JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
242,435 Commits 2 Branches 0 Tags 13 GiB
60d30e13f7
Commit Graph

1715 Commits

Author SHA1 Message Date
Jörg Thalheim
60d30e13f7
Update nixos/doc/manual/installation/installing.xml 
Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
 2020-09-06 19:44:30 +01:00
Jörg Thalheim
a5872edf2f
nixos/installer: enable sshd by default 
Right now the UX for installing NixOS on a headless system is very bad.
To enable sshd without physical steps users have to have either physical
access or need to be very knowledge-able to figure out how to modify the
installation image by hand to put an `sshd.service` symlink in the
right directory in /nix/store. This is in particular a problem on ARM
SBCs (single board computer) but also other hardware where network is
the only meaningful way to access the hardware.

This commit enables sshd by default. This does not give anyone access to
the NixOS installer since by default. There is no user with a non-empty
password or key. It makes it easy however to add ssh keys to the
installation image (usb stick, sd-card on arm boards) by simply mounting
it and adding a keys to `/root/.ssh/authorized_keys`.
Importantly this should not require nix/nixos on the machine that
prepare the installation device and even feasiable on non-linux systems
by using ext4 third party drivers.

Potential new threats: Since this enables sshd by default a
potential bug in openssh could lead to remote code execution. Openssh
has a very good track-record over the last 20 years, which makes it
far more likely that Linux itself would have a remote code execution
vulnerability. It is trusted by millions of servers on many operating
systems to be exposed to the internet by default.

Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
 2020-09-06 20:26:08 +02:00
Florian Klink
d7046947e5
Merge pull request #91121 from m1cr0man/master 
Restructure acme module
 2020-09-06 18:26:22 +02:00
WORLDofPEACE
d0972c9637
Merge pull request #95194 from ju1m/nixos-install 
nixos-install: add support for flakes
 2020-09-05 15:31:14 -04:00
lewo
d65002aff5
Merge pull request #93314 from tnias/nixos_opendkim_20200717 
nixos/opendkim: systemd sandbox
 2020-09-05 08:46:19 +02:00
Lucas Savva
f57824c915
nixos/acme: Update docs, use assert more effectively 2020-09-05 01:06:29 +01:00
Jan Tojnar
951efe41e1 fixup! nixos/doc/releases: update the docs as promised 2020-09-04 10:59:06 -07:00
worldofpeace
f2e98e8b36 fixup! nixos/doc/releases: update the docs as promised 2020-09-04 10:59:06 -07:00
worldofpeace
d9c33b2ea4 nixos/doc/releases: update the docs as promised 
This goes through a recent example of 19.09 (because the workflow
should be everchanging, so our example needs to be recent).
Lots of changes, just read idk.
 2020-09-04 10:59:06 -07:00
Julien Moutinho
b03c506178 nixos-install: add support for flakes 2020-09-04 06:56:09 +02:00
Julien Moutinho
c6a3a0f4f5 nixos-rebuild: do not depend on nix.conf to activate flakes 2020-09-04 06:56:09 +02:00
Janne Heß
8cf4ec8b97
nixos/systemd: Don't use apply for $PATH 
When not using apply, other modules can use $PATH as a list instead of
getting a colon-separated list to each /bin directory.
 2020-09-03 20:27:55 +02:00
Philipp Bartsch
c46dd4e221 nixos/doc: add opendkim changes to release notes 2020-09-03 18:03:28 +02:00
WORLDofPEACE
18348c7829
Merge pull request #96042 from rnhmjoj/loaOf 
treewide: completely remove types.loaOf
 2020-09-02 08:45:37 -04:00
José Romildo Malaquias
3b92996c0b nixos/doc: document removal of deepin in the release notes 2020-09-01 19:46:34 -03:00
rnhmjoj
bc62423a87
nixos/doc: convert loaOf options refs to attrsOf 2020-09-02 00:42:51 +02:00
rnhmjoj
20d491a317
treewide: completely remove types.loaOf 2020-09-02 00:42:50 +02:00
Robert Hensing
c914fffeba
Merge pull request #95894 from alexarice/agda-release-notes 
Agda: add release notes
 2020-09-01 12:26:14 +02:00
Robert Hensing
4841b30784
Merge pull request #94804 from hercules-ci/init-nixos-hercules-ci-agent 
nixos/hercules-ci-agent: init
 2020-08-29 10:20:14 +02:00
Florian Klink
0620184f3f nixos/lib/test*: remove perl test driver 
This has been deprecated in 20.03, and all tests have been migrated to
the python framework, effectively making this dead code.
 2020-08-27 19:45:38 +02:00
Jörg Thalheim
4c9ad3ca79
Merge branch 'master' into nginx-update 2020-08-24 13:42:11 +01:00
Robert Hensing
346a1b0ec6 nixos/hercules-ci-agent: init 2020-08-23 20:13:15 +02:00
Alex Rice
e4e0c4b8cd
Agda: add release notes 2020-08-23 10:45:38 +01:00
Michele Guerini Rocco
737f4ec73a
Merge pull request #95988 from rnhmjoj/release-notes 
nixos/release-notes: mention GRUB password support
 2020-08-23 11:39:58 +02:00
Bruno Bigras
c62fe0bea5 nixos/manual: fix typo in man-nixos-enter.xml 2020-08-22 15:08:37 -04:00
rnhmjoj
1067236150
nixos/release-notes: mention GRUB password support 2020-08-22 15:29:23 +02:00
rnhmjoj
b14e1581c8
nixos/release-notes: fix typo 2020-08-22 15:10:04 +02:00
Daniël de Kok
280147c510
Merge pull request #95489 from danieldk/rocm-3.7.0 
Update ROCm to 3.7.0
 2020-08-22 13:30:01 +02:00
Lassulus
82b424453b
Merge pull request #86632 from Atemu/undervolt-timer-optional 
Undervolt: Make timer optional
 2020-08-22 11:48:30 +02:00
Atemu
f5856db1b8 rl-2009: add note on undervolt timer changes 2020-08-22 11:02:23 +02:00
Jonathan Ringer
19d2c0cb55
nixos/release-notes: minor fixes 2020-08-21 14:41:03 -07:00
Silvan Mosberger
b6d657adbe release-notes: Mention stricter option evaluation 
As caused by https://github.com/NixOS/nixpkgs/pull/82743
 2020-08-21 14:37:32 -07:00
Silvan Mosberger
d400dcaa48 release-notes: Mention freeform modules 
As introduced by https://github.com/NixOS/nixpkgs/pull/82743
 2020-08-21 14:37:32 -07:00
Aaron Andersen
91db1c8aec
Merge pull request #87712 from aanderse/zabbix 
zabbix: 4.4.8 -> 5.0.2
 2020-08-21 17:11:55 -04:00
Daniël de Kok
95e5089607 nixos/manual: remove references to rocm-runtime-ext 
rocm-runtime-ext is not needed anymore for OpenCL image support.
 2020-08-21 08:50:51 +02:00
Aaron Andersen
b87b6abd17
Merge pull request #95294 from aanderse/postgresql-rootless 
nixos/postgresql: run ExecStartPost as an unprivileged user
 2020-08-20 19:16:23 -04:00
davidak
5a3738d22b
nixos/systemPackages: clean up (#91213) 
* nixos/systemPackages: clean up

