summary refs log tree commit diff
path: root/nixos/modules
Commit message (Collapse)AuthorAge
...
* | | | mjpg-streamer service: restart on failureNikolay Amiantov2016-09-02
| | | |
* | | | Merge pull request #15893 from groxxda/fix/accountsserviceLuca Bruno2016-09-02
|\ \ \ \ | | | | | | | | | | accountsservice: refactor package and service
| * | | | accountsservice: add support for mutableUsers = falseAlexander Ried2016-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add code to accountsservice that returns an error if the environment variable NIXOS_USERS_PURE is set. This variable is set from the nixos accountsservice module if mutableUsers = false
* | | | | Fixes #18124: atomically replace /var/setuid-wrappers/ (#18186)Domen Kožar2016-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before this commit updating /var/setuid-wrappers/ folder introduced a small window where NixOS activation scripts could be terminated and resulted into empty /var/setuid-wrappers/ folder. That's very unfortunate because one might lose sudo binary. Instead we use two atomic operations mv and ln (as described in https://axialcorps.com/2013/07/03/atomically-replacing-files-and-directories/) to achieve atomicity. Since /var/setuid-wrappers is not a directory anymore, tmpfs mountpoints were removed in installation scripts and in boot process. Tested: - upgrade /var/setuid-wrappers/ from folder to a symlink - make sure /run/setuid-wrappers-dirs/ legacy symlink is really deleted
* | | | | virtualbox: add headless build (without Qt dependency) (#18026)Данило Глинський (Danylo Hlynskyi)2016-09-01
| | | | |
* | | | | Merge pull request #18172 from Profpatsch/startAt-typeDomen Kožar2016-09-01
|\ \ \ \ \ | | | | | | | | | | | | systemd-unit-options: startAt can be a list
| * | | | | systemd-unit-options: startAt can be a listProfpatsch2016-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OnCalendar entrys can be specified multiple times in a systemd timer, to make more complex scheduling possible. Tested by manually checking the timer generated by the following: systemd = { services.huhu = { description = "meh"; wantedBy = [ "default.target" ]; serviceConfig.ExecStart = "/bin/sh -c 'printf HUHU!'"; startAt = [ "*:*:0/30" "*:0/1:15" ]; }; }; It prints HUHU to the log at seconds 0, 15 and 30 of each minute.
* | | | | | unbound service: whitespace fixesJoachim Fasting2016-09-01
| | | | | |
* | | | | | unbound service: use mkEnableOptionJoachim Fasting2016-09-01
| | | | | |
* | | | | | Merge staging into masterTuomas Tynkkynen2016-09-01
|\ \ \ \ \ \ | | |_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Brings in: - changed output order for multiple outputs: https://github.com/NixOS/nixpkgs/pull/14766 - audit disabled by default https://github.com/NixOS/nixpkgs/pull/17916 Conflicts: pkgs/development/libraries/openldap/default.nix
| * | | | | audit: Disable by defaultTuomas Tynkkynen2016-08-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because in its default enabled state it it causes a global performance hit on all system calls (https://fedorahosted.org/fesco/ticket/1311) and unwanted spam in dmesg, in particular when using Chromium (https://github.com/NixOS/nixpkgs/issues/13710).
| * | | | | audit service: Explicitly call auditctl to disable everythingTuomas Tynkkynen2016-08-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise, journald might be starting auditing. Some reading: - https://fedorahosted.org/fesco/ticket/1311 - https://github.com/systemd/systemd/issues/959 - https://github.com/openSUSE/systemd/commit/64f83d3087402c6f8730c1bc4b8fac59b84d4666
| * | | | | treewide: stop using fontbhttfVladimír Čunát2016-08-29
| | | | | |
* | | | | | nixos/filesystems: Drop compat code for filesystems.*.options typeTuomas Tynkkynen2016-09-01
| |_|/ / / |/| | | |
* | | | | Fixes #14831 by using full path for binaries used in install-grub.plDomen Kožar2016-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both btrfs-progs and utillinux are ~5MB, we may discuss in future to handle this better but I see no better way at the moment than increaing purity in the install process.
* | | | | install-grub.pl: fix a double slash prefix bugDomen Kožar2016-09-01
| | | | |
* | | | | install-grub.pl: add commentsDomen Kožar2016-09-01
| |/ / / |/| | |
* | | | nixos/…/swap.nix: add some safety assertions for randomEncryptionobadz2016-08-31
| | | |
* | | | Revert "setuid-wrappers: Update wrapper dir atomically."Domen Kožar2016-08-31
| | | | | | | | | | | | | | | | | | | | | | | | This reverts commit ee535056ce01514854cdd1c2d56faad84ae347af. It doesn't work yet.
* | | | hidepid service: use new boot.specialFileSystemsNikolay Amiantov2016-08-31
| | | |
* | | | Merge pull request #18160 from obadz/swap-encryptionNikolay Amiantov2016-08-31
|\ \ \ \ | | | | | | | | | | nixos/…/swap.nix: remove backslashes from deviceName
| * | | | nixos/…/swap.nix: remove backslashes from deviceNameobadz2016-08-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #8277 Prior to this, backslashes would end up in fstab and the swap partition was not activated. Swap files seemed to work fine.
