about summary refs log tree commit diff
path: root/nixos/modules/system
Commit message (Collapse)AuthorAge
* Merge pull request #87016 from flokli/nsswitch-cleanupFlorian Klink2020-05-14
|\ | | | | nixos/nsswitch cleanup nss modules
| * nixos/systemd: enable systemd-provided nss modules unconditionallyFlorian Klink2020-05-11
| | | | | | | | | | | | | | A disabled nscd breaks nss module loading on NixOS, and systemd without its nss modules doesn't really work either - instead of silently disabling its nss modules if nscd is disabled, let the assertion in nsswitch handle this.
| * nixos/systemd: add to system.nssDatabases.group tooFlorian Klink2020-05-11
| | | | | | | | | | | | | | nixos/modules/config/nsswitch.nix uses `passwdArray` for both `passwd` and `group`, but when moving this into the systemd module in c0995d22eed1a19ac9442c8460c18dd6a4c389b7, it didn't get split appropriately.
* | Merge pull request #85428 from serokell/kirelagin/unit-script-nameLinus Heckemann2020-05-12
|\ \ | |/ |/| systemd: Simplify unit script names
| * fixup! systemd: Add prefix to unit script derivationsKirill Elagin2020-04-20
| | | | | | | | * Avoid extra string interpolation.
| * systemd: Add prefix to unit script derivationsKirill Elagin2020-04-17
| | | | | | | | | | | | Add a distinctive `unit-script` prefix to systemd unit scripts to make them easier to find in the store directory. Do not add this prefix to actual script file name as it clutters logs.
| * fixup! systemd: Simplify unit script namesKirill Elagin2020-04-17
| |
| * systemd: Simplify unit script namesKirill Elagin2020-04-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Current journal output from services started by `script` rather than `ExexStart` is unreadable because the name of the file (which journalctl records and outputs) quite literally takes 1/3 of the screen (on smaller screens). Make it shorter. In particular: * Drop the `unit-script` prefix as it is not very useful. * Use `writeShellScriptBin` to write them because: * It has a `checkPhase` which is better than no checkPhase. * The script itself ends up having a short name.
* | nixos/raspberrypi-builder: fix cross using buildPackagesRichard Marko2020-05-10
| |
* | nixos/uboot-builder: fix cross using buildPackagesRichard Marko2020-05-10
| |
* | Revert "nixos/resolved: Include dbus alias of resolved unit"Florian Klink2020-05-09
| | | | | | | | This reverts commit 7fe539f79900efb6b8b6265ade11fdab460ca1da.
* | nixos/resolved: Include dbus alias of resolved unitArian van Putten2020-05-08
| | | | | | | | | | | | | | | | This will make dbus socket activation for it work When `systemd-resolved` is restarted; this would lead to unavailability of DNS lookups. You're supposed to use DBUS socket activation to buffer resolved requests; such that restarts happen without downtime
* | nixos/systemd: use global proxy config in systemd-importdMichael Adler2020-05-06
| |
* | nixos/systemd: move NSS module logic to systemd moduleFlorian Klink2020-05-05
| | | | | | | | We keep the conditional on only adding if nscd is enabled for now.
* | nixos/systemd/resolved: add resolve to nss hosts database if enabledFlorian Klink2020-05-05
| | | | | | | | | | | | We keep the "only add the nss module if nscd is enabled" logic for now. The assertion never was triggered, so it can be removed.
* | nixos/initrd-ssh: add extraConfig OptionsFinn Behrens2020-05-03
| |
* | Revert "nixos/systemd.nix: don’t require online for multi-user.target"Florian Klink2020-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 764c8203b833176d546395a5c1adf193a9ca73f8. While this is desireable in principle, some of our modules and services fail during service startup if no network is available don't currently properly set Wants=network-online.target. If nothing pulls in this target anymore, systemd won't try to reach it. We have many VM tests waiting for `network-online.target`, and after 764c8203b833176d546395a5c1adf193a9ca73f8 fail with the following error message: ``` error: unit "network-online.target" is inactive and there are no pending jobs ``` Most likely, test scripts shouldn't wait for `network-online.target` in first place (as `network-online.target` says nothing about whether a service has been started), but instead, the script should wait for the network ports of the corresponding service to be open. Let's revert this for now, and re-apply in a draft PR, fixing the tests before merging it back in.
