Nikolay Amiantov
69407cb013
firewall service: respect marks in rpfilter ( #39054 )
...
This allows one to add rules which change a packet's routing table:
iptables -t raw -I PREROUTING 1 -m set --match-set myset src -j MARK --set-mark 2
ip rule add fwmark 2 table 1 priority 1000
ip route add default dev wg0 table 1
to the beginning of raw table PREROUTING chain, and still have rpfilter.
2018-08-29 20:50:53 +02:00
Nikolay Amiantov
e711da345c
base profile: add mkpasswd to system packages
...
Allows the user to generate password hashes for the installed system easier.
2018-05-09 00:20:02 +03:00
Nikolay Amiantov
a08645e9be
nginx module: add upstream extraConfig
2018-05-08 16:32:11 +03:00
Nikolay Amiantov
61a87491dc
pacparser: init at 1.3.7
2018-05-08 16:27:55 +03:00
Nikolay Amiantov
d541169e1a
wesnoth: unite with wesnoth-dev
...
There's no Wesnoth development version now.
2018-05-08 16:06:30 +03:00
Nikolay Amiantov
bea11a34fb
haskellPackages.encoding: fix build with Cabal 2.0
2018-04-26 17:01:14 +03:00
Nikolay Amiantov
b827307c52
dante service: default for logoutput
...
Log to journald via syslog by default; also improve option type.
2018-04-26 13:57:11 +03:00
Nikolay Amiantov
bd140fb41d
dante service: restart only on failure
...
Normal exit code shouldn't result in a restart.
2018-04-26 13:57:11 +03:00
Nikolay Amiantov
1f1124859d
dante: add extra build inputs
...
Add PAM, SASL and UPnP support.
2018-04-26 13:57:11 +03:00
Nikolay Amiantov
8460769e88
pam: build with userdb support
2018-04-26 13:56:17 +03:00
Nikolay Amiantov
4b0638394d
db: split outputs
2018-04-26 13:56:17 +03:00
Nikolay Amiantov
7c90a86770
wireguard service: use scripts instead of ExecStarts/Stops
...
This is more in line with what other services do; also looks cleaner.
It changes configuration entries for pre-and post-hooks type to lines from
lists of strings which are more logical for them; coersion is provided for
backwards compatibility.
Finally, add several steps to improve robustness:
1. Load kernel module on start if not loaded;
2. Don't remove wireguard interface on start; it is removed on service stop. If
it's not something is wrong.
2018-04-22 13:33:11 -05:00
Nikolay Amiantov
15bfee85f3
impureUseNativeOptimizations: add stdenv adapter
...
This allows one to force a compiler to use native machine optimizations. This
goes contrary to all the usual guarantees of Nix and so should be used only by
end-user and only in specific cases when they know what are they doing.
In my case this is needed to get a noticeable FPS boost in RPCS3 which is very
CPU-hungry PlayStation 3 emulator.
2018-04-17 13:12:07 +03:00
Nikolay Amiantov
4fc0b4edca
acme service: generate a CA for self-signed certificate
...
This is needed because simp_le expects two certificates in fullchain.pem, leading to error:
> Not enough PEM encoded messages were found in fullchain.pem; at least 2 were expected, found 1.
We now create a CA and sign the key with it instead, providing correct fullchain.pem.
Also cleanup service a bit -- use PATH and a private temporary directory (which
is more suitable).
2018-04-17 12:53:29 +03:00
Nikolay Amiantov
b81aa02800
firewall service: run stop commands in reload
...
Do cleanup of user-created additional rules.
Of course it'd be much better to just use iptables-{save,restore} for
declarative management, but as it's still not there...
2018-04-17 12:41:36 +03:00
Nikolay Amiantov
803dca34bb
Merge pull request #38896 from abbradar/shadowsocks
...