* | | | | nixos filesystems: move special filesystems to a dedicated optionNikolay Amiantov2016-08-31
| | | | | | | | | | | | | | | | | | | | Fixes #18159.
* | | | | setuid-wrappers: Update wrapper dir atomically.Shea Levy2016-08-31
| | | | | | | | | | | | | | | | | | | | Fixes #18124.
* | | | | Merge pull request #18152 from roblabla/bugfix-zeroTierOneConfigurablePackagezimbatm2016-08-31
|\ \ \ \ \ | | | | | | | | | | | | zerotierone: make package configurable
| * | | | | zerotierone: make package configurableroblabla2016-08-31
| | | | | |
* | | | | | Fix #4210: Remove builderDefsDomen Kožar2016-08-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was one of the ways to build packages, we are trying hard to minimize different ways so it's easier for newcomers to learn only one way. This also: - removes texLive (old), fixes #14807 - removed upstream-updater, if that code is still used it should be in separate repo - changes a few packages like gitit/mit-scheme to use new texlive
* | | | | | Don't break grow-partitionMango Chutney2016-08-31
| | | | | |
* | | | | | virtualbox-image module: enable partition / filesystem growthNathan Zadoks2016-08-30
| | | | | |
* | | | | | amazon-grow-partition module: rename to grow-partitionNathan Zadoks2016-08-30
| | | | | |
* | | | | | amazon-grow-partition module: autodetect the root deviceNathan Zadoks2016-08-30
| | | | | |
* | | | | | Merge pull request #17822 from abbradar/systemd-mountsNikolay Amiantov2016-08-30
|\ \ \ \ \ \ | | | | | | | | | | | | | | nixos filesystems: unify special filesystems handling
| * | | | | | nixos filesystems: unify early filesystems handlingNikolay Amiantov2016-08-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A new internal config option `fileSystems.<name>.early` is added to indicate that the filesystem needs to be loaded very early (i.e. in initrd). They are transformed to a shell script in `system.build.earlyMountScript` with calls to an undefined `specialMount` function, which is expected to be caller-specific. This option is used by stage-1, stage-2 and activation script to set up and remount those filesystems. Options for them are updated according to systemd defaults.
* | | | | | | update-users-groups.pl: correctly guard duplicate uids for declarative usersDomen Kožar2016-08-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Verified that following nixos configuration: users.users.foo = { uid = 1000; name = "foo"; }; users.users.bar = { name = "bar"; }; Before this commit both users will get uid of 1000, after it's applied bar will correctly get 1001.
* | | | | | | Merge pull request #18104 from ericsagnes/feat/nixos-manual-gen-cleanupEelco Dolstra2016-08-30
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | nixos manual: cleanup generation
| * | | | | | nixos manual: cleanup generationEric Sagnes2016-08-30
| | | | | | |
* | | | | | | opensmtpd nixos module: chmod & chown until the daemon's heart's contentobadz2016-08-30
|/ / / / / /
* | | | | | nixos manual: move chapter on grsecurity to auto-generated module docsJoachim Fasting2016-08-29
| | | | | |
* | | | | | dnscrypt-proxy module: move detailed info to module documentationJoachim Fasting2016-08-29
| | | | | |
* | | | | | dnscrypt-proxy module: serviceConfig.Group is redundantJoachim Fasting2016-08-29
| | | | | | | | | | | | | | | | | | | | | | | | Same as user's primary group if left unspecified
* | | | | | dnscrypt-proxy module: formattingJoachim Fasting2016-08-29
| | | | | |
* | | | | | nixos/containers: Process config like toplevel options (#17365)Guillaume Maudoux2016-08-29
| | | | | |
* | | | | | In $NIX_PATH, use nixpkgs=...Eelco Dolstra2016-08-29
| |_|/ / / |/| | | | | | | | | | | | | | This is required by the "nix" command to find Nixpkgs.
* | | | | Merge remote-tracking branch 'upstream/master' into stagingRobin Gloster2016-08-29
|\ \ \ \ \
| * | | | | nixos/cpu-freq: list correct default governor in descriptionThomas Tuegel2016-08-28
| | |_|/ / | |/| | |
* | | | | Merge branch 'master' into stagingobadz2016-08-28
|\| | | |
| * | | | nixos/modules/rename.nix: fix eval errorobadz2016-08-28
| | | | | | | | | | | | | | | | | | | | cc @Profpatsch @joachifm @domenkozar
* | | | | Merge branch 'master' into stagingobadz2016-08-28
|\| | | |
| * | | | Merge pull request #15025 from ericsagnes/modules/manualDomen Kožar2016-08-28
| |\ \ \ \ | | | | | | | | | | | | manual: automatically generate modules documentation
| | * | | | modules: move meta at top levelEric Sagnes2016-08-11
| | | | | |