about summary refs log tree commit diff
path: root/nixos
Commit message (Collapse)AuthorAge
* Restore core dumpsEelco Dolstra2016-03-25
| | | | | | Systemd 229 sets kernel.core_pattern to "|/bin/false" by default, unless systemd-coredump is enabled. Revert back to the default of writing "core" in the current directory.
* Revert "Remove which -> type -P alias."Eelco Dolstra2016-03-25
| | | | | | | | This reverts commit e8e8164f348a0e8655e1d50a7a404bdc62055f4e. I misread the original commit as adding the "which" package, but it only adds it to base.nix. So then the original motivation (making it work in subshells) doesn't hold. Note that we already have some convenience aliases that don't work in subshells either (such as "ll").
* Hide sendmailSetuidWrapperEelco Dolstra2016-03-25
|
* opengl.extraPackages32: pkgsi686Linux in exampleBrian McKenna2016-03-26
| | | Issue #12616 uses this example but the commit doesn't.
* nix.useChroot: allow 'relaxed' as a valueDomen Kožar2016-03-25
|
* nixos/tests: implement a trivial test for sudoJoachim Fasting2016-03-25
| | | | | This is an alternative to NixOS/nixpkgs#6721, with improvements suggested by @edolstra
* Merge pull request #14045 from otwieracz/masterArseniy Seroka2016-03-24
|\ | | | | znapzend: added
| * znapzend service: init at 0.15.3Slawomir Gonet2016-03-24
| |
* | dnscrypt-proxy vmtest: more specific waitForUnitJoachim Fasting2016-03-24
| | | | | | | | | | The test sometimes times out waiting for multi-user.target; this should be more robust.
* | dnscrypt-proxy service: change default upstream resolverJoachim Fasting2016-03-24
| | | | | | | | | | | | | | | | | | | | Previously, the cisco resolver was used on the theory that it would provide the best user experience regardless of location. The downsides of cisco are 1) logging; 2) missing supoprt for DNS security extensions. The new upstream resolver is located in Holland, supports DNS security, and *claims* to not log activity. For users outside of Europe, this will mean reduced performance, but I believe it's a worthy tradeoff.
* | dnscrypt-proxy service: use dynamic uid/gidJoachim Fasting2016-03-24
| | | | | | | | | | | | | | The daemon doesn't have any portable data, reserving a UID/GID for it is redundant. This frees up UID/GID 151.
* | dnscrypt-proxy service: additional hardeningJoachim Fasting2016-03-24
| | | | | | | | | | Run the daemon with private /home and /run/user to prevent it from enumerating users on the system.
* | dnscrypt-proxy service: cosmetic enhancementsJoachim Fasting2016-03-24
| |
* | Merge pull request #14140 from Pleune/fix/iodined-wait-for-networkjoachifm2016-03-24
|\ \ | | | | | | iodined service: wantedBy ip-up.target
| * | iodined service: wantedBy ip-up.targetMitchell Pleune2016-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When iodined tries to start before any interface other than loopback has an ip, iodined fails. Wait for ip-up.target The above is because of the following: in iodined's code: src/common.c line 157 the flag AI_ADDRCONFIG is passed as a flag to getaddrinfo. Iodine uses the function get_addr(char *host, int port, int addr_family, int flags, struct sockaddr_storage *out); to get address information via getaddrinfo(). Within get_addr, the flag AI_ADDRCONFIG is forced. What this flag does, is cause getaddrinfo to return "Name or service not known" as an error explicitly if no ip has been assigned to the computer. see getaddrinfo(3) Wait for an ip before starting iodined.
* | | Pin hydra-www and hydra-queue-runner uidsDomen Kožar2016-03-23
|/ / | | | | | | | | | | | | | | hydra user is already pinned, this is needed due to https://github.com/NixOS/nixpkgs/issues/14148 (cherry picked from commit 0858ece1ad0bd281d2332c40f9fd08005e04a3c5) Signed-off-by: Domen Kožar <domen@dev.si>
* | remove elrangR15 and riak 1.3.0 as they're outdatedDomen Kožar2016-03-22
| | | | | | | | | | (cherry picked from commit 4452a68425e4eaf9db95e0fc5ac8474a2b19bc71) Signed-off-by: Domen Kožar <domen@dev.si>
* | Merge pull request #14079 from NixOS/add-radicale-userPascal Wittmann2016-03-21
|\ \ | | | | | | radicale service: run with dedicated user
| * | radicale service: run with dedicated userPascal Wittmann2016-03-20
| | | | | | | | | | | | This is done in the context of #11908.
