about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
...
* | | | | Remove test leftover from docker-registryDomen Kožar2016-09-10
| | | | | | | | | | | | | | | | | | | | | | | | | (cherry picked from commit d171c59926b77564089964f06ba761609b9a477e) Signed-off-by: Domen Kožar <domen@dev.si>
* | | | | runInMachine: Unset another variableEelco Dolstra2016-09-09
| | | | | | | | | | | | | | | | | | | | Thanks @cstrahan.
* | | | | Remove docker-registry as it's deprecated #18209Domen Kožar2016-09-09
| | | | |
* | | | | tomcat service: bump default tomcat to 8.5danbst2016-09-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See migration changelogs at - 7.0 -> 8.0: https://tomcat.apache.org/migration-8.html - 8.0 -> 8.5: https://tomcat.apache.org/migration-85.html
* | | | | tomcat: add danbst as maintainerdanbst2016-09-09
| | | | |
* | | | | tomcat service: call shutdown in preStop, because postStop is too late ↵danbst2016-09-09
| | | | | | | | | | | | | | | | | | | | (systemd kills process)
* | | | | tomcat: split default webapps to separate output (~6M)danbst2016-09-09
| | | | |
* | | | | nixos/tests/kde5: rename from sddm-kde5 and run by defaultThomas Tuegel2016-09-09
| | | | | | | | | | | | | | | | | | | | (cherry picked from commit 701f02a6eed902835e3d2a27838723cd9a7bb66a)
* | | | | nixos/tests/sddm-kde5: don't run tests through krunnerThomas Tuegel2016-09-09
| | | | | | | | | | | | | | | | | | | | (cherry picked from commit 1f510dc7cd1dbb67bbf6574983de1dc5ebde1a1d)
* | | | | Linux-kernel: Workaround for https://github.com/NixOS/nixpkgs/issues/18451Lengyel Balázs2016-09-09
| | | | | | | | | | | | | | | | | | | | remove after upstream gets fixed
* | | | | nixos/tests/pump.io: Fix systemd unit configRodney Lorrimar2016-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ref #18209 (cherry picked from commit 3fd603c02f339778c8ea24c2fadacb91185eb1c7)
* | | | | runInMachine: Support passAsFileEelco Dolstra2016-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | We need to rewrite attributes passed via files to their location in /tmp/xchg in the VM. Otherwise functions like runCommand don't work.
* | | | | nixos: unbreak influxdb test (due to new API)Eric Sagnes2016-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Data from the documentation example[1] was used. [1] https://docs.influxdata.com/influxdb/v1.0/guides/writing_data/ [Bjørn: change commit message.]
* | | | | radicale service: use "simple" service type (#18406)Robert Helgesson2016-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | Radicale can run as a foreground service and will then emits logging and errors on the standard output. This helps the logging end up in the systemd journal.
