Commit Graph
100 Commits
Author SHA1 Message Date
Maximilian Bosch ce48bcdde8 Merge pull request #144770 from NixOS/backport-144058-to-release-21.05
[Backport release-21.05] Kernels 2021-11-02
2021-11-06 12:02:24 +01:00
Maximilian Bosch eb85a2adb9 Merge pull request #144274 from NixOS/backport-143177-to-release-21.05
[Backport release-21.05] matrix-synapse: 1.45.1 -> 1.46.0
2021-11-04 22:10:08 +01:00
Maximilian Bosch f3df16db3a mautrix-whatsapp: 0.1.9 -> 0.1.10
ChangeLog: https://github.com/mautrix/whatsapp/releases/tag/v0.1.10
(cherry picked from commit 3f24252df0f0412e3b345898fa1c9126b54bed67)
2021-11-03 06:01:27 +00:00
Maximilian Bosch b43e55f22b Merge pull request #143437 from NixOS/backport-143404-to-release-21.05
[Backport release-21.05] mautrix-whatsapp: 0.1.8 -> 0.1.9
2021-10-31 22:57:05 +01:00
Maximilian Bosch 666bedc36c Merge pull request #143761 from Ma27/backport-epson-escpr2
[21.05] epson-escpr2: 1.1.38 -> 1.1.42
2021-10-30 11:22:30 +02:00
Maximilian Bosch fc3c987767 epson-escpr2: 1.1.38 -> 1.1.42
(cherry picked from commit b9170bf9e0e4d4791ab7fcfb610cc88a90869590)
2021-10-30 00:00:11 +02:00
Maximilian Bosch e5faf9d034 Merge pull request #143466 from Ma27/backport-linux-changes
[21.05] linux: changes for #140281
2021-10-29 13:27:40 +02:00
Maximilian Bosch f47c57802e linux: build hardened kernel with matching releases
Until now we merged kernel updates even if no hardened versions were
available yet. On one hand we don't want to delay patch-level updates,
on the other hand users of hardened kernels have frequent breakage now[1].

This change aims to provide a solution this issue:

* The hardened patchset now references the kernel version it's released
  for (including a sha256 hash for the fixed-output path of the source
  tarball).
* The `hardenedKernelFor`-function doesn't just append hardened patches
  now, but also overrides version & src to match the kernel version the
  patch was built & tested for.

Refs #140281

[1] https://hydra.nixos.org/job/nixos/trunk-combined/nixpkgs.linuxPackages_hardened.kernel.x86_64-linux/all

(cherry picked from commit bb5aa0109b6db98a2e0a7ba88f5e0287e2374384)
2021-10-28 22:26:22 +02:00
Maximilian Bosch f48b51e12e linux: create maintainer team
Now there are a few more folks who should get pinged on kernel changes:

    $ nix-instantiate -E 'with import ./. {}; (map (x: x.github) linux.meta.maintainers)' --eval  --strict
    [ "TredwellGit" "mweinelt" "ma27" "nequissimus" "alyssais" "thoughtpolice" ]