Update shadowsocks-libuv and add shadowsocks service
2018-04-13 15:55:55 +03:00
Nikolay Amiantov
dccd5a8601
dnscache service: cleanup and add forwardOnly
2018-04-13 15:38:13 +03:00
Nikolay Amiantov
98270cb959
dnscache service: fix bug with several assigned DNS servers
2018-04-13 15:35:03 +03:00
Nikolay Amiantov
f7651b35b8
shadowsocks service: init
2018-04-13 13:39:21 +03:00
Nikolay Amiantov
ee7351d889
shadowsocks-libev: 2.5.5 -> 3.1.3
2018-04-13 13:39:20 +03:00
Nikolay Amiantov
24827a58fb
python.pkgs.sleekxmpp: fix failure to verify a certificate
2018-04-12 11:35:18 +03:00
Nikolay Amiantov
5107b3f7b3
sleekxmpp: fix SSL certificates checks
2018-04-12 04:16:16 +03:00
Nikolay Amiantov
2483a0d0c1
Merge pull request #33999 from peterhoeg/f/inno
...
innoextract: support extraction of multi-file archives
2018-04-11 16:46:28 +03:00
Nikolay Amiantov
650d8c93a1
tensorflow: add a binary wheel release for Darwin
2018-04-05 15:00:18 +03:00
Nikolay Amiantov
37546be900
nodePackages.parsoid: pin service-runner to 2.3.0
...
service-runner had a backwards incompatible update, and parsoid 0.9.0
doesn't work with current stable MediaWiki. Instead use as a source
a repository with 0.8.0 and pinned service-runner version.
2018-04-02 22:38:40 +03:00
Nikolay Amiantov
e410315f18
gajim: 1.0.0 -> 1.0.1
2018-04-02 15:02:39 +03:00
Nikolay Amiantov
5e7b710a71
glmark2: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
7998c18a7b
xwinmosaic: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
82712d2d0b
kmscube: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
e47482ddfe
mar1d: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
8330fdaa09
wlroots: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
9bcc905eda
wlc: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
c6a3380445
kdeApplications.kgamma5: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
e86ca61815
lxqt.lxqt-panel: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
7d9969cb51
lumina: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
133c5cee44
enlightenment.efl: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
7fec6c8cd3
weston: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
8d0f470984
kvfb: fix build
2018-03-28 16:25:14 +03:00
Nikolay Amiantov
0402877344
systemd: disable EFI support on AArch64
...
It seemingly isn't used by NixOS and currently breaks AArch64 build.
2018-03-28 15:40:50 +03:00
Nikolay Amiantov
67adb994bc
linuxPackages.nvidia_x11_legacy173: drop mentions
...
Thanks to pbogdan for noticing this. I'd like to have a "no direct commit"
policy implemented for my own good ^_^".
Tested with ofborg's outpaths.nix
2018-03-27 17:21:11 +03:00
Nikolay Amiantov
4b67702e5b
linuxPackages.nvidia_x11_legacy304.settings: force i686
...
This legacy settings application doesn't support x86_64.
2018-03-27 16:43:54 +03:00
Nikolay Amiantov
00e5b20d17
linuxPackages.nvidia_x11: build only for x86 Linux
2018-03-27 16:43:53 +03:00
Nikolay Amiantov
25ac79647c
linuxPackages.nvidia_x11_legacy173: drop
...
There's no kernel in nixpkgs suitable for this old driver -- tested with 4.4.
2018-03-27 16:43:53 +03:00
Nikolay Amiantov
9258cea7e0
libva1: full by default
...
This follows similar changes for libva. Also move `libva-full` to aliases.nix
with an intent to deprecate it later.
2018-03-26 14:11:07 +03:00
Nikolay Amiantov
7fe170baff
bumblebee: remove X libraries from LD_LIBRARY_PATH
...
They seem to no longer be needed.
2018-03-26 14:02:06 +03:00
Nikolay Amiantov
9cdaddf3a0
steam: add libGL to the environment
...
Also remove duplicate libGLU.
