Commit Graph
212281 Commits
Author SHA1 Message Date
Samuel Dionne-Riel b0f9922f37 imlib2: Fix license, remove global with 2020-02-05 10:46:34 +01:00
Samuel Dionne-Riel 2a8df18591 imlib2: 1.5.1 -> 1.6.1 2020-02-05 10:46:34 +01:00
Richard Marko 0c20feb231 use overlayfs by default for netboot and iso 2020-02-05 10:35:59 +01:00
Frederik Rietdijk 76a439239e Merge master into staging-next 2020-02-05 10:28:52 +01:00
Maximilian Bosch 2b3d2dbaf9 Merge pull request #79249 from marsam/update-bazelisk
bazelisk: 1.2.1 -> 1.3.0
2020-02-05 10:05:26 +01:00
Maximilian Bosch abe70b78f3 Merge pull request #79234 from r-ryantm/auto-update/unrar
unrar: 5.8.5 -> 5.9.1
2020-02-05 09:37:56 +01:00
Maximilian Bosch e94e5cd03f Merge pull request #78647 from MetaDark/protontricks
protontricks: 1.3.1 -> 1.4
2020-02-05 09:30:18 +01:00
Maximilian Bosch 87d4951a82 Merge pull request #78660 from buckley310/dircolors
nixos/bash: configure $LS_COLORS for interactive shells
2020-02-05 09:08:41 +01:00
Maximilian Bosch bf474ab2cd Merge pull request #78354 from saksmt/jetbrains-ides
jetbrains: 2019.3.1 -> 2019.3.LATEST (1,2,3)
2020-02-05 08:57:04 +01:00
Maximilian Bosch e9d9603754 Merge pull request #78837 from r-ryantm/auto-update/teamviewer
teamviewer: 15.0.8397 -> 15.1.3937
2020-02-05 08:12:09 +01:00
edef 6ceebc441c google-cloud-sdk: strip the Cython gRPC library
This reduces output size by 21 MiB.
2020-02-05 01:59:09 +00:00
edef b7641eaa5a google-cloud-sdk: compact all the JSON
This reduces output size by 20 MiB.
2020-02-05 01:59:09 +00:00
edef dbaafbbf73 google-cloud-sdk: remove tests directories
This reduces output size by 4.5 MiB.
2020-02-05 01:59:09 +00:00
edef c484d6376c google-cloud-sdk: remove crcmod_osx as well
Both third_party/crcmod_osx and third_party/crcmod are only used in the
PYTHONPATH, and we already replace them with dependencies from nixpkgs.
2020-02-05 01:59:09 +00:00
Emily 6d046e1079 openresty: rebase on top of nginx package
The primary motivation of this change was to allow third-party modules
to be used with OpenResty, but it also results in a significant
reduction of code duplication.
2020-02-04 19:30:40 -06:00
Emily db3182a65d nginxModules.brotli: v0.1.2 -> unstable
The fork was merged back upstream but has yet to see a formal release.
2020-02-04 19:30:40 -06:00
Marek Fajkus 6d1e9c08e0 urweb: Fix icu headers include path
Since https://github.com/NixOS/nixpkgs/pull/62266
urweb fails to resolve <unicode/utypepes.h> in runtime (during
compilation of project).
upstream commit: https://github.com/urweb/urweb/commit/c2a217f9121dd865122bc6150c53e77bd662050d

resolves #79218
2020-02-04 19:30:15 -06:00
Mario Rodas 3d48206fad bazelisk: 1.2.1 -> 1.3.0
Changelog: https://github.com/bazelbuild/bazelisk/releases/tag/v1.3.0
2020-02-04 20:20:20 -05:00
Florian Klink 3c74e48d9c nixos/filesystems: ensure keys gid on /run/keys mountpoint
boot.specialFileSystems is used to describe mount points to be set up in
stage 1 and 2.

We use it to create /run/keys already there, so sshd-in-initrd scenarios
can consume keys sent over through nixops send-keys.

