nixpkgs/nixos/modules
Ricardo M. Correia 6feb61233b linux: make sure all config options have the same value
Currently, kernel config options whose value is "yes" always override
options whose value is "no".

This is not always desired.

Generally speaking, if someone defines an option to have the value
"no", presumably they are disabling the option for a reason, so it's
not always OK to silently enable it due to another, probably unrelated
reason.

For example, a user may want to reduce the kernel attack surface and
therefore may want to disable features that are being enabled in
common-config.nix.

In fact, common-config.nix was already silently enabling options that
were intended to be disabled in hardened/config.nix for security
reasons, such as INET_DIAG.

By eliminating the custom merge function, these config options will
now use the default module option merge functions which make sure
that all options with the highest priority have the same value.

A user that wishes to override an option defined in common-config.nix
can currently use mkForce or mkOverride to do so, e.g.:

BINFMT_MISC = mkForce (option no);

That said, this is not going to be necessary in the future, because
the plan is for kernel config options defined in nixpkgs to use a
lower priority by default, like it currently happens for other module
options.
2021-03-07 18:27:14 +01:00
..
config Merge pull request #113804 from rnhmjoj/no-udev-settle-2 2021-02-22 23:22:04 +01:00
hardware nixos/ksm: remove udev-settle dependency 2021-02-26 22:10:10 +01:00
i18n/input-method fcitx5: update doc 2021-01-24 02:10:23 +01:00
installer installer: fixup sd-card folder move from #110827 2021-02-21 16:12:54 -05:00
misc nixos: Get rid of systemConfig kernel parameter 2021-02-18 12:48:08 +01:00
profiles nixos/hidepid: drop the module as the hidepid mount option is broken 2021-02-21 13:51:37 +01:00
programs steam module: add proper steam.run as well 2021-02-22 14:35:45 -03:00
security Merge pull request #111635 from xaverdh/hide-pid-broken 2021-02-23 00:20:29 +01:00
services Merge pull request #95019 from SFrijters/xsession-env-vars 2021-02-28 13:08:34 -03:00
system linux: make sure all config options have the same value 2021-03-07 18:27:14 +01:00
tasks Merge pull request #111786 from flokli/systemd-247.3 2021-02-12 12:52:49 +01:00
testing nixos/service-runner: fix evaluation 2021-02-05 13:02:56 +01:00
virtualisation nixos/lxd: make start timeout configurable 2021-02-28 14:02:56 +01:00
module-list.nix Merge pull request #75866 from Sohalt/spnav 2021-02-26 22:21:21 +01:00
rename.nix nixos/hidepid: drop the module as the hidepid mount option is broken 2021-02-21 13:51:37 +01:00