Commit Graph
100 Commits
Author SHA1 Message Date
Nikolay Amiantov 69407cb013 firewall service: respect marks in rpfilter (#39054)
This allows one to add rules which change a packet's routing table:

iptables -t raw -I PREROUTING 1 -m set --match-set myset src -j MARK --set-mark 2
ip rule add fwmark 2 table 1 priority 1000
ip route add default dev wg0 table 1

to the beginning of raw table PREROUTING chain, and still have rpfilter.
2018-08-29 20:50:53 +02:00
Nikolay Amiantov e711da345c base profile: add mkpasswd to system packages
Allows the user to generate password hashes for the installed system easier.
2018-05-09 00:20:02 +03:00
Nikolay Amiantov a08645e9be nginx module: add upstream extraConfig 2018-05-08 16:32:11 +03:00
Nikolay Amiantov 61a87491dc pacparser: init at 1.3.7 2018-05-08 16:27:55 +03:00
Nikolay Amiantov d541169e1a wesnoth: unite with wesnoth-dev
There's no Wesnoth development version now.
2018-05-08 16:06:30 +03:00
Nikolay Amiantov bea11a34fb haskellPackages.encoding: fix build with Cabal 2.0 2018-04-26 17:01:14 +03:00
Nikolay Amiantov b827307c52 dante service: default for logoutput
Log to journald via syslog by default; also improve option type.
2018-04-26 13:57:11 +03:00
Nikolay Amiantov bd140fb41d dante service: restart only on failure
Normal exit code shouldn't result in a restart.
2018-04-26 13:57:11 +03:00
Nikolay Amiantov 1f1124859d dante: add extra build inputs
Add PAM, SASL and UPnP support.
2018-04-26 13:57:11 +03:00
Nikolay Amiantov 8460769e88 pam: build with userdb support 2018-04-26 13:56:17 +03:00
Nikolay Amiantov 4b0638394d db: split outputs 2018-04-26 13:56:17 +03:00
Nikolay Amiantov 7c90a86770 wireguard service: use scripts instead of ExecStarts/Stops
This is more in line with what other services do; also looks cleaner.
It changes configuration entries for pre-and post-hooks type to lines from
lists of strings which are more logical for them; coersion is provided for
backwards compatibility.

Finally, add several steps to improve robustness:

1. Load kernel module on start if not loaded;
2. Don't remove wireguard interface on start; it is removed on service stop. If
   it's not something is wrong.
2018-04-22 13:33:11 -05:00
Nikolay Amiantov 15bfee85f3 impureUseNativeOptimizations: add stdenv adapter
This allows one to force a compiler to use native machine optimizations. This
goes contrary to all the usual guarantees of Nix and so should be used only by
end-user and only in specific cases when they know what are they doing.

In my case this is needed to get a noticeable FPS boost in RPCS3 which is very
CPU-hungry PlayStation 3 emulator.
2018-04-17 13:12:07 +03:00
Nikolay Amiantov 4fc0b4edca acme service: generate a CA for self-signed certificate
This is needed because simp_le expects two certificates in fullchain.pem, leading to error:

> Not enough PEM encoded messages were found in fullchain.pem; at least 2 were expected, found 1.

We now create a CA and sign the key with it instead, providing correct fullchain.pem.

Also cleanup service a bit -- use PATH and a private temporary directory (which
is more suitable).
2018-04-17 12:53:29 +03:00
Nikolay Amiantov b81aa02800 firewall service: run stop commands in reload
Do cleanup of user-created additional rules.