2018-03-26 14:02:06 +03:00
Nikolay Amiantov
96a76b8b9c
primusLib: fix path to libglapi
2018-03-26 14:02:06 +03:00
Nikolay Amiantov
cdf1079665
opengl service: don't override mesa non-drivers in runtime
2018-03-26 14:02:06 +03:00
Nikolay Amiantov
4b8e3c66d9
intel-gpu-tools: enable parallel building
2018-03-26 14:02:06 +03:00
Nikolay Amiantov
6493261bf2
cogl: fix build
2018-03-26 14:02:05 +03:00
Nikolay Amiantov
564f9be78f
fbida: fix build
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
a5b2e0277a
qt5.qtwebengine: fix build
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
db51b836b2
gtk3: fix build
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
220d0decaf
qemu-vm service: quote arguments in qemu runner
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
65da25997d
xorg.xorgserver: don't use XORG_DRI_DRIVER_PATH
...
Our patch which adds this envvar has been removed.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
4f0b59de9a
xserver service: cleanup LD_LIBRARY_PATH
...
X libraries in LD_LIBRARY_PATH seem to not be needed anymore.
I've tracked this addition as far as I could
(02cef04c81 ) and they seem to be added for unfree
NVIDIA and ATI drivers but at least for NVIDIA they are not needed anymore. We
can add them with patchelf instead if it turns out to be the case with ATI.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
a798ec30f9
xorg: update autogeneration script
...
* Fix shebang so that it's usable on NixOS;
* Enable warnings (they were enabled with Perl flag before);
* Switch from mesa to libGL.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
22671aa031
glxinfo: fix build
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
e2d59e06bf
qemu: add virgl renderer support
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
1de04e45cb
qemu: add OpenGL support
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
5f44faaca9
qemu: use SDL2 as SDL library
...
This is needed for OpenGL support.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
1e35a9cc06
virglrenderer: add libdrm as dependency
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
d61e6c5ed7
opengl service: move options under common hardware.opengl tree
...
Purely cosmetic.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
0934c8f49b
nvidia service: rely on libglvnd
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
f362cf23d7
qt4: remove OpenGL absolute path patch
...
In resulting derivation there's no mention of this path anyway (checked with grep).
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
6bf1421f13
treewide: refactor to use libglvnd
...
* Implement libGL as a symlink package which uses libraries from libglvnd and
headers from Mesa (since ones from libglvnd are outdated).
* Use libGL_driver.driverLink treewide; add FHS paths where possible.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
803e87aa1e
mesa_noglu: build virgl driver
...
It's used for 3D acceleration inside qemu.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
03a6766a6d
mesa_noglu: build with libglvnd
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
6467c94c8d
libglvnd: 2016-12-22 -> 1.0.0
...
Move driverLink attribute there.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov
6b9771e4a7
systemd: use stable tree
...
This fixes a bug with changed qemu network interface names and also generally
should be preferred to using a release tag.
2018-03-23 14:43:31 +01:00
Nikolay Amiantov
7a77439b03
libgpg-error: fix on ARM
2018-03-23 02:37:02 +03:00
Nikolay Amiantov
91072b7b23
Merge pull request #37647 from abbradar/systemd-238
...
[WIP] Update systemd and unbreak staging
2018-03-23 01:11:32 +03:00
Nikolay Amiantov
0ccab4946d
systemd: 237 -> 238
2018-03-22 22:37:26 +03:00
Nikolay Amiantov
26256ead32
btrfs-progs: fix build with new e2fsprogs
2018-03-22 22:16:19 +03:00
Nikolay Amiantov
e31c3f8b9f
kernel: enable CGROUP_NET_PRIO
...
It's required by systemd 238 because of a bug, otherwise systemd aborts.
2018-03-22 22:15:37 +03:00
Nikolay Amiantov
b1b4c6c4eb
pyqt5: propagate Qt dependencies
...
This is so that Qt user environment packages are also propagated. Fixes
Electrum environment installations when no other Qt applications are installed.
Added `dev` output so that closure size won't explode.
2018-03-21 23:36:18 +03:00
Nikolay Amiantov
eda6b9553b
gajim: 0.16.9 -> 1.0.0
...
Massive update.
