JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
246,659 Commits 2 Branches 0 Tags 13 GiB
89f961c404
Commit Graph

1773 Commits

Author SHA1 Message Date
Jonathan Ringer
1f3587cdd5 21.03 is Okapi 
* Okapi is an artiodactyl mammal native to Central Africa
* https://en.wikipedia.org/wiki/Okapi
 2020-09-07 14:20:35 -07:00
Oleksii Filonenko
c3a7c89a20
release-notes/rl-2009: add item about Caddy v2 2020-09-07 09:39:23 +02:00
Jörg Thalheim
60d30e13f7
Update nixos/doc/manual/installation/installing.xml 
Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
 2020-09-06 19:44:30 +01:00
Jörg Thalheim
a5872edf2f
nixos/installer: enable sshd by default 
Right now the UX for installing NixOS on a headless system is very bad.
To enable sshd without physical steps users have to have either physical
access or need to be very knowledge-able to figure out how to modify the
installation image by hand to put an `sshd.service` symlink in the
right directory in /nix/store. This is in particular a problem on ARM
SBCs (single board computer) but also other hardware where network is
the only meaningful way to access the hardware.

This commit enables sshd by default. This does not give anyone access to
the NixOS installer since by default. There is no user with a non-empty
password or key. It makes it easy however to add ssh keys to the
installation image (usb stick, sd-card on arm boards) by simply mounting
it and adding a keys to `/root/.ssh/authorized_keys`.
Importantly this should not require nix/nixos on the machine that
prepare the installation device and even feasiable on non-linux systems
by using ext4 third party drivers.

Potential new threats: Since this enables sshd by default a
potential bug in openssh could lead to remote code execution. Openssh
has a very good track-record over the last 20 years, which makes it
far more likely that Linux itself would have a remote code execution
vulnerability. It is trusted by millions of servers on many operating
systems to be exposed to the internet by default.

Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
 2020-09-06 20:26:08 +02:00
davidak
74b3d66baf nixos/config: add defaultPackages option 
readd perl (used in shell scripts), rsync (needed for NixOps) and strace (common debugging tool)