Refs #140281

(cherry picked from commit 65930caffe78ccd3c0e4f00bfd79123fcba9e444)
2021-10-28 21:58:39 +02:00
Maximilian Bosch a6e34d50fc Merge pull request #143355 from Ma27/php73-cve-2021-21703
[21.05] php73: 7.3.29 -> 7.3.32
2021-10-28 19:43:41 +02:00
Maximilian Bosch 25ff65fe34 php73: 7.3.29 -> 7.3.32
ChangeLog: https://www.php.net/ChangeLog-7.php#7.3.32 and below.
2021-10-28 12:53:40 +02:00
Maximilian Bosch d14d83a369 Merge pull request #143183 from NixOS/backport-143113-to-release-21.05
[Backport release-21.05] Kernels 2021-10-27
2021-10-28 00:20:56 +02:00
Maximilian Bosch de6f737cbd Merge pull request #143054 from Ma27/php-backport
[21.05] php: 7.4.24 -> 7.4.25, 8.0.11 -> 8.0.12, fix CVE-2021-21703
2021-10-27 12:51:11 +02:00
Maximilian Bosch 1b8d9c1854 php80: 8.0.11 -> 8.0.12, fix CVE-2021-21703
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-21703
ChangeLog: https://www.php.net/ChangeLog-8.php#8.0.12
(cherry picked from commit ab5c10c42a95de2192f270ea13ba05e149e8cead)
2021-10-26 23:42:53 +02:00
Maximilian Bosch a17528c284 php74: 7.4.24 -> 7.4.25, fix CVE-2021-21703
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-21703
ChangeLog: https://www.php.net/ChangeLog-7.php#7.4.25
(cherry picked from commit af404d852f39b18257024d8010192d74829c0917)
2021-10-26 23:42:27 +02:00
Maximilian Bosch ea8a8b9c52 Merge pull request #142426 from NixOS/backport-142342-to-release-21.05
[Backport release-21.05] Kernels 2021-10-20
2021-10-23 13:32:15 +02:00
Maximilian Bosch 55e93ae9eb Merge pull request #142335 from NixOS/backport-141382-to-release-21.05
[Backport release-21.05] matrix-synapse: 1.44.0 -> 1.45.1
2021-10-20 23:47:04 +02:00
Maximilian Bosch 6ea1791344 matrix-synapse: 1.45.0 -> 1.45.1
ChangeLog: https://github.com/matrix-org/synapse/releases/tag/v1.45.1
(cherry picked from commit b25c2fbed9aa9d9942af615e48c9c4d2bf400265)
2021-10-20 22:09:37 +02:00
Maximilian Bosch 7f52606b19 Merge pull request #142142 from NixOS/backport-142000-to-release-21.05
[Backport release-21.05] Kernels 2021-10-17
2021-10-20 18:36:35 +02:00
Maximilian Bosch 2c06efb24e Merge pull request #141898 from NixOS/backport-141499-to-release-21.05
[Backport release-21.05] Kernels 2021-10-13
2021-10-16 21:32:58 +02:00
Maximilian Bosch 2ec14d6c79 Merge pull request #141855 from Ma27/kernel-backports
[21.05] Kernel backports
2021-10-16 20:39:00 +02:00
Maximilian Bosch 102423a3c6 Merge pull request #141420 from NixOS/backport-141364-to-release-21.05
[Backport release-21.05] element-{web,desktop}: 1.9.0 -> 1.9.2
2021-10-16 15:45:04 +02:00
Maximilian Bosch 44ef22423f element-desktop: regenerate yarn deps with yarn2nix from 21.05 2021-10-16 15:07:13 +02:00
Maximilian Bosch 9d7b660576 element-desktop: 1.9.0 -> 1.9.2
ChangeLog: https://github.com/vector-im/element-desktop/releases/tag/v1.9.2
(cherry picked from commit 6f2e2dc7795d20073fa62c1c98f2daf7b8ee6587)
2021-10-16 15:05:56 +02:00
Maximilian Bosch ba0a1ce211 element-web: 1.9.0 -> 1.9.2
ChangeLog: https://github.com/vector-im/element-web/releases/tag/v1.9.2
(cherry picked from commit b021b8bebd9c8b5e66450519d06fb500e6ac48b8)
2021-10-16 15:05:56 +02:00
Maximilian Bosch f1e8a51254 linux-libre: unbreak
(cherry picked from commit a8498f08bf29c129d91978aaedf60877f0047553)
2021-10-16 10:46:59 +02:00
Maximilian Bosch a255ac3b23 Merge pull request #141129 from Ma27/nextcloud-secret-backport
[21.05] nixos/nextcloud: put secrets into the environment of nextcloud-setup.service
2021-10-14 15:53:15 +02:00
Maximilian Bosch 93ca5ab64f Merge pull request #141163 from lheckemann/release-21.05
[21.05] Revert "nixos/nextcloud: temp fix for MariaDB >=10.6"
2021-10-10 10:04:17 +02:00
Maximilian Bosch e33cbdc2de nixos/nextcloud: put secrets into the environment of nextcloud-setup.service
The `$(</path/to/file)`-expansion appears verbatim in the cmdline of
`nextcloud-occ` which means that an unprivileged user could find
sensitive values (i.e. admin password & database password) by monitoring
`/proc/<pid>/cmdline`.