However, it seems the kernel only supports the gid=… option for tmpfs,
not ramfs, causing /run/keys to be owned by the root group, not keys
group.

This was/is worked around in nixops by running a chown root:keys
/run/keys whenever pushing keys [1], and as machines had to have pushed keys
to be usable, this was pretty much always the case.

This is causing regressions in setups not provisioned via nixops, that
still use /run/keys for secrets (through cloud provider startup scripts
for example), as suddenly being an owner of the "keys" group isn't
enough to access the folder.

This PR removes the defunct gid=… option in the mount script called in
stage 1 and 2, and introduces a tmpfiles rule which takes care of fixing
up permissions as part of sysinit.target (very early in systemd bootup,
so before regular services are started).

In case of nixops deployments, this doesn't change anything.
nixops-based deployments receiving secrets from nixops send-keys in
initrd will simply have the permissions already set once tmpfiles is
started.

Fixes #42344

[1]: https://github.com/NixOS/nixops/blob/884d6c3994b227eb09c307e5d25d6885c9af8220/nixops/backends/__init__.py#L267-L269
2020-02-05 01:53:26 +01:00
Florian Klink 2ec5c4adf9 Merge pull request #79244 from r-ryantm/auto-update/yubico-piv-tool
yubico-piv-tool: 1.7.0 -> 2.0.0
2020-02-05 01:11:40 +01:00
Florian Klink cbbb81c830 Merge pull request #79135 from dtzWill/fix/moby-now-linuxkit
moby: remove, merged into linuxkit in 2018
2020-02-05 01:09:15 +01:00
Silvan Mosberger c4e912ac79 Merge pull request #79243 from Infinisil/remove-hostresolvconf
nixos/resolvconf: Remove useHostResolvConf option
2020-02-05 00:53:53 +01:00
Will Dietz 3e83806771 moby: remove, merged into linuxkit in 2018
Don't alias linuxkit, as linuxkit is not a drop-in replacement.
Instead, throw with an explanation.
(thanks reviewers!)
2020-02-04 17:51:03 -06:00
Jan Tojnar f40a8a09fb Merge pull request #78913 from jtojnar/cus-fixes
common-updater-scripts: Support SRI-style hash
2020-02-05 00:47:35 +01:00
R. RyanTM 25f50a9197 yubico-piv-tool: 1.7.0 -> 2.0.0 2020-02-04 23:44:36 +00:00
Florian Klink b8a8fd0fd5 Merge pull request #79165 from sikmir/xournalpp
xournalpp: 1.0.16 -> 1.0.17
2020-02-05 00:38:55 +01:00
Silvan Mosberger 97ff64e351 nixos/resolvconf: Remove useHostResolvConf option
Never had any effect
2020-02-05 00:28:32 +01:00
Silvan Mosberger b4cc413928 Merge pull request #77594 from Frostman/fix-grub-extrafiles-mirroredboots
Fix boot.loader.grub.extraFiles when used with mirroredBoots
2020-02-05 00:22:35 +01:00
Michael Weiss 272041b85a chromium: 79.0.3945.130 -> 80.0.3987.87
https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html

This update includes 56 security fixes.

CVEs:
CVE-2020-6381 CVE-2020-6382 CVE-2019-18197 CVE-2019-19926 CVE-2020-6385
CVE-2019-19880 CVE-2019-19925 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389
CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394
CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-2020-6398 CVE-2020-6399
CVE-2020-6400 CVE-2020-6401 CVE-2020-6402 CVE-2020-6403 CVE-2020-6404
CVE-2020-6405 CVE-2020-6406 CVE-2019-19923 CVE-2020-6408 CVE-2020-6409
CVE-2020-6410 CVE-2020-6411 CVE-2020-6412 CVE-2020-6413 CVE-2020-6414
CVE-2020-6415 CVE-2020-6416 CVE-2020-6417
2020-02-05 00:20:16 +01:00
Florian Klink b27f806da8 Merge pull request #79173 from chkno/nerd-fonts
nerdfonts: 2.0.0 -> 2.1.0
2020-02-05 00:17:39 +01:00
markuskowa 8148b20300 Merge pull request #79238 from markuskowa/upd-snapper
snapper: 0.8.8 -> 0.8.9
2020-02-04 23:53:18 +01:00
Damien Bihel 9f64b84739 ber_metaocaml: fix install order.
Indeed, all standard modules with compiler-libs are not included (
eg. Optcompile).

