about summary refs log tree commit diff
path: root/pkgs/applications/virtualization
Commit message (Collapse)AuthorAge
* qemu: 2.2.2 -> 2.3.0William A. Kennington III2015-05-20
|
* Merge pull request #7829 from joamaki/vmware_guestArseniy Seroka2015-05-15
|\ | | | | VMWare guest support and open-vm-tools package
| * VMWare guest support and open-vm-tools packageJussi Maki2015-05-15
| |
* | virtualbox+guest: Update to new version 4.3.28.aszlig2015-05-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains quite a lot of fixes, so for information and details about them, please have a look at https://www.virtualbox.org/wiki/Changelog. We also needed to drop the hunk about NATNetworkServiceRunner.cpp in the hardened.patch, because the file was unused and thus has been removed from upstream in r54821: https://www.virtualbox.org/changeset?reponame=vbox&new=54821 Tested successfully against nixos/tests/virtualbox.nix. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | docker: fix buildDomen Kožar2015-05-10
|/
* docker: update to 1.6.0Jaka Hudoklin2015-04-25
|
* virtualbox: Update to version 4.3.26.aszlig2015-04-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream changelog: * GUI: in the snapshots pane, protect the age of snapshots against wrong host time * NAT Network: fixed a bug which prevented to propagate any DNS name server / domain / search string information to the NAT network (4.3.24 regression) * NAT Network: don't delay the shutdown of VBoxSVC on Windows hosts * Mouse support: the mouse could not be moved under rare conditions if no Guest Additions are installed (4.3.24 regression) * Storage: if the guest ejects a virtual CD/DVD medium, make the change permanent * VGA: made saving secondary screen sizes possible in X11 guests * SDK: fixed the VirtualBox.tlb file (4.3.20 regression) * rdesktop-vrdp: make it work with USB devices again (4.3.14 regression) * USB: fixed a possible BSOD on Windows hosts under rare conditions * iPXE: enable the HTTP download protocol on non-Linux hosts * Mac OS X hosts: don't panic on hosts with activated SMAP (Broadwell and later) * Linux hosts: don't crash Linux 4.0 hosts The same with bug IDs can be found at: https://www.virtualbox.org/wiki/Changelog Tested on my machine using the virtualbox NixOS VM test. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* virtualbox: Remove group check on /nix/store.aszlig2015-04-04
| | | | | | | | | | This is espacially cruicial when it comes to Nix 1.9, where we even have a more restrictive /nix/store. In any event, VirtualBox in hardenend mode doesn't have to check the /nix/store path, because it's read-only on NixOS systems. So this check would not introduce more security but more hurdles, thus I'm removing it (of course _only_ for /nix/store). Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* qemu: 2.2.0 -> 2.2.1William A. Kennington III2015-03-26
|
* virtualbox: Update to new upstream version 4.3.24.aszlig2015-03-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | New maintenance release, changes: * VMM: emulation fix for the ENTER instruction under certain conditions; fixes Solaris 10 guests (VT-x without unrestricted guest execution) * VMM: fix for handling NMIs on Linux hosts with X2APIC enabled * NAT/NAT Network: fix connection drops when the host's DHCP lease was renewed (4.3.22 regression; Windows hosts only) * NAT: don't crash on an empty domain list when switching the DNS host configuration (4.3.22 regression; Mac OS X hosts only) * PXE: re-enable it on Windows hosts (4.3.22 regression; Windows hosts only) * Shared Folders: fixed a problem with Windows guests (4.3.22 regression) * Audio: improved record quality when using the DirectSound audio backend * VBoxManage: when executing the controlvm command take care that the corresponding VM runtime changes are saved permanently * Windows Installer: properly install the 32-bit version of VBoxRes.dll on 32-bit hosts * Linux hosts / guests: Linux 4.0 fixes * OS/2 Additions: fixed mouse integration (4.3.22 regression) * X11 Additions: fixed a sporadic failure to deactivate virtual screens Full changelog with bug IDs can be found at: https://www.virtualbox.org/wiki/Changelog Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* virtualbox 4.3.20 -> 4.3.22Tobias Geerinckx-Rice2015-03-02
|
* Merge pull request #6586 from offlinehacker/pkgs/docker/updateJaka Hudoklin2015-02-28
|\ | | | | docker: update to 1.5.0
| * docker: update to 1.5.0Jaka Hudoklin2015-02-27
| |
* | Fix: Build Xen only for x86_64 Linux platforms.Thomas Strobel2015-02-27
| |
* | Fix eval (xen: bridge_utils => bridge-utils)Bjørn Forsman2015-02-26
| |
* | Merge pull request #6046 from ts468/xenEelco Dolstra2015-02-26
|\ \ | | | | | | Update: Xen 4.5 + NixOS Xen modules
| * | Update: add new Xen versions + update NixOS Xen modulesThomas Strobel2015-02-25
| |/ | | | | | | | | | | | | Versions of XEN: - Xen 4.5 - Xen 4.5 + XenServer patches - Xen 4.4.1
* | virt-viewer: update from 1.0 to 2.0Nathaniel Baxter2015-02-21
| |
* | virt-manager: update from 1.0.1 to 1.1.0Nathaniel Baxter2015-02-21
|/
* bridge-utils: align attrname with pkgnameBjørn Forsman2015-02-20
|
* Merge pull request #6380 from codyopel/docker-fixWilliam A. Kennington III2015-02-16
|\ | | | | docker: fix shebangs, closes #6368
| * docker: fix shebangs, closes #6368codyopel2015-02-16
| |
* | Merge pull request #5995 from ts468/qemu-vmJames Cook2015-02-16
|\ \ | |/ |/| Update QEMU Nixos Virtual Machine
| * Update QEMU Nixos Virtual MachineThomas Strobel2015-02-16
| | | | | | | | | | | | The Nixos Qemu VM that are used for VM tests can now start without boot menu even when using a bootloader. The Nixos Qemu VM with bootloader can emulate a EFI boot now.
