summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
...
* | | | | | | resurrect torsocks-fasterEvgeny Egorochkin2014-12-19
| | | | | | |
* | | | | | | rename torify to tsocks, to avoid name clashes and make it clear which ↵Evgeny Egorochkin2014-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | wrapper library is used
* | | | | | | torsocks: enable by default if tor client functionality is enabledEvgeny Egorochkin2014-12-19
| | | | | | |
* | | | | | | tor: restore the Privoxy setup, but configure the system Privoxy instead of ↵Evgeny Egorochkin2014-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | running a separate instance.
* | | | | | | tor: restore strong circuit isolationEvgeny Egorochkin2014-12-19
| | | | | | |
* | | | | | | Revert "nixos: Remove torify module"Evgeny Egorochkin2014-12-19
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tsocks is still useful because it's less strict This reverts commit 1b26faeb6994151b8f8842f340fe4c1b820f09fb.
* | | | | | nixos: Add VBox hardening to 14.12 release notes.aszlig2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | | | zfs hostId: Instructions to derive from machine-idwmertens2014-12-18
| |_|_|/ / |/| | | |
* | | | | nixos/virtualbox: Revert disable hardening.aszlig2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 5d67b17901ff2c9a18647bd9453c6b0d4294b875. The issues have been resolved by ac603e208c98b260db675fa0c13be94fa95216f4. Tested this with hostonlyifs and USB support with extension pack. Conflicts: nixos/modules/programs/virtualbox-host.nix Signed-off-by: aszlig <aszlig@redmoonstudios.org> Tested-by: Mateusz Kowalczyk <fuuzetsu@fuuzetsu.co.uk>
* | | | | ssh-agent: Don't have a timeout by defaultEelco Dolstra2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | IMHO, having a short timeout (1h) defeats the point of using ssh-agent, which is not to have to retype passphrases all the time. Of course, users who want timeouts can set programs.ssh.agentTimeout. This restores the 14.04 behaviour.
* | | | | Fix container testEelco Dolstra2014-12-18
| | | | | | | | | | | | | | | | | | | | http://hydra.nixos.org/build/17989795
* | | | | nixos/tests/virtualbox: Disable debug logging.aszlig2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Especially if the user isn't in the vboxusers group anymore, this gets VERY noisy, because the VBoxSVC process emits warnings for every single USB device noting that it's only possible to access it when the user is in the vboxusers group. So, we now have a debug attribute, where we can enable it when necessary. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | | nixos/tests/virtualbox: Don't use vboxusers group.aszlig2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | At least when we're running in hardening mode, because it's needed there only for USB support. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | | nixos/tests/blivet: Fix by avoiding "nix-store".aszlig2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The "nix-store" command within the VM test is running without NIX_REMOTE=daemon and since Nix 1.8 tries to open the store database in read-write mode even for nix-store -qR. Now, we're doing this properly and rely on setup hooks, which is the same method that's used when you're building a library which depends on blivet. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | | virtualbox: Fix runtime paths in hardening mode.aszlig2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because we have to rely on setuid wrappers on NixOS, we can't easily hardcode the executable paths and set it 4755. So for all calls, we need to change the runtime path executable directory to /var/setuid-wrappers/ and for verification we need to retain the executable directory. Also note, that usually VBoxNetAdpCtl, VBoxNetDHCP, VBoxNetNAT, VBoxSDL and VBoxVolInfo don't reside in directories that are commonly in PATH, but in /usr/lib/virtualbox in most mainstream distros. But because the names of these executables are distinctive enough to not cause collisions with other setuid programs, I'll leave it like that and not patch up setuid-wrappers. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | | release notes: reindent, remove renames (redudant)Domen Kožar2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | (cherry picked from commit 8566f66ea44f7adf050d92bd8dc8de9ba814f0d1) Signed-off-by: Domen Kožar <domen@dev.si>
* | | | | update release notesDomen Kožar2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | (cherry picked from commit 33e9a0503a55aef49c4d8750a712388ab71b6446) Signed-off-by: Domen Kožar <domen@dev.si>
* | | | | fix users.mutableUsers = false; install in isoDomen Kožar2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | (cherry picked from commit 9bc8bcbbdcc7cac98686877f09315bb749627732) Signed-off-by: Domen Kožar <domen@dev.si>
* | | | | Improve /etc/sudoers messageEelco Dolstra2014-12-18
| | | | |
* | | | | nixos/network-interfaces: Add ipv6 gateway supportWilliam A. Kennington III2014-12-17
| | | | |
* | | | | switch-to-configuration: Ignore slice unitsEelco Dolstra2014-12-18
| | | | |
* | | | | Revert "enable bash autocomplete by default"Eelco Dolstra2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit ee8e15fe76a235ae3583d4e8cb4bb370f28c5eae. See discussion at https://github.com/NixOS/nixpkgs/commit/ee8e15fe76a235ae3583d4e8cb4bb370f28c5eae.
* | | | | Remove udev from /run/opengl-driversEelco Dolstra2014-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | /run/opengl-drivers should contain only libGL-related libraries, not stuff like udev. Injecting anything into LD_LIBRARY_PATH is dangerous because it can break applications that expect a different version of the library. Caused by eef9a8ac2a30b495ff7184382ed0dbd73b3b88e4. Fixes #5371.