* Update nixos/doc/manual/release-notes/rl-2009.xml

Co-authored-by: Jan Tojnar <jtojnar@gmail.com>

* Update nixos/doc/manual/release-notes/rl-2009.xml

Co-authored-by: 8573 <8573@users.noreply.github.com>

Co-authored-by: Jan Tojnar <jtojnar@gmail.com>
Co-authored-by: 8573 <8573@users.noreply.github.com>
 2020-08-20 13:45:54 +00:00
zowoq
259dcd17ff rl-2009: remove modSha256 warning note 2020-08-20 08:02:36 +10:00
Aaron Andersen
5e630bf5d3 zabbix: 4.4.8 -> 5.0.2 2020-08-18 10:30:23 -04:00
Izorkin
5c70c5eeaa nginxModules: renamed module ngx_aws_auth to aws-auth 2020-08-17 10:42:54 +03:00
Izorkin
36c95f331d nginxModules.cache-purge: 2.5 -> 2.5.1 2020-08-17 10:42:01 +03:00
Aaron Andersen
ec82ae3c39 nixos/postgresql: run ExecStartPost as an unprivileged user 2020-08-15 16:59:49 -04:00
Robert Hensing
6d0a85fe52
Merge pull request #82743 from Infinisil/partially-typed-v2 
Freeform modules
 2020-08-15 12:13:58 +02:00
Silvan Mosberger
25d75155f3
nixos/doc: Add freeform modules documentation 
Co-Authored-By: Robert Hensing <robert@roberthensing.nl>
 2020-08-14 22:49:35 +02:00
Marek Mahut
f43fa60f02
Merge pull request #95010 from StijnDW/dokuwiki 
dokuwiki: 2018-04-22b -> 2020-07-29
 2020-08-14 16:27:38 +02:00
Martin Weinelt
9c8c31b241
Merge pull request #95086 from danieldk/manual-intel-opencl 
nixos/manual: add a section about enabling OpenCL for Intel GPUs
 2020-08-14 12:09:49 +02:00
Daniël de Kok
0c135e5f85
Merge pull request #95336 from danieldk/gpu-accel-common-issues 
nixos/manual: add a section about common GPU acceleration issues
 2020-08-14 08:30:24 +02:00
Aaron Andersen
f1f4cc6e1b
Merge pull request #95231 from aanderse/mysql-cleanup 
nixos/mysql: run postStart as an unprivileged user
 2020-08-13 21:38:44 -04:00
Aaron Andersen
806253800b nixos/mysql: update release notes 2020-08-13 17:03:23 -04:00
Daniël de Kok
9c14f5d56e nixos/manual: add a section about common GPU acceleration issues 2020-08-13 19:35:47 +02:00