Alexey Shmalko fa4fe71105

docker: fix socket permissions ...

Docker socket is world writable. This means any user on the system is
able to invoke docker command. (Which is equal to having a root access
to the machine.)

This commit makes socket group-writable and owned by docker group.

Inspired by
https://github.com/docker/docker/blob/master/contrib/init/systemd/docker.socket

2017-04-03 09:05:37 -04:00

..

openstack

nixos/modules: use defaultText/literalExample where applicable

2017-03-07 14:06:08 +01:00

amazon-image.nix

amazon-image.nix: Remove redundant log message

2017-01-03 17:32:47 +01:00

amazon-init.nix

amazon-init.service: fix starting services at startup

2017-02-27 16:51:36 +00:00

amazon-options.nix

Move amazon option out of amazon-image.nix, needed to make ec2.hvm usable from nixops, without breaking evaluation for other backends.

2015-02-16 09:57:19 +00:00

azure-agent-entropy.patch

virtualization/azure: take entropy handling code out of WALA and execute it before SSHD generates the host keys

2016-03-13 13:57:30 +02:00

azure-agent.nix

treewide: deprecate ip-up.target (#18319)

2016-09-10 18:03:59 +02:00

azure-bootstrap-blobs.nix

add Azure bootstrap blob list

2016-09-15 16:27:47 +03:00

azure-common.nix

openssh: support prohibit-password for permitRootLogin

2016-10-01 13:23:56 -04:00

azure-config-user.nix

azure-image: provide configuration.nix which allows nixos-rebuild to build a working generation and add helpful comments

2016-03-03 04:03:07 +02:00

azure-config.nix

Initial configuration + image generation script for Micro$oft Azure. Work in progress for #3986.

2014-09-06 21:37:46 +02:00

azure-image.nix

Azure: switch back to qemu 2.2.0 for generating image. Seems to work best.

2017-02-13 09:55:03 +00:00

azure-qemu-220-no-etc-install.patch

azure: package qemu @ 2.2.0

2016-02-18 21:08:28 -08:00

brightbox-config.nix

Add initial Brightbox expression.

2015-08-08 19:50:22 +00:00

brightbox-image.nix

openssh: support prohibit-password for permitRootLogin

2016-10-01 13:23:56 -04:00

container-config.nix

audit: Disable in containers

2016-01-26 16:25:40 +01:00

containers.nix

nixos/treewide: remove boolean examples for options

2017-03-17 23:36:19 +01:00

docker-image.nix

container.nix -> docker-container.nix

2015-04-19 22:06:45 +02:00

docker.nix

docker: fix socket permissions

2017-04-03 09:05:37 -04:00

ec2-amis.nix

Add ca-central-1 AMIs

2017-02-19 23:46:08 +01:00

ec2-data.nix

ec2-data: ensure providing a SSH host key is actually optional

2016-02-25 20:11:49 -06:00

ecs-agent.nix

nixos/modules: use defaultText/literalExample where applicable

2017-03-07 14:06:08 +01:00

google-compute-config.nix

Work around infinite recursion issue in nixops.

2015-04-29 09:55:20 +00:00

google-compute-image.nix

google-compute-image: fix Yama LSM option conflict

2017-03-26 21:09:58 +02:00

grow-partition.nix

cloud-utils: 0.27 -> 0.29

2016-11-17 15:15:42 +01:00

libvirtd.nix

libvirt: make guest suspend work, use upstream units

2017-03-25 14:59:01 +01:00

lxc-container.nix

container.nix -> docker-container.nix

2015-04-19 22:06:45 +02:00

lxc.nix

lxc: ensure directory /var/lib/lxc/rootfs

2017-03-15 12:42:27 +01:00

lxcfs.nix

lxcfs: add module

2016-12-04 11:26:17 +01:00

lxd.nix

lxd: pkg.lxd does not point to the binaries

2016-06-19 20:30:36 +01:00

nova-config.nix

nova-image: support partition resizing

2017-02-24 22:19:53 +01:00

nova.nix

multipath_tools: Rename to multipath-tools

2016-01-21 16:18:38 +01:00

openvswitch.nix

Add missing 'type', 'defaultText' and 'literalExample' in module definitions

2016-01-17 19:41:23 +01:00

parallels-guest.nix

ntp: make timesyncd the new default

2016-12-17 00:00:45 +01:00

qemu-vm.nix

improve: modules/virtualisation/qemu-vm.nix

2017-03-04 11:31:47 +01:00

rkt.nix

nixos/treewide: systemd.time is in manvolume 7

2017-03-21 08:28:53 +01:00

virtualbox-guest.nix

virtualbox guest module: make x11 optional

2016-12-04 22:24:01 +01:00

virtualbox-host.nix

nixos/virtualbox: unbreak wrt. new security.wrappers

2017-02-15 07:25:33 +01:00

virtualbox-image.nix

nixos/virtualbox-image: Fix path to virtualbox

2016-09-13 07:26:59 +02:00

vmware-guest.nix

open-vm-tools: 10.0.7 -> 10.1.0

2017-02-10 20:12:00 +02:00

xe-guest-utilities.nix

xe-guest-utilities: init at 6.2.0

2016-03-30 09:27:40 -07:00

xen-dom0.nix

nixos: xen: condition default packages on enable

2017-03-24 01:54:04 +01:00

xen-domU.nix

xen: update domU config for pvgrub2

2017-02-12 20:53:54 +01:00