summary refs log tree commit diff
path: root/nixos/modules
Commit message (Collapse)AuthorAge
* nixos/virtualbox: Revert disable hardening.aszlig2014-12-18
| | | | | | | | | | | | | | This reverts commit 5d67b17901ff2c9a18647bd9453c6b0d4294b875. The issues have been resolved by ac603e208c98b260db675fa0c13be94fa95216f4. Tested this with hostonlyifs and USB support with extension pack. Conflicts: nixos/modules/programs/virtualbox-host.nix Signed-off-by: aszlig <aszlig@redmoonstudios.org> Tested-by: Mateusz Kowalczyk <fuuzetsu@fuuzetsu.co.uk>
* ssh-agent: Don't have a timeout by defaultEelco Dolstra2014-12-18
| | | | | | | | IMHO, having a short timeout (1h) defeats the point of using ssh-agent, which is not to have to retype passphrases all the time. Of course, users who want timeouts can set programs.ssh.agentTimeout. This restores the 14.04 behaviour.
* virtualbox: Fix runtime paths in hardening mode.aszlig2014-12-18
| | | | | | | | | | | | | | | | Because we have to rely on setuid wrappers on NixOS, we can't easily hardcode the executable paths and set it 4755. So for all calls, we need to change the runtime path executable directory to /var/setuid-wrappers/ and for verification we need to retain the executable directory. Also note, that usually VBoxNetAdpCtl, VBoxNetDHCP, VBoxNetNAT, VBoxSDL and VBoxVolInfo don't reside in directories that are commonly in PATH, but in /usr/lib/virtualbox in most mainstream distros. But because the names of these executables are distinctive enough to not cause collisions with other setuid programs, I'll leave it like that and not patch up setuid-wrappers. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* fix users.mutableUsers = false; install in isoDomen Kožar2014-12-18
| | | | | (cherry picked from commit 9bc8bcbbdcc7cac98686877f09315bb749627732) Signed-off-by: Domen Kožar <domen@dev.si>
* Improve /etc/sudoers messageEelco Dolstra2014-12-18
|
* nixos/network-interfaces: Add ipv6 gateway supportWilliam A. Kennington III2014-12-17
|
* switch-to-configuration: Ignore slice unitsEelco Dolstra2014-12-18
|
* Revert "enable bash autocomplete by default"Eelco Dolstra2014-12-18
| | | | | This reverts commit ee8e15fe76a235ae3583d4e8cb4bb370f28c5eae. See discussion at https://github.com/NixOS/nixpkgs/commit/ee8e15fe76a235ae3583d4e8cb4bb370f28c5eae.
* Remove udev from /run/opengl-driversEelco Dolstra2014-12-17
| | | | | | | | | /run/opengl-drivers should contain only libGL-related libraries, not stuff like udev. Injecting anything into LD_LIBRARY_PATH is dangerous because it can break applications that expect a different version of the library. Caused by eef9a8ac2a30b495ff7184382ed0dbd73b3b88e4. Fixes #5371.
* It is called Dingo! yes, Dingo!Rob Vermaas2014-12-17
|
* Some lua and awesome improvementsLuca Bruno2014-12-17
| | | | | | - Move lgi to luaPackages - Use luaPackages in awesome and passthru lua - Allow to pass lua modules to the awesome WM so that those can be used in the configuration
* Merge pull request #5254 from ehmry/network-filesystemswmertens2014-12-17
|\ | | | | nixos: configure samba and rsync shares with sets
| * nixos: configure samba and rsync shares with setsEmery Hemingway2014-12-07
| |
* | Merge pull request #5196 from madjar/cloud-initwmertens2014-12-17
|\ \ | | | | | | cloud-init: add expression and service
| * | Added the cloud-init serviceGeorges Dubus2014-12-03
| | |
* | | nixos/consul: Don't timeout if start job has many retriesWilliam A. Kennington III2014-12-16
| | |
* | | cups: Build with SERVERROOT set to /etc/cupsEelco Dolstra2014-12-16
| | |
* | | cupsd.nix: Clean up environment.etcEelco Dolstra2014-12-16
| | |
* | | nixos/cupsd: use cups-files.conftv@shackspace.de2014-12-16
| | |
* | | nixos/virtualbox: Fix warning on enableHardening.aszlig2014-12-16
| | | | | | | | | | | | | | | | | | | | | | | | The warning was displayed whenever services.virtualboxHost.enable was true, but if people were to enable hardening, they'd still get that annoying message. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos/virtualbox/hostonlyif: Fix writing to /root.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | | | | | | | Creates unnecessary cruft in the root users home directory, which we really don't need. Except the log, but therefore we now cat the log to stderr and the private temporary directory is cleaned up afterwards. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos/virtualbox: Disable hardening for now.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | | | | | | | This should display a big fat warning that people can hardly miss until we have fixed the issues with the host-only-interfaces that persist when hardining is enabled. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos/virtualbox: Note about "vboxusers" group.aszlig2014-12-15
| | | | | | | | | | | | Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos/virtualbox: Allow to disable hardening.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | Hardening mode in VirtualBox is quite restrictive and on some systems it could make sense to disable hardening mode, especially while we still have issues with hostonly networking and other issues[TM] we don't know or haven't tested yet. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos-generate-config: Don't emit networking.hostIdEelco Dolstra2014-12-15
| | | | | | | | | | | | | | | Systemd already generates /etc/machine-id. So there is no need to generate another unique host identifer.
