Commit Graph

99607 Commits

Author SHA1 Message Date
Pascal Bach
a6968ad43c installing: document how to activate SSH during installation 2017-01-25 21:09:31 +01:00
Pascal Bach
01fd86723c install-device: correct command to start sshd 2017-01-25 21:09:31 +01:00
Pascal Bach
03ef04f0a4 install-device: permit root login with password
Allow password login to the installation this allows doing remote installation
via SSH. All that need to be done on the local machine is:
1. Boot from the installation media
2. Set a password with passwd
3. Enable SSH with systemctl start sshd

It is safe as root doesn't have a password by default
and SSH is disabled by default.

Fixes #20718
2017-01-25 21:09:31 +01:00
Peter Hoeg
0a4943a381 syncthing: 0.14.19 -> 0.14.21 2017-01-25 20:27:22 +01:00
Nicolò Balzarotti
9371acd80f fcrackzip: init at 1.0 2017-01-25 19:34:34 +01:00
Thomas Pham
8fa49a6351 postgis: 2.2.1 -> 2.3.1 2017-01-25 19:31:30 +01:00
Franz Pletz
516760a6fb
nixos/acme: add random delay to timer
This way we behave like good citizens and won't overload Let's Encrypt
with lots of cert renewal requests at the same time.
2017-01-25 19:15:04 +01:00
Yorick van Pelt
2a939c4b21 streamlink: 0.0.2 -> 0.3.0 2017-01-25 19:12:49 +01:00
Vladimír Čunát
278bbe3b33
add kresd service with basic options
Still celebrating today's 1.2.0 release!
2017-01-25 18:46:28 +01:00
Robin Gloster
cb30150bd5
php: fix build in case mysql is not mariadb
fixes #20986
2017-01-25 18:11:38 +01:00
Franz Pletz
2262763b1a Merge pull request #22135 from pradeepchhetri/riemann
riemann: 0.2.9 -> 0.2.12
2017-01-25 17:09:15 +01:00
Franz Pletz
34eae3f73a
riemann: fix executable with wrapper script 2017-01-25 17:06:49 +01:00
Pradeep Chhetri
b7ef0ed487
riemann: 0.2.9 -> 0.2.12 2017-01-25 17:06:21 +01:00
Robin Gloster
b79fa22b7a
tests.installer: rely on swap.target in tests
fixes #5258
2017-01-25 17:00:13 +01:00
Sander van der Burg
0f6eab52e1 xcodeenv: make it work with Xcode 8.2.1 2017-01-25 16:56:55 +01:00
aszlig
ca7923f111
nss: Provide a more stable URL for pkgconfig patch
Since 2bf0f84f1f, the patch isn't in our
repository anymore but being fetched from its origin.

However, the origin URL is always pointing to the latest master version
of Gentoo. This has the downside that whenever Gentoo changes the patch,
our build of NSS will be broken.

Also, I'm providing a comment here indicating what the patch does.

As to the reason *why* the patch is there, I vaguely remeber seeing a
few libraries/applications that depend on NSS relying that there's a
pkgconfig file.

After checking a few distros, they all seem to have it:

https://anonscm.debian.org/cgit/pkg-mozilla/nss.git/tree/debian?id=5306c4192d6bc0a2685842e9fd533196e7302297
https://apps.fedoraproject.org/packages/nss-devel/
https://git.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/nss&id=3f7f54b357e23b7ac1cec849693334ad29be07d2

The issue is already reported upstream but hasn't been fixed yet:

https://bugzilla.mozilla.org/show_bug.cgi?id=530672

Tested by building nss on x86_64-linux (the hash didn't change anyway,
but just to be sure).

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-01-25 16:25:00 +01:00
John Ericson
f47757aaf0 Merge pull request #22133 from Ericson2314/no-splice
top-level: no more need to expose `splicedPackages`
2017-01-25 09:31:13 -05:00
John Ericson
c869fe022e top-level: no more need to expose splicedPackages
This was just done temporarily on the last cross-overhauling PR for
testing purposes.
2017-01-25 09:24:55 -05:00
Vladimír Čunát
5d5fb4a2fb
knot-resolver: init at 1.2.0
Celebrating today's release!
2017-01-25 15:22:09 +01:00
Ricardo M. Correia
30c3fdedfe mkpasswd: make the package high priority
Otherwise, if you have the `expect` package installed, its `mkpasswd`
program can override the one from the `mkpasswd` package. If that
happens, the NixOS documentation instructions for generating a hashed
password to put into `configuration.nix` will not work.
2017-01-25 15:19:26 +01:00
Bob van der Linden
d9987f360a nginx: added serverName option for virtualHosts
This allows overriding the `server_name` attribute of virtual
hosts. By doing so it is possible to have multiple virtualHost
definitions that share the same `server_name`. This is useful in
particular when you need a HTTP as well as a HTTPS virtualhost: same
server_name, different port.
2017-01-25 14:55:55 +01:00
Franz Pletz
b9b95aa4d4 Merge pull request #22034 from mayflower/conntrack-helpers
Disable conntrack helper autoloading by default
2017-01-25 14:18:41 +01:00
Vincent Laporte
d40b680101 coq-8.4: fix build of ssreflect and mathcomp 2017-01-25 13:14:31 +00:00
Vincent Laporte
42bf99ef44 coqPackages.{ssreflect,mathcomp}: fix build with Coq-8.6
by adding `findlib` as a build input.

