about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Merge branch 'chromium-update-with-gn'aszlig2016-11-09
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This brings in the new stable version 54 which also introduces a lot of security fixes: CVE-2016-5198: Out of bounds memory access in V8 CVE-2016-5181: Universal XSS in Blink CVE-2016-5182: Heap overflow in Blink CVE-2016-5183: Use after free in PDFium CVE-2016-5184: Use after free in PDFium CVE-2016-5185: Use after free in Blink CVE-2016-5187: URL spoofing CVE-2016-5188: UI spoofing CVE-2016-5192: Cross-origin bypass in Blink CVE-2016-5189: URL spoofing CVE-2016-5186: Out of bounds read in DevTools CVE-2016-5191: Universal XSS in Bookmarks CVE-2016-5190: Use after free in Internals CVE-2016-5193: Scheme bypass Detailed announcements about these changes can be found here (latest to oldest): https://googlechromereleases.blogspot.de/2016/11/stable-channel-update-for-desktop.html https://googlechromereleases.blogspot.de/2016/10/stable-channel-update-for-desktop_20.html https://googlechromereleases.blogspot.de/2016/10/stable-channel-update-for-desktop.html The update process of Chromium has been a bit bumpy on our side, because version 54 also did the switch from GYP to GN so it wasn't just a matter of updating the upstream-info file. I've tested the Flash plugin (which runs fine) and WideVine manually, although I couldn't get WideVine to work (I was running this within a VM though). So if people want to use WideVine they need to use Chrome instead until we got this sorted out. VM test results along with builds for all platforms can be found here: https://headcounter.org/hydra/eval/339328 I'm going to backport these changes to stable as soon as the tests/builds succeed there as well. Closes: #19565 Closes: #20120
| * nixos/tests/chromium: Fix popup detectionaszlig2016-11-09
| | | | | | | | | | | | | | | | | | | | Sometimes it happens that the "Type to search or enter a URL to navigate" popup doesn't show, but all we need to know at this time is whether Chromium has finished starting up. So checking for the "startup done" page is a better option here. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | cjdns: Disable testsEelco Dolstra2016-11-08
|/ | | | | | | | | Since 8180922d236c53b5e09cfe1b63f6c12977bb2803, the cjdns module imports from a derivation, which is very bad. It causes all of stdenv to be built at evaluation time. Since we have a hard 3600 second limit on Hydra evaluations, this was causing NixOS jobsets to time out. @joachifm
* errbot service: fix `import config` in pluginsRobin Gloster2016-11-08
|
* hound: make mercurial indexing workRob Vermaas2016-11-08
| | | | (cherry picked from commit 990716ce72f64be5da644e5eac73b5f145864e75)
* nginx service: Add missing port toString conversion (#20252)Philipp Hausmann2016-11-08
|
* services: Add Interplanetary File System serviceMaximilian Güntner2016-11-07
| | | | Signed-off-by: Maximilian Güntner <code@klandest.in>
* NixOS manual: Update link to list of AMIsAndres Nötzli2016-11-07
|
* Merge pull request #20063 from romildo/new.luminaJoachim F2016-11-06
|\ | | | | lumina: init at 1.1.0-p1
| * lumina: init at 1.1.0-p1romildo2016-11-01
| |
* | leaps: 0.5.1 + add a service + testJoachim Schiele2016-11-06
| |
* | nixos: i2pd, update config optionsEdward Tjörnhammar2016-11-06
| |
* | module system: extensible option typesEric Sagnes2016-11-06
| |
* | types: loeOf -> listOfEric Sagnes2016-11-05
| |
* | Merge pull request #17445 from joachifm/dnscrypt-proxy-update-listJoachim F2016-11-05
|\ \ | | | | | | dnscrypt-proxy service: auto-updated resolver list
| * | dnscrypt-proxy test: simplificationJoachim Fasting2016-11-05
| | |
| * | dnscrypt-proxy service: auto-update upstream resolver listJoachim Fasting2016-11-05
| | | | | | | | | | | | | | | By default, we use the list of public DNSCrypt resolvers provided by dnscrypt-proxy upstream. The list is updated at regular intervals.
