssl to hash the password at build time, and hence leaving the plaintext password world-readable in the nix store, we can instead hash the password in the nix expression itself using builtins.hashString.	2015-03-16 22:42:22 +00:00
Peter Simons	56bb114905	Merge pull request #6722 from joachifm/fix-id-mismatches ... Fix id mismatches	2015-03-16 18:46:38 +01:00
Joachim Fasting	3518b761ba	TCSD: use tss user/group instead of nginx ... For some reason TCSD is configured to use the nginx uid/gid. Use the newly created tss uid/gid instead.	2015-03-16 09:58:16 +01:00
Joachim Fasting	e9cd877921	nixos: resolve uid/gid conflicts ... This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch	2015-03-16 09:58:13 +01:00
Austin Seipp	ef95600372	Merge pull request #6771 from joachifm/apparmor-2.9 ... Apparmor 2.9	2015-03-15 14:16:24 -05:00
Nicolas B. Pierron	05e8a48fb4	Document and rename internal option of modules.	2015-03-15 14:45:42 +01:00
Ricardo M. Correia	7c8247a8c5	grsecurity: Update stable and test patches ... stable: 3.1-3.14.35-201503071140 -> 3.1-3.14.35-201503092203 test: 3.1-3.18.9-201503071142 -> 3.1-3.19.1-201503122205	2015-03-15 03:49:58 +01:00
William A. Kennington III	c200c1e0a1	Merge pull request #6813 from globin/fix/elantech-trackpoint-scrolling ... Add Elanthec PS/2 Trackpoint (Thinkpad L430)	2015-03-14 17:01:13 -07:00
Robin Gloster	a8a350e679	Add Elanthec PS/2 Trackpoint (Thinkpad L430)	2015-03-15 00:09:04 +01:00
koral	9c4cbaa553	Fix mpd configuration (enclosing quotes needed).	2015-03-14 12:15:34 +00:00
Joachim Schiele	d74ea7d34f	zef hemels' wordpress.nix adapted to extraSubservices	2015-03-13 14:19:48 +01:00
lethalman	f72d1abb79	Merge pull request #5846 from arno01/nginx ... nginx service improvements	2015-03-13 11:41:27 +01:00
Nicolas B. Pierron	9f2865515d	Fix infinite loop in fontconfig-ultimate.nix ... With the new evaluation of arguments, pkgs is now defined by the configuration, which implies that option declaration with pkgs.lib will cause an infinite loop.	2015-03-12 23:42:58 +01:00
Shea Levy	3177d37652	Fix import using module args	2015-03-12 23:42:57 +01:00
Shea Levy	f69ce50529	Move most extra args out of eval-config.nix	2015-03-12 23:42:57 +01:00
Shea Levy	e3eff53037	evalModules: Add internal option for the check argument	2015-03-12 23:42:57 +01:00
Shea Levy	e4a06f35b1	nixos: Don't evaluate twice to get the value of config.nixpkgs	2015-03-12 23:42:57 +01:00
Shea Levy	1d62ad4746	modules.nix: Generate the extra argument set from the configuration ... This allows for module arguments to be handled modularly, in particular allowing the nixpkgs module to handle the nixpkgs import internally. This creates the __internal option namespace, which should only be added to by the module system itself.	2015-03-12 23:42:57 +01:00
Vladimír Čunát	208d1f24db	xfce: more update fallout ... - forgotten mousepad update, including some wrapping magic - dealing with panel plugins (either fix or mark as broken) CC maintainer @AndersonTorres. - remove some libxfcegui4 occurrences, as it's being phased out - minor stuff	2015-03-12 23:02:15 +01:00
lethalman	14ed261fc7	Merge pull request #6765 from gebner/ibus-plugins ... Add ibus-qt and ibus-anthy.	2015-03-12 14:35:23 +01:00
Joachim Fasting	7a9a24a95e	Update AppArmor service module ... - Use AppArmor 2.9 - Enable PAM support	2015-03-12 11:49:05 +01:00
Kirill Elagin	356810b178	cupsd: rename cupsd.service to cups.service	2015-03-12 09:00:56 +03:00
Gabriel Ebner	d23ed364b5	Add ibus-qt.	2015-03-11 21:54:04 +01:00
Gabriel Ebner	59da79c733	ibus: Enable XIM support. ... This allows firefox to use ibus.	2015-03-11 21:54:04 +01:00
Gabriel Ebner	f222abea44	Add programs.ibus config option to enable ibus and plugins.	2015-03-11 21:53:34 +01:00
Thomas Tuegel	61cf7e1265	Merge branch 'kde5'	2015-03-11 11:49:45 -05:00
Thomas Tuegel	f370af91ad	kde5: use ksshaskpass for SSH_ASKPASS	2015-03-11 11:49:29 -05:00
Thomas Tuegel	4b10907152	ssh: make askPassword an option ... By making askPassword an option, desktop environment modules can override the default x11_ssh_askpassword with their own equivalent for better integration. For example, KDE 5 uses plasma5.ksshaskpass instead.	2015-03-11 11:49:29 -05:00
Thomas Tuegel	5b5b7aa951	kde5: add kde-workspace and kde-runtime to systemPackages	2015-03-11 11:49:28 -05:00
Luca Bruno	fe6b0b15e6	nixos-install: support -j, --cores and --option. Closes #6755	2015-03-11 16:47:44 +00:00
lethalman	fe79bf34a5	Merge pull request #6512 from bjornfor/nixos-haproxy-cleanup ... nixos/haproxy: remove broken default 'config'	2015-03-11 16:29:06 +01:00
lethalman	c8ac069772	Merge pull request #6724 from anderspapitto/local ... Add x11 service for unclutter	2015-03-11 15:32:40 +01:00
Arseniy Seroka	ef37154c82	Merge pull request #6739 from joachifm/refactor-tarsnap-service ... nixos: refactor tarsnap backup service module	2015-03-11 11:22:32 +03:00
Arseniy Seroka	1c58c3a772	Merge pull request #6345 from puffnfresh/feature/mtrack-options ... Add more options to multitouch (mtrack) module	2015-03-11 11:10:51 +03:00
William A. Kennington III	26020cfe8a	nixos/lightdm: Add a background option	2015-03-10 15:57:46 -07:00
William A. Kennington III	e519414e1f	nixos/lightdm: Fix data directory	2015-03-10 14:55:54 -07:00
William A. Kennington III	3a67a51689	nixos/lightdm: Small cleanup	2015-03-10 14:35:49 -07:00
William A. Kennington III	ffed8a85bc	nixos/sddm: Hide users which don't have login shells	2015-03-10 14:32:53 -07:00
William A. Kennington III	5893d2ecd3	nixos/lightdm: More Cleanups	2015-03-10 14:23:43 -07:00
William A. Kennington III	7b6e2e1c68	lightdm: Fix rendering	2015-03-10 14:03:18 -07:00
lethalman	27f3f254d3	Merge pull request #6540 from k0ral/transmission ... Simplify (and fix) settings for transmission module	2015-03-10 13:26:03 +01:00
lethalman	70527b87a1	Merge pull request #6440 from k0ral/fcgiwrap ... Updated fcgiwrap's systemd unit to match upstream version.	2015-03-10 13:18:46 +01:00
Joachim Fasting	1bdd12ed69	nixos: refactor tarsnap backup service module ... Major changes - Port to systemd timers: for each archive configuration is created a tarsnap@archive-name.timer which triggers the instanced service unit - Rename the `config` option to `archives` Minor/superficial improvements - Restrict tarsnap service capabilities - Use dirOf builtin - Set executable bit for owner of tarsnap cache directory - Set IOSchedulingClass to idle - Humanize numbers when printing stats - Rewrite most option descriptions - Simplify assertion	2015-03-10 12:35:58 +01:00
William A. Kennington III	4940e643cc	nixos/display-manager: Support configurable hidden users	2015-03-09 18:10:31 -07:00
William A. Kennington III	66bfdf6eb0	nixos/lightdm: We now use a global lightdm.conf	2015-03-09 17:59:21 -07:00
Eelco Dolstra	475df1a350	switch-to-configuration: Don't print already active target units ... Since we restart all active target units (of which there are many), it's hard to see the units that actually matter. So don't print that we're starting target units that are already active.	2015-03-09 16:51:06 +01:00
Eelco Dolstra	a574065a81	nixos-rebuild: Add ‘dry-activate’ command ... ‘nixos-rebuild dry-activate’ builds the new configuration and then prints what systemd services would be stopped, restarted etc. if the configuration were actually activated. This could be extended later to show other activation actions (like uids being deleted). To prevent confusion, ‘nixos-rebuild dry-run’ has been renamed to ‘nixos-rebuild dry-build’.	2015-03-09 16:50:59 +01:00
Eelco Dolstra	8cb3e3b864	httpd: Disable insecure protocols/ciphers by default ... This makes us resistant to FREAK and similar attacks.	2015-03-09 14:18:12 +01:00
Eelco Dolstra	d31202fba2	sshd: Enable seccomp sandboxing	2015-03-09 11:27:19 +01:00
lethalman	9867f4bdef	Merge pull request #6720 from nslqqq/nmhooks ... New NetworkManager Dispatcher scripts options	2015-03-09 10:36:10 +01:00
