about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
...
| * | | | | Make /var/empty immutableDomen Kožar2016-09-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #14910 and #18358 Deployed to an existing server, restarted sshd and polkit to verify they don't fail.
* | | | | | dovecot service: require mail{User,Group} with sieveScriptsLangston Barrett2016-09-07
| |/ / / / |/| | | | | | | | | | | | | | fixes #17702.
* | | | | nixos containers: hopefully fix test failuresNikolay Amiantov2016-09-07
| | | | | | | | | | | | | | | | | | | | Closes #18377.
* | | | | Merge pull request #18366 from groxxda/acme-loopFranz Pletz2016-09-06
|\ \ \ \ \ | | | | | | | | | | | | security.acme: require networking for client, remove loop without fallbackHost
| * | | | | security.acme: remove loop when no fallbackHost is givenAlexander Ried2016-09-06
| | | | | |
| * | | | | security.acme: the client really needs networkingAlexander Ried2016-09-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Actually this can be improved since the client only needs network connectivity if it needs to renew the certificate.
* | | | | | Merge pull request #18362 from ericsagnes/fix/im-descriptionThomas Tuegel2016-09-06
|\ \ \ \ \ \ | | | | | | | | | | | | | | input-methods modules: fix engine description
| * | | | | | input-methods modules: fix engine descriptionEric Sagnes2016-09-06
| | | | | | |
* | | | | | | Enable the runuser command from util-linuxEelco Dolstra2016-09-06
| |_|/ / / / |/| | | | | | | | | | | | | | | | | Fixes #14701.
* | | | | | nix: 1.11.3 -> 1.11.4Eelco Dolstra2016-09-06
| | | | | |
* | | | | | nixos-rebuild: Move the Nix fallback store paths into a separate fileEelco Dolstra2016-09-06
| | | | | |
* | | | | | Partially revert "Revert "nixos: remove rsync from base install and add ↵obadz2016-09-06
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | explicit path in nixos-install"" This partially reverts commit 0aa75206705afc71b991cceeede644c87088d583. Fine for rsync to be in system path but we still need the explicit path in nixos-install in case it is invoked from non-NixOS systems and also to fix OVA test failure See also https://github.com/NixOS/nixpkgs/commit/0aa75206705afc71b991cceeede644c87088d583 cc @edolstra
* | | | | Fix infinite recursion introduced by f3c32cb2c1344c9a831bb9e4f47c1b20527dbe0bEelco Dolstra2016-09-05
| | | | |
* | | | | Merge pull request #18321 from groxxda/cleanupEelco Dolstra2016-09-05
|\ \ \ \ \ | | | | | | | | | | | | various: minor cleanup
| * | | | | systemd: add some missing upstream unitsAlexander Ried2016-09-05
| | | | | |
| * | | | | agetty: remove override for container-getty@.service since it's upstreamAlexander Ried2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | Added in systemd/systemd@68ac53e
| * | | | | networkd.module: remove before network-onlineAlexander Ried2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | this is already upstream default
| * | | | | (network,remote-fs)-pre: remove duplicate wantedBy and beforeAlexander Ried2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | this is part of (network,remote-fs).target, repectively
* | | | | | Make the default fonts conditional on services.xserver.enableEelco Dolstra2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were pulling in 44 MiB of fonts in the default configuration, which is a bit excessive for headless configurations like EC2 instances. Note that dejavu_minimal ensures that remote X11-forwarded applications still have a basic font regardless.
* | | | | | Let services.openssh.forwardX11 imply programs.ssh.setXAuthLocationEelco Dolstra2016-09-05
| | | | | |
* | | | | | Make it possible to disable "info"Eelco Dolstra2016-09-05
| | | | | |
* | | | | | modules/profiles/minimal.nix: Disable "man"Eelco Dolstra2016-09-05
|/ / / / /
* | | | | no-x-libs.nix: Ensure that dbus doesn't use X11Eelco Dolstra2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It appears that packageOverrides no longer overrides aliases, so aliases like dbus_tools = self.dbus.out; dbus_daemon = self.dbus.daemon; now use the old, non-overriden version of dbus. That seems like a pretty serious regression in general, but for this particular problem, I've fixed it by replacing dbus_daemon by dbus.daemon and dbus_tools by dbus.
* | | | | Revert "nixos: remove rsync from base install and add explicit path in ↵Eelco Dolstra2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nixos-install" This reverts commit 582313bafef4c81cb6df2dcf2ece4757eb5c8082. Removing rsync is actually pointless because nixos-install depends on it. So if it's part of the system closure, we may as well provide it to users. Probably with the next Nix release we can drop the use of rsync and use "nix copy" instead.