Now, these values don't appear in a command line anymore, but will be
passed as environment variables to `nextcloud-occ`.

(cherry picked from commit 9f37d6aee028679b8a94be59d74984e708acaa85)
2021-10-09 20:05:38 +02:00
Maximilian Bosch 0c106b8ef3 Merge pull request #140748 from Ma27/bump-grafana-2105
[21.05] grafana: 7.5.10 -> 7.5.11, fix CVE-2021-39226
2021-10-09 13:33:45 +02:00
Maximilian Bosch 0f4ceae398 Merge pull request #140522 from sternenseemann/stable-lowdown-0.9.0
[21.05]  nixUnstable: 2.4pre20210922 -> 2.4pre20211006 ; init lowdown-0-9
2021-10-09 01:57:33 +02:00
Maximilian Bosch 0dde2c5c55 Merge pull request #140991 from NixOS/backport-139916-to-release-21.05
[Backport release-21.05] matrix-synapse: 1.43.0 -> 1.44.0
2021-10-09 00:44:08 +02:00
Maximilian Bosch bc66bad58c Merge pull request #140903 from NixOS/backport-140765-to-release-21.05
[Backport release-21.05] Kernels 2021-10-07
2021-10-08 15:50:23 +02:00
Maximilian Bosch 75415b03c0 grafana: 7.5.10 -> 7.5.11, fix CVE-2021-39226
ChangeLog: https://github.com/grafana/grafana/releases/tag/v7.5.11
Follow-up on 21.05 for #140718
2021-10-06 13:15:56 +02:00
Maximilian Bosch 3100e48e86 mautrix-telegram: fix eval 2021-10-05 20:07:02 +02:00
Maximilian Bosch 4f7121d8d0 Merge pull request #140633 from NixOS/backport-140592-to-release-21.05
[Backport release-21.05] mautrix-telegram: add `prometheus-client` for metrics
2021-10-05 17:41:28 +02:00
Maximilian Bosch e484541615 mautrix-telegram: add prometheus-client for metrics
With this change I can do

    metrics:
        enabled: true
        listen_port: 8080

and retrieve metrics from `localhost:8080` for the telegram bridge.

