Commit Graph

18220 Commits

Author SHA1 Message Date
Graham Christensen
e492708e2f
Merge pull request #165355 from NixOS/random-trust-bootloader
kernel: enable RANDOM_TRUST_BOOTLOADER on >= 5.4
2022-03-24 09:14:53 -04:00
Naïm Favier
a8296e7537
nixos/earlyoom: bring the module up to date (#163663)
* nixos/earlyoom: bring the module up to date

Removes deprecated option `ignoreOOMScoreAdjust`, introduces `killHook`
as a replacement for `notificationsCommand`, and adds an `extraArgs`
option for things not covered by the module.

* nixos/earlyoom: add nixos test

* nixos/earlyoom: add reportInterval

Allows setting the interval for logging a memory report. Defaults to
3600 following upstream
     (https://github.com/rfjakob/earlyoom/blob/master/earlyoom.default#L5)
to avoid flooding logs.

* nixos/earlyoom: add free{Mem,Swap}KillThreshold

Fixes https://github.com/NixOS/nixpkgs/issues/83504
2022-03-24 15:34:09 +08:00
Ryan Mulligan
adbaf07145
Merge pull request #160366 from benneti/projecteur
projecteur: init at 0.9.2
2022-03-23 12:18:20 -07:00
Benedikt Tissot
1cc9cfa9c7 projecteur: init at 0.9.2 2022-03-23 19:30:42 +01:00
Profpatsch
a701c09286 nixos-rebuild: use log instead of echo, always print to stderr
Introduces a `log()` function, similar to `logVerbose()`, to replace
usage of `echo` for logging.
2022-03-23 11:49:59 +01:00
Sandro
a5ed123d4e
Merge pull request #165026 from alyssais/linux-5.17-rtl8192eu 2022-03-23 07:49:35 +01:00
Sandro
744e1a6ee6
Merge pull request #165029 from alyssais/linux-5.17-rtl8821cu 2022-03-23 07:39:45 +01:00
Sandro
55b2c5c952
Merge pull request #165030 from alyssais/linux-5.17-rtl88xxau-aircrack 2022-03-23 07:35:33 +01:00
Sandro
a4219ba871
Merge pull request #164763 from armeenm/bump-dmtcp 2022-03-23 04:07:51 +01:00
Sandro
46ddd465b9
Merge pull request #165302 from Profpatsch/nixos-rebuild-meta 2022-03-23 03:36:18 +01:00
Graham Christensen
a5c28278f9 kernel: enable RANDOM_TRUST_BOOTLOADER on >= 5.4
> Some bootloaders can provide entropy to increase the kernel's initial device randomness.

This allows, for example, EFI to provide 64 bytes. In general my opinion is an attacker
who can manipulate the random seed sufficiently to cause problems likely has other,
more direct approaches at their disposal as well.
2022-03-22 22:05:10 -04:00
Alyssa Ross
22bf6be3e0 linuxPackages.rtl8814au: 2021-10-25 -> 2022-02-21
Fixes the build with Linux 5.17.
2022-03-22 20:43:57 +00:00
Michal Sojka
611e9302f9 nixos-rebuild: add --no-flake switch
When a NixOS system uses flakes, i.e., /etc/nixos/flake.nix exists, it
is impossible to use nixos-rebuild to build a pre-flake
configuration.nix. Of course, one can directly use nix command to
build the configuration, but not everybody remembers the correct nix
options to do that.

With the new option, it is possible to build a pre-flake configuration
with command like this:

    nixos-rebuild build-vm -I nixos-config=./vm.nix --no-flake

The option might be useful for people following older pre-flake
tutorials on a flake-based system.
2022-03-22 19:03:10 +01:00
Profpatsch
c7172046c7 nixos-rebuild: add meta & add Profpatsch as maintainer 2022-03-22 18:35:33 +01:00
Maëlys Bras de fer
488869f602 nixos-rebuild: support --quiet, --print-build-logs
--quiet decreases the logging verbosity level (inverse of -v)
--print-build-logs prints build logs on stderr (same as -L)
Also reordered and grouped some options for consistency
2022-03-22 18:24:27 +01:00
Armeen Mahdian
11901d89c4 dmtcp: 2021-03-01 -> 2022-02-28 2022-03-22 06:12:11 -05:00
Sandro
5b874cadbf
Merge pull request #163582 from Stunkymonkey/treewide-fetchFromGitHub-1 2022-03-22 07:27:54 +01:00
Alyssa Ross
58ae11758e linux_latest: 5.16.14 -> 5.17 2022-03-21 21:53:29 +00:00
Jörg Thalheim
9b2939da63
Merge pull request #164260 from Mic92/nix-ld
nix-ld: init at 1.0.0 + nixos module
2022-03-21 18:42:38 +00:00
Martin Weinelt
071e3c9025
Merge pull request #165043 from robintown/bpf-unpriv 2022-03-21 15:19:20 +01:00
Alyssa Ross
2f9822b659 linuxPackages.rtl8821ce: mark broken on Linux 5.17 2022-03-21 13:22:59 +00:00
Alyssa Ross
fe6c2190e8 linuxPackages.rtl8189es: mark broken on Linux 5.17 2022-03-21 13:22:59 +00:00
Alyssa Ross
6d43305b89 linuxPackages.r8168: mark broken on Linux 5.17 2022-03-21 13:22:59 +00:00
Jörg Thalheim
a98ea7e6f8 nix-ld: init at 1.0.0 + nixos module 2022-03-21 11:15:32 +01:00
Alyssa Ross
75501aff5a linuxPackages.lttng-modules: 2.13.1 -> 2.13.2
Fixes the build with Linux 5.17.
2022-03-21 08:03:08 +01:00
Robin Townsend
3132fcfec3 linux: Enable BPF_UNPRIV_DEFAULT_OFF in 5.15 2022-03-20 21:19:07 -04:00
Alyssa Ross
e6a8a1c1b3
linuxPackages.rtl88xxau-aircrack: 307d69 -> 37e27f
Fixes the build with Linux 5.17.
2022-03-20 22:47:24 +00:00
Alyssa Ross
a982f69fa8
linuxPackages.rtl8821cu: 2021-10-21 -> 2022-03-08
Like with other morrownr modules, the 8821cu repo now links to
the 8821cu-20210118 repository as the place to get the driver code.  I
kept the homepage as 8821cu though, because in future if a new version
of the driver is created, that's where the link will be posted.

