Joerg Thalheim
1406e249b3
krb5: add deprecation date for old configuration
2017-10-03 11:01:05 +01:00
Joachim F
cb3d443787
Merge pull request #29452 from jerith666/pfix-srsd-1709
...
nixos/pfix-srsd: add module
2017-10-03 00:51:59 +00:00
Bob van der Linden
9d841295f3
gogs: avoid creating symlinks each run
2017-10-02 22:11:46 +02:00
Wei-Ming Yang
7e4e2667ae
softether: 4.18 -> 4.20
2017-10-03 01:35:20 +08:00
The-M1k3y
0f2b46cdba
nixos/gogs: fixed user creation if non-default user
2017-10-02 15:53:30 +02:00
Graham Christensen
5af263c2af
Merge pull request #27468 from jtojnar/fix/pinentry-gnome
...
pinentry: add GNOME frontend
2017-10-02 07:29:23 -04:00
Jörg Thalheim
2354e0f05a
cloud-utils: 0.29 -> 0.30
2017-10-02 09:11:20 +01:00
Ruben Maher
06e15e59f9
nixos/krb5: complete rewrite
...
The `krb5` service was a bit lacking.
Addresses NixOS/nixpkgs#11268 , partially addresses NixOS/nixpkgs#29623 .
2017-10-02 14:30:19 +10:30
WilliButz
7d09fc6ea7
nixos/tests: rewrite pgjwt test
...
- now using the test contained in the pgjwt source repo
- also compatible with the new `superUser` option of the
`postgresql` service
2017-10-01 20:12:58 +02:00
Pascal Bach
2239dc6234
glusterfs service: fix issues with useRpcbind
2017-10-01 19:39:22 +02:00
Nikita Uvarov
a2ce4f25fe
17.09 release notes: fix typo
2017-10-01 12:44:06 +02:00
Jan Tojnar
3f7e3db744
pinentry: make GTK3 the default front-end
...
See: https://github.com/NixOS/nixpkgs/issues/18559
2017-10-01 01:40:03 +02:00
Robin Gloster
40ed226507
treewide: mark a bunch of failing builds as broken
...
(cherry picked from commit 23fdbaa37599f490435056b9865023870656571b)
[dezgeg: Un-mark shotcut, tokei & uchiwa that do build on master]
2017-10-01 00:26:52 +03:00
Joachim F
74db6fabcb
Merge pull request #29868 from nh2/nh2-glusterfs-improvements-for-17.09-master
...
glusterfs service: a few fixes and improvements
2017-09-30 12:19:19 +00:00
Eric Litak
f46616db5a
ipfs: disable autoMigrate option for now
2017-09-29 18:07:55 -07:00
Rok Garbas
748ef34f09
assertion should check for encrypted.label of the defined fileSystem
2017-09-29 19:55:28 +02:00
Joerg Thalheim
44b6a1509d
nixos/bcc: init module
...
Looks trival, but it is easy to make the mistake
to add linuxPackages.bcc to systemPackages,
which breaks if the not the default kernel is used.
2017-09-29 15:18:25 +01:00
Joerg Thalheim
5572062674
nixos/sysdig: init module
2017-09-29 15:01:21 +01:00
Franz Pletz
5b8a798137
17.09 release notes: mention KDE upgrades
2017-09-29 01:52:17 +02:00
Franz Pletz
c22d717c75
17.09 release notes: fix typos & ordering
2017-09-29 01:52:17 +02:00
Peter Hoeg
963435a462
Merge pull request #29748 from fadenb/security.pam.usb_link_fix
...
security.pam.usb: fix url
2017-09-29 07:49:10 +08:00
Franz Pletz
49f175cd0c
17.09 release notes: add network interface rename note
...
Fixes #29197 .
2017-09-29 00:07:37 +02:00
Robin Gloster
83405798e6
17.09 release notes: update information on gitlab
2017-09-28 23:14:31 +02:00
Robin Gloster
57ed9e7e1d
gitlab: 9.5.5 -> 10.0.2
2017-09-28 23:14:31 +02:00
Jörg Thalheim
12ac88af1d
Merge pull request #29890 from mbrgm/nullmailer-fix
...
nixos/nullmailer: fixes and `remotesFile` option
2017-09-28 21:29:37 +01:00
Cray Elliott
d4bdf302a3
nvidia-x11: fix eval error from 4ef82339c9
2017-09-28 13:11:16 -07:00
Eelco Dolstra
6c72efe0ba
Don't generate instance-store AMIs
...