2018-03-21 04:11:24 +03:00
Nikolay Amiantov
cf981d3e2b
python.pkgs.nbxmpp: 0.6.3 -> 0.6.4
2018-03-21 04:11:22 +03:00
Nikolay Amiantov
ab67f36e73
xdg_utils: fix xdg-screensaver
2018-03-20 22:20:23 +03:00
Nikolay Amiantov
792161895f
steam: add dependencies for Surviving Mars
2018-03-20 22:20:14 +03:00
Nikolay Amiantov
2ff2045053
Merge pull request #37100 from abbradar/nvidiabl
...
nvidiabl: 0.87 -> 2017-09-26
2018-03-16 16:45:15 +03:00
Nikolay Amiantov
1c30c8dd55
Merge pull request #36371 from abbradar/fonts-update
...
Update fontconfig and freetype
2018-03-16 15:29:37 +03:00
Nikolay Amiantov
9c8137ca81
steam: improvements for native runtime
...
* Update dependencies using steam-native-runtime from Arch Linux as a
reference.
* Remove native-only Steam Runtime, just use installed libraries
instead.
* Mark native-only Steam as broken (due to segfault inside D-Bus). Seems it was
already broken for a long time. Doesn't apply to steam-run.
* Some cleanups for chrootenv.
2018-03-16 02:59:07 +03:00
Nikolay Amiantov
a4a04528e4
libva1: init at 1.7.3
2018-03-16 02:59:07 +03:00
Nikolay Amiantov
7cf6df8903
nvidiabl: 0.87 -> 2017-09-26
...
Fix build on newer kernels. Fixes #36356 .
Thanks to yorickvP for suggestions and maintainership.
2018-03-15 17:15:57 +03:00
Nikolay Amiantov
6b2d303b06
splix: move to DRVs over PPDs
...
Also enable JBIG support for newer printers.
2018-03-15 04:13:03 +03:00
Nikolay Amiantov
dc2104d132
sleekxmpp: 1.3.1 -> 1.3.3
2018-03-14 20:45:31 +03:00
Nikolay Amiantov
d7470c1f1e
android-studio: fix GTK LaF
...
Closes #36887 .
2018-03-13 16:13:18 +03:00
Nikolay Amiantov
28264de9fc
warsow: add missing patch
2018-03-13 01:11:56 +03:00
Nikolay Amiantov
bef8321f9f
kega-fusion: init at 3.63x
2018-03-13 01:08:50 +03:00
Nikolay Amiantov
5ed883a40b
warsow: 1.03 -> 2.1.2
...
Fix build, split into engine and game to build engine on Hydra.
2018-03-13 01:08:50 +03:00
Nikolay Amiantov
2dfbef2764
dfhack: fix checksum
...
Fixes #36819 .
2018-03-13 01:06:47 +03:00
Nikolay Amiantov
5e9e30799b
xgboost: disable on AArch64
...
It requires SSE2.
2018-03-13 01:02:28 +03:00
Nikolay Amiantov
8332b7aef9
steam: don't add zoneinfo manually
...
We already have this done for FHS environments in general.
2018-03-11 02:14:49 +03:00
Nikolay Amiantov
9db2a3e638
buildFHSEnv: export TZDIR
...
This is needed since NixOS keeps tzdata in non-standard /etc/zoneinfo path.
2018-03-11 02:14:49 +03:00
Nikolay Amiantov
f7c2288cfc
zandronum: sound improvements
...
* Update fmod version to one with PulseAudio support;
* Dynamically link FluidSynth instead of using LD_LIBRARY_PATH;
* Use system libgme.
Fixes sound on some machines.
2018-03-11 00:02:46 +03:00
Nikolay Amiantov
94f0ef6628
buildFHSEnv: fix compiler search paths
...
Fixes OpenWrt compilation.
2018-03-10 23:57:12 +03:00
Nikolay Amiantov
948533180f
double-conversion: hopefully fix on Darwin
2018-03-09 16:35:10 +03:00
Nikolay Amiantov
325dece6a0
slade: disable on AArch64
...
Wants SSE.
2018-03-09 16:35:10 +03:00
Nikolay Amiantov
1890fe359a
linuxPackages.bbswitch: disable on AArch64
...
It makes no sense on non-x86 platforms.
2018-03-09 16:35:10 +03:00