they where previously removed in https://github.com/NixOS/nixpkgs/pull/91213

Co-authored-by: Timo Kaufmann <timokau@zoho.com>
Co-authored-by: 8573 <8573@users.noreply.github.com>
 2020-09-06 18:58:20 +02:00
Florian Klink
d7046947e5
Merge pull request #91121 from m1cr0man/master 
Restructure acme module
 2020-09-06 18:26:22 +02:00
Julien Moutinho
fb6d63f3fd apparmor: fix and improve the service 2020-09-06 07:43:03 +02:00
WORLDofPEACE
d0972c9637
Merge pull request #95194 from ju1m/nixos-install 
nixos-install: add support for flakes
 2020-09-05 15:31:14 -04:00
lewo
d65002aff5
Merge pull request #93314 from tnias/nixos_opendkim_20200717 
nixos/opendkim: systemd sandbox
 2020-09-05 08:46:19 +02:00
Lucas Savva
f57824c915
nixos/acme: Update docs, use assert more effectively 2020-09-05 01:06:29 +01:00
Jan Tojnar
951efe41e1 fixup! nixos/doc/releases: update the docs as promised 2020-09-04 10:59:06 -07:00
worldofpeace
f2e98e8b36 fixup! nixos/doc/releases: update the docs as promised 2020-09-04 10:59:06 -07:00
worldofpeace
d9c33b2ea4 nixos/doc/releases: update the docs as promised 
This goes through a recent example of 19.09 (because the workflow
should be everchanging, so our example needs to be recent).
Lots of changes, just read idk.
 2020-09-04 10:59:06 -07:00
Julien Moutinho
b03c506178 nixos-install: add support for flakes 2020-09-04 06:56:09 +02:00
Julien Moutinho
c6a3a0f4f5 nixos-rebuild: do not depend on nix.conf to activate flakes 2020-09-04 06:56:09 +02:00
Janne Heß
8cf4ec8b97
nixos/systemd: Don't use apply for $PATH 
When not using apply, other modules can use $PATH as a list instead of
getting a colon-separated list to each /bin directory.
 2020-09-03 20:27:55 +02:00
Philipp Bartsch
c46dd4e221 nixos/doc: add opendkim changes to release notes 2020-09-03 18:03:28 +02:00
WORLDofPEACE
18348c7829
Merge pull request #96042 from rnhmjoj/loaOf 
treewide: completely remove types.loaOf
 2020-09-02 08:45:37 -04:00
José Romildo Malaquias
3b92996c0b nixos/doc: document removal of deepin in the release notes 2020-09-01 19:46:34 -03:00
rnhmjoj
bc62423a87
nixos/doc: convert loaOf options refs to attrsOf 2020-09-02 00:42:51 +02:00
rnhmjoj
20d491a317
treewide: completely remove types.loaOf 2020-09-02 00:42:50 +02:00
Robert Hensing
c914fffeba
Merge pull request #95894 from alexarice/agda-release-notes 
Agda: add release notes
 2020-09-01 12:26:14 +02:00
Robert Hensing
4841b30784
Merge pull request #94804 from hercules-ci/init-nixos-hercules-ci-agent 
nixos/hercules-ci-agent: init
 2020-08-29 10:20:14 +02:00
Florian Klink
0620184f3f nixos/lib/test*: remove perl test driver 
This has been deprecated in 20.03, and all tests have been migrated to
the python framework, effectively making this dead code.
 2020-08-27 19:45:38 +02:00
Jörg Thalheim
4c9ad3ca79
Merge branch 'master' into nginx-update 2020-08-24 13:42:11 +01:00
Robert Hensing
346a1b0ec6 nixos/hercules-ci-agent: init 2020-08-23 20:13:15 +02:00
Alex Rice
e4e0c4b8cd
Agda: add release notes 2020-08-23 10:45:38 +01:00
Michele Guerini Rocco
737f4ec73a
Merge pull request #95988 from rnhmjoj/release-notes 
nixos/release-notes: mention GRUB password support
 2020-08-23 11:39:58 +02:00
Bruno Bigras
c62fe0bea5 nixos/manual: fix typo in man-nixos-enter.xml 2020-08-22 15:08:37 -04:00
rnhmjoj
1067236150
nixos/release-notes: mention GRUB password support 2020-08-22 15:29:23 +02:00
rnhmjoj
b14e1581c8
nixos/release-notes: fix typo 2020-08-22 15:10:04 +02:00
Daniël de Kok
280147c510
Merge pull request #95489 from danieldk/rocm-3.7.0 
Update ROCm to 3.7.0
 2020-08-22 13:30:01 +02:00
Lassulus
82b424453b
Merge pull request #86632 from Atemu/undervolt-timer-optional 
Undervolt: Make timer optional
 2020-08-22 11:48:30 +02:00
Atemu
f5856db1b8 rl-2009: add note on undervolt timer changes 2020-08-22 11:02:23 +02:00
Jonathan Ringer
19d2c0cb55
nixos/release-notes: minor fixes 2020-08-21 14:41:03 -07:00
Silvan Mosberger
b6d657adbe release-notes: Mention stricter option evaluation 
As caused by https://github.com/NixOS/nixpkgs/pull/82743
 2020-08-21 14:37:32 -07:00
Silvan Mosberger
d400dcaa48 release-notes: Mention freeform modules 
As introduced by https://github.com/NixOS/nixpkgs/pull/82743
 2020-08-21 14:37:32 -07:00
Aaron Andersen
91db1c8aec
Merge pull request #87712 from aanderse/zabbix 
zabbix: 4.4.8 -> 5.0.2
 2020-08-21 17:11:55 -04:00
Daniël de Kok
95e5089607 nixos/manual: remove references to rocm-runtime-ext 
rocm-runtime-ext is not needed anymore for OpenCL image support.
 2020-08-21 08:50:51 +02:00
Aaron Andersen
b87b6abd17
Merge pull request #95294 from aanderse/postgresql-rootless 
nixos/postgresql: run ExecStartPost as an unprivileged user
 2020-08-20 19:16:23 -04:00
davidak
5a3738d22b
nixos/systemPackages: clean up (#91213) 
* nixos/systemPackages: clean up

