about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
...
| * | | | | | | | | nixos/dnsdist: Add CAP_NET_BIND_SERVICE to AmbientCapabilitiesShaRose2019-10-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It seems that dnsdist doesn't actually request CAP_NET_BIND_SERVICE, which is why normally it's executed and root and setuids to another, unprivileged, user. This means that as it is, dnsdist will be unable to bind to any port under 1024 and will fail with access denied. Removing CAP_SETGID and CAP_SETUID is also related to this as we don't actually change the uid or gid after the fact as we use DynamicUser. (That part isn't strictly NEEDED but there's no reason to have those capabilities if we don't use them). There are also some additional sandboxing we can remove from the service definition as they are assumed true or strict by DynamicUser: specifically PrivateTmp and ProtectSystem respectively. ProtectHome is still there, despite being assumed read-only as setting it to true means they are seen as empty. I don't think it really matters as I don't know if systemd will ignore it or not, but I didn't see any reason to go hunting for excuses to make it a bigger change.
* | | | | | | | | | Merge pull request #73063 from minijackson/shiori-thingsFlorian Klink2019-11-08
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | shiori: update modSha256, update test to python, do more tests
| * | | | | | | | | | nixos/tests: add shiori to all-tests.nixMinijackson2019-11-08
| | | | | | | | | | |
| * | | | | | | | | | nixos/shiori: port test to python, do more testsMinijackson2019-11-08
| | | | | | | | | | |
* | | | | | | | | | | Merge pull request #73049 from flokli/fix-redis-mergeFlorian Klink2019-11-08
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | nixos/redis: fix merging
| * | | | | | | | | | | nixos/redis: fix mergingFlorian Klink2019-11-08
| | |_|_|_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://github.com/NixOS/nixpkgs/pull/71584 did merging without mkMerge. cc @jtojnar
* | | | | | | | | | | Merge pull request #73060 from flokli/nixos-test-port-powerdnsworldofpeace2019-11-08
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | nixos/powerdns: port test to python
| * | | | | | | | | | | nixos/powerdns: port test to pythonFlorian Klink2019-11-08
| |/ / / / / / / / / /
* | | | | | | | | | | Merge pull request #73057 from flokli/nixos-test-port-smokepingworldofpeace2019-11-08
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | nixos/smokeping: port test to python
| * | | | | | | | | | | nixos/smokeping: port test to pythonFlorian Klink2019-11-08
| |/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cc #72828
* | | | | | | | | | | Merge pull request #73056 from flokli/nixos-test-port-pppdworldofpeace2019-11-08
|\ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ / / / |/| | | | | | | | | | nixos/pppd: port test to python
| * | | | | | | | | | nixos/pppd: port test to pythonFlorian Klink2019-11-08
| |/ / / / / / / / /
* | | | | | | | | | Merge pull request #73046 from curiousleo/patch-1worldofpeace2019-11-08
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | nixos/tests: correct arguments to get_unit_info
| * | | | | | | | | | nixos/tests: correct arguments to get_unit_infoLeonhard Markert2019-11-08
| |/ / / / / / / / /
* / / / / / / / / / nixos/systemd: Allow unit options to have multiple equal defs (#73024)Silvan Mosberger2019-11-08
|/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | E.g. this allows systemd.services.<name?>.serviceConfig.DynamicUser = mkMerge [ true true ];
* | | | | | | | | Merge pull request #72935 from marijanp/port-tests-pythonFlorian Klink2019-11-08
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | Port tests to Python
| * | | | | | | | | nixos/docker-edge: port test to pythonMarijan Petricevic2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/dnscrypt-proxy: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/couchdb: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/documize: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/docker: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/cjdns: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/cloud-init: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/cfssl: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/certmgr: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/cadvisor: port test to pythonMarijan2019-11-07
| | | | | | | | | |
| * | | | | | | | | nixos/caddy: port test to pythonMarijan2019-11-07