Anders Papitto	887a547ac9	Add x11 service for unclutter ... modeled after the redshift service	2015-03-08 20:12:18 -07:00
William A. Kennington III	5b059416b8	Merge pull request #6699 from hakuch/fix_samba ... Samba: Fixed "syncPasswordsByPam".	2015-03-08 16:09:29 -07:00
obadz	e5d4624420	PAM/eCryptfs now able to mount ecryptfs'd home directories on login	2015-03-08 16:03:51 -07:00
Nikita Mikhailov	579159c72b	Add dispatcher configuration options to NetworkManager module	2015-03-08 20:24:53 +01:00
Unai Zalakain	581a90bad8	Optional user and group to run the MPD	2015-03-08 10:18:40 +00:00
Jesse Haber-Kucharsky	5a1950d985	Samba: Fixed "syncPasswordsByPam".	2015-03-07 17:56:46 +00:00
Nikolay Amiantov	b802018482	stage-1: fix hibernation (close #6675) ... Fixes #6617.	2015-03-07 13:00:08 +01:00
Arseniy Seroka	30e6f1b4ea	slurm: impl basic configuration	2015-03-07 00:26:57 +03:00
Arseniy Seroka	0b1cc3cd51	slurm: impl simple service	2015-03-07 00:26:57 +03:00
Arseniy Seroka	69e59e9962	munge: add service	2015-03-07 00:26:52 +03:00
Eelco Dolstra	3b9b620656	Revert "linux: disable UEVENT_HELPER*" ... This reverts commit 9f87f3ccb0 because it causes /proc/sys/kernel/hotplug to not be cleared on Linux <= 3.14.	2015-03-06 15:59:06 +01:00
Nikolay Amiantov	4fde098eec	Merge pull request #6677 from abbradar/sddm ... Add SDDM display manager	2015-03-05 21:03:43 +03:00
Nikolay Amiantov	4f317767da	lightdm: don't leave a shell running	2015-03-05 20:49:45 +03:00
Nikolay Amiantov	264c6892f2	nixos/uim: capitalize description	2015-03-05 20:49:45 +03:00
Nikolay Amiantov	db5b08cfaf	nixos/sddm: add display manager	2015-03-05 20:49:26 +03:00
Eelco Dolstra	9bb586943a	Deal with virtualisation.xen.stored in a more standard way	2015-03-05 12:46:50 +01:00
Luca Bruno	b93e8bab3a	nixos/xen: do not use derivation in the default values ... The xen package is broken on i686, so this would break the generation of the nixos manual.	2015-03-04 12:05:58 +01:00
Eelco Dolstra	1002fb6433	Add "input" group ... This is required by systemd >= 215.	2015-03-03 20:27:09 +01:00
Eelco Dolstra	8546ec7c74	Fix some uid/gid clashes	2015-03-03 20:26:36 +01:00
Eelco Dolstra	a4e0278fcd	Create /dev/nvidia-uvm for CUDA support	2015-03-03 20:24:14 +01:00
Arseniy Seroka	7ce77b5752	slurm: add pkg	2015-03-02 22:10:58 +03:00
lethalman	c97d7819ab	Merge pull request #6624 from joachifm/grsec-lock ... nixos: grsec-lock service fixes	2015-03-02 18:49:39 +01:00
Joachim Fasting	18320d3b21	nixos: fix grsec-lock requires	2015-03-02 18:39:04 +01:00
Joachim Fasting	ccd6f5a313	nixos: make the grsec-lock unit depend on the path it writes to ... The grsec-lock unit fails unless /proc/sys/kernel/grsecurity/grsec_lock exists and so prevents switching into a new configuration after enabling grsecurity.sysctl.	2015-03-02 18:39:01 +01:00
lethalman	373c4ce0ec	Merge pull request #6605 from AndersonTorres/afterstep ... Adding Afterstep to nixos window manager modules	2015-03-02 18:00:28 +01:00
Tobias Geerinckx-Rice	9f87f3ccb0	linux: disable UEVENT_HELPER* ... Deprecated since 2006: http://lwn.net/Articles/166954/	2015-03-01 03:31:59 +01:00
Eelco Dolstra	307064ceb5	Don't use machinectl to shut down containers ... If the host is shutting down, machinectl may fail because it's bus-activated and D-Bus will be shutting down. So just send a signal to the leader process directly. Fixes #6212.	2015-02-28 19:23:00 +01:00
AndersonTorres	929485b645	Adding Afterstep to nixos modules	2015-02-28 11:14:33 -03:00
AndersonTorres	5472af91f2	Fluxbox: update to 1.3.7	2015-02-28 11:04:20 -03:00
Jaka Hudoklin	6dc0938a3e	Merge pull request #6591 from lseppala/master ... Fix rebooting containers where resolv.conf is a symlink	2015-02-28 12:19:01 +01:00
Joachim Fasting	0473b4ae8d	nixos: citerefentry markup in lxc option descriptions	2015-02-28 09:21:48 +01:00
Joachim Fasting	d375550ead	nixos: add a few missing type specifiers under boot.*	2015-02-28 09:19:23 +01:00
Lane Seppala	4106a3b74e	Fix rebooting containers where resolv.conf is a symlink	2015-02-27 10:27:18 -07:00
Eelco Dolstra	22d2fc3657	Fix "systemctl reload container@" ... Fixes #5179.	2015-02-27 14:32:54 +01:00
Rob Vermaas	24e0565407	Only start fetch-keys for GCE image after ip-up.	2015-02-27 10:48:15 +00:00
koral	c1cefa1a58	Simplify (and fix) settings for transmission module.	2015-02-26 22:21:27 +00:00
Rob Vermaas	e4928b8955	GCE image: Pass header to metadata service calls.	2015-02-26 19:20:43 +00:00
Sander van der Burg	7b27af61fb	Add NixOS global binaries to the PATH	2015-02-26 17:29:49 +00:00
Eelco Dolstra	6177710ac7	Merge pull request #6046 from ts468/xen ... Update: Xen 4.5 + NixOS Xen modules	2015-02-26 10:15:05 +01:00
lethalman	b6672f232a	Merge pull request #6283 from mdorman/master ... Fix initial-install issues with couchdb.nix.	2015-02-26 10:11:18 +01:00
lethalman	d791335ac2	Merge pull request #6518 from ehmry/u9fs ... U9fs	2015-02-26 09:41:18 +01:00
William A. Kennington III	9ce0c1cb71	nixos/consul: Fix timeout bugs and json formatting	2015-02-25 15:42:43 -08:00
Thomas Strobel	3d4fbb874c	Update: add new Xen versions + update NixOS Xen modules ... Versions of XEN: - Xen 4.5 - Xen 4.5 + XenServer patches - Xen 4.4.1	2015-02-25 23:30:44 +01:00
William A. Kennington III	f27fa79aa9	nixos/dnsmasq: Fix service name typo	2015-02-25 09:22:16 -08:00
Eelco Dolstra	36d0f367de	ssh-agent: Fix asking for confirmation via $SSH_ASKPASS ... This was lost back in ffedee6ed5. Getting this to work is slightly tricky because ssh-agent runs as a user unit, and so doesn't know the user's $DISPLAY.	2015-02-25 14:31:17 +01:00
Eelco Dolstra	93902ea108	nsswitch.conf: Omit ldap unless ldap is enabled ... This prevents programs from trying to find nss_ldap.	2015-02-25 14:31:13 +01:00
William A. Kennington III	e453f99446	nixos/networkd: Add an assertion for unsupported rstp	2015-02-24 13:09:34 -08:00
Lluís Batlle i Rossell	b26e939111	fix pam (OATH related) ... the pam config was wrong. Issue #6551	2015-02-24 17:52:41 +01:00
Eelco Dolstra	16cf3ee9da	Ensure that the home directory exists even if the user already exists	2015-02-24 11:57:38 +01:00
Eduard Bachmakov	4bf66ba89c	ddclient module: fix module ... * rewrite to systemd.services * disable forking to give systemd better control * verifiably run as ddclient user * expose ssl option * unset default value for dyndns server * rename option "web" to "use" to be consistent with ddclient docs * add descriptions * add types to options * clean up formatting	2015-02-23 22:37:20 -05:00
Jaka Hudoklin	1cddb5be20	mongodb: remove lock file on restart	2015-02-23 20:40:13 +01:00
Eelco Dolstra	b70bd0879b	sshd: Generate a ed25519 host key	2015-02-23 17:00:07 +01:00
Emery Hemingway	446580f3cd	nixos: u9fs service module	2015-02-22 12:16:58 -05:00
Bjørn Forsman	d5017499a2	nixos/redis: capitalize service description	2015-02-22 16:54:14 +01:00
Bjørn Forsman	25a6745310	nixos/fail2ban: capitalize service description	2015-02-22 16:54:14 +01:00
Lluís Batlle i Rossell	4e99901961	nixos: Adding OATH in pam. ... (cherry picked from commit cb3cba54a1b87c376d0801238cb827eadb18e39e) Conflicts: nixos/modules/security/pam.nix	2015-02-22 15:25:38 +01:00
Bjørn Forsman	ffb4797dd3	nixos/haproxy: remove broken default 'config' ... HAProxy fails to start with the default 'config'. Better disable it and assert that the user provides a suitable 'config'. (AFAICS, there cannot really be a default config file for HAProxy.)	2015-02-22 12:30:14 +01:00
Bjørn Forsman	419a4166a7	nixos/haproxy: small cleanup ... * Add option types * Rewrite option descriptions * /var/run/haproxy.pid => /run/haproxy.pid (canonical location)	2015-02-22 12:29:34 +01:00