(cherry picked from commit 9f9e32238b200716a622bd743e6859495aa83db1)
2021-10-05 15:38:32 +00:00
Maximilian Bosch 9de38b8522 Merge pull request #138803 from NixOS/backport-138020-to-release-21.05
[Backport release-21.05] tor-browser-bundle-bin: 10.5.5 -> 10.5.6
2021-10-03 19:55:46 +02:00
Maximilian Bosch 520179f220 Merge pull request #140187 from Ma27/backport-php
[21.05] php: 7.4.23 -> 7.4.24, 8.0.10 -> 8.0.11
2021-10-02 14:07:58 +02:00
Maximilian Bosch 31dc6d3c50 Merge pull request #140215 from NixOS/backport-140110-to-release-21.05
[Backport release-21.05] Kernels 2021-09-30
2021-10-02 11:08:07 +02:00
Maximilian Bosch e134154396 Merge pull request #139662 from NixOS/backport-139658-to-release-21.05
[Backport release-21.05] Kernels 2021-09-27
2021-10-01 22:34:24 +02:00
Maximilian Bosch 6385534d45 Merge pull request #140188 from NixOS/backport-140159-to-release-21.05
[Backport release-21.05] nextcloud: misc changes
2021-10-01 21:46:28 +02:00
Maximilian Bosch 50b29bf6aa nixos/nextcloud: run tests against each Nextcloud instance
(cherry picked from commit 10703a8c926e182311cdf538937517db33f4261c)
2021-10-01 19:13:18 +00:00
Maximilian Bosch c1541b370a nixos/nextcloud: use php8 where possible
(cherry picked from commit 66edc1e84625ed5b4bed5868f4093a570a822c2e)
2021-10-01 19:13:17 +00:00
Maximilian Bosch d4c8773058 Merge pull request #140181 from yayayayaka/backport-140089-to-release-21.05
[Backport release-21.05] nextcloud: 20.0.12 -> 20.0.13, 21.0.4 -> 21.0.5, 22.1.1 -> 22.2.0
2021-10-01 20:30:01 +02:00
Maximilian Bosch 4ae8eeacc2 php80: 8.0.10 -> 8.0.11
ChangeLog: https://www.php.net/ChangeLog-8.php#8.0.11
(cherry picked from commit 6b9eefb85f59c6d0d91b26180c9e1a2b42cb9f7f)
2021-10-01 20:29:33 +02:00
Maximilian Bosch 9f4d20b4bf php74: 7.4.23 -> 7.4.24
ChangeLog: https://www.php.net/ChangeLog-7.php#7.4.24
(cherry picked from commit 13d37ebb64a5e314aad5895c98da886b64886d25)
2021-10-01 20:29:13 +02:00
Maximilian Bosch f182b8d23b nixos/nextcloud: temp fix for MariaDB >=10.6
The MariaDB version 10.6 doesn't seem supported with current Nextcloud
versions and the test fails with the following error[1]:

    nextcloud # [   14.950034] nextcloud-setup-start[1001]: Error while trying to initialise the database: An exception occurred while executing a query: SQLSTATE[HY000]: General error: 4047 InnoDB refuses to write tables with ROW_FORMAT=COMPRESSED or KEY_BLOCK_SIZE.

According to a support-thread in upstream's Discourse[2] this is because
of a missing support so far.

Considering that we haven't received any bugreports so far - even though
the issue already exists on master - and the workaround[3] appears to
work fine, an evaluation warning for administrators should be
sufficient.

[1] https://hydra.nixos.org/build/155015223
[2] https://help.nextcloud.com/t/update-to-next-cloud-21-0-2-has-get-an-error/117028/15
[3] setting `innodb_read_only_compressed=0`

(cherry picked from commit 675e262f5a03eb9aa6b0500434ee30a9d6b882a0)
2021-10-01 20:04:06 +02:00
Maximilian Bosch 92609f3d9b Merge pull request #139791 from NixOS/backport-139647-to-release-21.05
[Backport release-21.05] element-{web,desktop}: 1.8.5 -> 1.9.0
2021-10-01 12:19:03 +02:00
Maximilian Bosch 47bf4156ee Merge pull request #140032 from NixOS/backport-139810-to-release-21.05
[Backport release-21.05] grocy: 3.1.1 -> 3.1.2
2021-09-30 14:51:54 +02:00
Maximilian Bosch ce206ce87f grocy: 3.1.1 -> 3.1.2
ChangeLog: https://github.com/grocy/grocy/releases/tag/v3.1.2
(cherry picked from commit d8ff7944ede3210c2172b87517803e25b8ed4736)
2021-09-30 12:35:26 +00:00
Maximilian Bosch 8079b1a3c8 linux_5_13: drop
5.13.19 was the last 5.13 release and the version is now EOL[1].