closes #77680
2020-02-04 16:06:24 -06:00
Florian Klink eb09e82120 Merge pull request #79162 from misuzu/systemd-sleep-config
nixos/systemd: add `systemd.sleep.extraConfig` config option
2020-02-04 23:02:53 +01:00
Markus Kowalewski b8fb5ddaf6 snapper: 0.8.8 -> 0.8.9 2020-02-04 22:52:34 +01:00
Maximilian Bosch 89d13541e5 mautrix-telegram: 0.7.0 -> 0.7.1
https://github.com/tulir/mautrix-telegram/releases/tag/v0.7.1
2020-02-04 22:28:15 +01:00
Maximilian Bosch f28acbdd33 Merge pull request #79221 from Ma27/bump-oracle-sqldeveloper
sqldeveloper: {17.4.1.054.0712,18.2.0.183.1748} -> 19.4.0.354.1759
2020-02-04 22:25:44 +01:00
Profpatsch 84630a1d90 Merge pull request #68469 from uri-canva/bazel-deps
bazel-deps: remove
2020-02-04 21:14:44 +01:00
Nikolay Korotkiy a1caeda72c viking: 1.7 -> 1.8 2020-02-04 23:07:14 +03:00
R. RyanTM a91faae4a6 unrar: 5.8.5 -> 5.9.1 2020-02-04 19:51:34 +00:00
Dmitry Kalinkin a745c846d4 pythonPackages.hglib: fix tests 2020-02-04 12:47:05 -05:00
Ben Darwin 00cd1d0f21 ocamlPackages.parmap: init at 1.1 2020-02-04 17:49:45 +01:00
R. RyanTM 3c54ae5679 SPAdes: 3.13.1 -> 3.14.0 2020-02-04 16:40:50 +00:00
Michael Raskin 5660c077df lispPackages.cl-store: fix build 2020-02-04 17:22:12 +01:00
Lancelot SIX fb37b20d4d Merge pull request #79093 from bdesham/wee-slack-2.4.0
weechatScripts.wee-slack: 2.3.0 -> 2.4.0
2020-02-04 17:01:39 +01:00
Michael Raskin 1f0b4b19aa sbcl: reinstate 2.0.0; add sbcl_2_0_1 for 2.0.1
2.0.1 is too fresh for current Quicklisp (for example, CFFI fails)
2020-02-04 17:06:54 +01:00
worldofpeace 49fb456ece Merge pull request #75885 from voanhduy1512/add_asus_wmi_sensors
asus-wmi-sensors: init at 0.0.1
2020-02-04 10:53:37 -05:00
Alyssa Ross 95de02942f Revert "mailman-wrapper: crazy hack to work around the missing urllib3 dependency"
This reverts commit ce6b2419be, which
was unnecessary (mailman worked just fine on its parent commit).

See #79222.
2020-02-04 15:40:37 +00:00
Tim Steinbach 3931b82775 oh-my-zsh: 2020-01-31 -> 2020-02-04 2020-02-04 09:44:47 -05:00
Edmund Wu 1d87488d08 vscode-extensions.ms-vscode.cpptools: 0.26.1 -> 0.26.3 2020-02-04 09:25:08 -05:00
Edmund Wu 9a031427eb vscode-extensions.ms-python.python: 2019.10.44104 -> 2020.1.58038 2020-02-04 09:25:08 -05:00