Commit Graph
50 Commits
Author SHA1 Message Date
Pierre Bourdon 57ffe86efa zbar: 0.10 -> 0.22
The original upstream at http://zbar.sourceforge.net/ has not produced a
new release or a new commit on their repository in about 7 years. Most
distros (Debian, Gentoo, Arch, ...) have switched already to the more
maintained fork at https://github.com/mchehab/zbar

Update dependencies from qt4 to qt5, reducing "electrum" closure size in
the process (now only depends on one Qt version).
2019-03-25 10:28:34 +01:00
Pierre Bourdon 6beffff797 pythonPackages.dnslib: init at 0.9.9 (#57101) 2019-03-25 08:57:58 +01:00
Pierre Bourdon 0489e8c560 nginx-sso: 0.16.0 -> 0.16.1 2019-03-17 22:33:28 +01:00
Pierre Bourdon abe667ce06 tpm2-tools: 3.1.3 -> 3.1.4 2019-03-15 01:34:24 +01:00
Pierre Bourdon 19601561ed imgurbash2: 2.1 -> 3.1 2019-03-12 08:04:58 +01:00
Pierre Bourdon a9cf5c27ec imagemagickBig: revert meta.broken to false 2019-03-11 00:13:02 +01:00
Pierre Bourdon 128bb7be2a ghostscript: link against "systemwide" liblcms2
GS ships with a fork of lcms2 ("lcms2mt"), but the ABI separation
between the fork and the original seems insufficient. If libgs is linked
alongside liblcms2 (for example, this is the case with imagemagick) then
it will call into the original library instead of the fork, causing
segfaults.

Follow the example of both Arch and Debian in this regard -- they both
use the systemwide lib instead of the fork.
2019-03-11 00:07:18 +01:00
Pierre Bourdon 18bc8203a1 nixos/firewall: canonicalize firewall ports lists
Fixes #56086.
2019-03-09 20:02:04 +01:00
Pierre Bourdon 843215ac1c nixos/firewall: use types.port where appropriate 2019-03-09 19:45:11 +01:00
Pierre Bourdon f20a66084f pythonPackages.protobuf: propagate native pkgs.protobuf input
Python packages depending on the protobuf library often use the "protoc"
tool from pkgs.protobuf to codegen at build time.

This fixes a few regressions from 5c7531872f
2019-03-03 08:07:56 +01:00
Pierre Bourdon b5d341e7f9 tpm2-tss: 2.2.0 -> 2.2.1 2019-03-01 01:25:38 +01:00
Pierre Bourdon 7541e4f8ac llvm/7/compiler-rt: define CMAKE_*_COMPILER_TARGET unconditionally
When building with -DCOMPILER_RT_DEFAULT_TARGET_ONLY=ON the compiler-rt
CMake configuration attempts to use CMAKE_*_COMPILER_TARGET variables,
which are usually only defined in cross-compilation mode.
2019-02-28 04:29:05 +01:00
Pierre Bourdon 244b4b0544 nginx-sso: 0.15.1 -> 0.16.0 2019-02-24 23:17:16 +01:00
Pierre Bourdon 3f0a59314c wpa_supplicant: 2.6 -> 2.7 (#55926) 2019-02-24 00:47:11 +01:00
Pierre Bourdon d21e4f1ab4 tpm2-tools: init at 3.1.3 2019-02-19 20:02:31 +01:00
Pierre Bourdon 0cb599293b tpm2-tss: init at 2.2.0 2019-02-19 20:02:31 +01:00
Pierre Bourdon 67d912af0a ibm-sw-tpm2: init at 1332 2019-02-19 20:02:31 +01:00
Pierre Bourdon a13a0d7868 electrum: 3.3.2 -> 3.3.4 2019-02-19 17:01:57 +01:00
Pierre Bourdon 705167a5dc unzip: patch CVE-2018-18384
Patch from https://sourceforge.net/p/infozip/bugs/53/
2019-02-17 05:55:30 +01:00
Pierre Bourdon da9fdcb1f0 libu2f-host: 1.1.6 -> 1.1.7 (CVE-2018-20340) 2019-02-11 21:03:06 +01:00
Pierre Bourdon c0829a0859 nixos/tests/gitea: fix eval warnings
trace: warning: config.services.gitea.database.password will be stored as plaintext
        in the Nix store. Use database.passwordFile instead.

(Arguably, this shouldn't be a warning at all. But making it happy is
easier than having a debate on the value of this warning.)
2019-02-11 03:13:03 +01:00
Pierre Bourdon f90a60a33c nixos/tests/ndppd: fix eval warnings
trace: warning: The options services.ndppd.interface and services.ndppd.network will probably be removed soon,
please use services.ndppd.proxies.<interface>.rules.<network> instead.
2019-02-11 03:12:56 +01:00
Pierre Bourdon 4b959cd354 nixos/tests/rspamd: fix eval warnings
trace: warning: The option `services.rspamd.bindUISocket' defined in `<unknown-file>' has been renamed to `services.rspamd.workers.controller.bindSockets'.
trace: warning: The option `services.rspamd.bindSocket' defined in `<unknown-file>' has been renamed to `services.rspamd.workers.normal.bindSockets'.
trace: warning: The option `services.rspamd.workers.”rspamd_proxy".type` defined in `<unknown-file>' has enum value `proxy` which has been renamed to `rspamd_proxy`
2019-02-11 02:59:55 +01:00
Pierre Bourdon a8da72b012 nixos/tests/postgresql: fix regression from #55106 2019-02-04 03:56:43 +01:00
Pierre Bourdon 25c2d1cd3e glowing-bear: init at 0.7.1 2019-02-03 19:39:59 +01:00
Pierre Bourdon 3674bdf204 nixos/tasks/encrypted-devices: fix regression from #54637
27982b408e introduced a bug when
refactoring the encrypted-devices module, causing some encrypted
filesystem options to not be recognized anymore.