[1] https://lwn.net/Articles/869747/

(cherry picked from commit 01eb8ec98a52c1e7317fd62f5bc58db30951e716)
2021-09-30 11:13:19 +02:00
Maximilian Bosch bc787aef50 Merge pull request #139705 from NixOS/backport-139444-to-release-21.05
[Backport release-21.05] wiki-js: 2.5.214 -> 2.5.219
2021-09-28 14:18:23 +02:00
Maximilian Bosch 1cd12e483a wiki-js: 2.5.214 -> 2.5.219
ChangeLog: https://github.com/Requarks/wiki/releases/tag/2.5.219
(cherry picked from commit e12d71e71b85bfd297ddf5f639511ff892e8fcae)
2021-09-28 07:38:14 +00:00
Maximilian Bosch ce6b39b6be Merge pull request #139238 from Ma27/backport-hedgedoc
[21.05] hedgedoc: 1.8.2 -> 1.9.0, fixes CVE-2021-39175
2021-09-28 09:33:57 +02:00
Maximilian Bosch 9c28f1f958 rnix-lsp: 0.1.0 -> 0.2.1
ChangeLog: https://github.com/nix-community/rnix-lsp/blob/v0.2.1/CHANGELOG.md#v021---2021-09-23
(cherry picked from commit 3bcfecc268071364a6a781ef1b2ad6a6655c7d57)
2021-09-27 23:32:50 +02:00
Maximilian Bosch 99749136f9 Merge pull request #139615 from NixOS/backport-139551-to-release-21.05
[Backport release-21.05] Kernels 2021-09-26
2021-09-27 14:17:16 +02:00
Maximilian Bosch 78822fca19 Merge pull request #138949 from NixOS/backport-138925-to-release-21.05
[Backport release-21.05] Kernels 2021-09-22
2021-09-27 11:52:39 +02:00
Maximilian Bosch 4370771dbc feh: 3.7.1 -> 3.7.2
ChangeLog: https://feh.finalrewind.org/archive/3.7.2/
(cherry picked from commit 646cb17cdb142128e3d90c7e718da57ef355136d)
2021-09-27 00:25:52 +00:00
Maximilian Bosch 36a3756d71 hedgedoc: fix build by re-running yarn2nix
Failing Hydra build: https://hydra.nixos.org/build/154209534

(cherry picked from commit 0a2615fe2f52c5743fd3a6cb3bd40558bdf31ee5)
2021-09-26 01:12:44 +02:00
Maximilian Bosch c20fbabd9b yarn2nix: run nix-prefetch-git with --fetch-submodules
`pkgs.fetchgit` uses `fetchSubmodules = true;` by default, however
`nix-prefetch-git` doesn't. This means that hashes for a Git repository
with fetched submodules will be wrong in `yarn.nix`.

Considering that this got unnoticed before, it seems as if this case is
an exception to a certain degree.

An exemplary problem is the last `hedgedoc` update[1] where
`js-sequence-diagrams` - a Git repo with submodules - from upstream's
package.json caused a hash mismatch. This got unnoticed because
`nix-build --check` doesn't seem to reveal these issues for fixed-output
derivations.

[1] https://github.com/NixOS/nixpkgs/pull/139238

(cherry picked from commit 46c98ae1327b7d14af1927fda971762e5ee53dfe)
2021-09-26 01:12:43 +02:00
Maximilian Bosch 9e29f211ba nixUnstable: 2.4pre20210908_3c56f62 -> 2.4pre20210922_bcd73eb
Changes: https://github.com/nixos/nix/compare/3c56f62...bcd73eb

I figured that now with an actual 2.4 release around the corner[1] we
could bump it a bit more often considering that it seems to contain
mostly bugfixes, so that upstream receives a bit more feedback.

[1] https://discourse.nixos.org/t/tweag-nix-dev-update-17/15037

(cherry picked from commit 615d368aa000279f1c63d9c5521859181b5fbfe3)
2021-09-25 15:32:55 +00:00
Maximilian Bosch 4eb0a2b3cb hedgedoc: 1.8.2 -> 1.9.0, fixes CVE-2021-39175
ChangeLog: https://github.com/hedgedoc/hedgedoc/releases/tag/1.9.0

As documented in the Nix expression, I unfortunately had to patch
`yarn.lock` manually (the `yarn.nix` result isn't affected by this). By
adding a `git+https`-prefix to
`midi "https://github.com/paulrosen/MIDI.js.git#abcjs"` in the lock-file
I ensured that `yarn` actually uses the `MIDI.js` from the offline-cache
from `yarn2nix` rather than trying to download a tarball from GitHub.

