| Commit message (Collapse) | Author | Age |
|---|
| |\
| |
| | |
nixos: initrd/luks: allow to reuse passphrases, cleanup
|
| | | |
|
| | | |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
From reading the source I'm pretty sure it doesn't support multiple Yubikeys, hence
those options are useless.
Also, I'm pretty sure nobody actually uses this feature, because enabling it causes
extra utils' checks to fail (even before applying any patches of this branch).
As I don't have the hardware to test this, I'm too lazy to fix the utils, but
I did test that with extra utils checks commented out and Yubikey
enabled the resulting script still passes the syntax check.
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Also reuse common cryptsetup invocation subexpressions.
- Passphrase reading is done via the shell now, not by cryptsetup.
This way the same passphrase can be reused between cryptsetup
invocations, which this module now tries to do by default (can be
disabled).
- Number of retries is now infinity, it makes no sense to make users
reboot when they fail to type in their passphrase.
|
| | |
| |
| |
| | |
Also fix Yubikey timeout handling mess.
|
| | | |
|
| |\ \
| | |
| | | |
zerotier: added option to customise the port used
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | | |
Also store scripts directly in the nix store rather than having the
superfluous /bin/ tree.
|
| |\ \ \
| |_|/
|/| | |
WIP fwupd: 1.0.5 -> 1.1.0
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
We override the ESP mount point in the config file /etc/fwupd/uefi.conf
(available since version 1.0.6), as it is set to a path in the nix store
during build time.
Tests are disabled as it needs /etc/os-release, which is not available
when building with sandboxing enabled.
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Some modules of cloud-init can cope with a network not immediately
available (notably, the EC2 module), but some others won't retry if
network is not available (notably, the Cloudstack module).
network.target doesn't give much guarantee about the network
availability. Applications not able to start without a fully
configured network should be ordered after network-online.target.
Also see #44573 and #44524.
|
| | | | |
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | | |
Adds a replacement for the previously broken
`services.database.cassandra` with tests for a multi-node setup.
|
| | | | |
|
| |\ \ \
| | | |
| | | | |
services.plasma5: Make activationscript use absolute path to
|
| | | | |
| | | |
| | | |
| | | | |
`kbuildsyscoca5`
|
| | | | | |
|
| |/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This code was referenced.
This reverts commit 87f5930c3fb2c852f5243278b7a9da8e117d95e4.
cc @volth
|
| |\ \ \
| | | |
| | | | |
trackpoint: Make the device name configurable
|
| | |/ / |
|
| | | |
| | |
| | |
| | | |
with previous release
|
| |\ \ \
| | | |
| | | | |
nixos-generate-config: detect extlinux bootloader
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | | |
Signed-off-by: Austin Seipp <aseipp@pobox.com>
|
| | | | |
| | | |
| | | |
| | | | |
This reverts commit be1124a5377e0fa328d2b1a20ecf5f935037d8f6.
|
| | | | |
| | | |
| | | |
| | | | |
Signed-off-by: Austin Seipp <aseipp@pobox.com>
|
| | | | |
| | | |
| | | |
| | | | |
Signed-off-by: Austin Seipp <aseipp@pobox.com>
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The web_access.patch would no longer apply.
It disabled a check that required the static files
for the web UI to be owned by the user the daemon runs as
(not root, so it doesn't work well with nix).
Besides updating netdata, this commit removes that patch,
changes the netdata service config to set the "web files owner/group"
option to "root" and adds a test that checks that the web UI is being served.
This allows the web files to be owned by root without patching.
|
| | | | |
| | | |
| | | |
| | | | |
Signed-off-by: Austin Seipp <aseipp@pobox.com>
|
| | | | |
| | | |
| | | |
| | | | |
Signed-off-by: Austin Seipp <aseipp@pobox.com>
|
| |\ \ \ \
| | | | |
| | | | | |
nixos/systemd-boot: Add consoleMode option
|
| | | | | | |
|
| | | | | | |
|
| |\ \ \ \ \
| | | | | |
| | | | | | |
nixos/lightdm-gtk-greeter: svg icon support
|
| | | | | | | |
|
| | | | | | | |
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Broke evaluation of the nixos options.
The option `services.dysnomia' defined in `.../nixos/modules/rename.nix' does not exist.
This reverts commit 5c897b4effc4f51b2d6aa5dba158a839b179d964.
|
| | | | | | | |
|
| |\ \ \ \ \ \
| | | | | | |
| | | | | | | |
mpd: add nfs and smb support
|
| | | | | | | | |
|
| | | | | | | | |
|
| | | | | | | | |
|
| |\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
nixos/display-managers: fix loading of module-x11-publish
|
| | | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
module-x11-publish is only provided by the pulseaudioFull package.
|
| |\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
nixos/cfssl: Add new module for cfssl
|
| | | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
- based on module originally written by @srhb
- complies with available options in cfssl v1.3.2
- uid and gid 299 reserved in ids.nix
- added simple nixos test case
|