Eelco Dolstra
5e5df88457
modules/profiles/minimal.nix: Disable "man"
2016-09-05 14:53:27 +02:00
Eelco Dolstra
ba70ce28ae
no-x-libs.nix: Ensure that dbus doesn't use X11
...
It appears that packageOverrides no longer overrides aliases, so
aliases like
dbus_tools = self.dbus.out;
dbus_daemon = self.dbus.daemon;
now use the old, non-overriden version of dbus. That seems like a
pretty serious regression in general, but for this particular problem,
I've fixed it by replacing dbus_daemon by dbus.daemon and dbus_tools
by dbus.
2016-09-05 13:45:59 +02:00
Eelco Dolstra
0aa7520670
Revert "nixos: remove rsync from base install and add explicit path in nixos-install"
...
This reverts commit 582313bafef4c81cb6df2dcf2ece4757eb5c8082.
Removing rsync is actually pointless because nixos-install depends on
it. So if it's part of the system closure, we may as well provide it
to users.
Probably with the next Nix release we can drop the use of rsync and
use "nix copy" instead.
2016-09-05 13:45:59 +02:00
Langston Barrett
ee501fd49a
networkmanager: add information from wiki to docs ( #18245 )
...
* networkmanager: add information from wiki to docs
Specifically:
* mention nmcli, nmtui
* mention gtk and kde applets
fixes #13273
2016-09-05 11:13:47 +02:00
Joachim Fasting
269f739ded
grsecurity module: set nixpkgs.config.grsecurity = true
2016-09-05 00:56:17 +02:00
Tom Hunger
d459916501
prometheus service: rename values to match prometheus 1.0 naming.
2016-09-04 20:03:45 +01:00
Benjamin Staffin
58869cf310
prometheus service: add
...
This is based on @benleys work: https://github.com/NixOS/nixpkgs/pull/8216
I updated changed the user and group ids.
2016-09-04 20:03:32 +01:00
Domen Kožar
393e646e4f
setuid-wrappers: correctly umount the tmpfs
2016-09-04 17:56:00 +02:00
Jaka Hudoklin
c083ab99b2
Merge pull request #17969 from offlinehacker/pkgs/etcd/update-3.0.6
...
Update etcd, improve nixos module, fix nixos tests
2016-09-04 16:31:50 +02:00
Rok Garbas
095c7aefe1
nixos/manual: mentioning other zsh options at program.zsh.enable
...
fixes #13224
2016-09-04 16:31:29 +02:00
Vladimír Čunát
2217b328f9
texlive: rename the directory texlive-new -> texlive
2016-09-04 14:53:30 +02:00
Jörg Thalheim
94dd66882f
ferm: fix race condition in integration test ( #18288 )
...
curl sent the request faster then nginx bound the port in some cases
2016-09-04 14:34:06 +02:00
Karn Kallio
8d977ead38
setuid-wrappers : Prepare permissions for running wrappers
...
The new setuid-wrappers in /run cannot be executed by users due to:
1) the temporary directory does not allow access
2) the /run is mounted nosuid
2016-09-04 03:19:32 +02:00
Alexander Ried
1542bddcc8
nixos-install.sh: Create /var ( #18266 )
...
Got lost in a6670c1a0b8cda8235296900cff950f39f60cf4f
2016-09-03 19:17:44 +02:00
Joachim F
78b4b632ae
Merge pull request #18085 from Mic92/ferm
...
ferm: add integration test
2016-09-03 17:27:38 +02:00
Joachim F
3db5311be9
Merge pull request #18207 from tavyc/quagga-module
...
quagga service: init
2016-09-03 16:23:23 +02:00
Graham Christensen
ff5fd1ec40
etcd-cluster: split up openssl commands
2016-09-03 13:59:28 +02:00
Damien Cassou
f96cd1ea64
emacs module: Fix to get properly themed GTK apps
2016-09-03 08:25:25 +02:00
Tuomas Tynkkynen
e2c6740c37
Merge commit 'adaee73' from staging into master
...
This one was already merged into release-16.09, so let's not have the
stable branch is ahead of master and confuse things. In addition to
that, currently we have an odd situation that master has less things
actually finished building than in staging.
Conflicts:
pkgs/data/documentation/man-pages/default.nix
2016-09-03 01:02:51 +03:00
Vladimír Čunát
02217bf697
Merge #17838 : postgresql: Fix use with extensions
2016-09-02 20:09:40 +02:00
Octavian Cerna
eb14130934
quagga test: Add test for the quagga service.
2016-09-02 14:00:32 +03:00
Octavian Cerna
a30d4654f2
quagga service: New NixOS module.
2016-09-02 13:59:51 +03:00
Rob Vermaas
d6dbe43af2
bightbox-image.nix: use lib in stead of stdenv.lib. Fixes #18208
2016-09-02 10:04:09 +00:00
Lancelot SIX
5b8072fff6
postgresql: Fix use with extensions
...