Of course it'd be much better to just use iptables-{save,restore} for
declarative management, but as it's still not there...
2018-04-17 12:41:36 +03:00
Nikolay Amiantov 803dca34bb Merge pull request #38896 from abbradar/shadowsocks
Update shadowsocks-libuv and add shadowsocks service
2018-04-13 15:55:55 +03:00
Nikolay Amiantov dccd5a8601 dnscache service: cleanup and add forwardOnly 2018-04-13 15:38:13 +03:00
Nikolay Amiantov 98270cb959 dnscache service: fix bug with several assigned DNS servers 2018-04-13 15:35:03 +03:00
Nikolay Amiantov f7651b35b8 shadowsocks service: init 2018-04-13 13:39:21 +03:00
Nikolay Amiantov ee7351d889 shadowsocks-libev: 2.5.5 -> 3.1.3 2018-04-13 13:39:20 +03:00
Nikolay Amiantov 24827a58fb python.pkgs.sleekxmpp: fix failure to verify a certificate 2018-04-12 11:35:18 +03:00
Nikolay Amiantov 5107b3f7b3 sleekxmpp: fix SSL certificates checks 2018-04-12 04:16:16 +03:00
Nikolay Amiantov 2483a0d0c1 Merge pull request #33999 from peterhoeg/f/inno
innoextract: support extraction of multi-file archives
2018-04-11 16:46:28 +03:00
Nikolay Amiantov 650d8c93a1 tensorflow: add a binary wheel release for Darwin 2018-04-05 15:00:18 +03:00
Nikolay Amiantov 37546be900 nodePackages.parsoid: pin service-runner to 2.3.0
service-runner had a backwards incompatible update, and parsoid 0.9.0
doesn't work with current stable MediaWiki. Instead use as a source
a repository with 0.8.0 and pinned service-runner version.
2018-04-02 22:38:40 +03:00
Nikolay Amiantov e410315f18 gajim: 1.0.0 -> 1.0.1 2018-04-02 15:02:39 +03:00
Nikolay Amiantov 5e7b710a71 glmark2: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 7998c18a7b xwinmosaic: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 82712d2d0b kmscube: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov e47482ddfe mar1d: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 8330fdaa09 wlroots: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 9bcc905eda wlc: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov c6a3380445 kdeApplications.kgamma5: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov e86ca61815 lxqt.lxqt-panel: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 7d9969cb51 lumina: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 133c5cee44 enlightenment.efl: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 7fec6c8cd3 weston: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 8d0f470984 kvfb: fix build 2018-03-28 16:25:14 +03:00
Nikolay Amiantov 0402877344 systemd: disable EFI support on AArch64
It seemingly isn't used by NixOS and currently breaks AArch64 build.
2018-03-28 15:40:50 +03:00
Nikolay Amiantov 67adb994bc linuxPackages.nvidia_x11_legacy173: drop mentions
Thanks to pbogdan for noticing this. I'd like to have a "no direct commit"
policy implemented for my own good ^_^".

