nixlib - Alyssa's collection of Nix expressions

	Commit message (Collapse)	Author	Age
...
* \| \| \| \| \| \|	mattermost sevice: JoinsNamespaceOf for local pgsql (#22899)	Arian van Putten	2017-02-20
\| \| \| \| \| \| \|
* \| \| \| \| \| \|	Merge pull request #22969 from symphorien/extrainitrd	Franz Pletz	2017-02-20
\|\ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	grub module: add extraInitrd option
\| * \| \| \| \| \| \|	grub module: add extraInitrd option	Symphorien Gibol	2017-02-19
\| \|/ / / / / /
* \| \| \| \| \| \|	Add ca-central-1 AMIs	Eelco Dolstra	2017-02-19
\| \| \| \| \| \| \|
* \| \| \| \| \| \|	Create AMIs for ca-central-1 (Canada)	Eelco Dolstra	2017-02-19
\| \| \| \| \| \| \|
* \| \| \| \| \| \|	nvidia: support application profiles	Nikolay Amiantov	2017-02-19
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Closes #22666.
* \| \| \| \| \| \|	Merge pull request #20456 from ericsagnes/feat/loaf-dep-1	Joachim F	2017-02-19
\|\ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Use attrsOf in place of loaOf when relevant
\| * \| \| \| \| \| \|	zope2 module: instance option loaOf -> attrsOf	Eric Sagnes	2016-11-16
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	znc module: networks option loaOf -> attrsOf	Eric Sagnes	2016-11-16
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	tinc module: networks, hosts option loaOf -> attrsOf	Eric Sagnes	2016-11-16
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	tahoe module: introducers, nodes option loaOf -> attrsOf	Eric Sagnes	2016-11-16
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	logcheck module: ignore, ignoreCron option loaOf -> attrsOf	Eric Sagnes	2016-11-16
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	acme module: certs option loaOf -> attrsOf	Eric Sagnes	2016-11-16
\| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \|	Merge pull request #22433 from laMudri/xfwm-option	Joachim F	2017-02-19
\|\ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	xfce: make xfwm optional
\| * \| \| \| \| \| \| \|	xfce: make xfwm optional	laMudri	2017-02-04
\| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \|	nixos.samba: add enableNmbd and enableWinbindd options	Ricardo M. Correia	2017-02-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This allows for disabling these services, in case they are not needed.
* \| \| \| \| \| \| \| \|	modules/mpd: factor out name & mention man 5 mpd.conf	Profpatsch	2017-02-18
\| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \|	network-interfaces service: fix typo in bonding options	Franz Pletz	2017-02-18
\| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \|	mwprocapture: init at 1.2.3269 (#22160)	Cray Elliott	2017-02-18
\| \|_\|_\|/ / / / / \|/\| \| \| \| \| \| \|
* \| \| \| \| \| \| \|	Merge pull request #22727 from mayflower/fix/netdev-master-bindsto	Franz Pletz	2017-02-18
\|\ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	network-interfaces service: fix bindsTo deps for masters
\| * \| \| \| \| \| \| \|	network-interface service: tuntap ifs have netdev services	Franz Pletz	2017-02-18
\| \| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \| \|	network-interfaces service: fix bindsTo deps for masters	Franz Pletz	2017-02-13
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Previously, netdev units for network interfaces defined in the nixos configurations would bindTo the systemd device unit of the interface if not in a container. In situations where you switch to a new nixos configration with changes to network-setup.service (like nameservers) and have stacked interfaces like vlans on a bond, it would fail to propagate restarts to the netdevs correctly resulting with broken networking. The bond would be present but no vlan interfaces rendering the machine unreachable. My fear is that the udev events fail to propagate correctly while a systemd transaction that is also restarting the triggered netdev service is running. This commit changes this behaviour so netdev services bindTo other netdev services if present and otherwise fall back to the previous behaviour. We also noticed that stacked interfaces would sometimes seemingly be stopped in the wrong order. For instance in the above example, the bond interface would be deleted before the vlan interfaces resulting in the vlan interfaces not being present when their service is being stopped. This would cause the systemd transaction to fail and thus break networking. Their postStop hooks are now allowed to fail as we have reached the desired state.