aszlig	030895f075	nixos/dhcpcd: Only run resume commands if enabled. ... The networkd implementation sets systemd.services.dhcpcd.enable to false in nixos/modules/tasks/network-interfaces-systemd.nix. So we need to respect that in the dhcpcd module. If we don't, the resumeCommand is set nevertheless, which causes the post-resume.service to fail after resuming: Failed to reload dhcpcd.service: Unit dhcpcd.service is masked. post-resume.service: main process exited, code=exited, status=1/FAILURE Failed to start Post-Resume Actions. Dependency failed for Post-Resume Actions. Unit post-resume.service entered failed state. post-resume.service failed. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-02-22 08:09:04 +01:00
Thomas Tuegel	d15d0bebc3	kde5: remove file collisions	2015-02-21 20:58:43 -06:00
Thomas Tuegel	68f2db74ff	kde5: always use plasma-nm	2015-02-21 13:59:28 -06:00
Thomas Tuegel	7eb8a9b41f	kde5: install media-player-info udev rules for solid	2015-02-21 11:39:21 -06:00
Thomas Tuegel	532650e4bb	kde5: change notice about default Phonon backend	2015-02-21 11:39:21 -06:00
Thomas Tuegel	e5de75bf2a	kde5: install kde-frameworks version used by plasma	2015-02-21 11:39:21 -06:00
Thomas Tuegel	b050babd3e	kde5: fix Phonon GStreamer backend	2015-02-21 11:39:20 -06:00
Thomas Tuegel	a79936561b	environment: use Qt 5 Qml import paths	2015-02-21 11:39:20 -06:00
Vladimír Čunát	a3a467ce77	nixos/nvidia: use correct 32-bit legacy libs; refactor ... Fixes #6127. Now we avoid multiple switches among the version possibilities.	2015-02-21 16:34:24 +01:00
Bjørn Forsman	97875ac175	bridge-utils: align attrname with pkgname	2015-02-20 22:30:51 +01:00
Thomas Strobel	c62e42e9c5	Enhance stage-1/2 scripts for better dealing with squashfs	2015-02-20 17:42:22 +01:00
Peter Simons	263a49be20	Merge pull request #5704 from eduarrrd/nixos-version ... Add option to display git revision to nixos-version	2015-02-20 16:35:56 +01:00
Shea Levy	2fe3a3c203	Merge branch 'grub' of git://github.com/ts468/nixpkgs ... Fix grubTarget on nodev installs	2015-02-20 07:47:06 -05:00
tv	86cb16965a	exim: add version 4.85 incl. nixos module	2015-02-20 10:49:15 +01:00
Shea Levy	3e44f99055	Fix grub 1 install	2015-02-19 19:33:17 -05:00
Eelco Dolstra	5762f8f95c	Add options to support signed binary caches ... Typical use: nix.requireSignedBinaryCaches = true; nix.binaryCachePublicKeys = [ "hydra.nixos.org-1:CNHJZBh9K4tP3EKF6FkkgeVYsS3ohTl+oS0Qa8bezVs=" ]; (The public key of cache.nixos.org is included by default.) Note that this requires Nix 1.9 and that most of cache.nixos.org hasn't been signed yet.	2015-02-19 14:22:43 +01:00
Jaka Hudoklin	ebfadc2fc9	Merge pull request #6452 from rushmorem/update-chronos-port ... Update chronos default port	2015-02-19 14:13:00 +01:00
rushmorem	74b40e9a43	Add marathon mesos framework	2015-02-19 13:30:00 +02:00
rushmorem	a661802d29	Update chronos default port ... Update chronos default port to match the one documented on their website (http://airbnb.github.io/chronos). The one in their repo (the current one) clashes with the marathon documented one.	2015-02-19 12:31:12 +02:00
koral	d9078d03a3	Updated fcgiwrap's systemd unit to match upstream version.	2015-02-18 21:19:12 +00:00
Eelco Dolstra	4ac280ec49	Blacklist the nouveau driver on EC2	2015-02-18 13:04:10 +01:00
Sou Bunnbu	f8dbd6f9ae	Merge pull request #6427 from grwlf/vsftpd-port ... vsftpd.nix: add 'portPromiscuous' option	2015-02-18 19:18:34 +08:00
Sergey Mironov	ac65a757f0	vsftpd.nix: add 'portPromiscuous' option	2015-02-18 11:51:43 +03:00
Mathijs Kwik	2fe44b95d0	nixos/wpa_supplicant: fix conflicting documentation ... fixes #6298	2015-02-17 22:16:20 +01:00
James Cook	6daf9aa922	Merge pull request #5995 from ts468/qemu-vm ... Update QEMU Nixos Virtual Machine	2015-02-16 13:13:26 -08:00
Thomas Strobel	c61ff9b51e	Fix grubTarget on nodev installs	2015-02-16 20:19:44 +01:00
Thomas Strobel	80afabd5b5	Update QEMU Nixos Virtual Machine ... The Nixos Qemu VM that are used for VM tests can now start without boot menu even when using a bootloader. The Nixos Qemu VM with bootloader can emulate a EFI boot now.	2015-02-16 20:07:42 +01:00
Evgeny Egorochkin	4621f16b34	azure: add a job to download ssh host and root keys if they are made available via "custom data"; see #3986	2015-02-16 16:54:30 +02:00
Eelco Dolstra	5d7000df68	Automatically set nix.nrBuildUsers to at least nix.maxJobs	2015-02-16 12:02:49 +01:00
Wout Mertens	65438da88a	Merge pull request #6357 from NixOS/jobs-vs-users ... nix-daemon: Sanity check maxJobs vs nrBuildUsers	2015-02-16 11:42:24 +01:00
Rob Vermaas	824fccd3e9	Move amazon option out of amazon-image.nix, needed to make ec2.hvm usable from nixops, without breaking evaluation for other backends. ... (cherry picked from commit 213fe8427c5ce455b893c0c5c56cc38175bf36b7)	2015-02-16 09:57:19 +00:00
Eelco Dolstra	5092d625d6	/etc/ssl/certs/ca-bundle.crt -> ca-certificates.crt ... Even though there is no "official" standard location, it's better to stick to what most distros are using.	2015-02-15 19:06:31 +01:00
Eelco Dolstra	75e1b5e317	Provide symlinks to ca-bundle.crt for compat with other distros ... There is no "standard" location for the certificate bundle, so many programs/libraries have various hard-coded default locations that don't exist on NixOS. To make these more likely to work, provide some symlinks.	2015-02-15 19:06:31 +01:00
AndersonTorres	f19ed980a2	Sawfish (git): New Package ... Sawfish is a versatile, Lisp-based window manager In that commit I include all Sawfish stack: - librep, a lisp system; - rep-gtk, bindings for gtk - sawfish, the window manager	2015-02-15 19:42:53 +03:00
Wout Mertens	d41367735d	nix-daemon: Sanity check maxJobs vs nrBuildUsers	2015-02-15 15:37:30 +01:00
James Cook	33550b6efe	Merge pull request #5665 from joachifm/dnscrypt-proxy-apparmor-updates ... dnscrypt-proxy service: update AppArmor profile	2015-02-14 22:02:31 -08:00
Brian McKenna	28a9ed618f	Add more options to multitouch (mtrack) module	2015-02-14 14:56:12 -07:00
William A. Kennington III	1fddcd1e83	grub: Don't remove zfs support if contained in the default binary	2015-02-13 14:40:41 -08:00
William A. Kennington III	69a277e2cc	iwlegacy: Remove since it is already in linux-firmware-nonfree	2015-02-13 14:27:47 -08:00
Harald van Dijk	0fe9d58e4e	stage-1-init: fix PID 1 shell ... The PID 1 shell is executed as the last command in a sh invocation. Some shells implicitly use exec for that, but the current busybox ash does not, so the shell gets a wrong PID. Spell out the exec.	2015-02-13 10:20:29 +00:00
lethalman	51a7277fac	Merge pull request #6312 from k0ral/sslh ... sslh: added libwrap support + improved nixos module.	2015-02-13 10:03:48 +01:00
Domen Kožar	5a4614dc1f	Add hid_lenovo to initrd kernel modules	2015-02-13 01:42:13 +01:00
Jaka Hudoklin	a17f5c8c9b	nixos/consul: add consul-alerts service	2015-02-12 19:16:50 +01:00
Jaka Hudoklin	36e7a61dde	Merge pull request #6222 from offlinehacker/limesurvey ... add limesurvey package and nixos module	2015-02-12 18:07:42 +00:00
koral	cb153cfca3	sslh: added libwrap support + improved nixos module.	2015-02-12 13:21:36 +01:00
Michael Alan Dorman	f21cab27a4	Fix initial-install issues with couchdb.nix. ... When starting from a clean slate, the couchdb service fails. First, the pre-start script fails because it tries to chown the uriFile, which doesn't exist. It also doesn't ensure that the directory in which the uriFIle is placed is writeable by couchdb, which could also cause failure (though I didn't observe this). Additionally, the log file's default location isn't a directory owned by couchdb, nor is the file guaranteed to exist, nor is it guaranteed to be chowned to the appropriate user. All of which can cause unexpected failure. As a bonus I made a small change in the description of the configFile attribute, in the hopes of making it a little more obvious why it existed.	2015-02-11 20:42:52 -05:00
William A. Kennington III	35e9d3c112	nixos/zfs: Use the git version for kernels unsupported by 0.6.3	2015-02-11 15:11:56 -08:00
