about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Merge pull request #64407 from dasJ/icingaweb-testMarek Mahut2019-08-19
|\ | | | | nixos/icingaweb: Fix module path; Add test
| * nixos/icingaweb: Fix module path; Add testJanne Heß2019-07-07
| |
* | Merge pull request #63973 from apvodney/masterMarek Mahut2019-08-19
|\ \ | | | | | | u9fs service: start after network.target
| * | u9fs service: start after network.targetAaron Vodney2019-06-30
| |/
* | Merge pull request #65995 from danderson/masterMarek Mahut2019-08-19
|\ \ | | | | | | nixos/sshguard: create ipsets before starting, and clean up after stopping.
| * | nixos/sshguard: create ipsets before starting, and clean up after stopping.David Anderson2019-08-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The fix for #62874 introduced a race condition on startup: the postStart commands that configure the firewall run concurrently with sshguard's creation of the ipsets that the rules depend on. Unfortunately iptables fails hard when referencing an ipset that doesn't exist, so this causes non-deterministic crashlooping until sshguard wins the race. This change fixes that race condition by always creating the ipset and reconfiguring the firewall before starting sshguard, so that the order of operations is always deterministic. This change also cleans up the ipsets on sshguard shutdown, so that removing sshguard from a running system doesn't leave state behind. Fixes #65985.
* | | Merge pull request #66271 from vdot0x23/patch-1Marek Mahut2019-08-19
|\ \ \ | | | | | | | | nixos/stubby: clearer wording for upstreamServers
| * | | nixos/stubby: Clearer wording for upstreamServersvdot0x232019-08-07
| | | | | | | | | | | | Indicate that upstreamServers actually replaces defaults instead of adding to default.
* | | | Merge pull request #66687 from ↵Marek Mahut2019-08-19
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | joachifm/feat/hardened-nixos-revert-graphene-malloc Revert "nixos/hardened: use graphene-hardened malloc by default"
| * | | | Revert "nixos/hardened: use graphene-hardened malloc by default"Joachim Fasting2019-08-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 48ff4f119735dc60c3e2794a71b00757b838d877. Causes too much breakage to be enabled by default [1][2]. [1]: https://github.com/NixOS/nixpkgs/issues/61489 [2]: https://github.com/NixOS/nixpkgs/issues/65000
* | | | | Merge pull request #66846 from uvNikita/containers/ephemeralMarek Mahut2019-08-19
|\ \ \ \ \ | | | | | | | | | | | | nixos/containers: add 'ephemeral' option
| * | | | | nixos/containers: add 'ephemeral' optionNikita Uvarov2019-08-19
| | | | | |
* | | | | | stage-1 init: fix debug menuNikolay Amiantov2019-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Read one char at a time, so user doesn't have to enter "i<ENTER>" contrary to the menu; * Exec shell inside setsid.
* | | | | | Merge pull request #66860 from worldofpeace/dconf-updateworldofpeace2019-08-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | nixos/dconf: cleanup
| * | | | | | nixos/pantheon: use programs.dconfworldofpeace2019-08-18
| | | | | | |
| * | | | | | nixos/gnome3: use programs.dconfworldofpeace2019-08-18
| | | | | | |
| * | | | | | nixos/dconf: cleanupworldofpeace2019-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add dconf to systemPackages and make GIO_EXTRA_MODULES a list so it can actually merge.
* | | | | | | Merge pull request #66482 from flokli/systemd-sysctlFlorian Klink2019-08-19
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nixos/systemd: install sysctl snippets
| * | | | | | | nixosTests.systemd: add fq_codel testFlorian Klink2019-08-18
| | | | | | | |
| * | | | | | | nixos/systemd: remove separate coredump moduleFlorian Klink2019-08-18
| | | | | | | |
| * | | | | | | nixos/systemd: install sysctl snippetsFlorian Klink2019-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | systemd provides two sysctl snippets, 50-coredump.conf and 50-default.conf. These enable: - Loose reverse path filtering - Source route filtering - `fq_codel` as a packet scheduler (this helps to fight bufferbloat) This also configures the kernel to pass coredumps to `systemd-coredump`. These sysctl snippets can be found in `/etc/sysctl.d/50-*.conf`, and overridden via `boot.kernel.sysctl` (which will place the parameters in `/etc/sysctl.d/60-nixos.conf`. Let's start using these, like other distros already do for quite some time, and remove those duplicate `boot.kernel.sysctl` options we previously did set. In the case of rp_filter (which systemd would set to 2 (loose)), make our overrides to "1" more explicit.
| * | | | | | | nixos/sysctl: rename /etc/sysctl.d/nixos.conf -> 60-nixos.confFlorian Klink2019-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | sysctl.d(5) recommends prefixing all filenames in /etc/sysctl.d with a two-digit number and a dash, to simplify the ordering of the files. Some packages provide custom files, often with "50-" prefix. To ensure user-supplied configuration takes precedence over the one specified via `boot.kernel.sysctl`, prefix the file generated there with "60-".