These are obsolete, use EBS AMIs instead.
2017-09-28 17:33:13 +02:00
Jan Tojnar
dfdfb97f0f
nixos/tests/gnome3-gdm: Increase memory limit
...
The test was failing on x86_64 prematurely due to memory being exhausted.
See also 3b9f0c6a46
2017-09-28 17:20:23 +02:00
Robin Gloster
4ca4d6afca
18.03 release notes: reformat
2017-09-28 16:41:20 +02:00
Robin Gloster
a19c52a101
17.09 release notes: reformat and generate added services
2017-09-28 16:41:20 +02:00
Tristan Helmich
c6761f8578
security.pam.usb: link to wiki on github.com
...
pamusb.org no longer serves the intended content.
2017-09-28 16:00:28 +02:00
Robin Gloster
990b5a5388
release.nix: add mesos test back
...
This is working now again
2017-09-28 14:25:17 +02:00
Robin Gloster
4aeb38e5b9
Revert "kubernetes: fix hashes after dockerTools change"
...
This reverts commit 9ba024f6d8
.
2017-09-28 14:09:49 +02:00
Robin Gloster
69344de783
Revert "dockerTools.pullImage: release note regarding sha256 argument value"
...
This reverts commit ea6d37c2bb
.
2017-09-28 14:09:49 +02:00
Joerg Thalheim
91eb6cf82c
nullmailer: simplify config generation
2017-09-28 11:04:39 +01:00
Marius Bergmann
e741cc4881
nullmailer: add remotesFile
option
...
The current `remotes` option is a string option containing nullmailer remote
definitions. However, those definitions may contain secret credentials and
should therefore not be put world-readable in the nix store.
I added a `remotesFile` option, which allows to specify a path to the remotes
definition file instead. This way, the definitions can be kept outside of the
nix store with more secure file permissions.
2017-09-28 08:52:21 +02:00
Marius Bergmann
02e89de71c
nullmailer: use proper description for remotes
option
2017-09-28 08:52:21 +02:00
Marius Bergmann
f9d64a068b
nullmailer: fix relative -> absolute path in preStart script
2017-09-28 08:52:21 +02:00
Franz Pletz
d0435ba032
network-interfaces: device routes for default gateway
...
Iff interface is set, it makes sense to add device route by default.
2017-09-28 02:14:07 +02:00
Jörg Thalheim
0a6fca15fd
Merge pull request #29881 from volth/patch-67
...
nixos/tinc: add "restartTriggers" back
2017-09-28 00:57:26 +01:00
Ryan Mulligan
c6f513b56a
nixos/monit: install monit as system package, use default config file path
2017-09-28 01:20:20 +02:00
volth
ddd13e1375
nixos/tinc: add "restartTriggers" back
...
Add "restartTriggers" back to restart the Tinc daemon when its peer is removed.
Reverted #27660
2017-09-27 23:16:02 +00:00
Robin Gloster
d05b0b6b70
mesos test: fix python handling
...
Still does not succeed but advances further
(cherry picked from commit 30d09f717aa94a78105bff22da548b904887b394)
2017-09-28 01:15:41 +02:00
Bjørn Forsman
3c6eb3a247
nixos/iso-image.nix: add top-level /version.txt file
...
This makes it easy to identify which NixOS version is written to an USB
stick without actually booting it.
2017-09-28 00:54:28 +02:00
Niklas Hambüchen
f4c53f1940
consul service: Restart on failure.
...
Consul is a service you typically want to have running all the time;
it's not supposed to quit by itself.
2017-09-28 00:41:15 +02:00
Franz Pletz
8237fa43d3
Merge pull request #29697 from zimbatm/gdm-on-nvidia
...
GDM fixes
2017-09-28 00:20:18 +02:00
Rostislav Beneš
0cad98dde1
nixos/xserver,gdm: let GDM handle X server verbosity.