Luca Bruno	e088fd0314	Revert "Merge pull request #5626 from matthiasbeyer/add-fish_shell_module" ... This reverts commit 157d199b33, reversing changes made to 4c7adddcb7.	2015-02-11 18:31:11 +01:00
Luca Bruno	c427b48ba6	Revert "Add fish to nixos module list" ... This reverts commit d7f5d00f0a.	2015-02-11 18:30:58 +01:00
Luca Bruno	d7f5d00f0a	Add fish to nixos module list	2015-02-11 14:05:30 +00:00
lethalman	157d199b33	Merge pull request #5626 from matthiasbeyer/add-fish_shell_module ... Add basic nixos module for fish shell	2015-02-11 15:05:03 +01:00
Luca Bruno	f7b26bf98f	gnome3: Set XCURSOR_PATH. Closes #6191	2015-02-11 11:48:51 +00:00
lethalman	c1d22c947e	Merge pull request #6278 from bendlas/cdemu ... Add cdemu packages and module	2015-02-10 15:33:06 +01:00
Herwig Hochleitner	983fddcea8	Move cdemu module into programs	2015-02-10 13:14:09 +01:00
lethalman	12834a8500	Merge pull request #6072 from AndersonTorres/window-managers ... Update NixOS module files to include WindowMaker	2015-02-10 13:06:06 +01:00
Herwig Hochleitner	b909def3e1	Whitespace cleanup	2015-02-10 11:49:32 +01:00
lethalman	93ebaafabe	Merge pull request #6170 from k0ral/sslh ... New sslh module	2015-02-10 11:17:56 +01:00
lethalman	7614b2f984	Merge pull request #6229 from devhell/canto ... canto-{curses,daemon}: Add packages	2015-02-10 10:34:11 +01:00
Luca Bruno	d06122c58d	Add PermissionsStartOnly to mpd service. Closes #6277	2015-02-10 10:18:54 +01:00
Herwig Hochleitner	2961b83d08	Add cdemu packages and module	2015-02-10 06:49:47 +01:00
William A. Kennington III	650b2258f0	nonfree-firmware: Use the new kernel.org repository for tracking nonfree firmware changes ... remove the obsolete iwlwifi firmware which is included in the repo.	2015-02-09 16:28:40 -08:00
William A. Kennington III	b556983eb7	nixos/system: Add xhci_pci as it is needed to detect host buses in the initrd for usb keyboards on the xhci bus and storage devices on the iso	2015-02-09 13:09:26 -08:00
Wout Mertens	8f42f33c45	stage-1-init: better warnings ... - Suppress spurious LVM FD3 warning: See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432986 - Warn when device doesn't come online	2015-02-09 21:53:51 +01:00
Shea Levy	24c0844cfb	Fix grub on nodev installs	2015-02-08 22:31:14 -05:00
William A. Kennington III	c4bec1a0a4	Merge pull request #6152 from abbradar/samba-clean ... nixos/samba: cleanup and update defaults	2015-02-08 14:20:49 -08:00
William A. Kennington III	2a0754ccbc	Merge pull request #5994 from ts468/grub ... Add 'target' parameter for GRUB installation chain	2015-02-08 14:18:13 -08:00
devhell	a9ac564f50	canto-daemon: Fix typo and remove TimeoutStopSec	2015-02-08 14:16:17 +00:00
devhell	d6e9df1e1a	canto-daemon: Add a systemd service ... This adds a systemd service for the canto-daemon.	2015-02-08 14:16:17 +00:00
Domen Kožar	b83433cdd1	Remove gui (see #6207), use nixui instead	2015-02-08 10:47:58 +01:00
William A. Kennington III	42a6ac5209	nixos/iso: Increase efi image size to 15M	2015-02-07 20:38:24 -08:00
William A. Kennington III	0fa4c9d6d3	nixos/zfs: Fix references to zfs packages now that they are split	2015-02-07 15:07:39 -08:00
Jaka Hudoklin	41ae4d1af9	add limesurvey package and nixos module	2015-02-07 23:18:51 +01:00
Jaka Hudoklin	f85abb041a	Merge pull request #5622 from offlinehacker/panamax ... panamax: new package and service	2015-02-07 14:56:25 +00:00
Jaka Hudoklin	769fb8a141	Merge pull request #5486 from matejc/fixgatewayd ... systemd-journal-gatewayd: add systemd-journal group	2015-02-07 14:52:31 +00:00
Jaka Hudoklin	ae34f923f7	panamax: simplify, refactor, add test	2015-02-07 15:32:20 +01:00
Matej Cotman	8c79a2df63	panamax: new package and service	2015-02-07 15:32:20 +01:00
William A. Kennington III	9792b12e53	nixos/openntpd: Don't start until we have networking ... This attempts to fix an issues where ntp is unable to resolve hostnames because it came up before local nameservers or networking.	2015-02-06 14:45:47 -08:00
William A. Kennington III	3e280f2089	nixos/tinc: Fix key generation behavior and use tinc 1.1 by default	2015-02-05 23:37:20 -08:00
Eelco Dolstra	d2bfb5ceb0	Add options for installing additional root certificates	2015-02-05 18:08:35 +01:00
Nikolay Amiantov	f35568e705	Merge pull request #5277 from abbradar/uwsgi ... Add uWSGI application server	2015-02-05 17:10:37 +03:00
koral	1439e72147	New sslh module.	2015-02-05 13:30:39 +01:00
Edward Tjörnhammar	83925c33f6	i2pd: 0.6.0 -> 0.7.0 ... nixos: i2pd.service, fix string escaping	2015-02-05 12:09:59 +01:00
William A. Kennington III	9ddb6c9cc9	nixos/tinc: Add daemon configuration	2015-02-04 18:19:04 -08:00
William A. Kennington III	bae5faa82d	nixos/dhcpd: Also try restarting openntpd as it suffers the same dns resolution problem	2015-02-04 17:33:14 -08:00
William A. Kennington III	43d8b1ef3c	openntpd: Fixes	2015-02-04 17:30:22 -08:00
William A. Kennington III	a9f1329d2d	nixos/openntpd: Add openntpd to the environment for ntpctl	2015-02-04 17:27:03 -08:00
Nikolay Amiantov	b22a1ff683	Merge pull request #4485 from abbradar/parsoid ... Add "parsoid" service	2015-02-04 23:08:28 +03:00
Nikolay Amiantov	b903bf0a57	nixos/samba: cleanup and update defaults	2015-02-04 22:31:50 +03:00
AndersonTorres	fff55a968e	Update NixOS module files to include WindowMaker ... According to a hint on NixOS mailing list[1], I updated nixos/modules/services/x11/window-managers/default.nix to include windowmaker. 1 - https://github.com/NixOS/nixpkgs/pull/4066#issuecomment-72017611	2015-02-03 21:24:12 -02:00
Lukas Lihotzki	c848d05de9	gitlab: Fix typo	2015-02-03 22:08:10 +01:00
lethalman	49b67bb9cb	Merge pull request #6078 from boothead/sabnzbd ... sabnzbd Change service to systemd	2015-02-03 13:32:59 +01:00
Peter Simons	b7ecd5e729	Merge pull request #5025 from abbradar/xmonad-wrapper ... nixos/xmonad: make a wrapper	2015-02-03 11:52:09 +01:00
Shea Levy	c45372f038	Merge commit 'cfb29ab882323d379aba20a95020c7c24f883eae' ... Partial staging merge, including cc-wrapper fixes Conflicts: pkgs/applications/audio/spotify/default.nix pkgs/build-support/cc-wrapper/default.nix pkgs/development/compilers/cryptol/1.8.x.nix	2015-02-02 21:14:28 -05:00
Nikolay Amiantov	b7bb524f04	nixos/xmonad: move to haskell-ng and make a wrapper	2015-02-03 01:05:23 +03:00
Nikolay Amiantov	51681449da	uwsgi: add nixos module	2015-02-02 22:23:42 +03:00
Nikolay Amiantov	9a04482af7	parsoid: add service	2015-02-02 22:21:45 +03:00
Thomas Tuegel	0fee7a2b21	fontconfig: stringify dpi correctly	2015-02-01 16:18:48 -06:00
Bjørn Forsman	ee52a61e3a	nixos/tftpd: add option types and fixup descriptions ... The first description is a (incorrect) copy/paste from the 'vsftpd' module, and the second option lacks a 'dot' at the end.	2015-02-01 15:57:28 +01:00
lethalman	9576ff49d8	Merge pull request #5737 from matthiasbeyer/add-gitolite_admin_pubkey_oneline_note ... Add note that admin-pub-key for gitolite has to be written in one line	2015-01-30 11:24:06 +01:00
lethalman	41cca7d2d6	Merge pull request #6045 from ragnard/apache-kafka ... apache-kafka: New package and service	2015-01-30 10:50:14 +01:00
Luca Bruno	a239775488	Merge PR #5772, boot.loader.timeout	2015-01-30 10:39:50 +01:00
Bob van der Linden	a3d5f4f3ef	nixos: gummiboot: change default to 1000 if boot.loader.timeout is null ... When gummiboot.timeout == null, the menu will still be skipped. When gummiboot.timeout == 0, the menu will also be skipped. The only way to show the menu 'indefinitely' is to show it a long time.	2015-01-30 10:36:21 +01:00
Bob van der Linden	f93ba51469	nixos: loader: added generic config.boot.loader.timeout option ... timeout options of grub and gummiboot will inherit the value of this option by default.	2015-01-30 09:53:44 +01:00
Shea Levy	52d4b9d982	Merge branch 'tlsdate' of git://github.com/4z3/nixpkgs	2015-01-30 01:07:59 -05:00
Ragnar Dahlén	17bd96ea25	apache-kafka: New service for Apache Kafka	2015-01-29 11:10:22 +00:00