* | Merge branch 'master' into stagingVladimír Čunát2015-01-31
|\| | | | | | | | | | | | | Conflicts (relatively simple): pkgs/applications/audio/spotify/default.nix pkgs/build-support/cc-wrapper/default.nix pkgs/development/compilers/cryptol/1.8.x.nix
| * Upgrade to Docker 1.4Brian McKenna2015-01-20
| |
* | rename all occurrences of stdenv.cc.gcc to stdenv.cc.ccEric Seidel2015-01-14
|/
* Merge pull request #5425 from ts468/xenEelco Dolstra2015-01-02
|\ | | | | Update: Xen: 4.0.3 -> 4.4.1
| * Update: Xen -> 4.4.1Thomas Strobel2014-12-22
| |
* | Change occurrences of gcc to the more general ccJohn Wiegley2014-12-26
| | | | | | | | | | This is done for the sake of Yosemite, which does not have gcc, and yet this change is also compatible with Linux.
* | Merge pull request #5446 from nckx/remotebox-squashedvbgl2014-12-25
|\ \ | | | | | | Add RemoteBox, a (you guessed it) remote VirtualBox client
| * | Add remotebox: VirtualBox client with remote managementTobias Geerinckx-Rice2014-12-23
| |/
* | Merge pull request #3835 from wkennington/master.qemuDomen Kožar2014-12-24
|\ \ | |/ |/| qemu: 2.0.0 -> 2.2.0
| * qemu: 2.0.0 -> 2.2.0William A. Kennington III2014-12-10
| | | | | | | | | | Additionally, add support for more external features as well as more sound system types.
* | Fix license attribute of many bsd-like licensed packagesPascal Wittmann2014-12-21
| |
* | virtualbox: Fix runtime paths in hardening mode.aszlig2014-12-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because we have to rely on setuid wrappers on NixOS, we can't easily hardcode the executable paths and set it 4755. So for all calls, we need to change the runtime path executable directory to /var/setuid-wrappers/ and for verification we need to retain the executable directory. Also note, that usually VBoxNetAdpCtl, VBoxNetDHCP, VBoxNetNAT, VBoxSDL and VBoxVolInfo don't reside in directories that are commonly in PATH, but in /usr/lib/virtualbox in most mainstream distros. But because the names of these executables are distinctive enough to not cause collisions with other setuid programs, I'll leave it like that and not patch up setuid-wrappers. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | virtualbox: Allow to easily change the build type.aszlig2014-12-18
| | | | | | | | | | | | | | Not really changes anything in functionality, but makes it easier to change the build type to "debug", for example. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | virtualbox: Fix hardcoded /sbin/ifconfig path.aszlig2014-12-18
| | | | | | | | | | | | | | | | Just accidentally found this while debugging and it's needed for fetching a few interface details, not sure however whether because of this anything has been broken so far. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | virtualbox: Explicitly excempt src during install.aszlig2014-12-18
| | | | | | | | | | | | | | | | | | Instead of coping it to $out and later deleting it, we now exclude the src directory during copy. Also, we no longer cd into the release directory during installPhase, which should make sure that we are constantly in $sourceRoot. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | docker: update from 1.3.1 to 1.3.3, potentially fixes CVE-2014-6407, ↵Rob Vermaas2014-12-17
| | | | | | | | CVE-2014-6408
* | virt-viewer: fix missing schema errorBjørn Forsman2014-12-16
| | | | | | | | | | | | | | | | | | | | | | Fixes this error, as seen when trying to open a guest VM when virt-viewer is accessed over ssh with X forwarding: GLib-GIO-ERROR **: Settings schema 'org.gnome.system.proxy' is not installed A similar issue was fixed for virt-manager in commit fb8a2b3be7f86481904636721f7fec99c30df389 ("virt-manager: fix missing schema error")
* | virtualbox: Fix extension pack without hardening.aszlig2014-12-16
| | | | | | | | | | | | | | | | We divert to the $out/share/virtualbox directory only if we have hardening enabled, so let's put the extension pack into $out/libexec/virtualbox instead if we're compiling without hardening. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | virt-viewer: fix SPICE supportBjørn Forsman2014-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add missing dependency on 'spice_protocol' * Fix new build error which came now that ./configure enables SPICE support: building virt-viewer CCLD virt-viewer /nix/store/b8qhjrwf8sf9ggkjxqqav7f1m6w83bh0-binutils-2.23.1/bin/ld: cannot find -lgdbm /nix/store/b8qhjrwf8sf9ggkjxqqav7f1m6w83bh0-binutils-2.23.1/bin/ld: cannot find -lcap collect2: error: ld returned 1 exit status Fix by adding gddbm and libcap as inputs. Yes, libcap is needed _in addition_ to libcap_ng (I tested removing libcap_ng, it failed). Without this change, virt-viewer cannot be used with guests machines that uses SPICE.
