summary refs log tree commit diff
Commit message (Collapse)AuthorAge
* idrisPackages.vdom: init at 0.6.0Márton Boros2018-05-08
|
* Merge pull request #40056 from r-ryantm/auto-update/xmrigJörg Thalheim2018-05-08
|\ | | | | xmrig: 2.5.3 -> 2.6.1
| * xmrig: restrict to x86Jörg Thalheim2018-05-08
| |
| * xmrig: 2.5.3 -> 2.6.1R. RyanTM2018-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/xmrig/versions. These checks were done: - built on NixOS - Warning: no binary found that responded to help or version flags. (This warning appears even if the package isn't expected to have binaries.) - found 2.6.1 with grep in /nix/store/wsy4vdhmqcr0mydcgp77dncf2xq906kf-xmrig-2.6.1 - directory tree listing: https://gist.github.com/ff33b30777a95f9fa0654b4da0ae47c2
* | bluemix-cli: init at 0.6.6 (#40147)Vincent Ambo2018-05-08
| | | | | | | | Adds the (non-free, binary) IBM Bluemix CLI which is required to administrate IBM Bluemix services.
* | 1password: init at version 0.4 (#40158)Joel Burget2018-05-08
| |
* | Merge pull request #40159 from Ekleog/cargo-fuzz-0.5.3Jörg Thalheim2018-05-08
|\ \ | | | | | | cargo-fuzz: init at 0.5.3
| * | cargo-fuzz: init at 0.5.3Léo Gaspard2018-05-08
| | |
* | | Merge pull request #38794 from timokau/brial-initRobert Schütz2018-05-08
|\ \ \ | | | | | | | | brial: init at 1.2.3
| * | | brial: init at 1.2.3Timo Kaufmann2018-05-08
| | | |
* | | | Merge pull request #40155 from jtojnar/gnome-3.28.2Jan Tojnar2018-05-08
|\ \ \ \ | | | | | | | | | | GNOME Updates
| * | | | gvfs: 1.36.1 → 1.36.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.mutter: 3.28.0 → 3.28.1Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-shell: 3.28.0 → 3.28.1Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-shell-extensions: 3.28.0 → 3.28.1Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-keyring: 3.28.0.2 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-contacts: 3.28.1 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gjs: 1.52.2 → 1.52.3Jan Tojnar2018-05-08
| | | | |
| * | | | evolution-data-server: 3.28.1 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.eog: 3.28.1 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-music: 3.28.1 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-maps: 3.28.1 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-logs: 3.28.0 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-characters: 3.28.0 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-calendar: 3.28.1 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.gnome-boxes: 3.28.2 → 3.28.3Jan Tojnar2018-05-08
| | | | |
| * | | | evolution: 3.28.1 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | gnome3.bijiben: 3.28.1 → 3.28.2Jan Tojnar2018-05-08
| | | | |
| * | | | meld: 3.18.0 → 3.18.1Jan Tojnar2018-05-08
| | |/ / | |/| |
* | | | Merge pull request #39526 (improve dhparams)aszlig2018-05-08
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This introduces an option that allows us to turn off stateful generation of Diffie-Hellman parameters, which in some way is still "stateful" as the generated DH params file is non-deterministic. However what we can avoid with this is to have an increased surface for failures during system startup, because generation of the parameters is done during build-time. Aside from adding a NixOS VM test it also restructures the type of the security.dhparams.params option, so that it's a submodule. A new defaultBitSize option is also there to allow users to set a system-wide default. I added a release notes entry that described what has changed and also included a few notes for module developers using this module, as the first usage already popped up in NixOS/nixpkgs#39507. Thanks to @Ekleog and @abbradar for reviewing.