* | Merge pull request #82026 from andir/systemd-update-networkd-optionsFlorian Klink2020-05-01
|\ \ | | | | | | nixos/networkd: update configuration options
| * | nixos/networkd: support PrefixDelegationHint in DHCPv6 sectionAndreas Rammhold2020-05-01
| | | | | | | | | | | | With sytemd v244 we will have support for this option.
| * | nixos/networkd: add ipv6PrefixAndreas Rammhold2020-05-01
| | |
| * | nixos/networkd: add ipv6PrefixDelegationConfig to networkdAndreas Rammhold2020-05-01
| | |
| * | nixos/networkd: rename the networkd dhcpConfig option to dhcpV4ConfigAndreas Rammhold2020-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This follows upstreams change in documentation. While the `[DHCP]` section might still work it is undocumented and we should probably not be using it anymore. Users can just upgrade to the new option without much hassle. I had to create a bit of custom module deprecation code since the usual approach doesn't support wildcards in the path.
| * | nixos/networkd: introduce the DHCPv6 network section eqivalentAndreas Rammhold2020-05-01
| | | | | | | | | | | | | | | | | | You can now specify option for the `[DHCPv6]` section with `systemd.network.<name>.dhcpV6Config.…`. Previously you could only use the combined legacy DHCP configuration.
| * | nixos/networkd: add MaxAttempts and SendRelease to the DHCP optionsAndreas Rammhold2020-05-01
| | |
| * | nixos/networkd: remove CriticalConnection= fields in favor of KeepConnectionAndreas Rammhold2020-05-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | Systemd upstream has deprecated CriticalConnection with v244 in favor of KeepConnection as that seems to be more flexible: The CriticalConnection= setting in .network files is now deprecated, and replaced by a new KeepConfiguration= setting which allows more detailed configuration of the IP configuration to keep in place.
| * | nixos/networkd: add RoutesToDNS to DHCP sectionAndreas Rammhold2020-04-30
| | |
* | | nixos/systemd.nix: don’t require online for multi-user.targetMatthew Bauer2020-04-28
|/ / | | | | | | | | | | | | | | Not all systems need to be online to boot up. So, don’t pull network-online.target into multi-user.target. Services that need online network can still require it. This increases my boot time from ~9s to ~5s.
* | Merge pull request #85735 from nh2/journald-storage-limit-logsFlorian Klink2020-04-23
|\ \ | | | | | | journald service docs: Add helpful comments about the journal getting full
| * | journald service: Add helpful comments about the journal getting fullNiklas Hambüchen2020-04-23
| | |
* | | nixos/networkd: Fix restartTriggersArian van Putten2020-04-23
|/ / | | | | | | | | | | | | | | | | | | | | | | 1d61efb7f177f7b70c467ab4940fde0a3481d4dc accidentially changed the restartTriggers of systemd-networkd.service` to point to the attribute name (in this case, a location relative to `/etc`), instead of the location of the network-related unit files in the nix store. This caused systemd-networkd to not get restarted on activation of new networking config, if the file name hasn't changed. Fix this, by pointing this back to the location in the nix store.
* | journald service: Increase default rate limit 1000 -> 10000.Niklas Hambüchen2020-04-21
| | | | | | | | | | | | Follows the upstream change of this default: https://github.com/systemd/systemd/pull/8660
* | Merge pull request #85371 from Mic92/tmpfilesJörg Thalheim2020-04-20
|\ \ | |/ |/|
| * tmpfiles: load user-defined entries firstJörg Thalheim2020-04-16
| | | | | | | | | | | | | | systemd-tmpfiles will load all files in lexicographic order and ignores rules for the same path in later files with a warning Since we apply the default rules provided by systemd, we should load user-defines rules first so users have a chance to override defaults.