* Update nixos/doc/manual/release-notes/rl-2009.xml

Co-authored-by: Jan Tojnar <jtojnar@gmail.com>

* Update nixos/doc/manual/release-notes/rl-2009.xml

Co-authored-by: 8573 <8573@users.noreply.github.com>

Co-authored-by: Jan Tojnar <jtojnar@gmail.com>
Co-authored-by: 8573 <8573@users.noreply.github.com>
 2020-08-20 13:45:54 +00:00
zowoq
259dcd17ff rl-2009: remove modSha256 warning note 2020-08-20 08:02:36 +10:00
Aaron Andersen
5e630bf5d3 zabbix: 4.4.8 -> 5.0.2 2020-08-18 10:30:23 -04:00
Izorkin
5c70c5eeaa nginxModules: renamed module ngx_aws_auth to aws-auth 2020-08-17 10:42:54 +03:00
Izorkin
36c95f331d nginxModules.cache-purge: 2.5 -> 2.5.1 2020-08-17 10:42:01 +03:00
Aaron Andersen
ec82ae3c39 nixos/postgresql: run ExecStartPost as an unprivileged user 2020-08-15 16:59:49 -04:00
Robert Hensing
6d0a85fe52
Merge pull request #82743 from Infinisil/partially-typed-v2 
Freeform modules
 2020-08-15 12:13:58 +02:00
Silvan Mosberger
25d75155f3
nixos/doc: Add freeform modules documentation 
Co-Authored-By: Robert Hensing <robert@roberthensing.nl>
 2020-08-14 22:49:35 +02:00
Marek Mahut
f43fa60f02
Merge pull request #95010 from StijnDW/dokuwiki 
dokuwiki: 2018-04-22b -> 2020-07-29
 2020-08-14 16:27:38 +02:00
Martin Weinelt
9c8c31b241
Merge pull request #95086 from danieldk/manual-intel-opencl 
nixos/manual: add a section about enabling OpenCL for Intel GPUs
 2020-08-14 12:09:49 +02:00
Daniël de Kok
0c135e5f85
Merge pull request #95336 from danieldk/gpu-accel-common-issues 
nixos/manual: add a section about common GPU acceleration issues
 2020-08-14 08:30:24 +02:00
Aaron Andersen
f1f4cc6e1b
Merge pull request #95231 from aanderse/mysql-cleanup 
nixos/mysql: run postStart as an unprivileged user
 2020-08-13 21:38:44 -04:00
Aaron Andersen
806253800b nixos/mysql: update release notes 2020-08-13 17:03:23 -04:00
Daniël de Kok
9c14f5d56e nixos/manual: add a section about common GPU acceleration issues 2020-08-13 19:35:47 +02:00
Daniël de Kok
2c0034d5fb
Merge pull request #91938 from spacefrogg/openafs-1.6-deprecation 
openafs: 1.6.23 -> 1.6.24, mark broken due to EOL
 2020-08-12 17:11:28 +02:00
Michael Raitza
b3c794d610 openafs: 1.6.23 -> 1.6.24, mark broken due to EOL 
Last old stable release. Enforce switch to openafs_1_8 by marking broken while
leaving a reasonable short-term alternative.