Tested with ofborg's outpaths.nix
2018-03-27 17:21:11 +03:00
Nikolay Amiantov 4b67702e5b linuxPackages.nvidia_x11_legacy304.settings: force i686
This legacy settings application doesn't support x86_64.
2018-03-27 16:43:54 +03:00
Nikolay Amiantov 00e5b20d17 linuxPackages.nvidia_x11: build only for x86 Linux 2018-03-27 16:43:53 +03:00
Nikolay Amiantov 25ac79647c linuxPackages.nvidia_x11_legacy173: drop
There's no kernel in nixpkgs suitable for this old driver -- tested with 4.4.
2018-03-27 16:43:53 +03:00
Nikolay Amiantov 9258cea7e0 libva1: full by default
This follows similar changes for libva. Also move `libva-full` to aliases.nix
with an intent to deprecate it later.
2018-03-26 14:11:07 +03:00
Nikolay Amiantov 7fe170baff bumblebee: remove X libraries from LD_LIBRARY_PATH
They seem to no longer be needed.
2018-03-26 14:02:06 +03:00
Nikolay Amiantov 9cdaddf3a0 steam: add libGL to the environment
Also remove duplicate libGLU.
2018-03-26 14:02:06 +03:00
Nikolay Amiantov 96a76b8b9c primusLib: fix path to libglapi 2018-03-26 14:02:06 +03:00
Nikolay Amiantov cdf1079665 opengl service: don't override mesa non-drivers in runtime 2018-03-26 14:02:06 +03:00
Nikolay Amiantov 4b8e3c66d9 intel-gpu-tools: enable parallel building 2018-03-26 14:02:06 +03:00
Nikolay Amiantov 6493261bf2 cogl: fix build 2018-03-26 14:02:05 +03:00
Nikolay Amiantov 564f9be78f fbida: fix build 2018-03-26 14:01:49 +03:00
Nikolay Amiantov a5b2e0277a qt5.qtwebengine: fix build 2018-03-26 14:01:49 +03:00
Nikolay Amiantov db51b836b2 gtk3: fix build 2018-03-26 14:01:49 +03:00
Nikolay Amiantov 220d0decaf qemu-vm service: quote arguments in qemu runner 2018-03-26 14:01:49 +03:00
Nikolay Amiantov 65da25997d xorg.xorgserver: don't use XORG_DRI_DRIVER_PATH
Our patch which adds this envvar has been removed.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov 4f0b59de9a xserver service: cleanup LD_LIBRARY_PATH
X libraries in LD_LIBRARY_PATH seem to not be needed anymore.
I've tracked this addition as far as I could
(02cef04c81) and they seem to be added for unfree
NVIDIA and ATI drivers but at least for NVIDIA they are not needed anymore. We
can add them with patchelf instead if it turns out to be the case with ATI.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov a798ec30f9 xorg: update autogeneration script
* Fix shebang so that it's usable on NixOS;
* Enable warnings (they were enabled with Perl flag before);
* Switch from mesa to libGL.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov 22671aa031 glxinfo: fix build 2018-03-26 14:01:49 +03:00
Nikolay Amiantov e2d59e06bf qemu: add virgl renderer support 2018-03-26 14:01:49 +03:00
Nikolay Amiantov 1de04e45cb qemu: add OpenGL support 2018-03-26 14:01:49 +03:00
Nikolay Amiantov 5f44faaca9 qemu: use SDL2 as SDL library
This is needed for OpenGL support.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov 1e35a9cc06 virglrenderer: add libdrm as dependency 2018-03-26 14:01:49 +03:00
Nikolay Amiantov d61e6c5ed7 opengl service: move options under common hardware.opengl tree
Purely cosmetic.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov 0934c8f49b nvidia service: rely on libglvnd 2018-03-26 14:01:49 +03:00
Nikolay Amiantov f362cf23d7 qt4: remove OpenGL absolute path patch
In resulting derivation there's no mention of this path anyway (checked with grep).
2018-03-26 14:01:49 +03:00
Nikolay Amiantov 6bf1421f13 treewide: refactor to use libglvnd
* Implement libGL as a symlink package which uses libraries from libglvnd and
  headers from Mesa (since ones from libglvnd are outdated).
* Use libGL_driver.driverLink treewide; add FHS paths where possible.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov 803e87aa1e mesa_noglu: build virgl driver
It's used for 3D acceleration inside qemu.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov 03a6766a6d mesa_noglu: build with libglvnd 2018-03-26 14:01:49 +03:00
Nikolay Amiantov 6467c94c8d libglvnd: 2016-12-22 -> 1.0.0
Move driverLink attribute there.
2018-03-26 14:01:49 +03:00
Nikolay Amiantov 6b9771e4a7 systemd: use stable tree
This fixes a bug with changed qemu network interface names and also generally
should be preferred to using a release tag.
2018-03-23 14:43:31 +01:00
Nikolay Amiantov 7a77439b03 libgpg-error: fix on ARM 2018-03-23 02:37:02 +03:00
Nikolay Amiantov 91072b7b23 Merge pull request #37647 from abbradar/systemd-238
[WIP] Update systemd and unbreak staging
2018-03-23 01:11:32 +03:00
Nikolay Amiantov 0ccab4946d systemd: 237 -> 238 2018-03-22 22:37:26 +03:00
Nikolay Amiantov 26256ead32 btrfs-progs: fix build with new e2fsprogs 2018-03-22 22:16:19 +03:00
Nikolay Amiantov e31c3f8b9f kernel: enable CGROUP_NET_PRIO
It's required by systemd 238 because of a bug, otherwise systemd aborts.
2018-03-22 22:15:37 +03:00
Nikolay Amiantov b1b4c6c4eb pyqt5: propagate Qt dependencies
This is so that Qt user environment packages are also propagated. Fixes
Electrum environment installations when no other Qt applications are installed.