* \| \| \| \| \| \| \| \|	fix comments about nixos-hardware-scan	Brice Waegeneire	2017-02-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	It has been renamed to nixos-generate-config in 3ed4173
* \| \| \| \| \| \| \| \|	Merge branch 'staging'	Vladimír Čunát	2017-02-18
\|\ \ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	A security update of libxml2 is within.
\| * \ \ \ \ \ \ \ \	Merge pull request #22864 from abbradar/dbus-etc	Nikolay Amiantov	2017-02-17
\| \|\ \ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Redo DBus configuration
\| \| * \| \| \| \| \| \| \| \|	dbus service: use makeDBusConf	Nikolay Amiantov	2017-02-16
\| \| \| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \| \| \|	programs.mtr: init setcap-wrapper	Robin Gloster	2017-02-17
\| \| \| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \| \| \|	activation-script service: add utillinux to path	Nikolay Amiantov	2017-02-17
\| \| \| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \| \| \|	taskserver: Remove taskserver from systemPackages	aszlig	2017-02-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This is deliberate because using the taskd binary to configure Taskserver has a good chance of messing up permissions. The nixos-taskserver tool now can manage even manual configurations, so there really is no need anymore to expose the taskd binary. If people still want to use the taskd binary at their own risk they can still add taskserver to systemPackages themselves. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* \| \| \| \| \| \| \| \| \| \|	nixos/tests/taskserver: Add test for manual config	aszlig	2017-02-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This subtest actually serves two purposes: 1. Test manual PKI configuration 2. Test changing of configuration files In order to only test manual PKI configuration it would have been enough to just add another server with a manual config. But as the switch from automatic PKI config to manual config is probably one of the most fundamental changes in configuration, so it serves very well to also check whether changes in the NixOS configuration actually have an impact in the real system. So instead of adding another server, we now create a dummy "newServer" machine, which is the new configuration for "server" and use switch-to-configuration to switch "server" to the config of "newServer". Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* \| \| \| \| \| \| \| \| \| \|	taskserver: Pass configuration via command line	aszlig	2017-02-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Putting an include directive in the configuration file referencing a store path with the real configuration file has the disavantage that once we change the real configuration file the store path is also a different one. So we would have to replace that include directive with the new configuration file, which is very much error-prone, because whenever taskd modifies the configuration file on its own it generates a new one with only the key/value options and without any include directives. Another problem is that we only added the include directive on the first initalization, so whenever there is any configuration change, it won't affect anything. We're now passing all the configuration options via command line, because taskd treats everything in the form of --<name>=<value> to be a configuration directive. This also has the effect that we now no longer have extraConfig, because configuration isn't a file anymore. Instead we now have an attribute set that is mapped down to configuration options. Unfortunately this isn't so easy with the way taskd is configured, because there is an option called "server" and also other options like "server.cert", "server.key" and so on, which do not map very well to attribute sets. So we have an exception for the "server" option, which is now called "server.listen", because it specifies the listening address. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Fixes: #22705
* \| \| \| \| \| \| \| \| \| \|	taskserver: Allow helper tool in manual config	aszlig	2017-02-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The helper tool so far was only intended for use in automatic PKI handling, but it also is very useful if you have an existing CA. One of the main advantages is that you don't need to specify the data directory anymore and the right permissions are also handled as well. Another advantage is that we now have an uniform management tool for both automatic and manual config, so the documentation in the NixOS manual now applies to the manual PKI config as well. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* \| \| \| \| \| \| \| \| \| \|	taskserver/helpertool: Fix error message on export	aszlig	2017-02-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The error message displays that a specific user doesn't exist in an organisation, but uses the User object's name attribute to show which user it was. This is basically a very stupid chicken and egg problem and easily fixed by using the user name provided on the command line. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* \| \| \| \| \| \| \| \| \| \|	nixos/test: Fix escaping for copyFileFromHost	aszlig	2017-02-17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	A long-time issue and one of the reasons I've never used that function before. So let's remove that todo-comment and escape the contents properly. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Cc: @edolstra
* \| \| \| \| \| \| \| \| \| \|	bluetooth module: add option to power up bluetooth controller (#22685)	Michele Guerini Rocco	2017-02-17
\| \| \| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \| \| \|	stanchion: remove ssl option	Matthew Daiter	2017-02-17
\| \|_\|_\|_\|_\|/ / / / / \|/\| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \| \|	Revert "nginx: Format the config file"	Robin Gloster	2017-02-16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This reverts commit e362a3d5c94ba379d428fbd2cc40470719a61556. See #22883
* \| \| \| \| \| \| \| \| \|	networking.networkd: adjust autmatic mapping of bonds	Profpatsch	2017-02-16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Since the bonds interface changed to a lot more possible values we create a mapping of kernel bond attribute names and values to networkd attributes. Those match for the most part, but have to transformed slightly. There is also an assert that unknown options won’t slip through silently.