Ref #90927
 2020-08-12 15:31:11 +02:00
Florian Klink
bab13cc0df nixos/doc/manual/release-notes: document fontconfig 2.10.x config and cache removal 2020-08-12 13:40:46 +02:00
Florian Klink
921da91c8a
Merge pull request #93702 from tnias/usbguard20200723 
nixos/usbguard: rework
 2020-08-11 12:14:32 +02:00
Elis Hirwing
6be7d1c176
php: Drop PHP 7.2 support 2020-08-10 22:28:12 +02:00
Daniël de Kok
1c26e70bbc nixos/manual: add a section about enabling OpenCL for Intel GPUs 2020-08-10 16:26:42 +02:00
zowoq
cc06d7a26f buildGoModule: change doCheck default to true 2020-08-10 16:01:03 +10:00
Stijn DW
552fb94877 dokuwiki: 2018-04-22b -> 2020-07-29 2020-08-09 17:42:57 +02:00
Philipp Bartsch
ffd18cc1b1 nixos/usbguard: rework 
Use StateDirectory to create necessary directories and hardcode some
paths. Also drop file based audit logs, they can be found in the
journal. And add module option deprecation messages.
 2020-08-08 23:26:07 +02:00
Jörg Thalheim
e879d83e38
Merge pull request #92106 from ju1m/transmission 2020-08-07 14:40:17 +01:00
Julien Moutinho
2a49db6a89 transmission: apply RFC0042 and harden the service 2020-08-07 04:28:11 +02:00
Aaron Andersen
4f5fc729c7 nixos/postgresql: use a standard default value for dataDir 2020-08-05 17:31:12 -04:00
Marek Mahut
0bc37f7cb4
Merge pull request #94609 from 1000101/dokuwiki 
nixos/dokuwiki: drop SSL forcing and document incompatibility
 2020-08-05 11:54:42 +02:00
Peter Hoeg
4d8cc104a9
Merge pull request #78166 from peterhoeg/m/logitech_lcd 
nixos/lcd: add support for Logitech LCD
 2020-08-05 08:32:05 +08:00
zowoq
bf9d9cef58 doc/2009: remove trailing whitespace 2020-08-05 09:21:34 +10:00
Peter Hoeg
0c7eb9426e doc: release-note details of Logitech LCDs 2020-08-04 20:52:45 +08:00
Maximilian Bosch
76f2e271a2
Merge pull request #94600 from liff/patch-1 
nixos/manual: Fix reference to send_key
 2020-08-03 16:51:30 +02:00
1000101
15b6edc4d1 release-notes/rl-2009: fix trailing whitespace 2020-08-03 16:31:54 +02:00
1000101
7d938b5e47 release-notes/rl-2009: document dokuwiki incompatibility 2020-08-03 16:26:17 +02:00
Marek Mahut
4181ae25bf
Merge pull request #94166 from 1000101/bitcoind 
release-notes/rl-2009: amend bitcoind incompatibility
 2020-08-03 15:56:56 +02:00
Olli Helenius
446669cb5e
nixos/manual: Fix reference to send_key 2020-08-03 13:16:24 +03:00
Robert Hensing
150bf4fa3b
Merge pull request #75584 from Infinisil/settings-formats 
Configuration file formats for JSON, INI, YAML and TOML
 2020-08-02 16:58:49 +02:00
zowoq
b6ce3db981 nixos/doc/*: editorconfig fixes 2020-07-31 15:08:54 +10:00
Maximilian Bosch
ee06b3047e
Merge pull request #94253 from fadenb/graylog_3.3.3 
graylog: 3.3.2 -> 3.3.3
 2020-07-30 22:00:47 +02:00
Tristan Helmich (omniIT)
70be15c91b doc/rl-2009: Add warning on Graylog changes in version 3.3.3 2020-07-30 19:16:12 +00:00
Maciej Krüger
2d63269e0d
doc/rl-2009: document new steam module in release notes 2020-07-30 20:26:34 +02:00
Silvan Mosberger
83b16885f5
nixos/docs: Add documentation for settings options 2020-07-29 18:08:25 +02:00
1000101
89b9c3ab92 release-notes/rl-2009: amend bitcoind incompatibility 2020-07-29 12:40:51 +02:00
Marek Mahut
b415ebae97
Merge pull request #93700 from 1000101/bitcoind 