Added `dev` output so that closure size won't explode.
2018-03-21 23:36:18 +03:00
Nikolay Amiantov eda6b9553b gajim: 0.16.9 -> 1.0.0
Massive update.
2018-03-21 04:11:24 +03:00
Nikolay Amiantov cf981d3e2b python.pkgs.nbxmpp: 0.6.3 -> 0.6.4 2018-03-21 04:11:22 +03:00
Nikolay Amiantov ab67f36e73 xdg_utils: fix xdg-screensaver 2018-03-20 22:20:23 +03:00
Nikolay Amiantov 792161895f steam: add dependencies for Surviving Mars 2018-03-20 22:20:14 +03:00
Nikolay Amiantov 2ff2045053 Merge pull request #37100 from abbradar/nvidiabl
nvidiabl: 0.87 -> 2017-09-26
2018-03-16 16:45:15 +03:00
Nikolay Amiantov 1c30c8dd55 Merge pull request #36371 from abbradar/fonts-update
Update fontconfig and freetype
2018-03-16 15:29:37 +03:00
Nikolay Amiantov 9c8137ca81 steam: improvements for native runtime
* Update dependencies using steam-native-runtime from Arch Linux as a
  reference.
* Remove native-only Steam Runtime, just use installed libraries
  instead.
* Mark native-only Steam as broken (due to segfault inside D-Bus). Seems it was
  already broken for a long time. Doesn't apply to steam-run.
* Some cleanups for chrootenv.
2018-03-16 02:59:07 +03:00
Nikolay Amiantov a4a04528e4 libva1: init at 1.7.3 2018-03-16 02:59:07 +03:00
Nikolay Amiantov 7cf6df8903 nvidiabl: 0.87 -> 2017-09-26
Fix build on newer kernels. Fixes #36356.

Thanks to yorickvP for suggestions and maintainership.
2018-03-15 17:15:57 +03:00
Nikolay Amiantov 6b2d303b06 splix: move to DRVs over PPDs
Also enable JBIG support for newer printers.
2018-03-15 04:13:03 +03:00
Nikolay Amiantov dc2104d132 sleekxmpp: 1.3.1 -> 1.3.3 2018-03-14 20:45:31 +03:00
Nikolay Amiantov d7470c1f1e android-studio: fix GTK LaF
Closes #36887.
2018-03-13 16:13:18 +03:00
Nikolay Amiantov 28264de9fc warsow: add missing patch 2018-03-13 01:11:56 +03:00
Nikolay Amiantov bef8321f9f kega-fusion: init at 3.63x 2018-03-13 01:08:50 +03:00
Nikolay Amiantov 5ed883a40b warsow: 1.03 -> 2.1.2
Fix build, split into engine and game to build engine on Hydra.
2018-03-13 01:08:50 +03:00
Nikolay Amiantov 2dfbef2764 dfhack: fix checksum
Fixes #36819.
2018-03-13 01:06:47 +03:00
Nikolay Amiantov 5e9e30799b xgboost: disable on AArch64
It requires SSE2.
2018-03-13 01:02:28 +03:00
Nikolay Amiantov 8332b7aef9 steam: don't add zoneinfo manually
We already have this done for FHS environments in general.
2018-03-11 02:14:49 +03:00
Nikolay Amiantov 9db2a3e638 buildFHSEnv: export TZDIR
This is needed since NixOS keeps tzdata in non-standard /etc/zoneinfo path.
2018-03-11 02:14:49 +03:00
Nikolay Amiantov f7c2288cfc zandronum: sound improvements
* Update fmod version to one with PulseAudio support;
* Dynamically link FluidSynth instead of using LD_LIBRARY_PATH;
* Use system libgme.

Fixes sound on some machines.
2018-03-11 00:02:46 +03:00
Nikolay Amiantov 94f0ef6628 buildFHSEnv: fix compiler search paths
Fixes OpenWrt compilation.
2018-03-10 23:57:12 +03:00
Nikolay Amiantov 948533180f double-conversion: hopefully fix on Darwin 2018-03-09 16:35:10 +03:00
Nikolay Amiantov 325dece6a0 slade: disable on AArch64
Wants SSE.
2018-03-09 16:35:10 +03:00
Nikolay Amiantov 1890fe359a linuxPackages.bbswitch: disable on AArch64
It makes no sense on non-x86 platforms.
2018-03-09 16:35:10 +03:00