* | | | | It is called Dingo! yes, Dingo!Rob Vermaas2014-12-17
| | | | |
* | | | | nixos/tests/gitlab.nix: set TimeoutStartSec to 10minDomen Kožar2014-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | (cherry picked from commit 5bafb9cf0fea00470be4ff9b342849339297eeb4) Signed-off-by: Domen Kožar <domen@dev.si>
* | | | | Some lua and awesome improvementsLuca Bruno2014-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Move lgi to luaPackages - Use luaPackages in awesome and passthru lua - Allow to pass lua modules to the awesome WM so that those can be used in the configuration
* | | | | Merge pull request #5358 from bluescreen303/nixos-extra-modulesMathijs Kwik2014-12-17
|\ \ \ \ \ | | | | | | | | | | | | nixos: allow adding extra modules through environment
| * | | | | nixos: allow adding extra modules through environmentMathijs Kwik2014-12-16
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is useful for adding extra functionality or defaults to _every_ nixos evaluation. My use case is overriding behaviour for all nixos tests, for example setting packageOverrides to newer versions and changing some default dependencies/settings. By making this accessible through an environment variable, this can now be fully accomplished externally. No more need to fork nixos/nixpkgs (which becomes a maintenance burden), just use the channel instead and plug in via this envvar.
* | | | | Merge pull request #5254 from ehmry/network-filesystemswmertens2014-12-17
|\ \ \ \ \ | | | | | | | | | | | | nixos: configure samba and rsync shares with sets
| * | | | | nixos: configure samba and rsync shares with setsEmery Hemingway2014-12-07
| | | | | |
* | | | | | Merge pull request #5196 from madjar/cloud-initwmertens2014-12-17
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | cloud-init: add expression and service
| * | | | | Added the cloud-init serviceGeorges Dubus2014-12-03
| | | | | |
* | | | | | nixos/consul: Don't timeout if start job has many retriesWilliam A. Kennington III2014-12-16
| |_|_|/ / |/| | | |
* | | | | cups: Build with SERVERROOT set to /etc/cupsEelco Dolstra2014-12-16
| | | | |
* | | | | cupsd.nix: Clean up environment.etcEelco Dolstra2014-12-16
| | | | |
* | | | | nixos/cupsd: use cups-files.conftv@shackspace.de2014-12-16
| |_|/ / |/| | |
* | | | nixos/virtualbox: Fix warning on enableHardening.aszlig2014-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The warning was displayed whenever services.virtualboxHost.enable was true, but if people were to enable hardening, they'd still get that annoying message. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | Document screen incompatibilityEelco Dolstra2014-12-15
| | | |
* | | | nixos/tests/virtualbox: Improve logging.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This also makes showvminfo obsolete, as we get the same information from the hosts log. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | nixos/virtualbox/hostonlyif: Fix writing to /root.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Creates unnecessary cruft in the root users home directory, which we really don't need. Except the log, but therefore we now cat the log to stderr and the private temporary directory is cleaned up afterwards. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | nixos/virtualbox: Disable hardening for now.aszlig2014-12-15
| |_|/ |/| | | | | | | | | | | | | | | | | | | | This should display a big fat warning that people can hardly miss until we have fixed the issues with the host-only-interfaces that persist when hardining is enabled. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos/tests/virtualbox: Add test for hostonlyif.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Essentially adds two more VirtualBox VMs to the test and also increases the memory size of the qemu VM to 768 MB to make sure we don't run out of memory too soon. We're testing whether those two VMs can talk to either each other (currently via ICMP only) or to/from the host via TCP/IP. Also, this restructures the VM test a bit, so that we now pass in a custom stage2Init script that has access to the store via a private mount over the /nix/store that's already in the initrd. The reason why this is a private mount is that we don't want to shadow the Nix store of the initrd, essentially breaking cleanup functionality after the custom stage 2 script (currently this is only "poweroff -f"). Note that setting the hostname inside the VirtualBox VM is *not* for additional fanciness but to produce a different store path for the VM image, so that VirtualBox doesn't bail out when trying to use an image which is already attached to another VM. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos/virtualbox: Note about "vboxusers" group.aszlig2014-12-15
| | | | | | | | | | | | Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos/virtualbox: Allow to disable hardening.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | Hardening mode in VirtualBox is quite restrictive and on some systems it could make sense to disable hardening mode, especially while we still have issues with hostonly networking and other issues[TM] we don't know or haven't tested yet. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos/tests/virtualbox: Generalize expression.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | | | | | | | We're going to create more than one VirtualBox VM, so let's dynamically generate subs specific to a particular VirtualBox VM, merging everything into the testScript and machine expressions. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | nixos-generate-config: Don't emit networking.hostIdEelco Dolstra2014-12-15
| | | | | | | | | | | | | | | Systemd already generates /etc/machine-id. So there is no need to generate another unique host identifer.
* | | nixos-generate-config: Add time zoneEelco Dolstra2014-12-15
| | |
* | | nixos/doc/manual/release-notes/rl-1412.xml: document change of default time zonePeter Simons2014-12-15
| | | | | | | | | | | | https://github.com/NixOS/nixpkgs/pull/5332
* | | nixos/modules/system/boot/luksroot.nix: hyperlinkify an URL in the documentationPeter Simons2014-12-15
| | |
* | | Switch default timezone in NixOS from "CET" to "UTC".Peter Simons2014-12-15
| | | | | | | | | | | | Suggested in https://github.com/NixOS/nixpkgs/pull/5332.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-08 17:31:29 +0000