* | | | | Merge pull request #18244 from DamienCassou/emacs-gtk_data_prefixDamien Cassou2016-09-08
|\ \ \ \ \ | |/ / / / |/| | | | emacs module: Fix to get properly themed GTK apps
| * | | | emacs module: Fix to get properly themed GTK appsDamien Cassou2016-09-03
| | |_|/ | |/| |
* | | | nixos/stage2: Fix mounting special filesystemsaszlig2016-09-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This partially reverts commit ab9537ca22ce3fd4efc1795c58105504022d0c48. From the manpage of systemd-nspawn(1): Note that systemd-nspawn will mount file systems private to the container to /dev, /run and similar. Testing this in a shell turns out: $ sudo systemd-nspawn --bind-ro=/nix/store "$(readlink "$(which ls)")" /proc Spawning container aszlig on /home/aszlig. Press ^] three times within 1s to kill container. /etc/localtime does not point into /usr/share/zoneinfo/, not updating container timezone. 1 execdomains kpageflags stat acpi fb loadavg swaps asound filesystems locks sys buddyinfo fs meminfo sysrq-trigger bus interrupts misc sysvipc cgroups iomem modules thread-self cmdline ioports mounts timer_list config.gz irq mtrr timer_stats consoles kallsyms net tty cpuinfo kcore pagetypeinfo uptime crypto key-users partitions version devices keys scsi vmallocinfo diskstats kmsg self vmstat dma kpagecgroup slabinfo zoneinfo driver kpagecount softirqs Container aszlig exited successfully. So the test on whether PID 1 exists in /proc is enough, because if we use PID namespaces there actually _is_ a PID 1 (as shown above) and the special file systems are already mounted. A test on the $containers variable actually mounts them twice. This unbreaks NixOS containers and I've tested this against the containers-imperative NixOS test. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Cc: @rickynils, @shlevy, @edolstra
* | | | NixOS 17.03 will be called GorillaRob Vermaas2016-09-07
| | | |
* | | | nixos/tests/blivet: Fix btrfs-related testsaszlig2016-09-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The loopback-based tests use a storage size of 102400 blocks (one block is 1024 bytes), which doesn't seem to fit for btrfs volumes in recent btrfs versions. I'm setting this to 409600 (400 MB) now so that it should be enough for later versions in case they need even more space for subvolumes. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | nixos: Fix ordering of firewall.serviceaszlig2016-09-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Follow-up to the following commits: abdc5961c3cdf9f5893ea1e91ba08ff5089f53a4: Fix starting the firewall e090701e2d09aec3e8866ab9a8e53c37973ffeb4: Order before sysinit Solely use sysinit.target here instead of multi-user.target because we want to make sure that the iptables rules are applied *before* any socket units are started. The reason I've dropped the wantedBy on multi-user.target is that sysinit.target is already a part of the dependency chain of multi-user.target. To make sure that this holds true, I've added a small test case to ensure that during switch of the configuration the firewall.service is considered as well. Tested using the firewall NixOS test. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Cc: @edolstra
* | | | firewall: Order before sysinitEelco Dolstra2016-09-07
| | | | | | | | | | | | | | | | Suggested by @aszlig.
* | | | Fix starting the firewallEelco Dolstra2016-09-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Probably as a result of 992c514a20cf2da897db68169d7dcab721e8c7b7, it was not being started anymore. My understanding of systemd.special(7) (section "Special passive system units") is that the firewall should want network-pre.target, rather than the other way around (not very intuitive...). This in itself does not cause the firewall to be wanted, which is why the wanted-by relationship with multi-user.target is necessary. http://hydra.nixos.org/build/39965589
* | | | Make the NFSv4 tests release-criticalEelco Dolstra2016-09-07
| | | | | | | | | | | | | | | | We can probably drop NFSv3...
* | | | nfs module: Fix dependency on statd and idmapdEelco Dolstra2016-09-07
| | | | | | | | | | | | | | | | http://hydra.nixos.org/build/40038016
* | | | nfs module: Improve descriptionsEelco Dolstra2016-09-07
| | | |
* | | | avahi-daemon: remove default browse-domainsAlexey Shmalko2016-09-07
| | | | | | | | | | | | | | | | | | | | | | | | These domains are not actually default but examples. See https://github.com/lathiat/avahi/blob/master/avahi-daemon/avahi-daemon.conf#L24 for default config.
* | | | Merge branch 'stage2-generalise-containers' of ↵Shea Levy2016-09-07
|\ \ \ \ | | | | | | | | | | | | | | | https://github.com/rickynils/nixpkgs
| * | | | nixos: Generalise the container tests in stage-2 bootRickard Nilsson2016-09-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This way, stage-2 behaves correctly also for libvirt-lxc containers. Some more discussion on this: https://github.com/NixOS/nixpkgs/commit/a7a08188bf650ababa36300a9a6f34169e2a73bf https://github.com/NixOS/nixpkgs/commit/bfe46a653ba2f8ff9902128f485cbd87c49cbca7
* | | | | Merge pull request #18365 from NixOS/fix-sshd-failureEelco Dolstra2016-09-07
|\ \ \ \ \ | | | | | | | | | | | | Make /var/empty immutable (with chattr +i)
| * | | | | hardcode e2fsprogs, idempotent chmod, remove care conditionDomen Kožar2016-09-07
| | | | | |
| * | | | | Make /var/empty immutableDomen Kožar2016-09-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #14910 and #18358 Deployed to an existing server, restarted sshd and polkit to verify they don't fail.