lethalman	a15edc22e3	Merge pull request #5615 from nckx/freefall ... Add freefall: hard drive protection on HP/Dell laptops	2015-01-28 18:52:46 +01:00
Eelco Dolstra	378006f0f2	Restrict the length of container names	2015-01-28 16:13:00 +01:00
Jaka Hudoklin	c0eff1de61	Merge pull request #5939 from offlinehacker/nixos/containers/containers_in_containers ... nixos/containers: make containers in containers possible	2015-01-28 16:07:17 +01:00
Jaka Hudoklin	2af3ff52c2	nixos/containers: make containers in containers possible	2015-01-28 16:06:44 +01:00
Tobias Geerinckx-Rice	ff5eae075a	Add freefall NixOS service module	2015-01-28 15:59:21 +01:00
Eelco Dolstra	b61d4ac6a5	ntpd: Fork into the background ... With -n, ntpd will write log messages to both syslog and stderr, which is ugly.	2015-01-28 15:34:42 +01:00
Thomas Strobel	3767370866	Add target parameter to grub installation chain	2015-01-27 19:46:37 +01:00
Eelco Dolstra	53710c752a	nixos-rebuild: Update fallback code to update Nix	2015-01-27 18:58:20 +01:00
Eelco Dolstra	6f8fad2253	Remove executable bits from non-executable files	2015-01-27 18:54:38 +01:00
Thomas Tuegel	63ec1a9677	add stable attrs for plasma5, kf5, and kdeApps	2015-01-26 21:01:07 -06:00
Thomas Tuegel	a55543711e	kde5: simplify package list	2015-01-26 21:01:06 -06:00
Thomas Tuegel	3a97ea592f	kdm: install default backgrounds	2015-01-26 21:01:06 -06:00
Thomas Tuegel	726b80bc87	startkde: don't split script between NixOS module and package	2015-01-26 21:01:06 -06:00
Thomas Tuegel	e7508b831f	kde5: warn if enabled with kde4	2015-01-26 21:01:05 -06:00
Thomas Tuegel	16b54d19d3	kde5: rename plasma5 desktop module	2015-01-26 21:01:05 -06:00
Thomas Tuegel	5c52354ee8	add NixOS module for Plasma desktop	2015-01-26 21:00:38 -06:00
Thomas Tuegel	849647a3eb	environment: set paths for Qt plugins and QML	2015-01-26 20:59:49 -06:00
Domen Kožar	9df1bdefef	Merge pull request #5982 from robberer/pkgs/openldap ... openldap: add dataDir, use cfg.user and cfg.group to run slapd	2015-01-26 10:33:57 +01:00
Domen Kožar	c1ce67561d	openldap: correct directory hint	2015-01-26 10:03:25 +01:00
Longrin Wischnewski	a4af32eec3	openldap: add dataDir, use cfg.user and cfg.group to run slapd	2015-01-26 09:35:56 +01:00
aszlig	d110f5adf7	nixos/gitlab: Fix evaluation. ... Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-01-26 08:20:14 +01:00
Jaka Hudoklin	6e7d708bcc	nixos/rabbitmq: fix module	2015-01-26 02:09:04 +01:00
Charles Strahan	6eaa419920	gitlab: fix evaluation	2015-01-25 16:28:18 -05:00
Domen Kožar	2daba83828	openldap: add example config	2015-01-25 21:15:29 +01:00
j-keck	611a21a919	nixos-container: add missing 'nixos-container update' in usage ... * in nixos-container.pl the mode 'update' is missing in the usage	2015-01-24 20:37:55 +01:00
Edward Tjörnhammar	6bbec634a7	Merge pull request #5850 from edwtjo/kodi-plugins ... XBMC to Kodi migrations	2015-01-24 14:17:14 +01:00
Domen Kožar	cb7cd012df	Merge pull request #5593 from abbradar/modprobe-fix ... modprobe: wrap all of kmod	2015-01-24 07:11:16 +01:00
Domen Kožar	fde45d217e	Merge pull request #5531 from abbradar/tlp ... tlp: add package	2015-01-24 07:10:48 +01:00
Nikolay Amiantov	b7b3a0972d	nixos/tlp: add service	2015-01-24 02:56:21 +03:00
Eelco Dolstra	11a0344e13	Merge pull request #5918 from robberer/openntpd ... openntpd: add extraConfig and extraOptions	2015-01-23 16:43:15 +01:00
Longrin Wischnewski	4fa5d1f626	openntpd: add extraConfig and extraOptions	2015-01-23 16:15:20 +01:00
aszlig	127c928c23	nixos/rename: Fix merging multiple destinations. ... The renaming of options define the original value for the new attribute path. This works well if there is only *one* target, but if there are more, we end up recursing into the attribute set of the option definition itself. We now check for that within the parent recursion node (we can't check that from the subnode, because we lack that information about whether it's defined multiple times) and if the subnode consist entirely of a list of definitions, we use mkMerge on it. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2015-01-22 14:08:28 +01:00
wmertens	8780caadd4	Merge pull request #5499 from wizeman/u/zfs-dont-fsck ... nixos: When generating /etc/fstab, ZFS and NFS filesystems shouldn't be checked	2015-01-22 12:09:22 +01:00
Charles Strahan	8d49e87dec	Merge pull request #4677 from cstrahan/pleasant-ruby ... Pleasant ruby	2015-01-21 23:27:38 -05:00
Matej Cotman	3ed3977166	owncloud: make .htaccess available	2015-01-21 22:49:22 +01:00
Matej Cotman	7494bd389e	apache-httpd: add owncloud	2015-01-21 22:49:22 +01:00
Matej Cotman	6630e3e4fe	apache-httpd: add restartSec option	2015-01-21 22:49:22 +01:00
Ricardo M. Correia	1b66077205	nixos: Don't do filesystem checks on ZFS or NFS filesystems	2015-01-21 17:39:53 +01:00
tv	3fdd925063	nixos: Add tlsdated service	2015-01-21 05:09:47 +01:00
Charles Strahan	dfc225d143	Merge branch 'master' of github.com:nixos/nixpkgs into pleasant-ruby ... Conflicts: pkgs/applications/version-management/git-and-tools/default.nix pkgs/applications/version-management/git-and-tools/hub/default.nix pkgs/tools/audio/mpdcron/default.nix	2015-01-20 20:21:03 -05:00
Ricardo M. Correia	a11dc2f0a3	grsecurity: Add denyUSB option to grsec NixOS module ... The option had been added to the grsec build-support code, but it hadn't been added to the grsec module. After this commit, grsec module users will be able to change the default value. It also serves to document that this option exists and that NixOS will disable it by default.	2015-01-20 19:18:06 +01:00
Joachim Fasting	7023e03d77	firewall service: fix pingLimit example value ... The example uses single dashes, whereas iptables requires double dashes.	2015-01-20 08:47:11 +01:00
Edward Tjörnhammar	5b1c9417a8	Add Kodi desktop-manager	2015-01-19 22:14:36 +01:00
Peter Simons	ec6b82a0c2	Merge branch 'master' into staging.	2015-01-19 18:41:17 +01:00
lethalman	d957d9e6bc	Merge pull request #5517 from paraseba/bumblebee ... Bumblebee config to enable multiple monitors	2015-01-19 15:00:11 +01:00
wmertens	d3383e4879	Merge pull request #4394 from wmertens/patch-6 ... setup-etc.pl: Fail when symlink/rename fails	2015-01-19 12:39:41 +01:00
lethalman	9cd9264ef3	Merge pull request #5849 from robberer/systemd/restartassert ... systemd: extend checkUnitConfig with on-abnormal	2015-01-19 11:48:48 +01:00
Longrin Wischnewski	4b0100774a	systemd: extend checkUnitConfig with on-abnormal	2015-01-19 11:41:18 +01:00
Andrey Arapov	04be7262a6	nixos/dovecot: added configFile option and default Restart on-failure, PR #5845 ... Absolute path is required when one has such postfix configuration where he/she needs to specify the actual (real) path to active dovecot config. Without this commit applied, the dovecot is running in such way: /nix/store/hashAAA-dovecot-ver/sbin/dovecot -F -c /nix/store/hashBBB-dovecot2.conf and postfix can't be aware of the value of "hashBBB" via services.postfix.extraConfig = '' ... ''; (it can only be aware of "hashAAA" with ${pkgs.dovecot} parameter) Also enable Restart on-failure. Edit: set RestartSec to 1s	2015-01-19 11:05:56 +01:00
Andrey Arapov	b1b9efdbe1	nginx service improvements ... Adding Restart, RestartSec, StartLimitInterval to ensure that the service is started in case if it can't assign (bind) the address as often it takes longer for the network (e.g. dhcpcd) to get the IP assigned.	2015-01-19 10:46:45 +01:00
William A. Kennington III	130f66b683	nixos/sync-server: Respect the enable option	2015-01-18 14:21:40 -08:00
Domen Kožar	3b174a4024	Merge pull request #5301 from nbp/syncserver ... Add Firefox Sync service	2015-01-18 17:47:51 +01:00
Nicolas B. Pierron	8196727fad	Improve the documentation of the syncserver module.	2015-01-18 12:21:23 +01:00
Nicolas B. Pierron	0d13ea0131	Change default syncserver listen.port to a safer one.	2015-01-18 12:20:44 +01:00
Domen Kožar	b92a62165d	Merge pull request #5726 from spwhitt/zsh-command-not-found ... command-not-found: Add ZSH Support	2015-01-17 18:15:35 +01:00