Also, this release contains a fix for CVE-2021-39175 which doesn't seem
to be backported to 1.8. To quote NVD[1]:

> In versions prior to 1.9.0, an unauthenticated attacker can inject
> arbitrary JavaScript into the speaker-notes of the slide-mode feature
> by embedding an iframe hosting the malicious code into the slides or by
> embedding the HedgeDoc instance into another page.

Even though it "only" has a medium rating by NVD (6.1), this seems
rather problematic to me (also, GitHub rates this as "High"), so it's
actually a candidate for a backport.

[1] https://nvd.nist.gov/vuln/detail/CVE-2021-39175

(cherry picked from commit 0a10c17c8d01e5f9fefa3d6dbb7802a3cbce7e23)
2021-09-23 23:33:29 +02:00
Maximilian Bosch 30442ab6d4 Merge pull request #138835 from NixOS/backport-138705-to-release-21.05
[Backport release-21.05] matrix-synapse: 1.42.0 -> 1.43.0
2021-09-21 22:41:04 +02:00
Maximilian Bosch 543cf1d543 Merge pull request #138804 from Ma27/backport-matrix-test
[21.05] matrix-synapse: enable parallel tests
2021-09-21 20:05:27 +02:00
Maximilian Bosch cb996bbf84 Merge pull request #138794 from NixOS/backport-138481-to-release-21.05
[Backport release-21.05] Kernels 2021-09-18
2021-09-21 14:06:14 +02:00
Maximilian Bosch edcae2fea3 Merge pull request #138426 from NixOS/backport-138304-to-release-21.05
[Backport release-21.05] ferdi: 5.6.0 -> 5.6.2
2021-09-18 19:00:11 +02:00
Maximilian Bosch f58d72cad1 ferdi: 5.6.0 -> 5.6.2
ChangeLogs:
* https://github.com/getferdi/ferdi/releases/tag/v5.6.1
* https://github.com/getferdi/ferdi/releases/tag/v5.6.2

(cherry picked from commit 11f81f90719943eb3e6a4672b7983b1db4f44286)
2021-09-18 14:19:14 +00:00
Maximilian Bosch 89882817b7 Merge pull request #138331 from sumnerevans/backport-137869-to-release-21.05
[21.05] element-{web,desktop}: 1.8.4 -> 1.8.5
2021-09-18 13:55:06 +02:00
Maximilian Bosch 6cc3bda369 element-desktop: fix eval 2021-09-18 13:29:56 +02:00
Maximilian Bosch 9723430b08 Merge pull request #138282 from NixOS/backport-138114-to-release-21.05
[Backport release-21.05] wireguard-tools: 1.0.20210424 -> 1.0.20210914
2021-09-17 16:41:42 +02:00
Maximilian Bosch 0e29479866 wireguard-tools: 1.0.20210424 -> 1.0.20210914
ChangeLog: https://lists.zx2c4.com/pipermail/wireguard/2021-September/007049.html

This doesn't seem to have any implications for NixOS users, but appears
to have a few fixes that seem relevant to Darwin users including:

    wg-quick: darwin: account for "link#XX" gateways

    On macOS, under specific configurations, the `netstat -nr -f inet` and
    `netstat -nr -f inet6` outputs break gateway collection.

(cherry picked from commit d37ab4d0ee6aeb3187a0f0042cfca966c3ef2f78)
2021-09-17 13:55:18 +00:00
Maximilian Bosch cdc1eaf2f4 Merge pull request #138162 from NixOS/backport-138149-to-release-21.05
[Backport release-21.05] Kernels 2021-09-16
2021-09-17 15:51:34 +02:00
Maximilian Bosch 626ae0eeba element-desktop: apply patch to run on Wayland (#137666)
See upstream PR#261[1] for further reference. Previously, the
`enable-features`-setting was entirely discarded due to an earlier
regression resulting in an attempt to start `element-desktop` in
Wayland-mode without all necessary components.