* | Merge pull request #85004 from emilazy/add-initrd-secrets-path-assertionYegor Timoshenko2020-04-16
|\ \ | | | | | | nixos/stage-1: check secret paths before copying
| * | nixos/stage-1: check secret paths before copyingEmily2020-04-11
| | | | | | | | | | | | Fixes #84976.
| * | nixos/initrd-ssh: fix typo in docsEmily2020-04-11
| | |
* | | Merge pull request #84266 from Ma27/nspawn-overridesMaximilian Bosch2020-04-16
|\ \ \ | |_|/ |/| | nixos/systemd-nspawn: disallow multiple packages with `.nspawn`-units
| * | nixos/systemd-nspawn: disallow multiple packages with `.nspawn`-unitsMaximilian Bosch2020-04-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In contrast to `.service`-units, it's not possible to declare an `overrides.conf`, however this is done by `generateUnits` for `.nspawn` units as well. This change breaks the build if you have two derivations configuring one nspawn unit. This will happen in a case like this: ``` nix { pkgs, ... }: { systemd.packages = [ (pkgs.writeTextDir "etc/systemd/nspawn/container0.nspawn" '' [Files] Bind=/tmp '') ]; systemd.nspawn.container0 = { /* ... */ }; } ```
* | | Merge pull request #81848 from grahamc/nested-specialisationGraham Christensen2020-04-12
|\ \ \ | | | | | | | | specialisation: replace nesting with named configurations
| * | | specialisation: replace nesting with named configurationsGraham Christensen2020-04-12
| | |/ | |/| | | | | | | Co-authored-by: worldofpeace <worldofpeace@protonmail.ch>
* / | treewide: Per RFC45, remove all unquoted URLsMichael Reilly2020-04-10
|/ /
* / nixos/initrd-ssh: fix typo (#84719)B YI2020-04-08
|/
* nixos/systemd: remove one DefaultBlockIOAccountingRouven Czerwinski2020-03-29
| | | | | DefaultBlockIOAccounting=yes is set twice in the same file, remove one copy.
* nixos/initrd-ssh: switch from Dropbear to OpenSSHEmily2020-03-25
| | | | | | | | | | | | | | | | | | | | | | | Dropbear lags behind OpenSSH significantly in both support for modern key formats like `ssh-ed25519`, let alone the recently-introduced U2F/FIDO2-based `sk-ssh-ed25519@openssh.com` (as I found when I switched my `authorizedKeys` over to it and promptly locked myself out of my server's initrd SSH, breaking reboots), as well as security features like multiprocess isolation. Using the same SSH daemon for stage-1 and the main system ensures key formats will always remain compatible, as well as more conveniently allowing the sharing of configuration and host keys. The main reason to use Dropbear over OpenSSH would be initrd space concerns, but NixOS initrds are already large (17 MiB currently on my server), and the size difference between the two isn't huge (the test's initrd goes from 9.7 MiB to 12 MiB with this change). If the size is still a problem, then it would be easy to shrink sshd down to a few hundred kilobytes by using an initrd-specific build that uses musl and disables things like Kerberos support. This passes the test and works on my server, but more rigorous testing and review from people who use initrd SSH would be appreciated!
* $toplevel/system: use kernel's architecturevolth2020-03-20
| | | | | | | `$toplevel/system` of a system closure with `x86_64` kernel and `i686` userland should contain "x86_64-linux". If `$toplevel/system` contains "i686-linux", the closure will be run using `qemu-system-i386`, which is able to run `x86_64` kernel on most Intel CPU, but fails on AMD. So this fix is for a rare case of `x86_64` kernel + `i686` userland + AMD CPU
* nixos/networkd: respect systemd.network.links also with disabled ↵Florian Klink2020-03-19
| | | | | | | | | | | systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
* Merge pull request #80114 from rnhmjoj/initrdDanylo Hlynskyi2020-03-16
|\ | | | | nixos/boot: add option to disable initrd
| * nixos/boot: add option to disable initrdrnhmjoj2020-02-15
| |
* | Revert Merge #82310: nixos/systemd: apply .linkVladimír Čunát2020-03-13
| | | | | | | | | | | | | | | | | | | | | | | | ...even when networkd is disabled This reverts commit ce78f3ac701017008aa7f1db387b871b7ae65e01, reversing changes made to dc34da0755b3c36469965659c0ee4a1337e81c05. I'm sorry; Hydra has been unable to evaluate, always returning > error: unexpected EOF reading a line and I've been unable to reproduce the problem locally. Bisecting pointed to this merge, but I still can't see what exactly was wrong.
* | Merge pull request #81241 from thefloweringash/nesting-systemMichele Guerini Rocco2020-03-13
|\ \ | | | | | | nixos/activation: propagate system to nested configurations
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-09 06:02:15 +0000