Commit Graph

4501 Commits

Author SHA1 Message Date
Ryan Mulligan
0ab73f9a3f
Merge pull request #162535 from astro/pacemaker
pacemaker: init
2022-03-15 16:06:56 -07:00
Franz Pletz
018a959be7
Merge pull request #160750 from Izorkin/update-prosody 2022-03-15 19:07:15 +01:00
davidak
d2c95bb666
Merge pull request #163433 from JJJollyjim/bcachefs
bcachefs: unstable-2022-01-12 -> unstable-2022-03-09
2022-03-14 15:34:43 +01:00
Jamie McClymont
4ee9b84ec5 nixos/bcachefs: re-enable encryption in test 2022-03-14 21:49:24 +13:00
Sander van der Burg
43543a6bbc
Merge pull request #163716 from svanderburg/fixtomcat
nixos/tomcat: configure default group and fix broken default package …
2022-03-13 21:43:45 +01:00
pennae
aa7b129708
Merge pull request #154113 from pennae/systemd-escaping
nixos: add functions and documentation for escaping systemd Exec* directives
2022-03-13 19:57:32 +00:00
Sander van der Burg
86fafe5f50 nixos/tomcat: add basic test case using the example app 2022-03-13 14:31:43 +01:00
pennae
40a35299fa nixos: add functions and documentation for escaping systemd Exec* directives
it's really easy to accidentally write the wrong systemd Exec* directive, ones
that works most of the time but fails when users include systemd metacharacters
in arguments that are interpolated into an Exec* directive. add a few functions
analogous to escapeShellArg{,s} and some documentation on how and when to use them.
2022-03-12 00:48:52 +01:00
Janne Heß
bc58430068
nixos/switch-to-configuration: Fix reloading of stopped services 2022-03-11 14:05:19 +01:00
Janne Heß
c96180c53f
nixos/switch-to-configuration: Ignore some unit keys
Some unit keys don't need to restart the service to make them effective.
Reduce the amount of service restarts by ignoring these keys
2022-03-11 13:30:03 +01:00
Janne Heß
acb535fb61
nixos/switchTest: Also test targets 2022-03-11 13:30:03 +01:00
pennae
af0f3944bd
Merge pull request #163009 from scvalex/nbd-service
nbd: add nbd service and test
2022-03-11 01:02:10 +00:00
Martin Weinelt
76721f5e5e
Merge pull request #159986 from NukaDuka/pve_exporter 2022-03-10 22:41:45 +01:00
Martin Weinelt
44c88e44c9
Merge pull request #162992 from mweinelt/minidlna 2022-03-10 22:34:42 +01:00
davidak
f02094df72
Merge pull request #161837 from bobby285271/appstream
appstream: 0.14.4 → 0.15.2
2022-03-09 17:29:57 +01:00
pennae
06c57317c2
Merge pull request #146653 from DarkDNA/nixos/fix-systemd-exporter/extraFlags
nixos/prometheus/systemd: Implement the extraFlags config option.
2022-03-09 16:12:32 +00:00
Alexandru Scvortov
252f20aaa2 nbd: add programs.nbd, services.nbd, and test
Changes:

nbd: Update nixos/modules/services/networking/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: Update nixos/modules/services/networking/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: Update nixos/tests/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: generalize options in nbd service

nbd: harden service

nbd: Update nixos/modules/services/networking/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: Update nixos/modules/services/networking/nbd.nix

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

nbd: refactor code a bit and BindPaths automatically
2022-03-09 12:00:47 +00:00
Astro
70c1e849c0 nixos/tests/pacemaker: init 2022-03-09 01:19:10 +01:00
Kim Lindberger
b71a8e2383
Merge pull request #162095 from midchildan/fix/keycloak-mysql
nixos/keycloak: fix database provisioning issues
2022-03-07 20:13:01 +01:00
Timo Kaufmann
94ea3a8899
Merge pull request #160777 from LunNova/improve-input-remapper-module
nixos/input-remapper: Fix missing [], add more options, add test
2022-03-07 18:51:08 +01:00
Luna Nova
0643620420
nixos/input-remapper: document pkexec workaround in test 2022-03-07 08:39:15 -08:00
Jos van Bakel
daab8fb3af
nixos/nats: fix test 2022-03-07 17:36:21 +01:00
Luna Nova
865e0df2fc
nixos/input-remapper: add nixos test for input-remapper 2022-03-07 08:31:40 -08:00
Robert Scott
97572a798c nixosTests.minidlna: fix by performing requests by IP
a little ugly, but minidlna now checks requests Host: header and
only accepts requests using an IPv4 address to avoid DNS-rebinding
attacks.
2022-03-06 13:08:19 +00:00
piegames
be4a0e6e40
Merge pull request #158605 from mweinelt/synapse-rfc42
nixos/matrix-synapse: migrate to rfc42 settings and formatter
2022-03-05 15:23:52 +01:00
piegames
cd7e516b26
Merge pull request #156858: nixos/polkit: don't enable by default 2022-03-05 14:48:35 +01:00
Martin Weinelt
9c465fc4e6
nixos/tests/home-assistant: drop mqtt tests
With Home Assistant 2022.3.0 the MQTT configuration cannot be done
declaratively anymore, so this test scenario has been rendered moot.
2022-03-05 02:06:50 +01:00
Martin Weinelt
550fc51d7b
nixos/tests/pantalaimon: use synapse setting option 2022-03-04 23:57:32 +01:00
Martin Weinelt
88ddbee02e
nixos/tests/mjolnir: use synapse setting option 2022-03-04 23:57:31 +01:00
Martin Weinelt
f89769055b
nixos/tests/matrix-appservice-irc: use synapse settings option 2022-03-04 23:57:31 +01:00
Martin Weinelt
f8fff1c1a6
nixos/tests/matrix-synapse: use settings option 2022-03-04 23:57:30 +01:00
Janne Heß
f6ad15fd8c
nixos/switchTest: Make checks more precise 2022-03-03 20:56:37 +01:00
Janne Heß
1def557525
nixos/switch-to-configuration: Document and test socket-activated services 2022-03-03 20:49:20 +01:00
Robert Hensing
1cf9650148
Merge pull request #162612 from hercules-ci/update-nixopsUnstable
nixopsUnstable: 2.0.0-pre (2021-12-01) -> 2.0.0-pre (2022-02-21)
2022-03-03 16:14:19 +01:00
Robert Hensing
d2c3410efd nixopsUnstable -> nixops_unstable
Conform to https://nixos.org/manual/nixpkgs/unstable/#sec-package-naming
2022-03-03 12:50:15 +01:00
Jörg Thalheim
d34f7085a9
Merge pull request #162582 from JJJollyjim/cntr-test
nixos/tests: fix flaky cntr test
2022-03-03 10:40:23 +00:00
Jamie McClymont
126ce87b0c nixos/tests: fix flaky cntr test
The cntr sometimes hangs until the 10-hour hydra limit. This behaviour
appears to be an edge-case related to the type of TTY in which the cntr
command runs during test execution. We can work around this by running
the command as a background job.