Closes #137377

[1] https://github.com/vector-im/element-desktop/pull/261

(cherry picked from commit 5a0d0ec1cf90aae4354a97a2afaff079605ffc82)
2021-09-14 10:30:05 +02:00
Maximilian Bosch 37eb0155b8 Merge pull request #137663 from NixOS/backport-137645-to-release-21.05
[Backport release-21.05] element-{web,desktop}: 1.8.2 -> 1.8.4
2021-09-13 18:58:08 +02:00
Maximilian Bosch f3510c5ee3 element-desktop: 1.8.2 -> 1.8.4
ChangeLog: https://github.com/vector-im/element-desktop/releases/tag/v1.8.4
(cherry picked from commit c81983ec9f228b9b1405f492429a33cb3976201b)
2021-09-13 16:18:25 +00:00
Maximilian Bosch 9a984970b6 element-web: 1.8.2 -> 1.8.4
ChangeLog: https://github.com/vector-im/element-web/releases/tag/v1.8.4
(cherry picked from commit 55d25c13bda5daa4f83f6c1965e4a263a3a84d74)
2021-09-13 16:18:25 +00:00
Maximilian Bosch 85cdc98680 php80: 8.0.8 -> 8.0.10
ChangeLog: https://www.php.net/ChangeLog-8.php#8.0.10

(cherry picked from commit ab8017a2dd84af08ebfb4b9e43964013b3351f65)
2021-09-13 16:09:39 +02:00
Maximilian Bosch 042bd4f47b nixos/kernel: add 5.14 to kernel test-suite
Same as 2444c11431a37e04de025b63f6a12bdd05d2f4c1 on master.
2021-09-12 23:15:14 +02:00
Maximilian Bosch 92109a3f58 Merge pull request #137554 from NixOS/backport-137132-to-release-21.05
[Backport release-21.05] nixos/privacyidea: use `sudo(8)` that's configured via the module
2021-09-12 22:54:39 +02:00
Maximilian Bosch 5a17bb5d2b nixos/privacyidea: use sudo(8) that's configured via the module
(cherry picked from commit 69e75754d57b4c9785058d663daa3817745930aa)
2021-09-12 18:13:58 +00:00
Maximilian Bosch cedaaad5f5 Merge pull request #137545 from NixOS/backport-135751-to-release-21.05
[Backport release-21.05] nixos/promtail: Allow write access to positions file if not in CacheDirectory
2021-09-12 18:56:08 +02:00
Maximilian Bosch bb1ccebd17 Merge pull request #137434 from NixOS/backport-137281-to-release-21.05
[Backport release-21.05] Kernels 2021-09-10
2021-09-12 18:22:24 +02:00
Maximilian Bosch ee5a613395 Merge pull request #137266 from NixOS/backport-137187-to-release-21.05
[Backport release-21.05] Kernels 2021-09-09
2021-09-12 18:21:53 +02:00
Maximilian Bosch 1c67ae83db Merge pull request #137409 from NixOS/backport-136463-to-release-21.05
[Backport release-21.05] nixUnstable: 2.4pre20210802_47e96bb -> 2.4pre20210908_3c56f62
2021-09-12 18:20:13 +02:00
Maximilian Bosch bad0efd147 Merge pull request #137524 from NixOS/backport-137510-to-release-21.05
[Backport release-21.05] wiki-js: 2.5.201 -> 2.5.214
2021-09-12 18:19:27 +02:00
Maximilian Bosch caef9da135 wiki-js: 2.5.201 -> 2.5.214
ChangeLog: https://github.com/Requarks/wiki/releases/tag/2.5.214
(cherry picked from commit 75eaccdcbc79f908902638bbea4aef33ebdad712)
2021-09-12 12:51:18 +00:00
Maximilian Bosch 21c1c063da nixUnstable: 2.4pre20210802_47e96bb -> 2.4pre20210908_3c56f62
Main motivation for is the bugfix regarding flake-follows and
path-inputs[1]. An overview over all changes - mostly bugfixes -
can be found on GitHub[2].

