about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Merge pull request #72390 from flokli/bump-opensmtpdFlorian Klink2019-11-11
|\ | | | | opensmtpd: 6.4.2p1 -> 6.6.1p1
| * nixos/opensmtpd: convert test to pythonFlorian Klink2019-11-08
| |
| * nixos/opensmtpd: refactor to use tmpfiles to set up spool directoriesFlorian Klink2019-11-08
| |
* | Merge pull request #73136 from worldofpeace/port-sddm-testworldofpeace2019-11-10
|\ \ | | | | | | nixosTests.sddm: port to python
| * | nixosTests.sddm: port to pythonworldofpeace2019-11-09
| | |
* | | Merge pull request #73135 from worldofpeace/port-lightdm-testworldofpeace2019-11-10
|\ \ \ | | | | | | | | nixosTests.lightdm: port to python
| * | | nixosTests.lightdm: port to pythonworldofpeace2019-11-09
| |/ /
* | | Merge pull request #72751 from c00w/sd_image_hydraSamuel Dionne-Riel2019-11-10
|\ \ \ | | | | | | | | sd-image: Add the compressed file path for hydra.
| * | | sd-image: Add the compressed file path for hydra.Colin L Rice2019-11-05
| | | | | | | | | | | | | | | | This makes the nixos on arm user instructions work again.
* | | | Merge pull request #73080 from flokli/nixos-samba-python-tmpfilesAaron Andersen2019-11-09
|\ \ \ \ | | | | | | | | | | nixos/samba: use tmpfiles, port test to python
| * | | | nixos/samba: port test to pythonFlorian Klink2019-11-08
| | | | |
| * | | | nixos/samba: update module to use tmpfiles, remove samba-setup serviceFlorian Klink2019-11-08
| | | | |
* | | | | Merge pull request #73059 from flokli/nixos-test-port-tinydnsworldofpeace2019-11-09
|\ \ \ \ \ | | | | | | | | | | | | nixos/tinydns: port test to python
| * | | | | nixos/tinydns: port test to pythonFlorian Klink2019-11-08
| | | | | |
| * | | | | nixos/tinydns: order service after network.targetFlorian Klink2019-11-08
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | In cases where you boot up really quickly (like in the VM test on a non-busy host), tinydns might want to bind before the loopback interface is fully up. Order tinydns after network.target to fix that.
* | | | | Merge pull request #71416 from worldofpeace/gnome3-sound-themeworldofpeace2019-11-09
|\ \ \ \ \ | | | | | | | | | | | | nixos/gnome3: add sound-theme-freedesktop
| * | | | | nixos/xdg/sounds: add sound-theme-freedesktopworldofpeace2019-11-03
| | | | | |
| * | | | | nixos/gnome3: add sound-theme-freedesktopworldofpeace2019-11-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I've noticed a similar issue in Pantheon, without this sound theme installed there's no system sounds. I believe it's because the gnome theme and the pantheon theme inherit this one.
* | | | | | nixos/haproxy: support hot-reload without dropping packetsPeter Hoeg2019-11-09
| | | | | |
* | | | | | Merge pull request #71986 from mtetreault/mte/plymouth-improvementsThomas Tuegel2019-11-09
|\ \ \ \ \ \ | | | | | | | | | | | | | | plymouth: Add extra config field
| * | | | | | plymouth: Add extra config fieldMathieu A.-Tetreault2019-10-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Mathieu A.-Tetreault <alexandretm@amotus.ca>
* | | | | | | nixos/httpd: module fixes enableUserDir (attendum to #72789)Red Davies2019-11-09
| | | | | | |
* | | | | | | Merge pull request #71576 from ShaRose/patch-1Silvan Mosberger2019-11-09
|\ \ \ \ \ \ \ | |_|_|_|/ / / |/| | | | | | nixos/dnsdist: Add CAP_NET_BIND_SERVICE to AmbientCapabilities
| * | | | | | nixos/dnsdist: Add CAP_NET_BIND_SERVICE to AmbientCapabilitiesShaRose2019-10-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It seems that dnsdist doesn't actually request CAP_NET_BIND_SERVICE, which is why normally it's executed and root and setuids to another, unprivileged, user. This means that as it is, dnsdist will be unable to bind to any port under 1024 and will fail with access denied. Removing CAP_SETGID and CAP_SETUID is also related to this as we don't actually change the uid or gid after the fact as we use DynamicUser. (That part isn't strictly NEEDED but there's no reason to have those capabilities if we don't use them). There are also some additional sandboxing we can remove from the service definition as they are assumed true or strict by DynamicUser: specifically PrivateTmp and ProtectSystem respectively. ProtectHome is still there, despite being assumed read-only as setting it to true means they are seen as empty. I don't think it really matters as I don't know if systemd will ignore it or not, but I didn't see any reason to go hunting for excuses to make it a bigger change.
* | | | | | | Merge pull request #73063 from minijackson/shiori-thingsFlorian Klink2019-11-08
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | shiori: update modSha256, update test to python, do more tests
| * | | | | | | nixos/tests: add shiori to all-tests.nixMinijackson2019-11-08
| | | | | | | |
| * | | | | | | nixos/shiori: port test to python, do more testsMinijackson2019-11-08
| | | | | | | |
* | | | | | | | Merge pull request #73049 from flokli/fix-redis-mergeFlorian Klink2019-11-08
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | nixos/redis: fix merging
| * | | | | | | | nixos/redis: fix mergingFlorian Klink2019-11-08
| | |_|_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://github.com/NixOS/nixpkgs/pull/71584 did merging without mkMerge. cc @jtojnar
* | | | | | | | Merge pull request #73060 from flokli/nixos-test-port-powerdnsworldofpeace2019-11-08
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | nixos/powerdns: port test to python
| * | | | | | | | nixos/powerdns: port test to pythonFlorian Klink2019-11-08
| |/ / / / / / /
* | | | | | | | Merge pull request #73057 from flokli/nixos-test-port-smokepingworldofpeace2019-11-08
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | nixos/smokeping: port test to python
| * | | | | | | | nixos/smokeping: port test to pythonFlorian Klink2019-11-08
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | cc #72828
* | | | | | | | Merge pull request #73056 from flokli/nixos-test-port-pppdworldofpeace2019-11-08
|\ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ |/| | | | | | | nixos/pppd: port test to python
| * | | | | | | nixos/pppd: port test to pythonFlorian Klink2019-11-08
| |/ / / / / /
* | | | | | | Merge pull request #73046 from curiousleo/patch-1worldofpeace2019-11-08
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nixos/tests: correct arguments to get_unit_info
| * | | | | | | nixos/tests: correct arguments to get_unit_infoLeonhard Markert2019-11-08
| |/ / / / / /
* / / / / / / nixos/systemd: Allow unit options to have multiple equal defs (#73024)Silvan Mosberger2019-11-08
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | E.g. this allows systemd.services.<name?>.serviceConfig.DynamicUser = mkMerge [ true true ];
* | | | | | Merge pull request #72935 from marijanp/port-tests-pythonFlorian Klink2019-11-08
|\ \ \ \ \ \ | | | | | | | | | | | | | | Port tests to Python
| * | | | | | nixos/docker-edge: port test to pythonMarijan Petricevic2019-11-07
| | | | | | |
| * | | | | | nixos/dnscrypt-proxy: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/couchdb: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/documize: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/docker: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/cjdns: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/cloud-init: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/cfssl: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/certmgr: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/cadvisor: port test to pythonMarijan2019-11-07
| | | | | | |
| * | | | | | nixos/caddy: port test to pythonMarijan2019-11-07
| | | | | | |