| * | | | nixos: Add release notes about dhparams changesaszlig2018-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is not only to make users aware of the changes but also to give a heads up to developers which are using the module. Specifically if they rely on security.dhparams.path only. Signed-off-by: aszlig <aszlig@nix.build>
| * | | | nixos/dhparams: Add a defaultBitSize optionaszlig2018-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This allows to set the default bit size for all the Diffie-Hellman parameters defined in security.dhparams.params and it's particularly useful so that we can set it to a very low value in tests (so it doesn't take ages to generate). Regardless for the use in testing, this also has an impact in production systems if the owner wants to set all of them to a different size than 2048, they don't need to set it individually for every params that are set. I've added a subtest to the "dhparams" NixOS test to ensure this is working properly. Signed-off-by: aszlig <aszlig@nix.build>
| * | | | nixos/dhparams: Set default bit size to 2048aszlig2018-04-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | @Ekleog writes in https://github.com/NixOS/nixpkgs/pull/39526: > I think a default of 4096 is maybe too much? See certbot/certbot#4973; > Let's Encrypt supposedly know what they are doing and use a > pre-generated 2048-bit DH params (and using the same DH params as > others is quite bad, even compared to lower bit size, if I correctly > remember the attacks available -- because it increases by as much the > value of breaking the group). > Basically I don't have anything personal against 4096, but fear it may > re-start the arms race: people like having "more security" than their > distributions, and having NixOS already having more security than is > actually useful (I personally don't know whether a real-size quantum > computer will come before or after our being able to break 2048-bit > keys, let alone 3072-bit ones -- see wikipedia for some numbers). > So basically, I'd have set it to 3072 in order to both decrease build > time and avoid having people setting it to 8192 and complaining about > how slow things are, but that's just my opinion. :) While he suggests is 3072 I'm using 2048 now, because it's the default of "openssl dhparam". If users want to have a higher value, they can still change it. Signed-off-by: aszlig <aszlig@nix.build>
| * | | | nixos/dhparams: Clean up module expressionaszlig2018-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | First of all let's start with a clean up the multiline string indentation for descriptions, because having two indentation levels after description is a waste of screen estate. A quick survey in the form of the following also reveals that the majority of multiline strings in nixpkgs is starting the two beginning quotes in the same line: $ find -name '*.nix' -exec sed -n -e '/=$/ { n; /'\'\''/p }' {} + | wc -l 817 $ find -name '*.nix' -exec grep "= *'' *\$" {} + | wc -l 14818 The next point is to get the type, default and example attributes on top of the description because that's the way it's rendered in the manual. Most services have their enable option close to the beginning of the file, so let's move it to the top. Also, I found the script attribute for dhparams-init.service a bit hard to read as it was using string concatenation to split a "for" loop. Now for the more substantial clean ups rather than just code style: * Remove the "with lib;" at the beginning of the module, because it makes it easier to do a quick check with "nix-instantiate --parse". * Use ConditionPathExists instead of test -e for checking whether we need to generate the dhparams file. This avoids spawning a shell if the file exists already and it's probably more common that it will exist, except for the initial creation of course. * When cleaning up old dhparams file, use RemainAfterExit so that the unit won't be triggered again whenever we stop and start a service depending on it. * Capitalize systemd unit descriptions to be more in par with most other unit descriptions (also see 0c5e837b66f58265ce2b66a33d0f47a3). * Use "=" instead of "==" for conditionals using []. It's just a very small nitpick though and it will only fail for POSIX shells. Bash on the other side accepts it anyway. Signed-off-by: aszlig <aszlig@nix.build> Cc: @Ekleog