nixos/bitcoind: change to multi-instance + add tests
 2020-07-27 12:55:29 +02:00
1000101
a5ba1315c2 release-notes/rl-2009: document bitcoind incompatibility 2020-07-27 11:27:50 +02:00
Florian Klink
d5aa8ff17c
Merge pull request #93586 from makefu/pkgs/udpt/bump 
udpt: 2017-09-27 -> 3.1.1
 2020-07-23 17:54:39 +02:00
makefu
ecdc10db97
release-notes/rl-2009: add remark about udpt complete rewrite 2020-07-23 17:30:05 +02:00
Linus Heckemann
a5d20d25eb
Merge pull request #88669 from Mic92/hidpi 
nixos/hidpi: Reasonable defaults for high-density displays
 2020-07-22 17:43:03 +02:00
Daniël de Kok
5226e6b513
Merge pull request #93591 from Flakebi/vulkan-manual 
nixos/manual: add a section about Vulkan drivers
 2020-07-22 16:59:51 +02:00
Sebastian Neubauer
350f1d64af nixos/manual: add a section about Vulkan drivers 
- Add a general block about how to configure and test Vulkan
- Add a section about switching between mesa/radv and amdvlk on AMD
  GPUs.
 2020-07-22 14:41:33 +02:00
Nathan Fish
8ffa852aed
netboot: docs: building netboot should specify an arch (#75116) 
Building without specifying an arch attempts to build all,
and fails.
 2020-07-21 19:26:02 +02:00
Olli Helenius
2d8311dac9
nixos/manual: Fix reference to copy_from_host 2020-07-18 14:26:44 +03:00
Daniël de Kok
45edd3b418 nixos/manual: add a section about enabling OpenCL for AMD GPUs 
- Begin a new chapter "GPU Acceleration", this should also cover
  VA-API, OpenGL, Vulkan, etc.
- Add a general blurb about OpenCL and how to check whether OpenCL
  devices are found.
- Add a section about enabling OpenCL for AMD GPUs specifically.
 2020-07-17 13:35:49 +02:00
adisbladis
ce49f8cbd0
nixos/doc/manual/release-notes: Add release notes for subuid/subgid mappings 2020-07-13 13:22:53 +02:00
worldofpeace
747fb48c72
Merge pull request #85065 from worldofpeace/autologin-unified 
nixos/displayManager: make autoLogin options independent of DM type
 2020-07-10 00:04:41 -04:00
worldofpeace
490cd7889e nixos/displayManager: make autoLogin options independent of DM type 
Co-authored-by: volth <volth@volth.com>
 2020-07-09 21:15:35 -04:00
lewo
9534da25bf
Merge pull request #90115 from asbachb/postfix-tls 
postfix: Replaced config key by recommendation and introduced usage of system trust store
 2020-07-09 20:29:49 +02:00
Niklas Hambüchen
d4d9d9c552
Merge pull request #92122 from nh2/qemu-vm-fix-useBootLoader 
qemu-vm: Fix useBootLoader, remove `/boot` read-only restriction
 2020-07-06 22:06:20 +02:00
Fabian Möller
de00fa1041
nixos/manual: Fix invalid link reference in release notes 2020-07-05 18:01:00 +02:00
Vincent Breitmoser
6d52e2e897 nixos/nix-daemon: mention potential breakage in release notes 2020-07-05 16:53:38 +02:00
Benjamin Asbach
632104e5a4 postfix: deprecated sslCACert in favour of tlsTrustedAuthorities 
`sslCACert` was used for trust store of client and server certificates. Since `smtpd_tls_ask_ccert` defaults to no the setup of `smtpd_tls_CApath` was removed.

>By default (see smtpd_tls_ask_ccert), client certificates are not requested, and smtpd_tls_CApath should remain empty.
see http://www.postfix.org/postconf.5.html#smtpd_tls_CAfile
 2020-07-05 14:53:34 +02:00