Rob Vermaas
df7923fa82
Merge pull request #5515 from oconnorr/master
...
GCE updates to ntp server and to fetch all ssh keys
2015-01-14 13:19:38 +01:00
Matej Cotman
4e6efec4b4
enlightenment: fix media preview
2015-01-13 14:56:35 +01:00
Ryan Mulligan
2e3fa5b849
different wording for adminPubkey description
...
Maybe this wording is a slight improvement?
2015-01-12 21:49:33 -08:00
Matthias Beyer
f64d795950
Add note that administrative public key for gitolite has to be written in one line
2015-01-12 23:10:27 +01:00
mokasin
dd6dfde575
Add auto-start option to containers.
2015-01-12 18:26:22 +01:00
Spencer Whitt
6cba6dc61b
command-not-found: Add ZSH Support
2015-01-12 03:45:48 -05:00
Vladimír Čunát
72d2d59cd4
/etc/ssh/ssh_known_hosts: refactor and fix #5612
...
Generating the file was refactored to be completely in nix.
Functionally it should create the same content as before,
only adding the newlines.
CC recent updaters: @aszlig, @rickynils.
2015-01-11 22:14:25 +01:00
Peter Simons
43bae26b33
Merge pull request #5627 from oxij/update-postfix
...
postfix: make 2.11 the default, nixos: update postfix config for 2.11
2015-01-11 11:28:31 +01:00
Arseniy Seroka
4f596fb93f
Revert "zsh: profile-relative functions path"
...
This reverts commit 766207ca1d52db37df5ca17b9bd3bd21a03dfafd.
We need to solve the problem with `environment.profileRelativeEnvVars`.
The best workaround is to make profileRelativeEnvVars prepend paths.
2015-01-10 22:11:13 +03:00
Joachim Fasting
97bac259d0
dnscrypt-proxy service: update AppArmor profile
...
This patch fixes the AppArmor profile path clause and adds
(currently ignored) network rules.
The AppArmor profile used to be defined for the path sbin/dnscrypt-proxy,
but the real path is bin/dnscrypt-proxy (due to sbin now being a symlink
to bin), which permitted the service to run unconfined.
Adding the network rules has no effect other than improving correctness,
as the version of AppArmor in the NixOS kernel fails to enforce network
rules.
2015-01-09 15:08:07 +01:00
Shea Levy
cca8bae86e
Merge branch 'rngd-fix' of git://github.com/abbradar/nixpkgs
2015-01-08 09:36:29 -05:00
Matthias Beyer
5e6068d913
Put shell aliases in interactiveShellInit
2015-01-08 15:18:26 +01:00
Matthias Beyer
c5e855e060
Add basic nixos module for fish shell
2015-01-08 15:18:26 +01:00
lethalman
908c47b281
Merge pull request #5550 from abbradar/fprintd
...
add fprintd support
2015-01-08 14:58:22 +01:00
William A. Kennington III
dd7efcbf36
java: More default cleanups
2015-01-07 14:55:41 -08:00
William A. Kennington III
c82410eeda
java: Normalize to the default jre / jdk
2015-01-07 14:55:41 -08:00
William A. Kennington III
9a7766e054
nixos/network-interfaces: Add mstpd support for bridges
2015-01-07 14:49:24 -08:00
Peter Simons
24f5b2a1a0
Merge pull request #5619 from oxij/various-changes-2
...
Various (hopefully) small changes
2015-01-07 16:59:10 +01:00
Jan Malakhovski
265c1c1472
postfix: make 2.11 the default, nixos: update postfix config for 2.11
...
postfix 2.11 is much more humane with respect to disk writes since it uses
sockets (which do not change inodes on accesses) instead of fifos (which do).
2015-01-07 15:43:32 +00:00
Jan Malakhovski
b6646f7ba7
nixos: make zsh use fcntl for locking history files by default
...
Without this zsh creates and then unlinks .lock files at each interactive
input line, which is inhumane with respect to disk.
2015-01-07 15:43:01 +00:00
j-keck
3ced0d94ac
doc: use postgresql94
...
update postgresql module doc to use postgresql94 (was postgresql93)
2015-01-07 13:21:18 +01:00
William A. Kennington III
20d2092ff8
nixos/base: Add efi management utilities
2015-01-07 01:52:47 -08:00
Russell O'Connor
d1a58ef7c6
google-compute-image.nix: Try to download all SSH host keys from metadata server.
2015-01-06 12:06:54 -05:00
Nikolay Amiantov
dbc0395b2b
nixos/rngd: some fixes
2015-01-06 17:27:07 +03:00
Nikolay Amiantov
2aaeacc579
nixos/modprobe: wrap all of kmod
2015-01-06 16:39:00 +03:00
Russell O'Connor
3251948029
Generate SSH host public key from the private key.