See e.g. https://hydra.nixos.org/build/88145490
2019-02-02 17:31:31 +01:00
Pierre Bourdon 20b1febace nixos/tests: add nginx-sso basic functionality test 2019-01-29 19:54:14 +01:00
Pierre Bourdon 43fcfc274d nixos: add nginx-sso service 2019-01-29 19:54:14 +01:00
Pierre Bourdon aa000aa3a0 nginx-sso: init at 0.15.1 2019-01-29 19:52:48 +01:00
Pierre Bourdon b26c824da3 Revert "Revert "Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"""
The issue with out-of-tree modules has been addressed and the feature
should now be good to re-enable again.

This reverts commit 865f7a14b4.
2019-01-11 12:35:16 +01:00
Pierre Bourdon 1b9bf8fa75 kernel: make the RANDSTRUCT seed deterministic 2019-01-11 12:35:16 +01:00
Pierre Bourdon 0f7ca26a48 kernel/hardened-config.nix: add STACKLEAK plugin on 4.20+ 2019-01-04 22:24:50 +01:00
Pierre Bourdon 9dc0d94896 kernel/hardened-config.nix: re-enable GCC plugins 2019-01-04 22:24:50 +01:00
Pierre Bourdon c789f642f0 kernel/generic.nix: provide required dependencies for GCC plugins builds 2019-01-04 22:24:50 +01:00
Pierre Bourdon d132c08aa1 wget: 1.20 -> 1.20.1 (CVE-2018-20483) 2018-12-29 13:00:58 +01:00
Pierre Bourdon 3873f43fc3 prometheus/exporters: fix regression in DynamicUser behavior
Instead of setting User/Group only when DynamicUser is disabled, the
previous version of the code set it only when it was enabled. This
caused services with DynamicUser enabled to actually run as nobody, and
services without DynamicUser enabled to run as root.

Regression from fbb7e0c82f.
2018-12-05 11:26:38 +01:00
Pierre Bourdon 199b4c4743 prometheus/exporters/tor: make CPython happy by defining $HOME 2018-12-05 11:26:38 +01:00
Pierre Bourdon ec3d829257 php72: 7.2.11 -> 7.2.12 2018-11-27 02:56:22 +01:00
Pierre Bourdon 8221da343e php71: 7.1.23 -> 7.1.24 2018-11-27 02:56:22 +01:00
Pierre Bourdon ea10173045 php: align Darwin and Linux versions again
Instead of pinning Darwin to older versions, add small patches to
configure.in (7.1) / configure.ac (7.2) to fix the build of the intl
extension on recent PHP versions on Darwin.

fix-paths-php7.patch also required changes -- since we now run autoconf
at build time (through ./buildconf), it needs to patch the input .m4
files instead of ./configure directly.
2018-11-27 02:56:17 +01:00
Pierre Bourdon 90720d0139 curl: cherry-pick upstream patch for ipv6 url parsing
Upstream bug: curl/curl#3218.

This causes nixos/tests/ipv6.nix to fix since the last staging merge.
2018-11-22 09:58:34 +01:00
Pierre Bourdon 2f11166f43 kpcli: fix wrong program name in prompt (#50845) 2018-11-20 18:46:19 +01:00
Pierre Bourdon 74598ca8d3 nixos.tests.keymap: use new name of the colemak/en-latin9 keymap
Commit f1987fb58f renamed colemak/en-latin9 to
colemak/colemak, but the keymap test wasn't adjusted to refer to the new path.
2018-11-20 04:11:39 +01:00
Pierre Bourdon 6b1d3dc590 doc/reviewing-contributions: fix build error
Regression from #50674. Section IDs cannot contain spaces.
2018-11-20 03:46:34 +01:00
Pierre Bourdon 08f24cadaa syncthing-relay module: init 2018-11-19 01:09:54 +01:00
Pierre Bourdon cf58856d90 nixos/prometheus: add webExternalUrl option
Similar to the prometheus.alertmanager.webExternalUrl option, but for
Prometheus itself.
2018-10-20 13:45:55 +02:00
Pierre Bourdon 259cf8812b dolphin-emu: fix metadata (GPLv2 -> GPLv2+, http -> https)
Dolphin has been GPLv2+ since 2015.
2018-10-15 03:28:17 +02:00
Pierre Bourdon 01d1f77681 tests/prometheus-exporters: add new Tor exporter
This new exporter was added in #48307.
2018-10-14 20:12:07 -05:00
Pierre Bourdon 86d644f8cc prometheus-tor-exporter: init at 0.3
Upstream: https://github.com/atx/prometheus-tor_exporter
2018-10-13 10:10:29 +02:00
Pierre Bourdon 5410e6b6b6 maintainers: add delroth 2018-10-13 10:10:29 +02:00