* | | | | networkmanager: add information from wiki to docs (#18245)Langston Barrett2016-09-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * networkmanager: add information from wiki to docs Specifically: * mention nmcli, nmtui * mention gtk and kde applets fixes #13273
* | | | | grsecurity module: set nixpkgs.config.grsecurity = trueJoachim Fasting2016-09-05
|/ / / /
* | | | setuid-wrappers: correctly umount the tmpfsDomen Kožar2016-09-04
| | | |
* | | | Merge pull request #17969 from offlinehacker/pkgs/etcd/update-3.0.6Jaka Hudoklin2016-09-04
|\ \ \ \ | | | | | | | | | | Update etcd, improve nixos module, fix nixos tests
| * | | | etcd-cluster: split up openssl commandsGraham Christensen2016-09-03
| | | | |
| * | | | etcd module: add test for simple one node etcd serviceJaka Hudoklin2016-08-25
| | | | |
| * | | | etcd module: add support for ssl, better defaults, fix testsJaka Hudoklin2016-08-24
| | | | |
* | | | | nixos/manual: mentioning other zsh options at program.zsh.enableRok Garbas2016-09-04
| | | | | | | | | | | | | | | | | | | | fixes #13224
* | | | | ferm: fix race condition in integration test (#18288)Jörg Thalheim2016-09-04
| |_|_|/ |/| | | | | | | curl sent the request faster then nginx bound the port in some cases
* | | | setuid-wrappers : Prepare permissions for running wrappersKarn Kallio2016-09-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The new setuid-wrappers in /run cannot be executed by users due to: 1) the temporary directory does not allow access 2) the /run is mounted nosuid
* | | | nixos-install.sh: Create /var (#18266)Alexander Ried2016-09-03
| | | | | | | | | | | | Got lost in a6670c1a0b8cda8235296900cff950f39f60cf4f
* | | | Merge pull request #18085 from Mic92/fermJoachim F2016-09-03
|\ \ \ \ | | | | | | | | | | ferm: add integration test
| * | | | ferm: add integration testJörg Thalheim2016-08-29
| | | | |
* | | | | Merge pull request #18207 from tavyc/quagga-moduleJoachim F2016-09-03
|\ \ \ \ \ | | | | | | | | | | | | quagga service: init
| * | | | | quagga test: Add test for the quagga service.Octavian Cerna2016-09-02
| | | | | |
| * | | | | quagga service: New NixOS module.Octavian Cerna2016-09-02
| | | | | |
* | | | | | Merge commit 'adaee73' from staging into masterTuomas Tynkkynen2016-09-03
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This one was already merged into release-16.09, so let's not have the stable branch is ahead of master and confuse things. In addition to that, currently we have an odd situation that master has less things actually finished building than in staging. Conflicts: pkgs/data/documentation/man-pages/default.nix
| * | | | | | docdev -> devdocEelco Dolstra2016-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's "developer documentation", not "documentation developer" after all.
* | | | | | | Merge #17838: postgresql: Fix use with extensionsVladimír Čunát2016-09-02
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | |
| * | | | | | postgresql: Fix use with extensionsLancelot SIX2016-09-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #15512 and #16032 With the multi output, postgresql cannot find at runtime what is its basedir when looking for libdir and pkglibdir. This commit fixes that.
* | | | | | | bightbox-image.nix: use lib in stead of stdenv.lib. Fixes #18208Rob Vermaas2016-09-02
| | | | | | |
* | | | | | | mjpg-streamer service: restart on failureNikolay Amiantov2016-09-02
| | | | | | |
* | | | | | | Merge pull request #15893 from groxxda/fix/accountsserviceLuca Bruno2016-09-02
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | accountsservice: refactor package and service
| * | | | | | | accountsservice: add support for mutableUsers = falseAlexander Ried2016-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add code to accountsservice that returns an error if the environment variable NIXOS_USERS_PURE is set. This variable is set from the nixos accountsservice module if mutableUsers = false
* | | | | | | | unstable is now 17.03Domen Kožar2016-09-02
| | | | | | | |
* | | | | | | | Fixes #18124: atomically replace /var/setuid-wrappers/ (#18186)Domen Kožar2016-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before this commit updating /var/setuid-wrappers/ folder introduced a small window where NixOS activation scripts could be terminated and resulted into empty /var/setuid-wrappers/ folder. That's very unfortunate because one might lose sudo binary. Instead we use two atomic operations mv and ln (as described in https://axialcorps.com/2013/07/03/atomically-replacing-files-and-directories/) to achieve atomicity. Since /var/setuid-wrappers is not a directory anymore, tmpfs mountpoints were removed in installation scripts and in boot process. Tested: - upgrade /var/setuid-wrappers/ from folder to a symlink - make sure /run/setuid-wrappers-dirs/ legacy symlink is really deleted