* | | Merge branch 'chromium-source-refactor'aszlig2016-03-21
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes #12794 by reverting the source tree splitup (c92dbff) to use the source tarball directly into the main Chromium derivation and making the whole source/ subdirectory obsolete. The reasons for this are explained in 4f981b4f84707a63904410bb3e2b88621db03e8e. This also now renames the "sources.nix" file to "upstream-info.nix", which is a more proper name for the file, because it not only contains "source code" but also the Chrome binaries needed for the proprietary plugins (of course "source" could also mean "where to get it", but I wanted to avoid this ambiguity entirely). I have successfully built and tested this using the VM tests. All results can be found here: https://headcounter.org/hydra/eval/313435
| * | | nixos/tests/chromium: Propagate "system" to pkgsaszlig2016-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Assigning the channelMap by the function attrset argument at the top-level of the test expression file may reference a different architecture than we need for the tests. So if we get the pkgs attribute by auto-calling, this will lead to test failure because we have a different architecture for the test than for the browser. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
| * | | nixos/tests/chromium: Allow overriding channel mapaszlig2016-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This has been the case before e45c211, but it turns out that it's very useful to override the channel packages so we can run tests with different Chromium build options. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | | | Merge pull request #14066 from jerith666/crashplan-46Domen Kožar2016-03-20
|\ \ \ \ | |/ / / |/| | | crashplan: 3.6.4 -> 4.6.0
| * | | crashplan: 3.6.4 -> 4.6.0Matt McHenry2016-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * the major change is to set TARGETDIR=${vardir}, and symlink from ${vardir} back to ${out} instead of the other way around. this gives CP more liberty to write to more directories -- in particular it seems to want to write some configuration files outside of conf? * run.conf does not need 'export' * minor tweaks to CrashPlanDesktop.patch
* | | | Merge pull request #14033 from joachifm/clfswm-brokenjoachifm2016-03-20
|\ \ \ \ | |_|/ / |/| | | Mark clfswm as broken
| * | | nixos: disable the clfswm window manager moduleJoachim Fasting2016-03-19
| | | |
* | | | Merge pull request #14012 from peti/update-gnupgzimbatm2016-03-20
|\ \ \ \ | | | | | | | | | | Update default version of gnupg to 2.1.x
| * | | | services.xserver.startGnuPGAgent: remove obsolete NixOS optionPeter Simons2016-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | GnuPG 2.1.x changed the way the gpg-agent works, and that new approach no longer requires (or even supports) the "start everything as a child of the agent" scheme we've implemented in NixOS for older versions. To configure the gpg-agent for your X session, add the following code to ~/.xsession or some other appropriate place that's sourced at start-up: gpg-connect-agent /bye GPG_TTY=$(tty) export GPG_TTY If you want to use gpg-agent for SSH, too, also add the settings unset SSH_AGENT_PID export SSH_AUTH_SOCK="${HOME}/.gnupg/S.gpg-agent.ssh" and make sure that enable-ssh-support is included in your ~/.gnupg/gpg-agent.conf. The gpg-agent(1) man page has more details about this subject, i.e. in the "EXAMPLES" section.
* | | | | nixos/manpages: enable linebreaking after slashesPascal Wittmann2016-03-19
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow linbreaks after slashes in long URLs. The option used is documented at http://docbook.sourceforge.net/release/xsl/current/doc/manpages/man.break.after.slash.html This commit fixes #4538.
* | | | nixos/tests: fix docker testJoachim Fasting2016-03-19
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | The docker service is socket activated by default; thus, `waitForUnit("docker.service")` before any docker command causes the unit test to time out. Instead, do `waitForUnit("sockets.target")` to ensure that sockets are setup before running docker commands.
