Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Merge pull request #24304 from matklad/uefi-install-docs | goibhniu | 2017-03-25 |
|\ | | | | | docs: clarify UEFI bootloader setup | ||
| * | docs: clarify UEFI bootloader setup | Aleksey Kladov | 2017-03-25 |
| | | |||
* | | Merge branch 'master' into staging | Vladimír Čunát | 2017-03-23 |
|\| | |||
| * | Allow attaching to non-child processes by default | Eelco Dolstra | 2017-03-21 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The inability to run strace or gdb is the kind of developer-unfriendliness that we're used to from OS X, let's not do it on NixOS. This restriction can be re-enabled by setting boot.kernel.sysctl."kernel.yama.ptrace_scope" = 1; It might be nice to have a NixOS module for enabling hardened defaults. Xref #14392. Thanks @abbradar. | ||
| * | Expand on creating USB bootable for OS X | Carlos D | 2017-03-21 |
| | | |||
| * | Merge pull request #23838 from mayflower/remove-md5 | Robin Gloster | 2017-03-21 |
| |\ | | | | | | | fetch-*: remove md5 support | ||
| | * | fetch-*: add md5 support removal to rl-notes | Robin Gloster | 2017-03-20 |
| | | | |||
* | | | Merge remote-tracking branch 'upstream/master' into HEAD | Frederik Rietdijk | 2017-03-21 |
|\| | | |||
| * | | Python changelog | Frederik Rietdijk | 2017-03-21 |
| | | | |||
| * | | rl-notes 17.03: info on python module location | Robin Gloster | 2017-03-20 |
| |/ | | | | | | | closes #11567 | ||
| * | rmilter service: support only one socket | Franz Pletz | 2017-03-17 |
| | | |||
* | | nixos/fontconfig: add Changelog message about FreeType update | Thomas Tuegel | 2017-03-20 |
|/ | |||
* | Merge pull request #23512 from matthiasbeyer/doc-fix-xfce | Graham Christensen | 2017-03-06 |
|\ | | | | | doc: Remove indention from program listings | ||
| * | Wrap command in <command> | Matthias Beyer | 2017-03-05 |
| | | |||
| * | nixos doc xfce: Tabs -> spaces | Matthias Beyer | 2017-03-05 |
| | | |||
| * | nixos doc xfce: Fix missing space | Matthias Beyer | 2017-03-05 |
| | | |||
| * | doc: Remove indention from program listings | Matthias Beyer | 2017-03-05 |
| | | |||
* | | release-nodes: move disabledModules to 17.09 | Daiderd Jordan | 2017-03-05 |
|/ | |||
* | Merge pull request #23388 from ttuegel/nixos-plasma5 | Thomas Tuegel | 2017-03-03 |
|\ | | | | | NixOS: Plasma 5 tests and warnings | ||
| * | nixos/doc/manual: rename plasma5 desktop | Thomas Tuegel | 2017-03-03 |
| | | |||
* | | modules: add support for module replacement with disabledModules | Daiderd Jordan | 2017-03-03 |
| | | | | | | | | | | | | | | | | This is based on a prototype Nicolas B. Pierron worked on during a discussion we had at FOSDEM. A new version with a workaround for problems of the reverted original. Discussion: https://github.com/NixOS/nixpkgs/commit/3f2566689 | ||
* | | Revert "modules: add support for module replacement with disabledModules" | Vladimír Čunát | 2017-03-01 |
| | | | | | | | | | | This reverts commit 3f2566689d14f1d7778d55ca807d1dad2f4695d1 for now. Evaluation of the tested job got broken, blocking nixos-unstable. | ||
* | | Merge branch 'staging' | Vladimír Čunát | 2017-03-01 |
|\ \ | |/ |/| | | | (Truly, this time :-) | ||
| * | Merge branch 'master' into staging | Vladimír Čunát | 2017-02-27 |
| |\ | |||
| * | | Python: explain deterministic builds in release notes | Frederik Rietdijk | 2017-02-26 |
| | | | |||
* | | | modules: add support for module replacement with disabledModules | Daiderd Jordan | 2017-02-28 |
| | | | | | | | | | | | | | | | This is based on a prototype Nicolas B. Pierron worked on during a discussion we had at FOSDEM. | ||
* | | | 17.09 release notes: fix typos | Vladimír Čunát | 2017-02-27 |
| | | | |||
* | | | release-notes: add 17.09 | Robin Gloster | 2017-02-27 |
| |/ |/| | |||
* | | nixpkgs: allow packages to be marked insecure | Graham Christensen | 2017-02-24 |