Damien Cassou	a7024cb4b4	Create a nixos module for cups-browsed	2015-01-16 14:10:57 +01:00
Eelco Dolstra	efa8fc2b0a	Paranoia	2015-01-15 18:37:55 +01:00
Eelco Dolstra	b9c4569b6b	nixos-install: Create /root with 700 permission	2015-01-15 18:37:55 +01:00
Eelco Dolstra	3ca275d7ba	NixOS containers: Create /root with 700 permission ... Systemd-nspawn creates /root with 755 permission if it doesn't exist, which is bad. So we have to create it ourselves before calling systemd-nspawn.	2015-01-15 17:51:43 +01:00
Eelco Dolstra	24ce7ff3ea	test-instrumentation.nix: Prevent calling a pager	2015-01-15 14:39:29 +01:00
Eric Seidel	88eae46455	rename occurrences of gcc.gcc to gcc.cc	2015-01-14 20:47:49 -08:00
Edward Tjörnhammar	837cfbb9ea	nixos: adding nylon service with uid,gid	2015-01-14 22:08:47 +01:00
William A. Kennington III	8e5ef7da54	nixos/network-interfaces: Fix rstp support	2015-01-14 10:34:28 -08:00
Luca Bruno	804a958663	pam: add pam_wheel	2015-01-14 18:32:08 +01:00
Luca Bruno	2beb43174f	nixos-rebuild: use reload-or-restart for dbus. Closes #5767 ... Now that dbus reload has been moved before restarting units, the reload may fail if dbus has been stopped before. The reload-or-restart will reload dbus if it's active, otherwise start it.	2015-01-14 16:08:47 +01:00
Rob Vermaas	df7923fa82	Merge pull request #5515 from oconnorr/master ... GCE updates to ntp server and to fetch all ssh keys	2015-01-14 13:19:38 +01:00
Matej Cotman	4e6efec4b4	enlightenment: fix media preview	2015-01-13 14:56:35 +01:00
Ryan Mulligan	2e3fa5b849	different wording for adminPubkey description ... Maybe this wording is a slight improvement?	2015-01-12 21:49:33 -08:00
Matthias Beyer	f64d795950	Add note that administrative public key for gitolite has to be written in one line	2015-01-12 23:10:27 +01:00
mokasin	dd6dfde575	Add auto-start option to containers.	2015-01-12 18:26:22 +01:00
Spencer Whitt	6cba6dc61b	command-not-found: Add ZSH Support	2015-01-12 03:45:48 -05:00
Vladimír Čunát	72d2d59cd4	/etc/ssh/ssh_known_hosts: refactor and fix #5612 ... Generating the file was refactored to be completely in nix. Functionally it should create the same content as before, only adding the newlines. CC recent updaters: @aszlig, @rickynils.	2015-01-11 22:14:25 +01:00
Peter Simons	43bae26b33	Merge pull request #5627 from oxij/update-postfix ... postfix: make 2.11 the default, nixos: update postfix config for 2.11	2015-01-11 11:28:31 +01:00
Arseniy Seroka	4f596fb93f	Revert "zsh: profile-relative functions path" ... This reverts commit 766207ca1d. We need to solve the problem with `environment.profileRelativeEnvVars`. The best workaround is to make profileRelativeEnvVars prepend paths.	2015-01-10 22:11:13 +03:00
Joachim Fasting	97bac259d0	dnscrypt-proxy service: update AppArmor profile ... This patch fixes the AppArmor profile path clause and adds (currently ignored) network rules. The AppArmor profile used to be defined for the path sbin/dnscrypt-proxy, but the real path is bin/dnscrypt-proxy (due to sbin now being a symlink to bin), which permitted the service to run unconfined. Adding the network rules has no effect other than improving correctness, as the version of AppArmor in the NixOS kernel fails to enforce network rules.	2015-01-09 15:08:07 +01:00
Shea Levy	cca8bae86e	Merge branch 'rngd-fix' of git://github.com/abbradar/nixpkgs	2015-01-08 09:36:29 -05:00
Matthias Beyer	5e6068d913	Put shell aliases in interactiveShellInit	2015-01-08 15:18:26 +01:00
Matthias Beyer	c5e855e060	Add basic nixos module for fish shell	2015-01-08 15:18:26 +01:00
lethalman	908c47b281	Merge pull request #5550 from abbradar/fprintd ... add fprintd support	2015-01-08 14:58:22 +01:00
William A. Kennington III	dd7efcbf36	java: More default cleanups	2015-01-07 14:55:41 -08:00
William A. Kennington III	c82410eeda	java: Normalize to the default jre / jdk	2015-01-07 14:55:41 -08:00
William A. Kennington III	9a7766e054	nixos/network-interfaces: Add mstpd support for bridges	2015-01-07 14:49:24 -08:00
Peter Simons	24f5b2a1a0	Merge pull request #5619 from oxij/various-changes-2 ... Various (hopefully) small changes	2015-01-07 16:59:10 +01:00
Jan Malakhovski	265c1c1472	postfix: make 2.11 the default, nixos: update postfix config for 2.11 ... postfix 2.11 is much more humane with respect to disk writes since it uses sockets (which do not change inodes on accesses) instead of fifos (which do).	2015-01-07 15:43:32 +00:00
Jan Malakhovski	b6646f7ba7	nixos: make zsh use fcntl for locking history files by default ... Without this zsh creates and then unlinks .lock files at each interactive input line, which is inhumane with respect to disk.	2015-01-07 15:43:01 +00:00
j-keck	3ced0d94ac	doc: use postgresql94 ... update postgresql module doc to use postgresql94 (was postgresql93)	2015-01-07 13:21:18 +01:00
William A. Kennington III	20d2092ff8	nixos/base: Add efi management utilities	2015-01-07 01:52:47 -08:00
Russell O'Connor	d1a58ef7c6	google-compute-image.nix: Try to download all SSH host keys from metadata server.	2015-01-06 12:06:54 -05:00
Nikolay Amiantov	dbc0395b2b	nixos/rngd: some fixes	2015-01-06 17:27:07 +03:00
Nikolay Amiantov	2aaeacc579	nixos/modprobe: wrap all of kmod	2015-01-06 16:39:00 +03:00
Russell O'Connor	3251948029	Generate SSH host public key from the private key.	2015-01-05 15:20:55 -05:00
Russell O'Connor	d1cbbff1e3	Call wget directly in fetch-ssh-keys service.	2015-01-05 15:20:55 -05:00
Russell O'Connor	6382e16014	google-compute-image.nix: unconditionally clean up /root/key.pub /root/authorized-keys-metadata	2015-01-05 15:18:02 -05:00
Russell O'Connor	b19ab1f046	google-comute-image.nix: set umask 077 when downloading private keys from the metadata server.	2015-01-05 15:01:49 -05:00
Russell O'Connor	e548a4330d	google-compute-image.nix: use internal google NTP server.	2015-01-05 12:45:23 -05:00
Peter Simons	ea94a6d653	nixos/modules/services/misc/nix-daemon.nix: document meaning of '0' for the buildCores attribute	2015-01-05 15:38:08 +01:00
Rob Vermaas	c5caa853ec	dd-agent: set SSL_CERT_FILE for dogstatsd. ... (cherry picked from commit c67204dec27a86e2235afb2aebf48bc53dd804d0)	2015-01-05 13:15:22 +01:00
Eelco Dolstra	ae7d79cd61	Fix some bad gids ... Issue #3727.	2015-01-05 11:58:17 +01:00
Rob Vermaas	ea9530b5c7	Fix GCE image build. ... (cherry picked from commit 98af87cd4abb0cd77e8a51cfdf6913a92d088784)	2015-01-05 09:35:35 +01:00
William A. Kennington III	8ec82fcb18	nixos/samba: Allow package version setting	2015-01-03 21:45:16 -08:00
Kirill Elagin	766207ca1d	zsh: profile-relative functions path ... This is needed mostly for autocompletion.	2015-01-04 02:02:59 +03:00
Nikolay Amiantov	a164a0b4c5	nixos/fprintd: add service and pam support	2015-01-03 19:50:40 +03:00
Domen Kožar	3d7ff07258	fix manual	2015-01-03 16:32:07 +01:00
Domen Kožar	1f523bb23d	clarify things about hashed passwords and mutableUsers	2015-01-02 17:32:56 +01:00
William A. Kennington III	8627110091	icedtea: Make major version nonspecific attrs	2015-01-02 00:24:49 -08:00
Nicolas B. Pierron	816229593a	Merge pull request #5441 from nbp/mkAlias ... modules: Extract mkAliasDefinition from the rename.nix NixOS module.	2015-01-01 06:59:42 -08:00
Sebastián Bernardo Galkin	24abe2b2b3	Bumblebee config to enable multiple monitors ... Added configurations to `bumblebee` package to easy multiple monitors on Optimus machines. The behaviour of the default `bumblebee` package hasn't change, so this change is backwards compatible. Users who want to connect a monitor to their discrete card should use the package `bumblebee_display` instead. Also added new configuration option to nixos bumblebee module: ``` hardware.bumblebee.connectDisplay = true ``` will enable the new configuration, but the default is still false.	2014-12-30 19:17:42 -08:00
Charles Strahan	94dd4b9721	ruby: WIP	2014-12-30 21:05:00 -05:00