Fixes #15512 and #16032
With the multi output, postgresql cannot find at runtime what is its
basedir when looking for libdir and pkglibdir. This commit fixes that.
2016-09-02 11:51:21 +02:00
Nikolay Amiantov
608ee1c7b3
mjpg-streamer service: restart on failure
2016-09-02 11:44:16 +03:00
Luca Bruno
15bb6bb9d6
Merge pull request #15893 from groxxda/fix/accountsservice
...
accountsservice: refactor package and service
2016-09-02 08:16:10 +00:00
Domen Kožar
b84b523baf
unstable is now 17.03
2016-09-02 08:47:21 +02:00
Parnell Springmeyer
1f9494b752
Need to create a new build to see why it's failing
2016-09-01 19:47:41 -05:00
Parnell Springmeyer
d60581d4d6
Resolving that silly bad argument error.
2016-09-01 19:26:54 -05:00
Parnell Springmeyer
c686da8655
Updatig the chromium-suid-sandbox module
2016-09-01 19:26:30 -05:00
Parnell Springmeyer
849dcde2a5
Wonder why this wasn't removed in the rebase?
2016-09-01 19:22:37 -05:00
Parnell Springmeyer
98c058a1ee
Adapting everything for the merged permissions wrappers work.
2016-09-01 19:21:06 -05:00
Parnell Springmeyer
390ab0b3ef
everything?: Updating every package that depended on the old setuidPrograms configuration.
2016-09-01 19:17:43 -05:00
Parnell Springmeyer
81b33eb466
security: Updating the machinery for creating the wrapper programs dir in var and updating ping and ping6 for changed config interface.
2016-09-01 19:16:36 -05:00
Parnell Springmeyer
79e81aa31b
security: Removing the old wrappers and replacing with 'permissions-wrappers'
2016-09-01 19:15:56 -05:00
Parnell Springmeyer
c16647ec29
security: switching to linuxHeaders so we always stay current with the selected kernel.
2016-09-01 19:15:56 -05:00
Parnell Springmeyer
79f1a1e07a
security: need to specify the ping binary paths for setcap wrappers.
2016-09-01 19:15:56 -05:00
Parnell Springmeyer
2efb60c8e9
security: tweaking the setcap-wrapper example to be more relevant
2016-09-01 19:15:56 -05:00
Parnell Springmeyer
4e98aa639f
module-list: adding setcap-wrappers to the import list
2016-09-01 19:15:56 -05:00
Parnell Springmeyer
1c0f672f7a
security: update setcap-wrappers dir to match the system-level dir we're creating on init
2016-09-01 19:15:56 -05:00
Parnell Springmeyer
12a23b3d91
boot: create setcap-wrappers dir as a tmpfs
2016-09-01 19:15:56 -05:00
Parnell Springmeyer
6fe93ae42a
installer: adding perl 'next if' skip command for setcap-wrappers dir
2016-09-01 19:15:09 -05:00
Parnell Springmeyer
00dc2c559c
installer: adding mkdir command for the setcap-wrappers dir
2016-09-01 19:15:09 -05:00
Parnell Springmeyer
b3d63f8191
security: whitespace wibble
2016-09-01 19:13:54 -05:00
Parnell Springmeyer
bfc3956376
security: adding setcap-wrapper functionality
2016-09-01 19:13:54 -05:00
Parnell Springmeyer
5deed1cb86
network-interfaces: use setcap-wrappers for ping and ping6 iff linux kernel is at-least 4.3
2016-09-01 19:13:54 -05:00
Domen Kožar
a6670c1a0b
Fixes #18124 : atomically replace /var/setuid-wrappers/ ( #18186 )
...
Before this commit updating /var/setuid-wrappers/ folder introduced
a small window where NixOS activation scripts could be terminated
and resulted into empty /var/setuid-wrappers/ folder.
That's very unfortunate because one might lose sudo binary.
Instead we use two atomic operations mv and ln (as described in
https://axialcorps.com/2013/07/03/atomically-replacing-files-and-directories/ )
to achieve atomicity.
Since /var/setuid-wrappers is not a directory anymore, tmpfs mountpoints
were removed in installation scripts and in boot process.
Tested:
- upgrade /var/setuid-wrappers/ from folder to a symlink
- make sure /run/setuid-wrappers-dirs/ legacy symlink is really deleted
2016-09-01 20:57:51 +02:00
Данило Глинський (Danylo Hlynskyi)
78cd9f8ebc
virtualbox: add headless build (without Qt dependency) ( #18026 )
2016-09-01 20:54:58 +02:00
Domen Kožar
d163882770
Merge pull request #18172 from Profpatsch/startAt-type
...
systemd-unit-options: startAt can be a list
2016-09-01 20:44:32 +02:00
Alexander Ried
1529641b52
accountsservice: add support for mutableUsers = false
...
Add code to accountsservice that returns an error if the environment
variable NIXOS_USERS_PURE is set. This variable is set from the nixos
accountsservice module if mutableUsers = false
2016-09-01 15:25:28 +02:00