summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Merge pull request #29581 from eqyiel/fix-rpc-gssdJörg Thalheim2017-09-22
|\ | | | | nixos/nfs: allow setting the path to krb5.keytab
| * nfs-utils: set /etc/krb5.keytab as default path for rpc-gssdRuben Maher2017-09-20
| | | | | | | | | | | | | | | | | | Currently the `rpc-gssd.service` has a `ConditionPathExists` clause that can never be met, because it's looking for stateful data inside `/nix/store`. `auth-rpcgss-module.service` also only starts if this file exists. Fixes NixOS/nixpkgs#29509.
* | fuse3: init at 3.1.1Michael Weiss2017-09-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This includes fuse-common (fusePackages.fuse_3.common) as recommended by upstream. But while fuse(2) and fuse3 would normally depend on fuse-common we can't do that in nixpkgs while fuse-common is just another output from the fuse3 multiple-output derivation (i.e. this would result in a circular dependency). To avoid building fuse3 twice I decided it would be best to copy the shared files (i.e. the ones provided by fuse(2) and fuse3) from fuse-common to fuse (version 2) and avoid collision warnings by defining priorities. Now it should be possible to install an arbitrary combination of "fuse", "fuse3", and "fuse-common" without getting any collision warnings. The end result should be the same and all changes should be backwards compatible (assuming that mount.fuse from fuse3 is backwards compatible as stated by upstream [0] - if not this might break some /etc/fstab definitions but that should be very unlikely). My tests with sshfs (version 2 and 3) didn't show any problems. See #28409 for some additional information. [0]: https://github.com/libfuse/libfuse/releases/tag/fuse-3.0.0
* | Merge pull request #27340 from bachp/glusterfs-tlsJoachim F2017-09-21
|\ \ | | | | | | glusterfs service: add support for TLS communication
| * | gluster service: use str instead of path for private keyPascal Bach2017-09-21
| | | | | | | | | | | | | | | This pervents the user from accidently commiting the key to the nix store. If providing a path instead of a string.
| * | glusterfs service: add support for TLS communicationPascal Bach2017-09-17
| | | | | | | | | | | | TLS settings are implemented as submodule.
* | | Merge pull request #29285 from bachp/node-exporter-docsJörg Thalheim2017-09-21
|\ \ \ | | | | | | | | node-exporter service: fix documentation for enabledCollectors
| * | | node-exporter service: fix documentation for enabledCollectorsPascal Bach2017-09-12
| | | |
* | | | gitlab: 9.5.2 -> 9.5.5Robin Gloster2017-09-21
| | | |
* | | | kmscon: reset ExecStart to allow overridePeter Hoeg2017-09-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The getty@.service unit already has an ExecStart so we cannot simply set a new one in order to override it or we will get this error: systemd[1]: getty@tty1.service: Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing. Instead "reset" ExecStart by setting it to empty which is the systemd way of doing it.
* | | | nixos/tests/virtualbox: Fix netcat invocationaszlig2017-09-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a backwards-incompatibility in netcat-openbsd introduced due to bumping the netcat version to 1.130 in a72ba661acf54d1beb2b4e306acba7d6f45621c4. Version 1.130 no longer exits on EOF but now needs to be passed the -N flag in order to exit on EOF. The upstream change reads[1] like this: Don't shutdown nc(1)'s network socket when stdin closes. Matches *Hobbit*'s original netcat and GNU netcat; revert to old behaviour with the new -N flag if needed. After much discussion with otto deraadt tedu and Martin Pelikan. ok deraadt@ Here is the diff of this change: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/nc/netcat.c.diff?r1=1.110&r2=1.111&f=h [1]: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/nc/netcat.c?rev=1.111&content-type=text/x-cvsweb-markup Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | xonsh: fix typo ("xnosh") in "enable" descriptionRaphael Das Gupta2017-09-21
| | | |
* | | | gitlab module: fix shell hook pathRobin Gloster2017-09-20
| | | |
* | | | Make sure dummy kernel module is loaded for hologram-agent.Rob Vermaas2017-09-20
| | | | | | | | | | | | | | | | (cherry picked from commit eb873f6c78e1c5306956b4c9fd651b25a6b9c40c)
* | | | Merge pull request #29521 from aneeshusa/ease-radicale-upgradeFranz Pletz2017-09-18
|\ \ \ \ | | | | | | | | | | Ease radicale upgrade
| * | | | radicale: Test migration functionalityAneesh Agrawal2017-09-18
| | | | | | | | | | | | | | | | | | | | This also provides an example of how to migrate.
| * | | | radicale: Add extraArgs option to assist in data migrationAneesh Agrawal2017-09-18
| | | | |
* | | | | nixos: add option for bind to not resolve local queries (#29503)gwitmond2017-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When the user specifies the networking.nameservers setting in the configuration file, it must take precedence over automatically derived settings. The culprit was services.bind that made the resolver set to 127.0.0.1 and ignore the nameserver setting. This patch adds a flag to services.bind to override the nameserver to localhost. It defaults to true. Setting this to false prevents the service.bind and dnsmasq.resolveLocalQueries settings from overriding the users' settings. Also, when the user specifies a domain to search, it must be set in the resolver configuration, even if the user does not specify any nameservers. (cherry picked from commit 670b4e29adc16e0a29aa5b4c126703dcca56aeb6) This commit was accidentally merged to 17.09 but was intended for master. This is the cherry-pick to master.
* | | | | ssh service: add sftpFlags optionFranz Pletz2017-09-18
| | | | |
* | | | | tests: add initrd-network-ssh testWilliButz2017-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | starts two VMs: - one with dropbear listening from initrd, waiting for a file - another connecting via ssh, creating the file
* | | | | nixos/tests: add grafana test (#29531)WilliButz2017-09-18
| | | | |
* | | | | coturn service: Fix coturn to properly come up (#29415)Robert Klotzner2017-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | properly also in case dhcpcd being used. Without network-online.target, coturn will fail to listen on addresses that come up with dhcpcd.