Eelco Dolstra	e62cb5585d	Merge pull request #5507 from DamienCassou/systemd-user-timers ... Add systemd.user.timers	2014-12-30 15:40:43 +01:00
Damien Cassou	dcc93abe74	Add systemd.user.timers	2014-12-30 05:46:36 +01:00
Tobias Geerinckx-Rice	c64257b8e5	Fix user-facing typos (mainly in descriptions)	2014-12-30 03:31:03 +01:00
Jaka Hudoklin	1b19b7a3bf	Merge pull request #5491 from offlinehacker/cadvisor ... Add cadvisor package and nixos module	2014-12-29 17:58:43 +01:00
Shea Levy	9245516b46	gummiboot-builder.py: run nix with no build-users-group ... During install, the bootloader script gets run inside a chroot after the /etc/group bind-mount is unmounted. Since we're not doing any building, this should be safe, but really nix should just not care if the group does not exist when no build is needed. Fixes #5494	2014-12-29 07:09:10 -05:00
Ricardo M. Correia	1d44322d53	grsecurity: Update stable and test patches ... stable: 3.0-3.14.27-201412211908 -> 3.0-3.14.27-201412280859 test: 3.0-3.17.7-201412211910 -> 3.0-3.18.1-201412281149	2014-12-29 03:00:47 +01:00
Matej Cotman	9eb24c72ff	systemd: fix permissions on /var/log/journal	2014-12-28 22:37:50 +01:00
Charles Strahan	145733c479	Merge branch 'master' of github.com:nixos/nixpkgs into pleasant-ruby ... Conflicts: pkgs/applications/version-management/redmine/default.nix pkgs/development/interpreters/ruby/gem.nix pkgs/development/interpreters/ruby/generated.nix pkgs/development/interpreters/ruby/patches.nix pkgs/development/tools/vagrant/default.nix pkgs/servers/consul/default.nix	2014-12-28 14:29:52 -05:00
Domen Kožar	43af22b2de	Merge pull request #5487 from luke-clifton/lc-btsync-group ... btsync groups	2014-12-28 20:25:13 +01:00
Charles Strahan	4ed847d81d	redmine: fix use of bundler	2014-12-28 14:22:11 -05:00
Jaka Hudoklin	b6198f08e3	nixos: add cadvisor service	2014-12-28 20:21:41 +01:00
Eelco Dolstra	ea9d391bb5	Fix ntpd ... Since the 4.2.8 upgrade, ntpd is broken on NixOS: Dec 28 19:06:54 hagbard ntpd[27723]: giving up resolving host 1.nixos.pool.ntp.org: Servname not supported for ai_socktype (-8) This appears to be because DNS resolution doesn't work in chroots anymore (due to /etc being missing). So disable chroots for now. It's probably better to use systemd's containment facilities anyway.	2014-12-28 19:38:45 +01:00
Alexander Kjeldaas	da1f8578b0	Eradicate gzip -9 without -n	2014-12-28 13:45:27 +01:00
Luke Clifton	3c8914f94e	Changed group id to match user id	2014-12-28 19:47:12 +08:00
Luke Clifton	b625c3dd4b	Added group id to ids.nix	2014-12-28 18:10:02 +08:00
Vladimír Čunát	61d9f06760	fix a typo from 2627198b0c	2014-12-28 10:44:50 +01:00
Luke Clifton	0c477eb38f	Documentation update	2014-12-28 17:26:59 +08:00
Luke Clifton	61ff1b2b0a	Moved UMask to correct location	2014-12-28 16:44:27 +08:00
Luke Clifton	5fdd6f6a66	Change umask	2014-12-28 16:39:56 +08:00
William A. Kennington III	2627198b0c	nixos/firewall: Add ipset utility	2014-12-28 00:04:49 -08:00
Luke Clifton	5866a9df03	added group	2014-12-28 13:23:10 +08:00
Luke Clifton	fabcc2cf7b	Added btsync group to btsync user	2014-12-28 13:17:37 +08:00
Vladimír Čunát	3c050d00a5	upower: use newer version by default ... Tested on KDE4, fixed with xfce, and was used with GNOME before. CC @lethalman. I did not test e19, as it won't build, probably due to #5392 @shlevy. CC maintainer @matejc. Also removed a forgotten unused patch.	2014-12-27 22:46:46 +01:00
Eduard Bachmakov	86cd055477	Add option to display git revision to nixos-version ... Example use case: git checkout `nixos-version --hash`	2014-12-27 21:43:04 +01:00
Domen Kožar	ec5fcfa82c	network-manager: specify full path to sytemctl binary ... (cherry picked from commit af8f76c2568ae9d842716d98673b3639292a920e) Signed-off-by: Domen Kožar <domen@dev.si>	2014-12-27 11:53:07 +01:00
Bjørn Forsman	0a8623d6a9	nixos/munin: add /var/setuid-wrappers to PATH ... /var/setuid-wrappers is an extension of the system profile, so it belongs in PATH for the munin service.	2014-12-25 15:43:51 +01:00
aszlig	c7e3ddf7ff	nixos/synergy: Fix use of the "optional" function. ... Commit 939edb1 reintroduced autoStart, but instead of creating a list of units for the wantedBy list with optional it became a list of lists of units. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-24 12:35:57 +01:00
Domen Kožar	a4961f09f6	Merge pull request #5390 from abbradar/nixos-isntall ... nixos-install: fix -I flag	2014-12-23 18:15:14 +01:00
Nicolas B. Pierron	d7f29acd48	modules: Extract mkAliasDefinition from the rename.nix NixOS module.	2014-12-22 22:38:38 +01:00
Igor Pashev	2b91b9b594	Strongswan: updown script uses ip and iptables utilities	2014-12-22 20:20:52 +00:00
Luca Bruno	79209e30b5	nixos: Add -verbose to xserverArgs example	2014-12-22 21:01:12 +01:00
lethalman	50789593df	Merge pull request #5346 from svenkeidel/disable-xserver-verbose-logging ... disable verbose logging for XServer, fixes #4333	2014-12-22 20:59:06 +01:00
Benno Fünfstück	914b76bad4	services.mpd: use systemd's user option ... For some reason, mpd fails to open the sound card if using mpd's user option. Starting mpd directly as the mpd user works for me.	2014-12-22 11:22:14 +00:00
lethalman	d0fdad5f36	Merge pull request #5419 from ehmry/tox-bootstrapd ... tox-bootstrapd	2014-12-22 11:16:44 +01:00
Nicolas B. Pierron	6a7971bee7	Merge pull request #5416 from nbp/nixos-option-include ... nixos-option: Support -I option	2014-12-21 15:11:11 -08:00
Nicolas B. Pierron	974edc5056	nixos-option: Use <nixpkgs/nixos> instead of <nixpkgs>.	2014-12-21 01:33:06 +01:00
Emery Hemingway	01910e84f9	nixos: tox-bootstrapd service	2014-12-20 18:20:27 -05:00
Nicolas B. Pierron	82a5f54c0d	nixos-option: Support -I option.	2014-12-20 20:30:19 +01:00
Nicolas B. Pierron	c9682a22ff	nixos-option: Produce nicer error messages in case of typos.	2014-12-20 19:52:28 +01:00
Nicolas B. Pierron	640428d3c5	nixos-option: Handle 'attrsOf submodule' options.	2014-12-20 19:16:43 +01:00
Nicolas B. Pierron	cd2f7ce9f9	nixos-option: Improve error messages to avoid reporting internal location and traces.	2014-12-19 23:00:52 +01:00
Nicolas B. Pierron	b2abfe54b3	nixos-option: Print derivation outPath within attribute sets and list, when the strict mode is used.	2014-12-19 23:00:00 +01:00
Nicolas B. Pierron	9db6a84f0b	nixos-option: Print the outPath of derivation for option values.	2014-12-19 22:33:24 +01:00
Eelco Dolstra	80a85541d5	Typo	2014-12-19 14:38:33 +01:00
Eelco Dolstra	5ad3a02938	Shut up a warning from udev ... Issue #5260.	2014-12-19 14:37:50 +01:00
Mathijs Kwik	6e728a42ec	virtualisation.qemuNetworkingOptions -> virtualisation.qemu.networkingOptions	2014-12-19 11:59:00 +01:00
Mathijs Kwik	6cdacdd4a2	nixos/qemu-vm: make networking options configurable	2014-12-19 08:52:06 +01:00
wmertens	a8c726da56	Merge pull request #5378 from benley/mesos ... mesos-slave: add config option for slave attributes	2014-12-19 08:10:07 +01:00
Evgeny Egorochkin	87610ca0fd	kde4: enable akonadi by default	2014-12-19 08:59:22 +02:00
Evgeny Egorochkin	939edb1873	synergy: restore autostart option. ... closes #5334	2014-12-19 08:25:23 +02:00
Evgeny Egorochkin	9225af50d0	resurrect torsocks-faster	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	eb0874d5ff	rename torify to tsocks, to avoid name clashes and make it clear which wrapper library is used	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	633cc58d5c	torsocks: enable by default if tor client functionality is enabled	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	824b3b1a99	tor: restore the Privoxy setup, but configure the system Privoxy instead of running a separate instance.	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	1fe5314dc5	tor: restore strong circuit isolation	2014-12-19 08:05:41 +02:00
Evgeny Egorochkin	da118cf60b	Revert "nixos: Remove torify module" ... tsocks is still useful because it's less strict This reverts commit 1b26faeb69.	2014-12-19 08:05:41 +02:00