| * | | | nixos/dhparams: Introduce a 'stateful' optionaszlig2018-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This option allows us to turn off stateful generation of Diffie-Hellman parameters, which in some way is still stateful as the generated DH params file is non-deterministic. However what we can avoid with this is to have an increased surface for failures during system startup, because generation of the parameters is done during build-time. Another advantage of this is that we no longer need to take care of cleaning up the files that are no longer used and in my humble opinion I would have preferred that #11505 (which puts the dhparams in the Nix store) would have been merged instead of #22634 (which we have now). Luckily we can still change that and this change gives the user the option to put the dhparams into the Nix store. Beside of the more obvious advantages pointed out here, this also effects test runtime if more services are starting to use this (for example see #39507 and #39288), because generating DH params could take a long time depending on the bit size which adds up to test runtime. If we generate the DH params in a separate derivation, subsequent test runs won't need to wait for DH params generation during bootup. Of course, tests could still mock this by force-disabling the service and adding a service or activation script that places pre-generated DH params in /var/lib/dhparams but this would make tests less readable and the workaround would have to be made for each test affected. Note that the 'stateful' option is still true by default so that we are backwards-compatible with existing systems. Signed-off-by: aszlig <aszlig@nix.build> Cc: @Ekleog, @abbradar, @fpletz
| * | | | nixos/dhparams: Turn params into a submoduleaszlig2018-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We're going to implement an option which allows us to turn off stateful handling of Diffie-Hellman parameter files by putting them into the Nix store. However, modules now might need a way to reference these files, so we add a now path option to every param specified, which carries a read-only value of the path where to find the corresponding DH params file. I've also improved the description of security.dhparams.params a bit so that it uses <warning/> and <note/>. The NixOS VM test also reflects this change and checks whether the old way to specify the bit size still works. Signed-off-by: aszlig <aszlig@nix.build> Cc: @Ekleog
| * | | | nixos/dhparams: Add a VM testaszlig2018-04-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We're going to make changes to the dhparams module so we really want to make sure we don't break it, so having a NixOS VM test is to make sure we don't blow things up and can iterate on it. Signed-off-by: aszlig <aszlig@nix.build> Cc: @Ekleog
* | | | | love_11: init at 11.1Michael Raskin2018-05-07
| | | | |
* | | | | i3lock-color: fix manpage-name and manpage (#40095)Roland Koebler2018-05-07
| | | | | | | | | | | | | | | | | | | | - rename manpage from i3lock.1 to i3lock-color.1 - change "i3lock" to "i3lock-color" in manpage-synopsis
* | | | | Merge pull request #40143 from yrashk/sit-0.3.2-aarch64xeji2018-05-07
|\ \ \ \ \ | | | | | | | | | | | | sit: fix tests on aarch64
| * | | | | sit: fix tests on aarch64Yurii Rashkovskii2018-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As we found out in #40032, sit tests won't pass on aarch64. The problem seems to be related to `create_dir` not returning an error if the directory already exists, happening specifically on aarch64+debug (not aarch64+release) This update injects a patch for tests that will also be included in subsequent versions of SIT.
* | | | | | Merge pull request #40135 from fadenb/pythonPackages.phonenumbers_8.9.5xeji2018-05-07
|\ \ \ \ \ \ | | | | | | | | | | | | | | pythonPackages.phonenumbers: 8.9.3 -> 8.9.5
| * | | | | | pythonPackages.phonenumbers: 8.9.3 -> 8.9.5Tristan Helmich2018-05-07
| | | | | | |
* | | | | | | Merge pull request #40141 from timokau/iml-openblasMichael Raskin2018-05-07
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | iml: use openblas instead of atlas
| * | | | | | iml: use openblas instead of atlasTimo Kaufmann2018-05-07
| | | | | | |
* | | | | | | Merge pull request #40138 from helinko/libu2f-server-updatexeji2018-05-07
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | libu2f-server: 1.0.1 -> 1.1.0
| * | | | | | | libu2f-server: 1.0.1 -> 1.1.0Risto Helinko2018-05-07
| | | | | | | |
* | | | | | | | telepathy-logger: 0.8.0 → 0.8.2Jan Tojnar2018-05-07
| |/ / / / / / |/| | | | | | | | | | | | | | | | | | | | The previous update attempt (76f9a4d7111a362035ee741cd08ea22a27bbd6bc) did not change the hash 😞
* | | | | | | home-assistant: use new python modules for componentsFranz Pletz2018-05-07
| | | | | | |
* | | | | | | pythonPackages.pyowm: init at 2.8.0Franz Pletz2018-05-07
| | | | | | |
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-17 14:34:34 +0000