summary refs log tree commit diff
path: root/nixos/doc
Commit message (Collapse)AuthorAge
* Merge pull request #24304 from matklad/uefi-install-docsgoibhniu2017-03-25
|\ | | | | docs: clarify UEFI bootloader setup
| * docs: clarify UEFI bootloader setupAleksey Kladov2017-03-25
| |
* | Merge branch 'master' into stagingVladimír Čunát2017-03-23
|\|
| * Allow attaching to non-child processes by defaultEelco Dolstra2017-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The inability to run strace or gdb is the kind of developer-unfriendliness that we're used to from OS X, let's not do it on NixOS. This restriction can be re-enabled by setting boot.kernel.sysctl."kernel.yama.ptrace_scope" = 1; It might be nice to have a NixOS module for enabling hardened defaults. Xref #14392. Thanks @abbradar.
| * Expand on creating USB bootable for OS XCarlos D2017-03-21
| |
| * Merge pull request #23838 from mayflower/remove-md5Robin Gloster2017-03-21
| |\ | | | | | | fetch-*: remove md5 support
| | * fetch-*: add md5 support removal to rl-notesRobin Gloster2017-03-20
| | |
* | | Merge remote-tracking branch 'upstream/master' into HEADFrederik Rietdijk2017-03-21
|\| |
| * | Python changelogFrederik Rietdijk2017-03-21
| | |
| * | rl-notes 17.03: info on python module locationRobin Gloster2017-03-20
| |/ | | | | | | closes #11567
| * rmilter service: support only one socketFranz Pletz2017-03-17
| |
* | nixos/fontconfig: add Changelog message about FreeType updateThomas Tuegel2017-03-20
|/
* Merge pull request #23512 from matthiasbeyer/doc-fix-xfceGraham Christensen2017-03-06
|\ | | | | doc: Remove indention from program listings
| * Wrap command in <command>Matthias Beyer2017-03-05
| |
| * nixos doc xfce: Tabs -> spacesMatthias Beyer2017-03-05
| |
| * nixos doc xfce: Fix missing spaceMatthias Beyer2017-03-05
| |
| * doc: Remove indention from program listingsMatthias Beyer2017-03-05
| |
* | release-nodes: move disabledModules to 17.09Daiderd Jordan2017-03-05
|/
* Merge pull request #23388 from ttuegel/nixos-plasma5Thomas Tuegel2017-03-03
|\ | | | | NixOS: Plasma 5 tests and warnings
| * nixos/doc/manual: rename plasma5 desktopThomas Tuegel2017-03-03
| |
* | modules: add support for module replacement with disabledModulesDaiderd Jordan2017-03-03
| | | | | | | | | | | | | | | | This is based on a prototype Nicolas B. Pierron worked on during a discussion we had at FOSDEM. A new version with a workaround for problems of the reverted original. Discussion: https://github.com/NixOS/nixpkgs/commit/3f2566689
* | Revert "modules: add support for module replacement with disabledModules"Vladimír Čunát2017-03-01
| | | | | | | | | | This reverts commit 3f2566689d14f1d7778d55ca807d1dad2f4695d1 for now. Evaluation of the tested job got broken, blocking nixos-unstable.
* | Merge branch 'staging'Vladimír Čunát2017-03-01
|\ \ | |/ |/| | | (Truly, this time :-)
| * Merge branch 'master' into stagingVladimír Čunát2017-02-27
| |\
| * | Python: explain deterministic builds in release notesFrederik Rietdijk2017-02-26
| | |
* | | modules: add support for module replacement with disabledModulesDaiderd Jordan2017-02-28
| | | | | | | | | | | | | | | This is based on a prototype Nicolas B. Pierron worked on during a discussion we had at FOSDEM.