I additionally added a wait_for_open_port to fix nondeterministic test
failures I observed after fixing the hanging issue.
2022-03-03 19:15:10 +13:00
aszlig
7286be7e81 nixos/systemd-confinement: Allow shipped unit file
In issue #157787 @martined wrote:

  Trying to use confinement on packages providing their systemd units
  with systemd.packages, for example mpd, fails with the following
  error:

  system-units> ln: failed to create symbolic link
  '/nix/store/...-system-units/mpd.service': File exists

  This is because systemd-confinement and mpd both provide a mpd.service
  file through systemd.packages. (mpd got updated that way recently to
  use upstream's service file)

To address this, we now place the unit file containing the bind-mounted
paths of the Nix closure into a drop-in directory instead of using the
name of a unit file directly.

This does come with the implication that the options set in the drop-in
directory won't apply if the main unit file is missing. In practice
however this should not happen for two reasons:

  * The systemd-confinement module already sets additional options via
    systemd.services and thus we should get a main unit file
  * In the unlikely event that we don't get a main unit file regardless
    of the previous point, the unit would be a no-op even if the options
    of the drop-in directory would apply

Another thing to consider is the order in which those options are
merged, since systemd loads the files from the drop-in directory in
alphabetical order. So given that we have confinement.conf and
overrides.conf, the confinement options are loaded before the NixOS
overrides.

Since we're only setting the BindReadOnlyPaths option, the order isn't
that important since all those paths are merged anyway and we still
don't lose the ability to reset the option since overrides.conf comes
afterwards.

Fixes: https://github.com/NixOS/nixpkgs/issues/157787
Signed-off-by: aszlig <aszlig@nix.build>
2022-03-02 11:42:44 -08:00
Kartik Gokte
6a0b420d94 nixos/prometheus-pve-exporter: init at 2.2.2 2022-03-02 23:59:33 +05:30
Bobby Rong
b3d4c1d48f
nixosTests.installed-tests.appstream-qt: init 2022-03-02 11:28:29 +08:00
Bobby Rong
c942cd7b2e
nixosTests.installed-tests.appstream: init 2022-03-02 11:28:29 +08:00
Rok Garbas
43a765422f
Merge pull request #158613 from ConnorBaker/master
hadoop: add aarch64 support
2022-03-01 15:59:08 +01:00
ajs124
8289e6478b
vsftpd: enable seccomp (#158974)
* vsftpd: enable seccomp

* nixos/tests/vsftpd: add basic test

* vsftpd: add test to passthru
2022-03-01 11:03:47 +08:00
Janne Heß
d32ba3f4b0
Merge pull request #161929 from martinetd/switchTest
logrotate: do not enable logrotate.service itself
2022-02-28 10:19:25 +01:00
Rok Garbas
993c35991b
Merge pull request #157693 from Radvendii/zammad
zammad: init at 5.0.2
2022-02-28 00:57:11 +01:00
midchildan
0334498c74
nixosTests.keycloak: replace libtidy with html-tidy
Follow-up of cc700ad55b.
2022-02-28 00:54:27 +09:00
Jörg Thalheim
c219935f5e
Merge pull request #162056 from NickCao/bird-reload
nixos/bird: run service as non-root user, add test for reload
2022-02-27 09:48:04 +00:00
Nick Cao
6e389e6367
nixos/bird: run service as non-root user, add test for reload 2022-02-27 16:19:22 +08:00
Rémi NICOLE
17df62a937
shiori: fix NixOS test (#161969)
* nixos/tests/shiori: fix auth JSON

* shiori: link NixOS test in passthru.tests
2022-02-27 08:38:55 +02:00
Dominique Martinet
0dadec45d8 logrotate/systemd: add 'minsize = 1M' to wtmp/btmp rotation
align with upstream logrotate which added the minsize rule at some point.
This avoids needlessly rotating the files too often as brought up in
https://github.com/NixOS/nixpkgs/pull/159187#issuecomment-1052426774
2022-02-27 07:20:26 +09:00