Benjamin Staffin	c47cefd05e	nixos/mesos: Parameterize mesos slave attributes ... Added attributes to nixos/tests/mesos.nix to verify that mesos-slave attributes work. If the generated attributes are invalid, the daemon should fail to start. Change-Id: I5511245add30aba658b1af22cd7355b0bbf5d15c	2014-12-18 14:47:24 -08:00
wmertens	5f7530a1d7	zfs hostId: Instructions to derive from machine-id	2014-12-18 22:52:29 +01:00
Nikolay Amiantov	22eb0e22d3	nixos-install: fix -I flag	2014-12-18 22:43:40 +03:00
aszlig	f7384b8c75	nixos/virtualbox: Revert disable hardening. ... This reverts commit 5d67b17901. The issues have been resolved by ac603e208c. Tested this with hostonlyifs and USB support with extension pack. Conflicts: nixos/modules/programs/virtualbox-host.nix Signed-off-by: aszlig <aszlig@redmoonstudios.org> Tested-by: Mateusz Kowalczyk <fuuzetsu@fuuzetsu.co.uk>	2014-12-18 18:18:32 +01:00
Eelco Dolstra	63c14e259d	ssh-agent: Don't have a timeout by default ... IMHO, having a short timeout (1h) defeats the point of using ssh-agent, which is not to have to retype passphrases all the time. Of course, users who want timeouts can set programs.ssh.agentTimeout. This restores the 14.04 behaviour.	2014-12-18 15:34:29 +01:00
aszlig	ac603e208c	virtualbox: Fix runtime paths in hardening mode. ... Because we have to rely on setuid wrappers on NixOS, we can't easily hardcode the executable paths and set it 4755. So for all calls, we need to change the runtime path executable directory to /var/setuid-wrappers/ and for verification we need to retain the executable directory. Also note, that usually VBoxNetAdpCtl, VBoxNetDHCP, VBoxNetNAT, VBoxSDL and VBoxVolInfo don't reside in directories that are commonly in PATH, but in /usr/lib/virtualbox in most mainstream distros. But because the names of these executables are distinctive enough to not cause collisions with other setuid programs, I'll leave it like that and not patch up setuid-wrappers. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-18 14:06:13 +01:00
Domen Kožar	432490e319	fix users.mutableUsers = false; install in iso ... (cherry picked from commit 9bc8bcbbdcc7cac98686877f09315bb749627732) Signed-off-by: Domen Kožar <domen@dev.si>	2014-12-18 12:18:49 +01:00
Eelco Dolstra	89697b0fc1	Improve /etc/sudoers message	2014-12-18 11:51:42 +01:00
William A. Kennington III	1036c66d43	nixos/network-interfaces: Add ipv6 gateway support	2014-12-17 17:56:29 -08:00
Eelco Dolstra	c812e45292	switch-to-configuration: Ignore slice units	2014-12-18 01:47:36 +01:00
Eelco Dolstra	bde9ae18cf	Revert "enable bash autocomplete by default" ... This reverts commit ee8e15fe76. See discussion at ee8e15fe76.	2014-12-18 00:36:46 +01:00
Eelco Dolstra	d34c600414	Remove udev from /run/opengl-drivers ... /run/opengl-drivers should contain only libGL-related libraries, not stuff like udev. Injecting anything into LD_LIBRARY_PATH is dangerous because it can break applications that expect a different version of the library. Caused by eef9a8ac2a. Fixes #5371.	2014-12-17 17:00:10 +01:00
Rob Vermaas	b8a4095003	It is called Dingo! yes, Dingo!	2014-12-17 16:42:52 +01:00
Luca Bruno	614162ee6c	Some lua and awesome improvements ... - Move lgi to luaPackages - Use luaPackages in awesome and passthru lua - Allow to pass lua modules to the awesome WM so that those can be used in the configuration	2014-12-17 15:08:21 +01:00
wmertens	0d5bd2a0f3	Merge pull request #5254 from ehmry/network-filesystems ... nixos: configure samba and rsync shares with sets	2014-12-17 07:07:28 +01:00
wmertens	2fb69f5277	Merge pull request #5196 from madjar/cloud-init ... cloud-init: add expression and service	2014-12-17 06:58:54 +01:00
William A. Kennington III	681ae2fa7f	nixos/consul: Don't timeout if start job has many retries	2014-12-16 15:42:08 -08:00
Eelco Dolstra	be0e73b938	cups: Build with SERVERROOT set to /etc/cups	2014-12-16 18:23:41 +01:00
Eelco Dolstra	dc6c8b9714	cupsd.nix: Clean up environment.etc	2014-12-16 18:23:41 +01:00
tv@shackspace.de	b71f3c4315	nixos/cupsd: use cups-files.conf	2014-12-16 18:23:40 +01:00
aszlig	e36bec661c	nixos/virtualbox: Fix warning on enableHardening. ... The warning was displayed whenever services.virtualboxHost.enable was true, but if people were to enable hardening, they'd still get that annoying message. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-16 11:24:55 +01:00
aszlig	d85fabd68c	nixos/virtualbox/hostonlyif: Fix writing to /root. ... Creates unnecessary cruft in the root users home directory, which we really don't need. Except the log, but therefore we now cat the log to stderr and the private temporary directory is cleaned up afterwards. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-15 19:16:43 +01:00
Sven Keidel	7199db8aab	disable verbose logging for XServer, fixes #4333 ... The current options for the XServer produce a huge amount of log messages. The server produces around 70-80 messages per minute. The most messages look like this: display-manager-start[1846]: GetModeLine - scrn: 0 clock: 75200 display-manager-start[1846]: GetModeLine - hdsp: 1366 hbeg: 1414 hend: 1478 httl: 1582 display-manager-start[1846]: vdsp: 768 vbeg: 772 vend: 779 vttl: 792 flags: 9 Since theses messages aren't very useful, I propose to remove the `-logverbose` and `-verbose` options from the XServer arguments.	2014-12-15 18:59:49 +01:00
aszlig	5d67b17901	nixos/virtualbox: Disable hardening for now. ... This should display a big fat warning that people can hardly miss until we have fixed the issues with the host-only-interfaces that persist when hardining is enabled. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-15 18:53:41 +01:00
aszlig	245baeb2f6	nixos/virtualbox: Note about "vboxusers" group. ... Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-15 17:52:19 +01:00
aszlig	e03e0ff42a	nixos/virtualbox: Allow to disable hardening. ... Hardening mode in VirtualBox is quite restrictive and on some systems it could make sense to disable hardening mode, especially while we still have issues with hostonly networking and other issues[TM] we don't know or haven't tested yet. Signed-off-by: aszlig <aszlig@redmoonstudios.org>	2014-12-15 17:52:18 +01:00
Eelco Dolstra	bed675f400	nixos-generate-config: Don't emit networking.hostId ... Systemd already generates /etc/machine-id. So there is no need to generate another unique host identifer.	2014-12-15 17:03:28 +01:00
Eelco Dolstra	0d3a229baa	nixos-generate-config: Add time zone	2014-12-15 16:55:03 +01:00
Peter Simons	0f2b026bfe	nixos/modules/system/boot/luksroot.nix: hyperlinkify an URL in the documentation	2014-12-15 16:31:18 +01:00
Peter Simons	137ffc9929	Switch default timezone in NixOS from "CET" to "UTC". ... Suggested in https://github.com/NixOS/nixpkgs/pull/5332.	2014-12-15 16:31:18 +01:00
Eelco Dolstra	88412c865d	Fix ANSI escape in warning messages ... Seems to have been broken by accident in 7d1ddae58e.	2014-12-15 16:19:35 +01:00
Thomas Tuegel	32e41c2280	nixos: fix config.fonts.fontconfig.ultimate.allowBitmaps ... The option was incorrectly negated, so that 'allowBitmaps = true' actually disabled bitmap fonts.	2014-12-15 09:16:40 -06:00
Rob Vermaas	b48e41b8d7	cron: make into systemd.service and make it depend on /etc/localtime ... so that changes in timezone will trigger a restart of cron service.	2014-12-15 14:50:12 +01:00
Eelco Dolstra	cfe26e4438	Fix using Apache httpd 2.2	2014-12-15 13:13:17 +01:00
wmertens	d3d38c38c5	Merge pull request #5326 from prikhi/refactor-psd-config ... profile-sync-daemon: refactor nixos module	2014-12-14 19:38:31 +01:00
Nicolas B. Pierron	42c3c205c4	Merge remote-tracking branch 'origin/master' into syncserver	2014-12-14 14:17:56 +01:00
Sebastián Bernardo Galkin	aba0d8a73d	Fix networkmanager resumeCommands ... Small typo prevented the post resume script to restart network manager	2014-12-14 03:46:54 -08:00