* | | | | nixos/networking: network is online if default gw setFranz Pletz2017-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously services depending on network-online.target would wait until dhcpcd times out if it was enabled and a static network address configuration was used. Setting the default gateway statically is enough for the networking to be considered online. This also adjusts the relevant networking tests to wait for network-online.target instead of just network.target.
* | | | | Merge pull request #29133 from elitak/ipfsFranz Pletz2017-09-18
|\ \ \ \ \ | | | | | | | | | | | | ipfs: workaround for upstream bug; other small fixes
| * | | | | tests: ipfs: enable autoMount testsMaximilian Güntner2017-09-18
| | | | | |
| * | | | | ipfs: autoMount working without rootEric Litak2017-09-17
| | | | | |
| * | | | | ipfs: workaround for upstream bug; doc fixesEric Litak2017-09-17
| |/ / / /
* | | | | nixos/mysql: declarative users & databasesFlorian Jacob2017-09-18
| | | | | | | | | | | | | | | | | | | | using Unix socket authentication, ensured on every rebuild.
* | | | | influxdb service: fixup postStart script to handle TLSKranium Gikos2017-09-18
| | | | |
* | | | | gollum service: initJustin Humm2017-09-18
|/ / / /
* | | | Merge pull request #27256 from bachp/squid-serviceFranz Pletz2017-09-17
|\ \ \ \ | | | | | | | | | | squid service: initial service based on default config
| * | | | squid service: intial service based on default configPascal Bach2017-09-09
| | | | |
* | | | | nixos/gogs: Fix module when no passwords providedRodney Lorrimar2017-09-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If neither database.password or database.passwordFile were provided, it would try and fail to coerce null to a string. This fixes the situation where there is no password for the database. Resolves #27950
* | | | | Merge pull request #29479 from florianjacob/fix-tinc-stableJoachim F2017-09-17
|\ \ \ \ \ | |_|_|/ / |/| | | | nixos/tinc: Fix tinc cli wrapper for tinc 1.0
| * | | | nixos/tinc: Fix tinc cli wrapper for tinc 1.0.Florian Jacob2017-09-17
| | | | | | | | | | | | | | | | | | | | | | | | | tinc prior to 1.1 doesn't have the `tinc` executable, and `tincd` isn't of any use while the daemon already runs.
* | | | | dockerTools.pullImage: release note regarding sha256 argument valueAntoine Eiche2017-09-17
| | | | |
* | | | | nixos/dovecot: Fix createMailUser implementationaszlig2017-09-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This option got introduced in 7904499542814b8a4d04fce8dc7ca8c383c083e7 and it didn't check whether mailUser and mailGroup are null, which they are by default. Now we're only creating the user if createMailUser is set in conjunction with mailUser and the group if mailGroup is set as well. I've added a NixOS VM test so that we can verify whether dovecot works without any additional options set, so it serves as a regression test for issue #29466 and other issues that might come up with future changes to the Dovecot service. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Fixes: #29466 Cc: @qknight, @abbradar, @ixmatus, @siddharthist
* | | | | Merge pull request #29462 from joachifm/trivial-misc-testsJoachim F2017-09-16
|\ \ \ \ \ | |/ / / / |/| | | | nixos/tests: move kernel-params & sysctl test to misc
| * | | | nixos/release-combined: remove basic kernel testsJoachim Fasting2017-09-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Arguably, breaking linux-latest should not block a release. Also, booting the kernel + basic sanity checking is implicitly exercised by every other vm test.
| * | | | nixos/tests: move kernel-params test to miscJoachim Fasting2017-09-16
| | | | |
| * | | | nixos/tests: move sysctl test to miscJoachim Fasting2017-09-16
| | | | |
* | | | | Merge pull request #28927 from xtruder/nixos/logkeys/initJaka Hudoklin2017-09-16
|\ \ \ \ \ | | | | | | | | | | | | logkeys module: init
| * | | | | logkeys module: initThe Admin2017-09-03
| | | | | |
* | | | | | Merge pull request #28892 from ryantm/matterbridge2Joachim F2017-09-16
|\ \ \ \ \ \ | | | | | | | | | | | | | | matterbridge, modules/matterbridge: init at 1.1.0
| * | | | | | matterbridge, modules/matterbridge: init at 1.1.0Ryan Mulligan2017-09-10
| | | | | | |
* | | | | | | nixos/tests: expand hardened testsJoachim Fasting2017-09-16
| | | | | | |
* | | | | | | systemd: better document enabled, wantedBy, and requiredBy (#29453)Matt McHenry2017-09-16
| |_|/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | the systemd.unit(5) discussion of wantedBy and requiredBy is in the [Install] section, and thus focused on stateful 'systemctl enable'. so, clarify that in NixOS, wantedBy & requiredBy are still what most users want, and not to be confused with enabled.
* | | | | | namecoin service: fix typoSilvan Mosberger2017-09-15
| |_|_|_|/ |/| | | |
* | | | | sd-image-aarch64: Increase CMA memory so RPi3 virtual console works againTuomas Tynkkynen2017-09-15
| | | | |
* | | | | nixos/wpa_supplicant: use literalExampleBjørn Forsman2017-09-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For various reasons, big Nix attrsets look ugly in the generated manual page[1]. Use literalExample to fix it. [1] Quotes around attribute names are lost, newlines inside multi-line strings are shown as '\n' and attrs written on multiple lines are joined into one.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-06-30 14:35:38 +0000