* | | Merge pull request #20144 from ericsagnes/feat/module-enumsJoachim F2016-11-05
|\ \ \ | | | | | | | | modules: use enum when relevant
| * | | logcheck module: use enumEric Sagnes2016-11-05
| | | |
| * | | network-interfaces module: use enumEric Sagnes2016-11-04
| | | |
| * | | grub module: use enumEric Sagnes2016-11-04
| | | |
| * | | fcgiwrap module: use enumEric Sagnes2016-11-04
| | | |
| * | | tinc module: use enumEric Sagnes2016-11-04
| | | |
| * | | bitlbee module: use enumEric Sagnes2016-11-04
| | | |
| * | | ghost-one module: use enumEric Sagnes2016-11-04
| | | |
* | | | Merge #20001: docs: use overrideAttrs instead of overrideDerivationVladimír Čunát2016-11-05
|\ \ \ \
| * | | | nixos manual: clarify "attributes of function"Vladimír Čunát2016-11-05
| | | | |
| * | | | docs: use overrideAttrs instead of overrideDerivationAneesh Agrawal2016-10-30
| | | | |
* | | | | nixos/cjdns: tightened permissions via systemd, added capsSophie Taylor2016-11-04
| | | | |
* | | | | Add a package option for quassel (#20159)uwap2016-11-04
| | | | |
* | | | | cjdns test: exercise host builder logicJoachim Fasting2016-11-04
| | | | |
* | | | | cjdns module: fix typoJoachim Fasting2016-11-04
| | | | |
* | | | | Merge pull request #20121 from mbrgm/fix/smokeping-setuid-fpingJoachim F2016-11-04
|\ \ \ \ \ | | | | | | | | | | | | smokeping service: Use setuid-wrapped fping binary
| * | | | | smokeping service: Use setuid-wrapped fping binaryMarius Bergmann2016-11-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current default probe config uses the unwrapped fping binary, which leads to an error because fping must be executed with elevated permissions. I fixed this by changing the path to the default binary to the setuid-wrapped version.
* | | | | | parsoid service: don't run as a superuserNikolay Amiantov2016-11-03
| | | | | |
* | | | | | parsoid service: fix for new parsoidNikolay Amiantov2016-11-03
| | | | | |
* | | | | | nixos.libvirtd: fix broken VMs due to emulator path changesRicardo M. Correia2016-11-03
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This had already been fixed in f52f9bf7cd922b54c874e5500a2c64277e57d417, but the problem was reintroduced in bce59a1a8bb0430533178df080937ce24efe926a because the path to the XML files changed.
* | | | | Merge pull request #20015 from Mic92/adbFranz Pletz2016-11-03
|\ \ \ \ \ | | | | | | | | | | | | adb: init module
| * | | | | adb: init moduleJörg Thalheim2016-10-31
| |/ / / /
* | | | | vsftpd service: add extraConfig option, set anon_root (#20069)Peter J. Jones2016-11-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit includes two changes: 1. A new `extraConfig` option to allow administrators to set any vsftpd configuration option that isn't directly supported by this derivation. 2. Correctly set the `anon_root` vsftpd option to `anonymousUserHome`
* | | | | znc module: optionSet -> submodule (#20096)Eric Sagnes2016-11-03
| | | | |
* | | | | Merge pull request #20085 from mbrgm/fix/smokeping-permissionsTim Steinbach2016-11-02
|\ \ \ \ \ | | | | | | | | | | | | smokeping service: Fix permissions in $smokepingHome
| * | | | | smokeping service: Fix permissions in $smokepingHomeMarius Bergmann2016-11-02
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the prestart config of the smokeping service, smokeping is executed initially. This happens as the user root and writes some files to $smokepingHome, which can't be overwritten by the smokeping user. This gives an error message. I fixed this by moving the chown step after the initial smokeping runs, so that it also affects the generated files.
* | | | | Merge pull request #19982 from sternenseemann/netcatTim Steinbach2016-11-02
|\ \ \ \ \ | | | | | | | | | | | | Make netcat-openbsd the default netcat
| * | | | | netcat: make netcat-openbsd the default netcat (#19411)sternenseemann2016-10-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The motivation for this change is the following: As gnu-netcat, e. g. does not support ipv6, it is not suitable as default netcat. This commit also fixes all obvious build issues caused by this change.
* | | | | | nixos: remove test-config-examples.sh (obsolete)Bjørn Forsman2016-11-02
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | This file has been non-functional for over two years, since commit f002a27a80 ("Remove obsolete directory") removed .../doc/config-examples/.
* | | | | matrix-synapse: Allow keys to be generatedRuben Maher2016-11-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The matrix-synapse user has `createHome = true;` which runs before the `preStart` script, so the home directory will always exist and the block will never execute. Also don't include default path to keys in the configuration file, because synapse will choke if it tries to open them before they exist (even with `--generate-keys`).
* | | | | Merge pull request #19963 from groxxda/mpichTim Steinbach2016-11-01
|\ \ \ \ \ | |_|_|/ / |/| | | | mpich: remove unused test
| * | | | mpich: remove unused testAlexander Ried2016-10-29
| | |/ / | |/| |
* | | | Merge pull request #19675 from edwtjo/dictd-touchupEdward Tjörnhammar2016-10-31
|\ \ \ \ | | | | | | | | | | Dictd touchup
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-28 15:54:00 +0000