2017-09-28 00:18:57 +02:00
Rostislav Beneš
4ef82339c9
nixos/gdm,nvidia: new options to enable GDM on Wayland and disabling it for nvidia drivers.
2017-09-28 00:18:57 +02:00
Rostislav Beneš
4f91397c98
nixos/nvidia: populating /dev with nvidia devices at boot
2017-09-28 00:18:57 +02:00
Jörg Thalheim
2b8cba2ff5
Merge pull request #29874 from mbrgm/znc-fix
...
znc: fix openFirewall option
2017-09-27 23:08:51 +01:00
Joachim Fasting
a06f839439
nixos/release-notes: notable changes to the dnscrypt-proxy service
2017-09-27 23:47:15 +02:00
Franz Pletz
0ee866ed72
kbd service: systemd-vconsole-setup is triggered by udev
...
cc #22470
2017-09-27 23:38:29 +02:00
Franz Pletz
725dee203a
wpa_supplicant service: restart instead of stop & start
...
We now wait for dhcpcd to acquire a lease but dhcpcd is restarted on
system activation. As wpa_supplicant is stopped while dhcpcd is
restarting a significant delay is introduced on systems with wireless
network connections only. This changes the wpa_supplicant service to
also be restarted together with dhcpcd in case both services were
changed.
2017-09-27 23:38:03 +02:00
Alexander Ried
4a2442032e
Revert "kbd service: use /dev/tty1 for systemd-vconsole-setup"
...
This reverts commit 0c81594a29
.
It's no longer needed since systemd-vconsole-setup enumerates all ttys
until it finds a suitable one since systemd v234.
2017-09-27 23:37:24 +02:00
Joerg Thalheim
23f398012b
nixos: skip restarting systemd-logind to not break x11
2017-09-27 22:28:27 +01:00
Marius Bergmann
dd50575d5a
znc: fix openFirewall option
...
The current version is broken:
- there's no `openFirewall` attribute directly in the `cfg` set
- the `port` option is an attribute of the `confOptions` set
I used the proper attribute for the firewall port and moved the `openFirewall`
option directly up to the `services.znc` set, as it's rather a general option
for the whole service than a znc-specific option (which are located inside the
`confOptions` set).
2017-09-27 22:18:03 +02:00
Robin Gloster
34750bb51c
17.09 release notes: redis cluster mass-restart needed
...
see #29516
2017-09-27 22:15:13 +02:00
Niklas Hambüchen
18eecae4b6
glusterfs service: Change default killMode to "control-group".
...
This is a better default for NixOS because it ensures that config
changes happen fully when NixOS users expect it.
2017-09-27 20:54:13 +02:00
Niklas Hambüchen
08f7e4516c
glusterfs service: Ensure log directory exists for glustereventsd.
...
Prevents glustereventsd failing at startup in case it starts
before glusterd has started (whose `preStart` would also
create the needed directory).
2017-09-27 20:53:42 +02:00
Niklas Hambüchen
e233a518bd
glusterfs service: Add killMode and stopKillTimeout options
2017-09-27 20:53:39 +02:00
Vladimír Čunát
f2955e4fde
manuals: fixup steam note, as the change is in 17.09
...
I didn't notice the cherry-pick, but Globin found out immediately.
/cc #29180 .
2017-09-27 20:33:24 +02:00
Vladimír Čunát
4013b381b3
manuals: document removal of newStdcpp from steam
...
/cc #29180 .
2017-09-27 20:12:06 +02:00
Niklas Hambüchen
bd54b72676
glusterfs service: Add settings to disable rpcbind and the events daemon.
...
See also https://github.com/NixOS/nixpkgs/pull/22225#pullrequestreview-26459886
2017-09-27 19:51:42 +02:00
Niklas Hambüchen
5e2815dfb7
glusterfs service: Don't make it a prerequisite of network-online.target.
...
This introduces dependency cycles.
A network file system to be running is not required for a network
connection to be available.
19759cfeab (commitcomment-22044519)
2017-09-27 19:17:23 +02:00
Rodney Lorrimar
34eefdfb9d
nixos/release-notes: MySQL backup service breaking changes
2017-09-27 18:44:49 +02:00
Rodney Lorrimar
56eba66f77
mysqlBackup service: let it work with default settings
...