* | virtualbox: Get tid of runtime dependency on linux.devEelco Dolstra2014-12-15
| |
* | virtualbox package: Disable hardening by default.aszlig2014-12-15
| | | | | | | | | | | | | | | | | | Yes, this is only on the package level, so it's possible to use VirtualBox for example installed by nix-env -i, which of course doesn't have access to the functionality provided by the various VirtualBox kernel modules. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* | Update/Fix OVMFMichael Raskin2014-12-11
|/
* virtualbox: Fix extension pack installation.aszlig2014-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With hardening, we need to go a bit further rather than just allowing /nix/store being world-writable. We now use fakeroot to make sure the VBoxExtPackHelperApp won't moan that the files are not owned by root. They are, but only outside of the chrooted build process. Another issue with using fakeroot is that it doesn't seem to cope well with arguments that contain spaces. That's why I've piped the call into ${stdenv.shell}. Now, the really gory and confusing part is the introduction of VBOX_PATH_APP_PRIVATE_ARCH_TOP and the change of VBOX_PATH_APP_PRIVATE. The VBOX_PATH_APP_PRIVATE_ARCH is *only* for modules and is checked by the hardened implementation against whether things like VMMR0.r0 or VBoxVMM.so reside in that directory. As a side note: I admit that the whole libexec directory is quite polluted with stuff that shouldn't be there, but for now we've broken enough things and will tear apart the whole structure at some day in the future[TM]. For the confusing part we have VBOX_PATH_APP_PRIVATE_ARCH_TOP, which _should_ be the same as VBOX_PATH_APP_PRIVATE_ARCH but unfortunately, the hardened implementation is checking against this directory (in IsValidBaseDir) for the extension pack(why!?). Of course, we could put even that into the libexec directory, somewhat similar as the official package, but after all, let's at least *try* to separate things. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* virtualbox: Allow /nix/store being world-writable.aszlig2014-11-30
| | | | | | | | | | | | We are already checking whether /nix/store has the sticky bit set, so if it is world-writable as well it doesn't mean that the actual store path is writable. Let alone the fact that it is only writable during the build process. This should fix installing the extension pack when enableExtensionPack is used. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* virtualbox: Update to upstream version 4.3.20.aszlig2014-11-30
| | | | Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* virtualbox: Enable hardening by default.aszlig2014-11-29
| | | | | | | | | | | | | | | | | | | | | | | | | | VirtualBox with hardening support requires the main binaries to be setuid root. Using VBOX_WITH_RUNPATH, we ensure that the RPATHs are pointing to the libexec directory and we also need to unset VBOX_WITH_ORIGIN to make sure that the build system is actually setting those RPATHs. The hardened.patch implements two things: * Set the binary directory to the setuid-wrappers dir so that VboxSVC calls them instead of the binaries from the store path. The reason behind this is because nothing in the Nix store can have the setuid flag. * Excempt /nix/store from the group permission check, because while it is group-writeable indeed it also has the sticky bit set (and also the whole store is mounted read-only on most NixOS systems), so we're checking on that as well. Right now, the hardened.patch uses /nix/store and /var/setuid-wrappers directly, so someone would ever want to change those on a NixOS system, please provide a patch to set those paths on build time. However, for simplicity, it's best to do it when we _really_ need it. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-12 17:23:33 +0000