summary refs log tree commit diff
Commit message (Collapse)AuthorAge
...
* | Add a test for CUPSEelco Dolstra2013-09-26
| |
* | Remove services.ttyBackgroundsEelco Dolstra2013-09-26
| | | | | | | | This hasn't worked in a long time.
* | Remove the portmap moduleEelco Dolstra2013-09-26
|/ | | | It's obsoleted by rpcbind.
* Fix duplicated environment valuesEelco Dolstra2013-09-25
| | | | | | | | | | | All profileVariables listed each profile twice (e.g. $PATH contained $HOME/.nix-profile/bin twice). This is because mergeAttrsWithFunc is broken (and deprecated): nix-repl> :p mergeAttrsWithFunc concat { x = [1]; } { y = [2]; } { x = [ 1 ]; y = [ 2 2 ]; } So use zipAttrsWith instead.
* Fix bashrc regressionEelco Dolstra2013-09-25
| | | | | | | | | | | Interactive non-login shells should not source /etc/profile, otherwise environment variables set by the user will get clobbered. For example: $ export PERL5LIB=/foo $ bash $ echo $PERL5LIB /home/eelco/.nix-profile/lib/perl5/site_perl:/nix/var/nix/profiles/default/lib/perl5/site_perl:/run/current-system/sw/lib/perl5/site_perl:/home/eelco/.nix-profile/lib/perl5/site_perl:/nix/var/nix/profiles/default/lib/perl5/site_perl:/run/current-system/sw/lib/perl5/site_perl
* nvidia-x11: Put nvidia.icd in /etc/OpenCL/vendorsRickard Nilsson2013-09-24
| | | | This makes OpenCL work with Nvidia cards (tested with darktable).
* environment.promptInit is now programs.<shell>.promptInitShea Levy2013-09-24
| | | | Signed-off-by: Shea Levy <shea@shealevy.com>
* Don't break compatibility with pre-1.6 nixShea Levy2013-09-24
| | | | Signed-off-by: Shea Levy <shea@shealevy.com>
* Make environment variables overridableEelco Dolstra2013-09-24
|
* Don't generate /etc/environmentEelco Dolstra2013-09-24
| | | | | /etc/environment, if it exists, should be a list of NAME=VALUE pairs, not a shell script. See the pam_env manpage.
* Add option systemd.automounts, for definining automount unitsRickard Nilsson2013-09-23
|
* In environment.variables, unify "value" and "list"Eelco Dolstra2013-09-23
|
* Merge pull request #256 from oxij/shells-environmentMathijs Kwik2013-09-23
|\ | | | | | | | | I tested the previous "version" and found my environment to be exactly the same. Let's start discussing possible extensions/improvements somewhere else. For now it's a nice improvement.
| * Add support for Zsh as an alternative (or not) default (or not) interactive ↵Jan Malakhovski2013-09-23
| | | | | | | | shell.
| * Radically change the way NixOS handles environment variables and make it ↵Jan Malakhovski2013-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | possible not to use Bash as the default interactive shell. This change does two things: * "NixOSizes" environment variables generation. This allows some more error-checking and opens possibilities for a modular environment configuration. From now on the most of environment variables are generated directly by the nix code. Generating sh code that generates environment variables is left in a few places where nontrivial access to a local environment state is needed. * By doing the first change this patch untangles bash from the environment configuration and makes it trivial to add a support for other non bash-compatible shells. Now to the sad part. This change is quite large (and I'm not sure it's possible to split it) and yet is not quite complete, it needs some changes to nixpkgs to be perfect. See !!! comments in modules/config/shells-environment.nix. Main principle behind this change is "change environment generation and nothing else". In particular, shell configuration principles stay exactly the same as before.
* | Fix bug in NetworkManager name server configurationRickard Nilsson2013-09-23
| |
* | Fix saving the ALSA sound card stateEelco Dolstra2013-09-22
| | | | | | | | | | | | | | This didn't work reliably because it raced with the remounting of /. So if you were unlucky, then / was read-only by the time we ran "alsactl store". Now the sound card state is saved before anything is unmounted/remounted.
* | Fix broken systemd shutdown servicesEelco Dolstra2013-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The services systemd-random-seed-save.service and systemd-update-utmp-shutdown.service from systemd 203 don't work, because they have a RequiresMountFor dependency on /var/lib and /var/log. Such a dependency produces a cycle, causing systemd to drop those services: Fixing conflicting jobs by deleting job poweroff.target/stop Deleting job systemd-poweroff.service/stop as dependency of job poweroff.target/stop Deleting job umount.target/stop as dependency of job systemd-poweroff.service/stop Deleting job -.mount/start as dependency of job umount.target/stop Deleting job systemd-random-seed-save.service/start as dependency of job -.mount/start Deleting job systemd-update-utmp-shutdown.service/start as dependency of job -.mount/start Dropping the RequiresMountFor doesn't work either, because then /var/... may have meen unmounted or remounted read-only. Upstream systemd fixes this by doing the actual work from an ExecStop action in an already-running service than conflicts with shutdown.target. So I backported that here. The main consequence is that wtmp shutdown records now get written properly. The main lesson: shutdown.target is useless for pulling in services during shutdown if they need to write anywhere.
* | Fix service descriptionEelco Dolstra2013-09-22
| |
* | Log console logins in /var/log/wtmpEelco Dolstra2013-09-22
| |
* | Remove unused runlevel targetsEelco Dolstra2013-09-22
| |
* | Write a reboot record to /var/log/wtmpEelco Dolstra2013-09-22
| |
* | services.cgminer.enable: improve descriptionBjørn Forsman2013-09-22
| | | | | | | | | | So that a search for "bitcoin" in the configuration.nix(5) man page yields a hit.