* Grants enough privileges to the configured user so that it can run
mysqldump.
* Adds a nixos test.
* Use systemd timers instead of a cronjob (by @fadenb).
* Creates a new user for backups by default, instead of using mysql
user.
* Ensures that backup user has write permissions on backup location.
* Write backup to a temporary file before renaming so that a failed
backup won't overwrite the previous backup, and so that the backup
location will never contain a partial backup.
Breaking changes:
* Renamed period to calendar to reflect the change in how to
configure the backup time.
* A failed backup will no longer result in cron sending an e-mail --
users' monitoring systems must be updated.
Resolves #24728
2017-09-27 18:44:49 +02:00
Joerg Thalheim
75ba415fbc
nixos/tinc: remove useless script argument
...
ExecStart is sufficient and more transparent to the user.
2017-09-27 17:57:39 +02:00
Joerg Thalheim
ad8cb0917f
nixos/tinc: do not add Device= by default
...
tinc can figure this out based on DeviceType.
I also got `/dev/net/tun FD in bad state` after a particular upgrade.
2017-09-27 17:57:39 +02:00
Eelco Dolstra
79d547b4bb
nix-daemon: Bump the default number of build users
...
While it's annoying to pollute the user database with a lot of nixbld*
users, 10 users is really too low for many modern systems.
2017-09-27 17:13:16 +02:00
Peter Simons
99e24590cb
nixos(spamassassin): fix trailing whitespace
2017-09-27 14:50:52 +02:00
Peter Simons
bfab392e6e
nixos(spamassassin): provide /etc/spamassassin to fix sa-learn et al
...
Spamassassin expects its system-wide configuration at /etc/spamassassin, and
some user tools (like sa-learn) need to read those configuration files.
Therefore, we provide a symlink from /etc/spamassassin to the appropriate Nix
store path to make sure those tools work without the user having to pass an
elaborate --siteconfig path that, potentially, changes every time the system
updates.
Fixes https://github.com/NixOS/nixpkgs/issues/29414 .
2017-09-27 14:50:52 +02:00
Robin Gloster
6ab200b066
17.09 release notes: fix typo
2017-09-26 22:40:02 +02:00
Daniel Peebles
79d8ccf4f0
Merge pull request #28777 from copumpkin/installer-chroot
...
nixos-install: re-enable --chroot option
2017-09-26 12:23:19 -07:00
Dan Peebles
186c120bed
nixos-install: re-enable --chroot option
...
I forgot to implement it the first time around. Whoops!
2017-09-26 07:25:14 -07:00
Jörg Thalheim
c74418a4e6
Merge pull request #29426 from Mic92/zfsUnstable
...
nixos/zfs: import encrypted datasets by default for zfsUnstable
2017-09-26 09:10:44 +01:00
Jörg Thalheim
9164517c18
nixos/zfs: import encrypted datasets by default for zfsUnstable
2017-09-26 09:08:53 +01:00
Jörg Thalheim
b303aa0155
Merge pull request #29762 from samueldr/pr/update-mediawiki
...
mediawiki: 1.27.3 -> 1.29.1
2017-09-26 08:04:08 +01:00
Robin Gloster
3414265efa
17.09 release notes: add module changes
2017-09-26 03:28:05 +02:00
Rodney Lorrimar
151b34460c
nixos/release-notes: MySQL declarative users/databases
...
Documents a possible migration step required to use the new options.
2017-09-26 02:22:31 +02:00
Jörg Thalheim
bda2d25a50
Merge pull request #28856 from jtojnar/at-spi2-core
...
gnome3.at-spi2-core: fix service not found error
2017-09-26 00:39:49 +01:00
Pavel Goran
cee657f9a3
nixos/gitolite: add enableGitAnnex option
2017-09-25 22:03:00 +02:00
Joerg Thalheim
194c4002b6
wireguard: fix function for adding routes
2017-09-25 20:42:03 +01:00
Jörg Thalheim
08b827ae8e
Merge pull request #29753 from andir/wireguard-allowed-ips-as-route-optional
...
networking.wireguard: added `allowedIpsAsRoutes` boolean to control p…
2017-09-25 20:32:11 +01:00
Andreas Rammhold
846070e028
networking.wireguard: added allowedIpsAsRoutes
boolean to control peer routes
...