* | | | | | dovecot service: require mail{User,Group} with sieveScriptsLangston Barrett2016-09-07
| |/ / / / |/| | | | | | | | | | | | | | fixes #17702.
* | | | | nixos containers: hopefully fix test failuresNikolay Amiantov2016-09-07
| | | | | | | | | | | | | | | | | | | | Closes #18377.
* | | | | Merge pull request #18366 from groxxda/acme-loopFranz Pletz2016-09-06
|\ \ \ \ \ | | | | | | | | | | | | security.acme: require networking for client, remove loop without fallbackHost
| * | | | | security.acme: remove loop when no fallbackHost is givenAlexander Ried2016-09-06
| | | | | |
| * | | | | security.acme: the client really needs networkingAlexander Ried2016-09-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Actually this can be improved since the client only needs network connectivity if it needs to renew the certificate.
* | | | | | Merge pull request #18362 from ericsagnes/fix/im-descriptionThomas Tuegel2016-09-06
|\ \ \ \ \ \ | | | | | | | | | | | | | | input-methods modules: fix engine description
| * | | | | | input-methods modules: fix engine descriptionEric Sagnes2016-09-06
| | | | | | |
* | | | | | | Enable the runuser command from util-linuxEelco Dolstra2016-09-06
| |_|/ / / / |/| | | | | | | | | | | | | | | | | Fixes #14701.
* | | | | | nix: 1.11.3 -> 1.11.4Eelco Dolstra2016-09-06
| | | | | |
* | | | | | nixos-rebuild: Move the Nix fallback store paths into a separate fileEelco Dolstra2016-09-06
| | | | | |
* | | | | | Partially revert "Revert "nixos: remove rsync from base install and add ↵obadz2016-09-06
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | explicit path in nixos-install"" This partially reverts commit 0aa75206705afc71b991cceeede644c87088d583. Fine for rsync to be in system path but we still need the explicit path in nixos-install in case it is invoked from non-NixOS systems and also to fix OVA test failure See also https://github.com/NixOS/nixpkgs/commit/0aa75206705afc71b991cceeede644c87088d583 cc @edolstra
* | | | | Fix infinite recursion introduced by f3c32cb2c1344c9a831bb9e4f47c1b20527dbe0bEelco Dolstra2016-09-05
| | | | |
* | | | | Merge pull request #18321 from groxxda/cleanupEelco Dolstra2016-09-05
|\ \ \ \ \ | | | | | | | | | | | | various: minor cleanup
| * | | | | systemd: add some missing upstream unitsAlexander Ried2016-09-05
| | | | | |
| * | | | | agetty: remove override for container-getty@.service since it's upstreamAlexander Ried2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | Added in systemd/systemd@68ac53e
| * | | | | networkd.module: remove before network-onlineAlexander Ried2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | this is already upstream default
| * | | | | (network,remote-fs)-pre: remove duplicate wantedBy and beforeAlexander Ried2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | this is part of (network,remote-fs).target, repectively
* | | | | | Make the default fonts conditional on services.xserver.enableEelco Dolstra2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were pulling in 44 MiB of fonts in the default configuration, which is a bit excessive for headless configurations like EC2 instances. Note that dejavu_minimal ensures that remote X11-forwarded applications still have a basic font regardless.
* | | | | | Let services.openssh.forwardX11 imply programs.ssh.setXAuthLocationEelco Dolstra2016-09-05
| | | | | |
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-21 16:58:46 +0000