* | | nixos-generate-config: Add time zoneEelco Dolstra2014-12-15
| | |
* | | nixos/modules/system/boot/luksroot.nix: hyperlinkify an URL in the documentationPeter Simons2014-12-15
| | |
* | | Switch default timezone in NixOS from "CET" to "UTC".Peter Simons2014-12-15
| | | | | | | | | | | | Suggested in https://github.com/NixOS/nixpkgs/pull/5332.
* | | Fix ANSI escape in warning messagesEelco Dolstra2014-12-15
| | | | | | | | | | | | Seems to have been broken by accident in 7d1ddae58e465a1708967c9fee651c33819969c6.
* | | nixos: fix config.fonts.fontconfig.ultimate.allowBitmapsThomas Tuegel2014-12-15
| | | | | | | | | | | | | | | The option was incorrectly negated, so that 'allowBitmaps = true' actually disabled bitmap fonts.
* | | cron: make into systemd.service and make it depend on /etc/localtimeRob Vermaas2014-12-15
| | | | | | | | | | | | so that changes in timezone will trigger a restart of cron service.
* | | Fix using Apache httpd 2.2Eelco Dolstra2014-12-15
| | |
* | | Merge pull request #5326 from prikhi/refactor-psd-configwmertens2014-12-14
|\ \ \ | | | | | | | | profile-sync-daemon: refactor nixos module
| * | | profile-sync-daemon: refactor modulePavan Rikhi2014-12-14
| | | |
* | | | Fix networkmanager resumeCommandsSebastián Bernardo Galkin2014-12-14
| | | | | | | | | | | | | | | | Small typo prevented the post resume script to restart network manager
* | | | http://nixos.org -> https://nixos.orgDomen Kožar2014-12-14
| | | | | | | | | | | | | | | | | | | | (cherry picked from commit 78bb17dd22e4da4e3810fbc78185d73bb25ea73e) Signed-off-by: Domen Kožar <domen@dev.si>
* | | | Merge pull request #5323 from offlinehacker/gitlab_i686_fixDomen Kožar2014-12-14
|\ \ \ \ | |/ / / |/| | | gitlab: fix i686-linux build and module
| * | | gitlab: fix i686-linux build and moduleJaka Hudoklin2014-12-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It turns out that installing therubytracer, with dependency on old v8, even when using source libv8 version is problematic. (see http://stackoverflow.com/questions/21666379/problems-installing-gitlab-on-odroid-v8-lib-not-available). But wait, rails does not even need therubytracer, just any kind of javascript server side execution framework like nodejs. Well just use that, as also suggested from different internet sources (look link above), it works just fine.
* | | | Add the Profile Sync Daemon Package & NixOS ModulePavan Rikhi2014-12-13
| | | |
* | | | nixos/virtualbox: Fix setuid wrappers.aszlig2014-12-13
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | We only need to have setuid-root wrappers for VBox{Headless,SDL} and VirtualBox, otherwise VBoxManage will run as root and NOT drop privileges! Fixes #5283. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos: container profile, fix a few thingsJaka Hudoklin2014-12-12
| | |
* | | nixos/gitlab: fixesJaka Hudoklin2014-12-12
| | | | | | | | | | | | | | | | | | - fix timezone data not found - fix module, add simple test - allow to set port
* | | nixos: Add gitlab and gitlab-shellThomas Hunger2014-12-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I had to make several adjustments to make it work with nixos: * Replace relative config file lookups with ENV variable. * Modify gitlab-shell to not clear then environment when running pre-receive. * Modify gitlab-shell to write some environment variables into the .authorized_keys file to make sure gitlab-shell reads the correct config file. * Log unicorn output to syslog. I tried various ways of adding a syslog package but the bundler would not pick them up. Please fix in a better way if possible. * Gitlab-runner program wrapper. This is useful to run e.g. backups etc. with the correct environment set up.
* | | nixos: check resumeDevice is absolute path and documentVladimír Čunát2014-12-12
| | | | | | | | | | | | | | | | | | | | | Fixes #5219 after merging #4995. (cherry picked from commit 0681d61c3730c686548df3af9a7dc1a59abaf371) Signed-off-by: Domen Kožar <domen@dev.si>
* | | Get rid of a warning about dbus in the activation scriptEelco Dolstra2014-12-12
| | |
* | | nixos-install: Pass CA cert bundle to chroot.aszlig2014-12-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since we're using HTTPS for the binary cache (introduced in faf0797) by default, the binary cache should also be available during installation. The file that is defined in SSL_CERT_FILE outside of the chroot is copied over to /tmp/ca-cert.crt inside the chroot, so we have an absolute path we can reference during nixos-install. However, this might end up with the file not being cleaned up properly from outside of the store, but neither would be /tmp/root so the cleanup issue needs to be solved in another place (or commit to be more exact). Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos: container profile, update /init symlink on rebuildJaka Hudoklin2014-12-12
| | |
* | | virtualbox: Unbreak the nixos module.ambrop7@gmail.com2014-12-12
| | |
* | | Merge pull request #5300 from ambrop72/virtualbox-network-interfaceJaka Hudoklin2014-12-11
|\ \ \ | | | | | | | | virtualbox: Allow disabling the network interface.
| * | | virtualbox: Allow disabling the network interface.ambrop7@gmail.com2014-12-11
| | | | | | | | | | | | | | | | | | | | | | | | The current nixos module for VirtualBox unconditionally configures a vboxnet0 network interface at boot. This may be undesired, especially when the user wants to manage network interfaces in a centralized manner.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-08-02 06:23:27 +0000