Sometimes (especially in the default route case) it is required to NOT
add routes for all allowed IP ranges. One might run it's own custom
routing on-top of wireguard and only use the wireguard addresses to
exchange prefixes with the remote host.
2017-09-25 21:30:52 +02:00
Joachim F
ffd6cbe3d1
Merge pull request #28503 from phile314/fusion-inventory
...
Fusion inventory: Init at 2.3.18
2017-09-25 12:58:44 +00:00
Franz Pletz
263185aa68
nixos/network-interfaces: ensure slave interfaces are up
...
Fixes #28620 .
2017-09-25 14:06:38 +02:00
Franz Pletz
13a110e696
nixos/network-interfaces: cannot delay device units
...
Systemd is complaining that it can't delay the startup of device units.
We have a before dependency on the respective device unit for every
netdev service, which doesn't make any sense because we create the
actual interface in this service.
2017-09-25 14:06:38 +02:00
Franz Pletz
3a670daa98
nixos/network-interfaces: IPs must always be set
...
Previously, depending on the environment and the type of interface that
was created, the configured IPs of an interface wouldn't be applied on a
nixos-rebuild switch. It works after a reboot.
This patch ensures that the network-addresses service is started
either via the network-link service or if the networking target is
activated (i.e. on system activation).
Fixes #28474 #16230 .
2017-09-25 14:06:38 +02:00
Silvan Mosberger
a8c97ad23e
nixos/radicale: fix default version ( #29743 )
2017-09-25 10:18:42 +00:00
Philipp Hausmann
1a23ff8a13
FusionInventory: Code cleanup
2017-09-25 10:39:11 +02:00
Philipp Hausmann
6b788e36df
FusionInventory: Add NixOS module.
2017-09-25 10:39:11 +02:00
Samuel Dionne-Riel
0b1c73f4da
mediawiki: 1.27.3 -> 1.29.1
2017-09-24 22:49:22 -04:00
Jörg Thalheim
975c7b2204
Merge pull request #29450 from jerith666/djb-1709
...
Add modules for tinydns and dnscache from djbdns
2017-09-24 15:39:29 +01:00
Joerg Thalheim
735b41c34f
nixos/tinydns: default data to empty string
...
(not strictly required to start the service)
2017-09-24 15:38:25 +01:00
Kranium Gikos
412fa16bff
influxdb sevice: make postStart test work with non-localhost configurations ( #29734 )
...
make postStart test work with non-localhost configurations
2017-09-24 15:37:17 +01:00
Jörg Thalheim
d20bd77c93
Merge pull request #29717 from fare-patches/nfsd
...
nfsd: add extraNfsdConfig
2017-09-24 15:13:42 +01:00
Robin Gloster
43404d9acf
systemd-tmpfiles: fix docs
...
We have been doing this since 4e4161c212
2017-09-24 13:17:46 +02:00
Jan Tojnar
69698ec11c
gnome3: only maintain single GNOME 3 package set ( #29397 )
...
* gnome3: only maintain single GNOME 3 package set
GNOME 3 was split into 3.10 and 3.12 in #2694 . Unfortunately, we barely have the resources
to update a single version of GNOME. Maintaining multiple versions just does not make sense.
Additionally, it makes viewing history using most Git tools bothersome.
This commit renames `pkgs/desktops/gnome-3/3.24` to `pkgs/desktops/gnome-3`, removes
the config variable for choosing packageset (`environment.gnome3.packageSet`), updates
the hint in maintainer script, and removes the `gnome3_24` derivation from `all-packages.nix`.
Closes : #29329
* maintainers/scripts/gnome: Use fixed GNOME 3 directory
Since we now allow only a single GNOME 3 package set, specifying
the working directory is not necessary.
This commit sets the directory to `pkgs/desktops/gnome-3`.
2017-09-24 12:15:50 +01:00
Robin Gloster
9ba024f6d8
kubernetes: fix hashes after dockerTools change
2017-09-24 12:09:07 +02:00
Matej Cotman
6ef8cad2a7
kubernetes: fix tests
2017-09-24 11:44:25 +02:00