Also clean `default.nix` a little bit.
2017-01-25 13:06:11 +00:00
vbgl
635ac15845 Merge pull request #21879 from vbgl/coq-clean
Coq: minor refactoring
2017-01-25 14:05:38 +01:00
Vladimír Čunát
e5229c63ad
t1lib: add a note about CVE fixes 2017-01-25 13:53:55 +01:00
Michael Raskin
05d7ece4b6 Merge pull request #22040 from NeQuissimus/zulu
zulu: init at 8.19.0.1
2017-01-25 12:31:29 +00:00
Graham Christensen
04ae7febc8
cvs: patch against CVE-2012-0804 (heap overflow) 2017-01-25 07:24:19 -05:00
Arseniy Seroka
87a3ee0c40 Merge pull request #22125 from romildo/upd.lumina
lumina: 1.1.0-p1 -> 1.2.0-p1
2017-01-25 13:29:25 +03:00
Vincent Laporte
798a87159b Coq: propagates the findlib package
So that Coq libraries that need it can easyly use it
2017-01-25 10:29:13 +00:00
Vincent Laporte
9b949be617 coq: minor refactoring 2017-01-25 10:29:13 +00:00
Vincent Laporte
a30e8db9f0 coq: merge files 8.5.nix and 8.6.nix into default.nix 2017-01-25 10:29:13 +00:00
romildo
4963b5014e lumina: 1.1.0-p1 -> 1.2.0-p1 2017-01-25 07:11:09 -02:00
Jörg Thalheim
eb0192b83c Merge pull request #22119 from rnhmjoj/caddy
caddy: 0.9.2 -> 0.9.5
2017-01-25 09:47:19 +01:00
Domen Kožar
f87deb0b3a Merge pull request #22101 from zimbatm/no-md5
Bye bye MD5
2017-01-25 09:07:48 +01:00
Vincent Laporte
453a3838f9 ocamlPackages.mtime: init at 0.8.3
Mtime is an OCaml module to access monotonic wall-clock time.

Homepage: http://erratique.ch/software/mtime
2017-01-25 06:55:59 +00:00
Vincent Laporte
c57715570a freealut: fix build on Darwin 2017-01-25 06:54:07 +00:00
Frederik Rietdijk
cad9bdc78d Merge pull request #22025 from lsix/update_django_guardian
Update django guardian
2017-01-25 07:48:53 +01:00
Domen Kožar
b5c1b8eb67 Merge pull request #22118 from LumiGuide/ghc802-cleanup
ghc-8.0.2: remove unused fetchFilteredPatch function
2017-01-25 06:39:28 +01:00
Daniel Peebles
95add2c2f7 Merge pull request #22103 from copumpkin/automatic-kafka-broker-id
apache-kafka service: change default brokerId to -1
2017-01-24 22:17:03 -05:00
José Romildo Malaquias
942a60697d terminology: 0.9.1 -> 1.0.0 (#22115) 2017-01-25 03:02:12 +01:00
Graham Christensen
129e90a422 Merge pull request #22122 from peterhoeg/u/db
dropbox: 17.4.33 -> 18.4.32
2017-01-24 20:00:00 -05:00
Franz Pletz
8d5a4c53b8
nixos/release-notes: document conntrack helper changes 2017-01-25 01:14:05 +01:00
Franz Pletz
2d9152d509
nixos/tests/nat: add test for conntrack helper autoloading 2017-01-25 01:14:05 +01:00
Franz Pletz
8322a12ef2
firewall: disable conntrack helper autoloading by default
This was disabled in the Linux kernel since 4.7 and poses a security risk
if not configured properly.

https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=486dcf43da7815baa615822f3e46883ccca5400f
2017-01-25 01:14:04 +01:00
Joachim Fasting
c50c551142
grsecurity: 4.8.16-201701062021 -> 4.8.17-201701151620 2017-01-25 00:58:57 +01:00
Joachim Fasting
482c67af70
grsecurity: adapt new to mirror url structure 2017-01-25 00:58:54 +01:00
Joachim Fasting
0501e49695
electrum: 2.7.12 -> 2.7.18
See https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES
2017-01-25 00:58:52 +01:00
Joachim Fasting
bdfe638f31
tor: 0.2.8.12 -> 0.2.9.9 2017-01-25 00:58:37 +01:00
Franz Pletz
403fdd737e
linux: remove canDisableNetfilterConntrackHelpers feature
This feature is available in all kernels in nixpkgs.
2017-01-25 00:28:55 +01:00