* | | 17.09 release notes: fix typosVladimír Čunát2017-02-27
| | |
* | | release-notes: add 17.09Robin Gloster2017-02-27
| |/ |/|
* | nixpkgs: allow packages to be marked insecureGraham Christensen2017-02-24
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If a package's meta has `knownVulnerabilities`, like so: stdenv.mkDerivation { name = "foobar-1.2.3"; ... meta.knownVulnerabilities = [ "CVE-0000-00000: remote code execution" "CVE-0000-00001: local privilege escalation" ]; } and a user attempts to install the package, they will be greeted with a warning indicating that maybe they don't want to install it: error: Package ‘foobar-1.2.3’ in ‘...default.nix:20’ is marked as insecure, refusing to evaluate. Known issues: - CVE-0000-00000: remote code execution - CVE-0000-00001: local privilege escalation You can install it anyway by whitelisting this package, using the following methods: a) for `nixos-rebuild` you can add ‘foobar-1.2.3’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "foobar-1.2.3" ]; } b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘foobar-1.2.3’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "foobar-1.2.3" ]; } Adding either of these configurations will permit this specific version to be installed. A third option also exists: NIXPKGS_ALLOW_INSECURE=1 nix-build ... though I specifically avoided having a global file-based toggle to disable this check. This way, users don't disable it once in order to get a single package, and then don't realize future packages are insecure.
* nixos/release-notes: fix typosFranz Pletz2017-02-22
|
* Merge pull request #23046 from Zimmi48/patch-2Jörg Thalheim2017-02-22
|\ | | | | nixos/manual/networkmanager: add info on nm-applet
| * nixos/manual/networkmanager: add info on nm-appletThéo Zimmermann2017-02-21
| |
* | Merge pull request #23045 from Zimmi48/patch-1Jörg Thalheim2017-02-22
|\ \ | | | | | | nixos/manual/xserver: propose more alternatives
| * | nixos/manual/xserver: propose more alternativesThéo Zimmermann2017-02-21
| |/
* | Merge pull request #22822 from Mic92/iputilsJörg Thalheim2017-02-22
|\ \ | |/ |/| iputils: 20151218 -> 20161105
| * nixos/release-notes: mention iputils changesJörg Thalheim2017-02-22
| |
* | manual: Add link to config section (#22994)Lorenzo Manacorda2017-02-20
|/ | | | | | | Add link to "Configuration" chapter from "Changing the Configuration" section. Also, fix grammar error. (cherry picked from commit a585f987fa32f2e81b3f273291971151c25f98b7)
* Revert "nix-daemon: default useSandbox to true"Graham Christensen2017-02-14
| | | | This reverts commit d0a086770a1be8c1f3175c195587052c5a5bfe1c.
* Merge pull request #22767 from grahamc/sandbox-by-defaultGraham Christensen2017-02-14
|\ | | | | nix-daemon: default useSandbox to true
| * nix-daemon: default useSandbox to trueGraham Christensen2017-02-13
| |
* | Addressing feedback and fixing a bugParnell Springmeyer2017-02-14
| |
* | Merging against upstream masterParnell Springmeyer2017-02-13
|\|
| * php: default to php71Robin Gloster2017-02-13
| |
| * Manual: document users.users.<name>.hashedPasswordLinus Heckemann2017-02-13
| |
| * xorg-server: major bump 1.18.4 -> 1.19.1Vladimír Čunát2017-02-12
| | | | | | | | | | I encountered no problems with it. Nvidia binary drivers are tested, and AMD ones now both set `abiCompat` to use older server versions.
| * nixos manual: add grub option to avoid #21830Vladimír Čunát2017-02-11
| | | | | | | | Close #22659. vcunat edited this slightly.
| * nixos manual: correct reference to sddmGraham Christensen2017-02-10
| |
| * nixos: update default cases from KDM/KDE4 to SDDM/KDE5Graham Christensen2017-02-09
| |
| * nixos, doc: dictd dbs moveEdward Tjörnhammar2017-02-09
| |
| * nixos, doc: named nylonsEdward Tjörnhammar2017-02-09
| |