[1] https://github.com/NixOS/nix/pull/4641
[2] https://github.com/NixOS/nix/compare/47e96bb...3c56f62093601143838af923195f630d8ffae2d4

(cherry picked from commit 04b552c32312e8067ab5e3948513ce4624f35c4d)
2021-09-11 17:07:42 +00:00
Maximilian Bosch 276671abd1 Merge pull request #137130 from herrwiese/backport-135335-to-release-21.05
[backport release-21.05] grocy: 3.1.0 -> 3.1.1
2021-09-08 23:15:38 +02:00
Maximilian Bosch c795f5af9f Merge pull request #137084 from NixOS/backport-136388-to-release-21.05
[Backport release-21.05] matrix-synapse: 1.41.1 -> 1.42.0
2021-09-08 17:53:23 +02:00
Maximilian Bosch 074ce6058c Merge pull request #136495 from risicle/ris-squashfs-CVE-2021-40153-r21.05
[21.05] squashfsTools: add patch for CVE-2021-40153
2021-09-04 19:09:55 +02:00
Maximilian Bosch de8a6369e1 Merge pull request #136679 from NixOS/backport-136598-to-release-21.05
[Backport release-21.05] Kernels 2021-09-03
2021-09-04 19:06:43 +02:00
Maximilian Bosch a75daa8c05 Merge pull request #136481 from sumnerevans/backport-136311-to-release-21.05-2
[Backport release-21.05] element-{web,desktop}: 1.8.1 -> 1.8.2
2021-09-04 14:58:57 +02:00
Maximilian Bosch f76e9fe351 Merge pull request #136466 from NixOS/backport-136462-to-release-21.05
[Backport release-21.05] strace: 5.13 -> 5.14
2021-09-04 14:54:49 +02:00
Maximilian Bosch a6800d5c8e Merge pull request #136235 from NixOS/backport-136150-to-release-21.05
[Backport release-21.05] linux_latest: 5.13.13 -> 5.14
2021-09-04 13:42:13 +02:00
Maximilian Bosch 2960083854 strace: 5.13 -> 5.14
ChangeLog: https://github.com/strace/strace/releases/tag/v5.14
(cherry picked from commit e58cba3ca4a4a29800f1780c30cbe0c46a76efdd)
2021-09-02 12:52:40 +00:00
Maximilian Bosch 796e823083 Merge pull request #134492 from NixOS/backport-134335-to-release-21.05
[Backport release-21.05] element-{web,desktop}: 1.7.34 -> 1.8.1
2021-09-02 13:44:14 +02:00
Maximilian Bosch 26ca44909e Merge pull request #136327 from NixOS/backport-135958-to-release-21.05
[Backport release-21.05] nixos/nextcloud: add some notes for `Error: Command "upgrade" is not defined.`
2021-08-31 21:48:51 +02:00
Maximilian Bosch ebd597d2f3 nixos/nextcloud: apply doc fixes suggested by fabaff
Co-authored-by: Fabian Affolter <mail@fabian-affolter.ch>
(cherry picked from commit 767bb4e4bbb9a8d06d4c3cbc14092902c2465f98)
2021-08-31 18:54:20 +00:00
Maximilian Bosch c19b0bf9de nixos/nextcloud: add some notes for Error: Command "upgrade" is not defined.
This error occurs if `nextcloud-occ maintenance:install` fails and the
`upgrade` command is attempted to be executed afterwards.

Due to the nature of the installer we can't do much about it, so I guess
it makes sense to add some notes about it. The other notes in the
`Pitfalls`-section are semantically a list of different topics, so I
changed that accordingly now.

Closes #111175

(cherry picked from commit 561418f996fc015f4db48b1c9b7c31338cb280d9)
2021-08-31 18:54:20 +00:00