* | | Document the fact that the firewall allows pings by default in rl-1603.xml.Peter Simons2016-03-18
| | |
* | | nixos/tests/firewall.nix: ping now succeeds in the firewall's default ↵Peter Simons2016-03-18
|/ / | | | | | | configuration
* | nixos/modules/services/x11/xserver.nix: fix minor typoPeter Simons2016-03-18
| |
* | Set networking.firewall.allowPing = true by default.Peter Simons2016-03-17
| | | | | | | | | | | | | | | | This patch fixes https://github.com/NixOS/nixpkgs/issues/12927. It would be great to configure good rate-limiting defaults for this via /proc/sys/net/ipv4/icmp_ratelimit and /proc/sys/net/ipv6/icmp/ratelimit, too, but I didn't since I don't know what a "good default" would be.
* | dnscrypt-proxy service: expose option to use ephemeral keysJoachim Fasting2016-03-17
| | | | | | | | | | | | Some users may wish to improve their privacy by using per-query key pairs, which makes it more difficult for upstream resolvers to track users across IP addresses.
* | dnscrypt-proxy service: documentation fixesJoachim Fasting2016-03-17
| | | | | | | | | | | | | | | | | | | | | | - fix `enable` option description using `mkEnableOption longDescription` is incorrect; override `description` instead - additional details for proper usage of the service, including an example of the recommended configuration - clarify `localAddress` option description - clarify `localPort` option description - clarify `customResolver` option description
* | gitlab service: Remove emailFrom optionFranz Pletz2016-03-17
|/ | | | | Not being used anymore. Use `services.gitlab.extraConfig.gitlab.email_from` instead.
* Merge pull request #13838 from peti/drop-old-dovecot-versionsPeter Simons2016-03-16
|\ | | | | Drop support for dovecot 2.1.x from Nixpkgs and NixOS.
| * Drop support for dovecot 2.1.x from Nixpkgs and NixOS.Peter Simons2016-03-11
| | | | | | | | | | Version 2.2.x has been stable for a long time; let's give up support for the obsolete version.
* | cups service: fix gutenprint update when there's no printersNikolay Amiantov2016-03-15
| |
* | Remove setting non-existent sysctl optionsEelco Dolstra2016-03-15
| | | | | | | | (cherry picked from commit 1010ced00c9b65eb7099d10f2ad8502c093655e4)
* | NixOS release: Don't depend on chromiumEelco Dolstra2016-03-15
| | | | | | | | | | | | This is failing because it exceeds the hydra-queue-runner size limit. http://hydra.nixos.org/build/33303819
* | Fix NixOS tested jobEelco Dolstra2016-03-15
| |
* | Build most ISOs/OVAs for x86_64-linux onlyEelco Dolstra2016-03-15
| | | | | | | | | | | | Probably not many people care about i686-linux any more, but building all these images is fairly expensive (e.g. in the worst case, every Nixpkgs commit would trigger a few gigabytes of uploads to S3).
* | Combine ISO generation stepsEelco Dolstra2016-03-15
| | | | | | | | | | This folds adding hydra-build-products into the actual ISO generation, preventing an unnecessary download of the ISO.
* | Combine OVA generation stepsEelco Dolstra2016-03-15
| | | | | | | | | | | | | | | | Previously this was done in three derivations (one to build the raw disk image, one to convert to OVA, one to add a hydra-build-products file). Now it's done in one step to reduce the amount of copying to/from S3. In particular, not uploading the raw disk image prevents us from hitting hydra-queue-runner's size limit of 2 GiB.
* | tarsnap: 1.0.36.1 -> 1.0.37Tanner Doshier2016-03-14
| |
* | Merge pull request #13837 from peti/drop-old-postfix-versionsPeter Simons2016-03-14
|\ \ | | | | | | Drop support for postfix 2.x from Nixpkgs and NixOS.
| * | Drop support for postfix 2.x from Nixpkgs and NixOS.Peter Simons2016-03-11
| |/ | | | | | | | | Version 3.x has been stable for a long time; let's give up support for the obsolete versions.
* | NixOS 16.09 is called FlounderDomen Kožar2016-03-14
| | | | | | | | chosen by @zimbatm as our documentation hero in 16.03
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-22 16:34:14 +0000