c9c8a2c5b3
before:
- /var/run/memcached is a bad default for a socket path, since its
parent directory must be writeable by memcached.
- Socket directory was not created by the module itself -> this was
left as a burden to the user?
- Having a static uid with a dynamic user name is not very useful.
after:
- Replace services.memcached.socket by a boolean flag. This simplifies
our code, since we do not have to check if the user specifies a
path with a parent directory that should be owned by memcached
(/run/memcached/memcached.sock -> /run/memcached).
- Remove fixed uid/gid allocation. The only file ever owned by the
daemon is the socket that will be recreated on every start.
Therefore user and group ids do not need to be static.
- only create the memcached user, if the user has not specified a
different one. The major use case for changing option is to allow
existing services (such as php-fpm) opening the local unix socket.
If we would unconditionally create a user that option would be
useless.
196 lines
7.5 KiB
XML
196 lines
7.5 KiB
XML
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="sec-release-18.03">
|
|
|
|
<title>Release 18.03 (“Impala”, 2018/03/??)</title>
|
|
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="sec-release-18.03-highlights">
|
|
|
|
<title>Highlights</title>
|
|
|
|
<para>In addition to numerous new and upgraded packages, this release
|
|
has the following highlights: </para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
MariaDB 10.2, updated from 10.1, is now the default MySQL implementation. While upgrading a few changes
|
|
have been made to the infrastructure involved:
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
<literal>libmysql</literal> has been deprecated, please use <literal>mysql.connector-c</literal>
|
|
instead, a compatibility passthru has been added to the MySQL packages.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <literal>mysql57</literal> package has a new <literal>static</literal> output containing
|
|
the static libraries including <literal>libmysqld.a</literal>
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
</section>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="sec-release-18.03-new-services">
|
|
|
|
<title>New Services</title>
|
|
|
|
<para>The following new services were added since the last release:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para></para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
</section>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="sec-release-18.03-incompatibilities">
|
|
|
|
<title>Backward Incompatibilities</title>
|
|
|
|
<para>When upgrading from a previous release, please be aware of the
|
|
following incompatible changes:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
Dollar signs in options under <option>services.postfix</option> are
|
|
passed verbatim to Postfix, which will interpret them as the beginning of
|
|
a parameter expression. This was already true for string-valued options
|
|
in the previous release, but not for list-valued options. If you need to
|
|
pass literal dollar signs through Postfix, double them.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <literal>postage</literal> package (for web-based PostgreSQL
|
|
administration) has been renamed to <literal>pgmanage</literal>. The
|
|
corresponding module has also been renamed. To migrate please rename all
|
|
<option>services.postage</option> options to
|
|
<option>services.pgmanage</option>.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<emphasis role="strong">
|
|
The OpenSSH service no longer enables support for DSA keys by default,
|
|
which could cause a system lock out. Update your keys or, unfavorably,
|
|
re-enable DSA support manually.
|
|
</emphasis>
|
|
</para>
|
|
|
|
<para>
|
|
DSA support was
|
|
<link xlink:href="https://www.openssh.com/legacy.html">deprecated in OpenSSH 7.0</link>,
|
|
due to it being too weak. To re-enable support, add
|
|
<literal>PubkeyAcceptedKeyTypes +ssh-dss</literal> to the end of your
|
|
<option>services.openssh.extraConfig</option>.
|
|
</para>
|
|
|
|
<para>
|
|
After updating the keys to be stronger, anyone still on a pre-17.03
|
|
version is safe to jump to 17.03, as vetted
|
|
<link xlink:href="https://search.nix.gsc.io/?q=stateVersion">here</link>.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>cc-wrapper</literal>has been split in two; there is now also a <literal>bintools-wrapper</literal>.
|
|
The most commonly used files in <filename>nix-support</filename> are now split between the two wrappers.
|
|
Some commonly used ones, like <filename>nix-support/dynamic-linker</filename>, are duplicated for backwards compatability, even though they rightly belong only in <literal>bintools-wrapper</literal>.
|
|
Other more obscure ones are just moved.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The propagation logic has been changed.
|
|
The new logic, along with new types of dependencies that go with, is thoroughly documented in the "Specifying dependencies" section of the "Standard Environment" chapter of the nixpkgs manual.
|
|
<!-- That's <xref linkend="ssec-stdenv-attributes"> were we to merge the manuals. -->
|
|
The old logic isn't but is easy to describe: dependencies were propagated as the same type of dependency no matter what.
|
|
In practice, that means that many <function>propagatedNativeBuildInputs</function> should instead be <function>propagatedBuildInputs</function>.
|
|
Thankfully, that was and is the least used type of dependency.
|
|
Also, it means that some <function>propagatedBuildInputs</function> should instead be <function>depsTargetTargetPropagated</function>.
|
|
Other types dependencies should be unaffected.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <literal>memcached</literal> service no longer accept dynamic socket
|
|
paths via <option>services.memcached.socket</option>. Unix sockets can be
|
|
still enabled by <option>services.memcached.enableUnixSocket</option> and
|
|
will be accessible at <literal>/run/memcached/memcached.sock</literal>.
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
</section>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="sec-release-18.03-notable-changes">
|
|
|
|
<title>Other Notable Changes</title>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
ZNC option <option>services.znc.mutable</option> now defaults to
|
|
<literal>true</literal>. That means that old configuration is not
|
|
overwritten by default when update to the znc options are made.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The option <option>networking.wireless.networks.<name>.auth</option>
|
|
has been added for wireless networks with WPA-Enterprise authentication.
|
|
There is also a new <option>extraConfig</option> option to directly
|
|
configure <literal>wpa_supplicant</literal> and <option>hidden</option>
|
|
to connect to hidden networks.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The option <option>services.xserver.desktopManager.default</option> is now <literal>none</literal> by default.
|
|
An assertion failure is thrown if WM's and DM's default are <literal>none</literal>.
|
|
To explicitly run a plain X session without and DM or WM, the newly introduced option <option>services.xserver.plainX</option>
|
|
must be set to true.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The option <option>services.logstash.listenAddress</option> is now <literal>127.0.0.1</literal> by default.
|
|
Previously the default behaviour was to listen on all interfaces.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>services.btrfs.autoScrub</literal> has been added, to
|
|
periodically check btrfs filesystems for data corruption.
|
|
If there's a correct copy available, it will automatically repair
|
|
corrupted blocks.
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
</section>
|
|
</section>
|