| | | | | | | | | |
* | | | | | | | | | Merge pull request #72897 from JohnAZoidberg/python-port-cassandra-testFlorian Klink2019-11-08
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | nixos/cassandra: Port test to python
| * | | | | | | | | | nixos/cassandra: Port test to pythonDaniel Schaefer2019-11-07
| | | | | | | | | | |
* | | | | | | | | | | nixos/tests: improve get_unit_info expressiveness on failureMarijan Petricevic2019-11-08
| | | | | | | | | | |
* | | | | | | | | | | Merge pull request #65971 from jb55/zoneminder-fixPeter Hoeg2019-11-08
|\ \ \ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / / / |/| | | | | | | | | | zoneminder: fix nginx config
| * | | | | | | | | | zoneminder: fix nginx configWilliam Casarin2019-08-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For some reason it doesn't seem to load things in the cache directory properly without this slash. Looks like this regression may have been introduced in: commit 19851ec1fce3fabec3c6f951c3fb7d5814d24691 nixos/zoneminder: Fix nginx config check Cc: Daniel Schaefer <git@danielschaefer.me> Cc: Peter Hoeg <peter@hoeg.com> Signed-off-by: William Casarin <jb55@jb55.com>
* | | | | | | | | | | Merge pull request #73004 from philandstuff/patch-1worldofpeace2019-11-08
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | ssh-agent: fix syntax problem from #71139
| * | | | | | | | | | | ssh-agent: fix syntax problem from #71139Philip Potter2019-11-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Oops, in #71139 a missing `+` broke things quite badly. Thanks @lzorkin for the report and @mebubo for diagnosing the problem.
* | | | | | | | | | | | Merge pull request #71825 from AIDEA775/fix/zsh-syntax-highlightingMatthew Bauer2019-11-07
|\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | nixos/zsh-syntax-highlighting: Fix highlighting when ohMyZsh is enabled
| * | | | | | | | | | | | nixos/zsh-syntax-highlighting: Fix highlighting when ohMyZsh is enabledSilva Alejandro Ismael2019-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From https://github.com/zsh-users/zsh-syntax-highlighting#faq: "It must be sourced after all custom widgets have been created (i.e., after all zle -N calls and after running compinit)." zsh-syntax-highlighting must be sourced to the end.
* | | | | | | | | | | | | Merge pull request #70886 from allgreed/add-vbox-docs-hintMatthew Bauer2019-11-07
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |_|/ / / / / / / / / / / |/| | | | | | | | | | | | [Docs] Add a hint on Virtualbox machine setup
| * | | | | | | | | | | | Add a hint on Virtualbox machine setupOlgierd "Allgreed" Kasprowicz2019-10-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By default VMSVGA is set, which causes failure upon X startup.
* | | | | | | | | | | | | Merge pull request #71408 from f--t/fix/x11-servicesMatthew Bauer2019-11-07
|\ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix nixos x11 service logging for ssdm and xmonad
| * | | | | | | | | | | | | nixos/widnow-managers/xmonad: fix systemd identifier for xmonadft2019-10-19
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | ssdm: fix identifier for xserver-wrapperft2019-10-19
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Merge pull request #72943 from marijanp/port-test-driver-pythonworldofpeace2019-11-07
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Port remaining test-driver functions to python
| * | | | | | | | | | | | | | nixos/tests: implemented python test-driver version of forwardPortMarijan2019-11-06
| | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | nixos/tests: implemented python test-driver version of dumpTTYContentsMarijan2019-11-06
| | | | | | | | | | | | | | |
* | | | | | | | | | | | | | | Merge pull request #72887 from 1000101/masterMarek Mahut2019-11-07
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Port tests to Python
| * | | | | | | | | | | | | | | nixos/signal-desktop: port test to pythonJan Hrnko2019-11-06
| | | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | | nixos/rss2email: port test to pythonJan Hrnko2019-11-06
| | | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | | nixos/roundcube: port test to pythonJan Hrnko2019-11-06
| | | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | | nixos/redis: port test to pythonJan Hrnko2019-11-06
| | | | | | | | | | | | | | | |
| * | | | | | | | | | | | | | | nixos/radarr: port test to pythonJan Hrnko2019-11-06
| | | | | | | | | | | | | | | |
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-17 18:58:38 +0000