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If a package's meta has `knownVulnerabilities`, like so: stdenv.mkDerivation { name = "foobar-1.2.3"; ... meta.knownVulnerabilities = [ "CVE-0000-00000: remote code execution" "CVE-0000-00001: local privilege escalation" ]; } and a user attempts to install the package, they will be greeted with a warning indicating that maybe they don't want to install it: error: Package ‘foobar-1.2.3’ in ‘...default.nix:20’ is marked as insecure, refusing to evaluate. Known issues: - CVE-0000-00000: remote code execution - CVE-0000-00001: local privilege escalation You can install it anyway by whitelisting this package, using the following methods: a) for `nixos-rebuild` you can add ‘foobar-1.2.3’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "foobar-1.2.3" ]; } b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘foobar-1.2.3’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "foobar-1.2.3" ]; } Adding either of these configurations will permit this specific version to be installed. A third option also exists: NIXPKGS_ALLOW_INSECURE=1 nix-build ... though I specifically avoided having a global file-based toggle to disable this check. This way, users don't disable it once in order to get a single package, and then don't realize future packages are insecure. | ||
* | nixos/release-notes: fix typos | Franz Pletz | 2017-02-22 |
| | |||
* | Merge pull request #23046 from Zimmi48/patch-2 | Jörg Thalheim | 2017-02-22 |
|\ | | | | | nixos/manual/networkmanager: add info on nm-applet | ||
| * | nixos/manual/networkmanager: add info on nm-applet | Théo Zimmermann | 2017-02-21 |
| | | |||
* | | Merge pull request #23045 from Zimmi48/patch-1 | Jörg Thalheim | 2017-02-22 |
|\ \ | | | | | | | nixos/manual/xserver: propose more alternatives | ||
| * | | nixos/manual/xserver: propose more alternatives | Théo Zimmermann | 2017-02-21 |
| |/ | |||
* | | Merge pull request #22822 from Mic92/iputils | Jörg Thalheim | 2017-02-22 |
|\ \ | |/ |/| | iputils: 20151218 -> 20161105 | ||
| * | nixos/release-notes: mention iputils changes | Jörg Thalheim | 2017-02-22 |
| | | |||
* | | manual: Add link to config section (#22994) | Lorenzo Manacorda | 2017-02-20 |
|/ | | | | | | | Add link to "Configuration" chapter from "Changing the Configuration" section. Also, fix grammar error. (cherry picked from commit a585f987fa32f2e81b3f273291971151c25f98b7) | ||
* | Revert "nix-daemon: default useSandbox to true" | Graham Christensen | 2017-02-14 |
| | | | | This reverts commit d0a086770a1be8c1f3175c195587052c5a5bfe1c. | ||
* | Merge pull request #22767 from grahamc/sandbox-by-default | Graham Christensen | 2017-02-14 |
|\ | | | | | nix-daemon: default useSandbox to true | ||
| * | nix-daemon: default useSandbox to true | Graham Christensen | 2017-02-13 |
| | | |||
* | | Addressing feedback and fixing a bug | Parnell Springmeyer | 2017-02-14 |
| | | |||
* | | Merging against upstream master | Parnell Springmeyer | 2017-02-13 |
|\| | |||
| * | php: default to php71 | Robin Gloster | 2017-02-13 |
| | | |||
| * | Manual: document users.users.<name>.hashedPassword | Linus Heckemann | 2017-02-13 |
| | | |||
| * | xorg-server: major bump 1.18.4 -> 1.19.1 | Vladimír Čunát | 2017-02-12 |
| | | | | | | | | | | I encountered no problems with it. Nvidia binary drivers are tested, and AMD ones now both set `abiCompat` to use older server versions. | ||
| * | nixos manual: add grub option to avoid #21830 | Vladimír Čunát | 2017-02-11 |
| | | | | | | | | Close #22659. vcunat edited this slightly. | ||
| * | nixos manual: correct reference to sddm | Graham Christensen | 2017-02-10 |
| | | |||
| * | nixos: update default cases from KDM/KDE4 to SDDM/KDE5 | Graham Christensen | 2017-02-09 |
| | | |||
| * | nixos, doc: dictd dbs move | Edward Tjörnhammar | 2017-02-09 |
| | | |||
| * | nixos, doc: named nylons | Edward Tjörnhammar | 2017-02-09 |
| | |