2015-01-05 15:20:55 -05:00
Russell O'Connor
d1cbbff1e3
Call wget directly in fetch-ssh-keys service.
2015-01-05 15:20:55 -05:00
Russell O'Connor
6382e16014
google-compute-image.nix: unconditionally clean up /root/key.pub /root/authorized-keys-metadata
2015-01-05 15:18:02 -05:00
Russell O'Connor
b19ab1f046
google-comute-image.nix: set umask 077 when downloading private keys from the metadata server.
2015-01-05 15:01:49 -05:00
Russell O'Connor
e548a4330d
google-compute-image.nix: use internal google NTP server.
2015-01-05 12:45:23 -05:00
Peter Simons
ea94a6d653
nixos/modules/services/misc/nix-daemon.nix: document meaning of '0' for the buildCores attribute
2015-01-05 15:38:08 +01:00
Rob Vermaas
c5caa853ec
dd-agent: set SSL_CERT_FILE for dogstatsd.
...
(cherry picked from commit c67204dec27a86e2235afb2aebf48bc53dd804d0)
2015-01-05 13:15:22 +01:00
Eelco Dolstra
ae7d79cd61
Fix some bad gids
...
Issue #3727 .
2015-01-05 11:58:17 +01:00
Rob Vermaas
ea9530b5c7
Fix GCE image build.
...
(cherry picked from commit 98af87cd4abb0cd77e8a51cfdf6913a92d088784)
2015-01-05 09:35:35 +01:00
William A. Kennington III
8ec82fcb18
nixos/samba: Allow package version setting
2015-01-03 21:45:16 -08:00
Kirill Elagin
766207ca1d
zsh: profile-relative functions path
...
This is needed mostly for autocompletion.
2015-01-04 02:02:59 +03:00
Nikolay Amiantov
a164a0b4c5
nixos/fprintd: add service and pam support
2015-01-03 19:50:40 +03:00
Domen Kožar
3d7ff07258
fix manual
2015-01-03 16:32:07 +01:00
Domen Kožar
1f523bb23d
clarify things about hashed passwords and mutableUsers
2015-01-02 17:32:56 +01:00
William A. Kennington III
8627110091
icedtea: Make major version nonspecific attrs
2015-01-02 00:24:49 -08:00
Nicolas B. Pierron
816229593a
Merge pull request #5441 from nbp/mkAlias
...
modules: Extract mkAliasDefinition from the rename.nix NixOS module.
2015-01-01 06:59:42 -08:00
Sebastián Bernardo Galkin
24abe2b2b3
Bumblebee config to enable multiple monitors
...
Added configurations to `bumblebee` package to easy multiple monitors on Optimus
machines.
The behaviour of the default `bumblebee` package hasn't change, so this change
is backwards compatible. Users who want to connect a monitor to their discrete
card should use the package `bumblebee_display` instead.
Also added new configuration option to nixos bumblebee module:
```
hardware.bumblebee.connectDisplay = true
```
will enable the new configuration, but the default is still false.
2014-12-30 19:17:42 -08:00
Charles Strahan
94dd4b9721
ruby: WIP
2014-12-30 21:05:00 -05:00
Eelco Dolstra
e62cb5585d
Merge pull request #5507 from DamienCassou/systemd-user-timers
...
Add systemd.user.timers
2014-12-30 15:40:43 +01:00
Damien Cassou
dcc93abe74
Add systemd.user.timers
2014-12-30 05:46:36 +01:00
Tobias Geerinckx-Rice
c64257b8e5
Fix user-facing typos (mainly in descriptions)
2014-12-30 03:31:03 +01:00
Jaka Hudoklin
1b19b7a3bf
Merge pull request #5491 from offlinehacker/cadvisor
...
Add cadvisor package and nixos module
2014-12-29 17:58:43 +01:00
Shea Levy
9245516b46
gummiboot-builder.py: run nix with no build-users-group
...
During install, the bootloader script gets run inside a chroot after the
/etc/group bind-mount is unmounted. Since we're not doing any building,
this should be safe, but really nix should just not care if the group
does not exist when no build is needed.
Fixes #5494
2014-12-29 07:09:10 -05:00
Ricardo M. Correia
1d44322d53
grsecurity: Update stable and test patches
...
stable: 3.0-3.14.27-201412211908 -> 3.0-3.14.27-201412280859
test: 3.0-3.17.7-201412211910 -> 3.0-3.18.1-201412281149
2014-12-29 03:00:47 +01:00
Matej Cotman
9eb24c72ff
systemd: fix permissions on /var/log/journal
2014-12-28 22:37:50 +01:00