* \| \| \| \| \| \| \| \| \|	networking.bonds: add support for arbitrary driverOptions	Profpatsch	2017-02-16
\|/ / / / / / / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Until now the four attributes available very selectively provided a small subset, while copying upstream documentation. We make driver options an arbitrary key-value set and point to kernel documentation, which is always up-to-date. This way every option can be set. The four already existing options are deprecated with a warning.
* \| \| \| \| \| \| \| \|	Merge pull request #22869 from copumpkin/amazon-init-fix	Daniel Peebles	2017-02-16
\|\ \ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	amazon-init NixOS module: fix (I think) race condition with network
\| * \| \| \| \| \| \| \| \|	amazon-init NixOS module: fix (I think) race condition with network	Dan Peebles	2017-02-16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The initialization code is now a systemd service that explicitly waits for network-online, so the occasional failure I was seeing because the `nixos-rebuild` couldn't get anything from the binary cache should stop. I hope!
* \| \| \| \| \| \| \| \| \|	Merge pull request #22813 from benley/pam-kwallet	Thomas Tuegel	2017-02-16
\|\ \ \ \ \ \ \ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	nixos: add optional pam_kwallet5 integration
\| * \| \| \| \| \| \| \| \| \|	pam: add optional pam_kwallet5 integration	Benjamin Staffin	2017-02-16
\| \| \| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \| \| \|	kbd service: use /dev/tty1 for systemd-vconsole-setup	Nikolay Amiantov	2017-02-16
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fixes #22470
* \| \| \| \| \| \| \| \| \| \|	kbd service: use systemd-vconsole-setup even with early setup	Nikolay Amiantov	2017-02-16
\| \|/ / / / / / / / / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This way we have fonts reloaded on switches.
* \| \| \| \| \| \| \| \| \|	Fix typo introduced by #22677	Kier Davis	2017-02-15
\| \| \| \| \| \| \| \| \| \|
* \| \| \| \| \| \| \| \| \|	nixos/geoip-updater: run as user 'geoip' instead of 'nobody'	Bjørn Forsman	2017-02-15
\|/ / / / / / / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	That way 'nobody' is prevented from messing with the databases.
* \| \| \| \| \| \| \| \|	nixos/security.wrappers: improve documentation	Bjørn Forsman	2017-02-15
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* The source attribute is mandatory, not optional * The program attribute is optional * Move the info about the mandatory attribute first (most important, IMHO)
* \| \| \| \| \| \| \| \|	modules/filesystems: disallow non-empty fstab fields (#22803)	Profpatsch	2017-02-15
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	It was possible to pass empty strings / strings with only separator characters; this lead to broken fstab formatting.
* \| \| \| \| \| \| \| \|	prometheus.blackboxExporter service: add CAP_NET_RAW	Franz Pletz	2017-02-15
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The blackbox-exporter for prometheus needs CAP_NET_RAW for sending icmp probes.