* | | | | | | | Merge pull request #66857 from nrdxp/fix/caddyMarek Mahut2019-08-19
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | caddy: remove 'bin' attribute
| * | | | | | | | caddy: remove 'bin' attributeTimothy DeHerrera2019-08-18
| | | | | | | | |
* | | | | | | | | nixos release notes: mention systemd.packages changesNikolay Amiantov2019-08-19
| | | | | | | | |
* | | | | | | | | nixos/cadvisor: allow passing custom arguments (#66855)Silvan Mosberger2019-08-19
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | nixos/cadvisor: allow passing custom arguments
| * | | | | | | | | nixos/cadvisor: allow passing custom argumentstilpner2019-08-19
| | |_|_|/ / / / / | |/| | | | | | |
* | | | | | | | | Merge pull request #66399 from mmahut/metabaseAaron Andersen2019-08-18
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | metabase: service module and test
| * | | | | | | | | tests: adding metabase service testMarek Mahut2019-08-18
| | | | | | | | | |
| * | | | | | | | | modules: adding metabase serviceMarek Mahut2019-08-18
| | | | | | | | | |
* | | | | | | | | | nixos/sd-image: Increase default firmware partition sizeSarah Brofeldt2019-08-18
| |_|_|_|/ / / / / |/| | | | | | | |
* | | | | | | | | shadowsocks service: support dual-stack serverNikolay Amiantov2019-08-18
| |/ / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | Enable IPv6 by default.
* | | | | | | | Merge pull request #66814 from mguentner/synapse_1_3_1WilliButz2019-08-18
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | matrix-synapse: 1.2.1 -> 1.3.1
| * | | | | | | | nixos/matrix-synapse: use notify instead of simpleMaximilian Güntner2019-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Starting with 1.3.0, matrix-synapse supports notifying systemd. Relevant PR: matrix-org/synapse#5732
* | | | | | | | | nixos/cjdns: add extraConfig option (#53502)Eric Litak2019-08-18
| | | | | | | | |
* | | | | | | | | Merge pull request #66606 from DerTim1/riemann-configMarek Mahut2019-08-18
|\ \ \ \ \ \ \ \ \ | |_|_|_|/ / / / / |/| | | | | | | | nixos/riemann-tools: Add ExtraArgs Config Option
| * | | | | | | | nixos/riemann-tools: Add ExtraArgs Config OptionTim Digel2019-08-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added option "extraArgs" to forward any switches to riemann-tools.
* | | | | | | | | Merge pull request #66825 from flokli/nixos-systemd-test-dupFlorian Klink2019-08-18
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | nixosTests.systemd: remove duplicate copypasta
| * | | | | | | | | nixosTests.systemd: remove duplicate copypastaFlorian Klink2019-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It seems the regression test for #35268 sneaked in twice.
* | | | | | | | | | Merge branch 'master' into flip-map-foreachdanbst2019-08-18
|\ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | elasticsearch: add example on how to use plugins (#55115)Danylo Hlynskyi2019-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See https://discourse.nixos.org/t/elastic-search-plugins/1997
| * | | | | | | | | | Merge pull request #66621 from flokli/gitlab-12.1.6Florian Klink2019-08-18
| |\ \ \ \ \ \ \ \ \ \ | | |/ / / / / / / / / | |/| | | | | | | | | gitlab-ce: 12.0.3 -> 12.1.6
| | * | | | | | | | | nixos/gitlab: Delete stale hooks directories with -RBen Gamari2019-08-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These can be directories.
| * | | | | | | | | | Merge pull request #65291 from worldofpeace/xdg-updatesworldofpeace2019-08-18
| |\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Flatpak updates
| | * | | | | | | | | | nixos/flatpak: add comment about selinuxworldofpeace2019-08-18
| | | | | | | | | | | |
| | * | | | | | | | | | flatpak: 1.2.4 -> 1.4.2worldofpeace2019-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Regenerated all patches for 1.4.2 and resolved any conflicts. * fix-test-paths.patch doesn't copy the whole locale archive because we have C.UTF8 now. * nixos/flatpak creates a Flatpak system helper user Change introduced in 1.3.2. Changes: See https://github.com/flatpak/flatpak/releases/tag/1.3.1 through 1.4.2.
| * | | | | | | | | | | Merge pull request #66381 from NixOS/staging-nextFrederik Rietdijk2019-08-18
| |\ \ \ \ \ \ \ \ \ \ \ | | |/ / / / / / / / / / | |/| | | | | | | | | | Staging next
| | * | | | | | | | | | Merge master into staging-nextFrederik Rietdijk2019-08-17
| | |\ \ \ \ \ \ \ \ \ \ | | | | |_|_|_|/ / / / / | | | |/| | | | | | | |
| | * | | | | | | | | | Merge master into staging-nextFrederik Rietdijk2019-08-14
| | |\ \ \ \ \ \ \ \ \ \ | | | | |/ / / / / / / / | | | |/| | | | | | | |
| | * | | | | | | | | | Merge master into staging-nextFrederik Rietdijk2019-08-09
| | |\ \ \ \ \ \ \ \ \ \
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-08-03 17:46:21 +0000