Fixes the build with Linux 5.17.
2022-03-20 22:46:05 +00:00
Alyssa Ross
9701626605
linuxPackages.rtl8192eu: 4.4.1.20211023 -> 4.4.1.20220313
Fixes the build with Linux 5.17.
2022-03-20 22:40:15 +00:00
Armeen Mahdian
292daa1285 smem: switch to python3
smem 1.5 has support for python3
2022-03-20 11:42:35 +01:00
Martin Weinelt
61388f811a
Merge pull request #164601 from armeenm/bump-pflask 2022-03-19 21:50:26 +01:00
Armeen Mahdian
c29f879db3 pflask: 2015-12-17 -> 2018-01-23 2022-03-19 12:58:12 -05:00
Profpatsch
5679b2b698 nixos-rebuild: add installer test to passthru.tests
When something changes in nixos-rebuild, we must make sure the
installers still work, otherwise it might break existing setups.

The installer tests check whether nixos-rebuild works, so they are a
good lithmus test.
2022-03-19 15:13:50 +01:00
Profpatsch
cb7bc7c60f nixos-rebuild: Print commands as they are run on verbose flag
nixos-rebuild would forward all verbose flags to nix, but not actually
increase its own verbosity.
Which would make it hard to see what’s going on without resorting to
tools like strace or adding `set -x` to the script.

We add a simple exec wrapper around the most “interesting” commands,
that is nix tool invocations. If any verbosity flag is given, it will
set the verbosity flag of the nixos-rebuild script all commands
wrapped into `runCmd` will start logging their invocation.

This is done via a `logVerbose` function, which can also be used to
print logging messages when in verbose mode, to aid debugging why
nixos-rebuild does what it does. A few messages are added, but
potentially we could log a lot more details.

Now, testing all of the changed code paths turns out to be rather
hard, so I am unsure how to verify that for all changed commands
behaviour stays indeed the same.
2022-03-19 15:13:50 +01:00
sternenseemann
fcb6bb628b audit: disable python when cross-compiling
To support this theoretically, the configure script upstream would need
to a) stop using PATH for finding python-config exclusively and allow
passing an absolute path to it and b) cease using the distutils module
for configuration purposes which of course requires running the host
python interpreter which is not possible in the cross case.
2022-03-18 22:45:20 +01:00
Ryan Mulligan
ac0522d62a
Merge pull request #164509 from r-ryantm/auto-update/usbguard
usbguard: 1.1.0 -> 1.1.1
2022-03-16 16:17:01 -07:00
R. Ryantm
055d7abdb6 usbguard: 1.1.0 -> 1.1.1 2022-03-16 22:45:35 +00:00
TredwellGit
39e2856eb6 linux_latest-libre: 18627 -> 18635 2022-03-16 16:46:45 +00:00
TredwellGit
ae3bcac97a linux: 5.4.184 -> 5.4.185 2022-03-16 16:46:26 +00:00
TredwellGit
79699f61a2 linux: 5.16.14 -> 5.16.15 2022-03-16 16:46:20 +00:00
TredwellGit
6ddf7b574c linux: 5.15.28 -> 5.15.29 2022-03-16 16:46:14 +00:00
TredwellGit
48b578d278 linux: 5.10.105 -> 5.10.106 2022-03-16 16:46:08 +00:00
TredwellGit
7ea40efa4d linux: 4.9.306 -> 4.9.307 2022-03-16 16:46:02 +00:00
TredwellGit
111be9fee3 linux: 4.19.234 -> 4.19.235 2022-03-16 16:45:56 +00:00
TredwellGit
19fe4b6872 linux: 4.14.271 -> 4.14.272 2022-03-16 16:45:50 +00:00
Sascha Grunert
05fbf3d3fe oci-seccomp-bpf-hook: 1.2.3 -> 1.2.5
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-03-16 19:39:34 +10:00
Lewis Cowper
9f3d358286
tuigreet: fix typo in meta.description
greter -> greeter
2022-03-16 09:59:47 +08:00
Jan Tojnar
2b94adc616
Merge pull request #163926 from jtojnar/udisks2-fix
udisks2: correct patch
2022-03-16 01:18:05 +01:00
Ryan Mulligan
0ab73f9a3f
Merge pull request #162535 from astro/pacemaker
pacemaker: init
2022-03-15 16:06:56 -07:00
Vladimír Čunát
f48c1fda6b
Merge branch 'master' into staging-next
Conflict in pkgs/development/libraries/libvirt/default.nix
required manual adjustments.  The fetched patch is already in src.
I checked that libvirt builds.
2022-03-15 09:52:04 +01:00