| Commit message (Collapse) | Author | Age |
|
|
|
| |
It's an alias for util-linux, so included anyway.
|
|
|
|
| |
Issue #7117.
|
|
|
|
| |
needed to define inInitrd, used vfat.nix as a template
|
|
|
|
| |
Issue #7117.
|
| |
|
|
|
|
| |
Issue #7117.
|
|
|
|
|
|
| |
These services don't create files on disk, let alone on a network
filesystem, so they don't really need a fixed uid. And this also gets
rid of a warning coming from <= 14.12 systems.
|
|
|
|
|
|
| |
Otherwise, the enabled -> disabled transition won't be handled
correctly (switch-to-configuration currently assumes that if a unit is
running and exists, it should be restarted).
|
|
|
|
| |
The systemd module was getting rather bloated.
|
|\
| |
| | |
ddclient: Fix capitalization of systemd unit keys
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This avoids the following warning:
Apr 19 10:53:48 xen systemd[1]: [/nix/store/...-unit-ddclient.service/ddclient.service:19] Unknown lvalue 'type' in section 'Service'
As `Type=simple` is the default in systemd, the assignment to the
service type can be simply dropped.
|
|\ \
| | |
| | | |
Fix grub for "nodev" targets.
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
|/ /
| |
| |
| | |
Closes #7441
|
| |
| |
| |
| |
| | |
Added a package and module for Plex Media Server, an application for
managing media collections across multiple devices.
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Specifically, this fixes dnsmasq, which failed with
Apr 16 19:00:30 mandark dnsmasq[23819]: dnsmasq: DBus error: Connection ":1.260" is not allowed to own the service "uk.org.thekelleys.dnsmasq" due to security policies in the configuration file
Apr 16 19:00:30 mandark dnsmasq[23819]: DBus error: Connection ":1.260" is not allowed to own the service "uk.org.thekelleys.dnsmasq" due to security policies in the configuration file
after being enabled, due to dbus not being reloaded.
|
| | |
|
| | |
|
|\ \
| | |
| | | |
Some i2p changes
|
| | | |
|
|\ \ \
| |/ /
|/| | |
[nixos] agetty: Add autologinUser config option
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This option causes the specified user to be automatically logged in at
the virtual console.
While at it, refactor and make a helper function for building the getty
command line.
|
|\ \ \
| | | |
| | | | |
services.x11: Add option for additional InputClass sections.
|
| |/ /
| | |
| | |
| | |
| | | |
Implement support for additional InputClass sections, e.g. for non
keyboard input devices.
|
|\ \ \
| | | |
| | | | |
IHaskell fixes
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
nixos: condition shadow setuid-wrappers on mutableUsers
|
| | | | |
| | | | |
| | | | |
| | | | | |
Having junk setuid wrappers in PATH is annoying.
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
Make it easy to add system-wide custom channels.
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This partially reverts commit 3a4fd0bfc6fb34a496708ee95891acb1648eedde.
Addresses another concern by @edolstra that users might not want to
update *all* channels. We're now reverting to the old behaviour but
after updating the "nixos" channel, we just check whether the channel
ships with a file called ".update-on-nixos-rebuild" and if it exists, we
update that channel as well.
Other channels than these are not touched anymore.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
My original reason to put it at the beginning of NIX_PATH was to allow
shipping a particular version <nixpkgs> with a channel. But in order to
do that, we can still let the channel expression ship with a custom
version of nixpkgs by something like <channel/nixpkgs> and the builder
of the channel could also rewrite self-references.
So the inconvenience is now shifted towards the maintainer of the
channel rather than the user (which isn't nice, but better err on the
side of the developer rather than on the user), because as @edolstra
pointed out: Having the channels of root at the beginning of NIX_PATH
could have unintended side-effects if there a channel called nixpkgs.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Should make it even easier to use custom channels, because whenever the
user does a "nixos-rebuild --upgrade", it will also upgrade possibly
used ("used" as in referenced in configuration.nix) channels besides
"nixos". And if you also ship a channel tied to a particular version of
nixpkgs or even remove the "nixos" channels, you won't run into
unexpected situations where the system is not updating your custom
channels.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
|
| | |/ /
| |/| |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This is very useful if you want to distribute channels (and thus
expressions as well) in a similar fashion to Debians APT sources (or
PPAs or whatnot).
So, for example if you have a channel with some additional functions
or packages, you simply add that channel with:
sudo nix-channel --add https://example.com/my-nifty-channel foo
And you can access that channel using <foo>, for example in your
configuration.nix:
{
imports = [ <foo/modules/shiny-little-module> ];
environment.systemPackages = with import <foo/pkgs> {}; [ bar blah ];
services.udev.extraRules = import <foo/lib/udev/mkrule.nix> {
kernel = "eth*";
attr.address = "00:1D:60:B9:6D:4F";
name = "my_fast_network_card";
};
}
Within nixpkgs, we shouldn't have <nixos> used anywhere anymore, so we
shouldn't get into conflicts.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
|
|\ \ \ \
| | | | |
| | | | | |
grsecurity module: configure gradm iff RBAC is enabled
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
grsecurity module: trivial improvements
|
| | | | | | |
|
| |/ / / /
| | | | |
| | | | |
| | | | |
| | | | | |
First, that's not what the service is called, and secondly it's
most likely irrelevant to the user.
|
|\ \ \ \ \
| | | | | |
| | | | | | |
tarsnap module: add options for controlling bandwidth
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Annoyingly, these do not appear to accept SI prefixes.
|
| |/ / / / |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
apache-httpd: adding support for sslServerChain
|