about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Merge pull request #87016 from flokli/nsswitch-cleanupFlorian Klink2020-05-14
|\ | | | | nixos/nsswitch cleanup nss modules
| * nixos/nsswitch: improve error messageFlorian Klink2020-05-11
| | | | | | | | | | Show the config option triggering the assertion, so people don't necessary lookup the nixpkgs source code.
| * nixos/sssd remove redundant conditionFlorian Klink2020-05-11
| | | | | | | | | | This is all inside a global cfg.enable conditional, so we don't need to check here again.
| * nixos/systemd: enable systemd-provided nss modules unconditionallyFlorian Klink2020-05-11
| | | | | | | | | | | | | | A disabled nscd breaks nss module loading on NixOS, and systemd without its nss modules doesn't really work either - instead of silently disabling its nss modules if nscd is disabled, let the assertion in nsswitch handle this.
| * nixos/nsswitch: update comment next to assertionFlorian Klink2020-05-11
| |
| * nixos/sssd: drop assertionFlorian Klink2020-05-11
| | | | | | | | | | This is now already triggered by the nsswitch module, as we set system.nssModules.
| * nixos/samba: move nss database configuration into samba moduleFlorian Klink2020-05-11
| |
| * nixos/avahi: move nss database configuration into avahi moduleFlorian Klink2020-05-11
| |
| * nixos/ldap: move nss database configuration into ldap moduleFlorian Klink2020-05-11
| | | | | | | | | | now that passwdArray and shadowArray aren't used anymore, these can be folded.
| * nixos/systemd: add to system.nssDatabases.group tooFlorian Klink2020-05-11
| | | | | | | | | | | | | | nixos/modules/config/nsswitch.nix uses `passwdArray` for both `passwd` and `group`, but when moving this into the systemd module in c0995d22eed1a19ac9442c8460c18dd6a4c389b7, it didn't get split appropriately.
| * nixos/google-oslogin: add to system.nssDatabases.group tooFlorian Klink2020-05-11
| | | | | | | | | | | | | | nixos/modules/config/nsswitch.nix uses `passwdArray` for both `passwd` and `group`, but when moving this into the google-oslogin module in 4b71b6f8fa5f7b06ea5d0dd37d44a73757c7f142, it didn't get split appropriately.
| * nixos/sssd: add to system.nssDatabases.group tooFlorian Klink2020-05-11
| | | | | | | | | | | | | | nixos/modules/config/nsswitch.nix uses `passwdArray` for both `passwd` and `group`, but when moving this into the sss module in edddc7c82a848f1b1f23344a338b5d56b38178c0, it didn't get split appropriately.
* | Remove unused filesEelco Dolstra2020-05-14
| |
* | Merge pull request #86376 from c00w/vendor_modJörg Thalheim2020-05-14
|\ \
| * | go-modules: Doc updatesColin L Rice2020-05-14
| | |
* | | Merge pull request #87219 from serokell/kirelagin/postgres-no-timeLinus Heckemann2020-05-14
|\ \ \ | |/ / |/| | postgres: Do not log timestamp
| * | postgresql: Fix formatting in option descriptionKirill Elagin2020-05-13
| | | | | | | | | Co-authored-by: Mario Rodas <marsam@users.noreply.github.com>
| * | postgres: Do not log timestampKirill Elagin2020-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By default, postgres prefixes each log line with a timestamp. On NixOS logs are written to journal anyway, so they include an external timestamp, so the timestamp ends up being printed twice, which clutters the log. * Add a module option to change the log prefix. * Set it to upstream default sans timestamp.
* | | Merge pull request #87576 from xtruder/pkgs/libvirtd/polkitJaka Hudoklin2020-05-13
|\ \ \ | | | | | | | | libvirtd: polkit integration, security fixes
| * | | nixos/libvirtd: use polkit for authJaka Hudoklin2020-05-13
| | | |
* | | | Merge pull request #85567 from Izorkin/nginx-sandboxJörg Thalheim2020-05-13
|\ \ \ \
| * | | | nixos/nginx: add option enableSandboxIzorkin2020-05-12
| | | | |
| * | | | nginxModules: add option allowMemoryWriteExecuteIzorkin2020-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | The allowMemoryWriteExecute option is required to checking enabled nginxModules and disable the nginx sandbox mode MemoryDenyWriteExecute.
| * | | | nixos/tests: add nginx-sandbox testIzorkin2020-05-12
| | | | |
| * | | | nixos/tests: fix nginx-pubhtml testIzorkin2020-05-12
| | | | |
| * | | | nixos/nginx: add release notesIzorkin2020-05-12
| | | | |
| * | | | nixos/nginx: enable sandboxingIzorkin2020-05-12
| | | | |
* | | | | Services,IPFS,Fix: Require the ipfs-migrator package for handling upgrades.Dietrich Daroch2020-05-13
| | | | | | | | | | | | | | | | | | | | Without it, the services get stuck on startup when the IPFS repo needs upgrades.
