summary refs log tree commit diff
path: root/nixos/doc/manual/release-notes/rl-1803.xml
blob: fcad5bfff5560e9c905824a74966231d29e5c604 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
<section xmlns="http://docbook.org/ns/docbook"
         xmlns:xlink="http://www.w3.org/1999/xlink"
         xmlns:xi="http://www.w3.org/2001/XInclude"
         version="5.0"
         xml:id="sec-release-18.03">

<title>Release 18.03 (“Impala”, 2018/03/??)</title>

<section xmlns="http://docbook.org/ns/docbook"
         xmlns:xlink="http://www.w3.org/1999/xlink"
         xmlns:xi="http://www.w3.org/2001/XInclude"
         version="5.0"
         xml:id="sec-release-18.03-highlights">

<title>Highlights</title>

<para>In addition to numerous new and upgraded packages, this release
has the following highlights: </para>

<itemizedlist>
  <listitem>
    <para>
      MariaDB 10.2, updated from 10.1, is now the default MySQL implementation. While upgrading a few changes
      have been made to the infrastructure involved:
      <itemizedlist>
        <listitem>
          <para>
            <literal>libmysql</literal> has been deprecated, please use <literal>mysql.connector-c</literal>
            instead, a compatibility passthru has been added to the MySQL packages.
          </para>
        </listitem>
        <listitem>
          <para>
            The <literal>mysql57</literal> package has a new <literal>static</literal> output containing
            the static libraries including <literal>libmysqld.a</literal>
          </para>
        </listitem>
      </itemizedlist>
    </para>
  </listitem>
</itemizedlist>

</section>
<section xmlns="http://docbook.org/ns/docbook"
         xmlns:xlink="http://www.w3.org/1999/xlink"
         xmlns:xi="http://www.w3.org/2001/XInclude"
         version="5.0"
         xml:id="sec-release-18.03-new-services">

<title>New Services</title>

<para>The following new services were added since the last release:</para>

<itemizedlist>
  <listitem>
    <para></para>
  </listitem>
</itemizedlist>

</section>
<section xmlns="http://docbook.org/ns/docbook"
         xmlns:xlink="http://www.w3.org/1999/xlink"
         xmlns:xi="http://www.w3.org/2001/XInclude"
         version="5.0"
         xml:id="sec-release-18.03-incompatibilities">

<title>Backward Incompatibilities</title>

<para>When upgrading from a previous release, please be aware of the
following incompatible changes:</para>

<itemizedlist>
  <listitem>
    <para>
      Dollar signs in options under <option>services.postfix</option> are
      passed verbatim to Postfix, which will interpret them as the beginning of
      a parameter expression. This was already true for string-valued options
      in the previous release, but not for list-valued options. If you need to
      pass literal dollar signs through Postfix, double them.
    </para>
  </listitem>
  <listitem>
    <para>
      The <literal>postage</literal> package (for web-based PostgreSQL
      administration) has been renamed to <literal>pgmanage</literal>. The
      corresponding module has also been renamed. To migrate please rename all
      <option>services.postage</option> options to
      <option>services.pgmanage</option>.
    </para>
  </listitem>
  <listitem>
    <para>
      <emphasis role="strong">
        The OpenSSH service no longer enables support for DSA keys by default,
        which could cause a system lock out. Update your keys or, unfavorably,
        re-enable DSA support manually.
      </emphasis>
    </para>

    <para>
      DSA support was
      <link xlink:href="https://www.openssh.com/legacy.html">deprecated in OpenSSH 7.0</link>,
      due to it being too weak. To re-enable support, add
      <literal>PubkeyAcceptedKeyTypes +ssh-dss</literal> to the end of your
      <option>services.openssh.extraConfig</option>.
    </para>

    <para>
      After updating the keys to be stronger, anyone still on a pre-17.03
      version is safe to jump to 17.03, as vetted
      <link xlink:href="https://search.nix.gsc.io/?q=stateVersion">here</link>.
    </para>
  </listitem>
</itemizedlist>

</section>
<section xmlns="http://docbook.org/ns/docbook"
         xmlns:xlink="http://www.w3.org/1999/xlink"
         xmlns:xi="http://www.w3.org/2001/XInclude"
         version="5.0"
         xml:id="sec-release-18.03-notable-changes">

<title>Other Notable Changes</title>

<itemizedlist>
  <listitem>
    <para>
      ZNC option <option>services.znc.mutable</option> now defaults to
      <literal>true</literal>. That means that old configuration is not
      overwritten by default when update to the znc options are made.
    </para>
  </listitem>
  <listitem>
    <para>
      The option <option>networking.wireless.networks.&lt;name&gt;.auth</option>
      has been added for wireless networks with WPA-Enterprise authentication.
      There is also a new <option>extraConfig</option> option to directly
      configure <literal>wpa_supplicant</literal> and <option>hidden</option>
      to connect to hidden networks.
    </para>
  </listitem>
  <listitem>
    <para>
      The option <option>services.xserver.desktopManager.default</option> is now <literal>none</literal> by default.
      An assertion failure is thrown if WM's and DM's default are <literal>none</literal>.
      To explicitly run a plain X session without and DM or WM, the newly introduced option <option>services.xserver.plainX</option>
      must be set to true.
    </para>
  </listitem>
  <listitem>
    <para>
      The option <option>services.logstash.listenAddress</option> is now <literal>127.0.0.1</literal> by default.
      Previously the default behaviour was to listen on all interfaces.
    </para>
  </listitem>
  <listitem>
    <para>
      <literal>services.btrfs.autoScrub</literal> has been added, to
      periodically check btrfs filesystems for data corruption.
      If there's a correct copy available, it will automatically repair
      corrupted blocks.
    </para>
  </listitem>
</itemizedlist>

</section>
</section>