* | Merge pull request #257 from oxij/bind-forwardersPeter Simons2013-09-18
|\ \ | | | | | | bind: allow forwarders to differ from nameservers
| * | bind: allow forwarders to differ from nameserversJan Malakhovski2013-09-17
| | |
* | | manual: fix typo, #254.Evgeny Egorochkin2013-09-18
| |/ |/|
* | Regression test for blkio functionalityEelco Dolstra2013-09-17
| |
* | modules/misc/ids.nix: document the fact that the uid for tcpcryptd is ↵Peter Simons2013-09-17
|/ | | | hard-coded in the daemon
* Set CURL_CA_BUNDLE env variable for nix-daemon to allow pulling from a ↵Rob Vermaas2013-09-16
| | | | binary cache on https. Did not add to nix.envVars to avoid being added to shellInit.
* Add kexec supportEelco Dolstra2013-09-16
| | | | | | | | | You can now do a fast reboot (bypassing the BIOS, which may take several minutes on servers) by running ‘systemctl kexec’. Unfortunately the QEMU test for this is unreliable due to a QEMU bug (it randomly crashes with a message like ‘Guest moved used index from 8 to 0’), so it's commented out.
* nixos-install: Fix copying from the CDEelco Dolstra2013-09-16
| | | | | | | Nix 1.6 doesn't run the copy-from-other-stores substituter by default anymore, so turn it on explicitly. http://hydra.nixos.org/build/6144173
* Test whether the transparent fetchurl cache (tarballs.nixos.org) worksEelco Dolstra2013-09-16
| | | | | | | Testing this is useful in any case, but it's necessary now because Nix 1.6 doesn't check the binary cache for fetchurl output anymore. http://hydra.nixos.org/build/6144188
* release.nix: Automatically include all of tests/default.nixEelco Dolstra2013-09-16
|
* /etc/profile: try all nix profiles for ASPELL_CONFBjørn Forsman2013-09-14
| | | | | | | | | | | | | Aspell can only handle one dict-dir directive and currently we hardocde that to ASPELL_CONF="dict-dir $HOME/.nix-profile/lib/aspell" This means that aspell doesn't work if it is installed to the system or default nix profile -- it only works in the user profile. With this change, aspell can be installed to any of the nix profiles. If it is installed in more than one profile, the most "local" profile wins (i.e. sysadmin can set up a default, users can override it).
* lightdm: Use xserver.nix environment variables when starting XOliver Charles2013-09-12
| | | | | | | This reduces code duplication, but more importantly means that the DRI modules can be found by X enabling hardware acceleration. Close #249; the PR also refers to more about DRI modules.
* modules/misc/ids.nix: patch tcpcrypt to use our uidPeter Simons2013-09-11
| | | | | The default uid 666 exceeds SYS_UID_MAX (499), so it might not be available anyway.
* modules/services/networking/tcpcrypt.nix: specify start-up dependencies in ↵Peter Simons2013-09-11
| | | | | | systemd style Thanks, Eelco, for pointing this out.
* modules/misc/ids.nix: add a comment explaining why tcpcryptd has uid 666.Peter Simons2013-09-11
|
* Add support for opportunistic TCP encryption.Peter Simons2013-09-10
| | | | | | | | | | | | | | | | | | Set "networking.tcpcrypt.enable = true;" to enable opportunistic TCP encryption based on the user-space tools available from <http://tcpcrypt.org>. Network attackers come in two varieties: passive and active (man-in-the-middle). Passive attacks are much simpler to execute because they just require listening on the network. Active attacks are much harder as they require listening and modifying network traffic, often requiring very precise timing that can make some attacks impractical. Opportunistic encryption cannot protect against active attackers, but it *does* protect against passive attackers. Furthermore, Tcpcrypt is powerful enough to stop active attacks, too, if the application using it performs authentication. A complete description of the protocol extension can be found at <http://tools.ietf.org/html/draft-bittau-tcp-crypt-00>.
* firewall.nix: Less verbosityEelco Dolstra2013-09-10
|
* firewall.nix: Don't make missing rpfilter support a fatal errorEelco Dolstra2013-09-10
| | | | This makes upgrading from Linux 3.2 to 3.4 a bit nicer.
* Merge pull request #247 from bjornfor/wins-nsswitchMathijs Kwik2013-09-07
|\ | | | | Add services.samba.nsswins option
| * Add services.samba.nsswins optionBjørn Forsman2013-09-07
|/ | | | | This option allows for seamless WINS/NetBIOS name lookup, using nsswitch.
* types.list -> types.listOfEelco Dolstra2013-09-04
|
* Get firmware from lib/firmwareEelco Dolstra2013-09-04
|
* Update all legacy-style modulesEelco Dolstra2013-09-04
| | | | | | | | | | | | | I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
* Remove reference to non-existant config.testsEelco Dolstra2013-09-03
|
* fixiup zfs binaries in initrdJack Cummings2013-09-02
| | | | | | | | Previously, the zfs binaries were put in $out/sbin where the stage-1 patchelf wouldn't fix them up. This would fail the allowedReferences test. Move the zfs binaries to $out/bin.
* Merge pull request #240 from ivan/typo-fix-2Evgeny Egorochkin2013-09-02
|\ | | | | Fix typo and incorrect package name
| * Fix typo and incorrect package nameIvan Kozik2013-09-02
| |
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-14 10:04:35 +0000