* | | | | Merge pull request #85687 from mayflower/privacyideaLinus Heckemann2020-05-13
|\ \ \ \ \ | | | | | | | | | | | | Init privacyIDEA packages and modules
| * | | | | privacyidea: address reviewsRobin Gloster2020-05-09
| | | | | |
| * | | | | privacyidea module: initRobin Gloster2020-04-21
| | | | | |
* | | | | | pam: fix spelling mistake in configurationTimmy Xiao2020-05-12
| | | | | |
* | | | | | Merge pull request #87581 from cole-h/doasadisbladis2020-05-12
|\ \ \ \ \ \ | | | | | | | | | | | | | | nixos/doas: default rule should be first
| * | | | | | nixos/doas: default rule should be firstCole Helbling2020-05-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In /etc/doas.conf, the last-matched rule will override all previously-matched rules. Thus, make the default rule show up first (but still allow some wiggle room for a user to `mkBefore` it), before any user-defined rules.
* | | | | | | Merge pull request #79966 from chkno/bcacheJacek Galowicz2020-05-12
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nixos/bcache: Installer test for / on bcache
| * | | | | | | nixos/bcache: Installer test for / on bcacheChuck2020-02-12
| | | | | | | |
* | | | | | | | Merge pull request #87599 from helsinki-systems/znapzend-oracle-modeSilvan Mosberger2020-05-12
|\ \ \ \ \ \ \ \
| * | | | | | | | nixos/znapzend: Add oracleMode feature; add maintainerMichel Weitbrecht2020-05-11
| | |_|_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The feature destroys snapshots one-by-one instead of all at once. If many snapshots accumulated, destroying them all at once can fail because the argument list is too long. See https://github.com/oetiker/znapzend/blob/master/lib/ZnapZend/ZFS.pm#L284
* | | | | | | | Merge pull request #87280 from helsinki-systems/znapzend-mbuffer-pathSilvan Mosberger2020-05-12
|\ \ \ \ \ \ \ \
| * | | | | | | | nixos/znapzend: Use generic mbuffer pathMichel Weitbrecht2020-05-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The configured mbuffer path will be called on both the source and target system. If you use pkgs.mbuffer from the source host and the target host does not have this exact derivation, you will get a broken pipe when sending snapshots. This is the case when transferring to a non-NixOS system or to a host with a different mbuffer version.
* | | | | | | | | nixos/pixiecore: fix escaping of cmdlinebetaboon2020-05-12
| | | | | | | | |
* | | | | | | | | Merge pull request #73530 from eadwu/nvidia/systemd-pmFlorian Klink2020-05-12
|\ \ \ \ \ \ \ \ \ | |_|_|_|_|_|/ / / |/| | | | | | | | nixos/nvidia: include systemd power management
| * | | | | | | | nixos/nvidia: include systemd power managementEdmund Wu2020-05-10
| | | | | | | | |
* | | | | | | | | Merge pull request #85428 from serokell/kirelagin/unit-script-nameLinus Heckemann2020-05-12
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | systemd: Simplify unit script names
| * | | | | | | | | fixup! systemd: Add prefix to unit script derivationsKirill Elagin2020-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Avoid extra string interpolation.
| * | | | | | | | | systemd: Add prefix to unit script derivationsKirill Elagin2020-04-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a distinctive `unit-script` prefix to systemd unit scripts to make them easier to find in the store directory. Do not add this prefix to actual script file name as it clutters logs.
| * | | | | | | | | fixup! systemd: Simplify unit script namesKirill Elagin2020-04-17
| | | | | | | | | |
| * | | | | | | | | systemd: Simplify unit script namesKirill Elagin2020-04-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Current journal output from services started by `script` rather than `ExexStart` is unreadable because the name of the file (which journalctl records and outputs) quite literally takes 1/3 of the screen (on smaller screens). Make it shorter. In particular: * Drop the `unit-script` prefix as it is not very useful. * Use `writeShellScriptBin` to write them because: * It has a `checkPhase` which is better than no checkPhase. * The script itself ends up having a short name.
* | | | | | | | | | Merge pull request #87632 from chkno/installer-test-machine-name-fixJacek Galowicz2020-05-12
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | nixos/tests/installer: Fix machine name
| * | | | | | | | | | nixos/tests/installer: Fix machine nameChuck2020-05-11
| | | | | | | | | | |