Commit Graph
34 Commits
Author SHA1 Message Date
David Anderson 206dcee07d openfpgaloader: init at 0.2.1.
Signed-off-by: David Anderson <dave@natulte.net>
2021-02-11 11:36:08 -08:00
David Anderson 08a70a12e7 nmigen-soc: 2020-02-08 -> 2021-02-09
Signed-off-by: David Anderson <dave@natulte.net>
2021-02-10 18:46:38 -08:00
David Anderson 4785251626 nmigen-boards: 2020-02-06 -> 2021-02-09
Signed-off-by: David Anderson <dave@natulte.net>
2021-02-10 18:45:44 -08:00
David Anderson 6a865bf060 nmigen: 2020-04-02 -> 2021-02-09
Signed-off-by: David Anderson <dave@natulte.net>
2021-02-10 18:45:44 -08:00
David Anderson 6f1319a4d6 symbiyosys: fix the interpreter of the sby binary.
Signed-off-by: David Anderson <dave@natulte.net>
2021-02-10 18:45:44 -08:00
Dave AndersonandSandro ab5c09745f perkeep: unstable-2020-03-23 -> 0.11 (#111262)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-01-31 19:14:26 +01:00
Dave Anderson 4de5d2b081 influxdb2: init at v2.0.2 (#104717)
Signed-off-by: David Anderson <dave@natulte.net>
2020-11-24 16:06:39 +01:00
Dave Anderson ecbe92e576 influxdb2: init at v2.0.2 (#104484)
Signed-off-by: David Anderson <dave@natulte.net>
2020-11-23 20:40:42 +01:00
David Anderson 168f36153b tailscale: 1.2.6 -> 1.2.8
Signed-off-by: David Anderson <dave@natulte.net>
2020-11-16 16:46:16 -08:00
David Anderson 027bcf83c7 tailscale: 1.2.1 -> 1.2.6
Signed-off-by: David Anderson <dave@natulte.net>
2020-11-12 23:17:47 -08:00
David Anderson 503caab776 nixos/tailscale: use upstream systemd service config.
Signed-off-by: David Anderson <dave@natulte.net>
2020-11-03 19:37:48 -08:00
David Anderson 4571671de3 tailscale: 1.0.5 -> 1.2.1 2020-11-03 17:25:01 -08:00
David Anderson 43effbbc59 nixos/transmission: point at the settings dir in cfg.home.
Without this, transmission starts with an empty config when using
a custom home location.

Signed-off-by: David Anderson <dave@natulte.net>
2020-10-30 19:03:42 -07:00
David Anderson 9a8d6011aa nixos/tailscale: add tailscale to environment.systemPackages.
Use of Tailscale requires using the `tailscale` CLI to talk to the
daemon. If the CLI isn't in systemPackages, the resulting user experience
is confusing as the Tailscale daemon does nothing.

Signed-off-by: David Anderson <dave@natulte.net>
2020-10-30 17:58:14 -07:00
David Anderson 3a38cef8f9 jasper: remove, abandoned upstream.
Jasper has been marked insecure for a while, and upstream has not
been responsive to CVEs for over a year.

Fixes #55388.

Signed-off-by: David Anderson <dave@natulte.net>
2020-09-09 18:29:42 +00:00
David Anderson 19661efa6a tailscale: 0.100.0-153 -> 1.0.0
Signed-off-by: David Anderson <dave@natulte.net>
2020-07-30 02:43:04 +00:00
David Anderson 107a1b2a7a tailscale: 0.99.1-0 -> 0.100.0-153
Signed-off-by: David Anderson <dave@natulte.net>
2020-07-20 00:11:25 +00:00
David Anderson e77c586dbc tailscale: 0.97-219 -> 0.99.1-0
Signed-off-by: David Anderson <dave@natulte.net>
2020-06-04 04:23:58 +00:00
David Anderson 0d0dd76a7a tailscale: 0.97-0 -> 0.97-219.
Signed-off-by: David Anderson <dave@natulte.net>
2020-04-21 19:43:32 +02:00
David Anderson cee5ddbb28 nixos/tailscale: set a CacheDir in the systemd unit.
Fixes a bug where tailscaled drops some files into / when CacheDir
is unset.

Signed-off-by: David Anderson <dave@natulte.net>
2020-04-20 15:35:55 -07:00
David Anderson 92ffd641c8 libsass: 3.6.1 -> 3.6.3
Contains fix for CVE-2019-18798 and CVE-2019-18799.

Fixes #54804, #53571, #57155, #58266, #73660.
2020-04-05 13:34:35 +02:00
Dave AndersonandAlyssa Ross 19a831d853 nixos/iio: adjust formatting of option description.
Co-Authored-By: Alyssa Ross <hi@alyssa.is>
2020-04-01 18:37:52 +00:00
David Anderson d2bb8d232b nixos/iio: explain why you might want IIO sensor support.
Signed-off-by: David Anderson <dave@natulte.net>
2020-04-01 18:37:52 +00:00
David Anderson 3fa813e820 tailscale: switch version and git ref to use a tag.
The tag points to the same commit hash, so the binary
is unchanged.

Signed-off-by: David Anderson <dave@natulte.net>
2020-03-23 12:11:14 -07:00
David Anderson 1e593070cd tailscale: 0.96-33 -> 0.97-0.
Fixes a severe bug with subnet routing.

Signed-off-by: David Anderson <dave@natulte.net>
2020-03-18 06:08:20 +00:00
David Anderson b5f90159af libvorbis: document that patch for CVE-2017-14160 also fixes CVE-2018-10393.
Fixes #57159.

Signed-off-by: David Anderson <dave@natulte.net>
2020-03-17 01:11:24 -07:00
David Anderson 03dedf4cfd thinkpad/t495: fix backlight save/load and and battery conditioning.
Saving/loading the backlight state requires the acpi_backlight=native
kernel parameter.

acpi_call is required by TLP to get access to battery conditioning
information from the firmware.

Signed-off-by: David Anderson <dave@natulte.net>
2020-03-14 20:57:22 -07:00
David Anderson 688d14d478 vorbis-tools: bump debian patchseries from -6 to -11.
Fixes #57191, CVE-2014-9638, CVE-2014-9639, CVE-2015-6749,
CVE-2017-11331.

Signed-off-by: David Anderson <dave@natulte.net>
2020-03-13 01:50:01 -07:00
Dave Anderson af576fc3b1 bitcoinarmory: remove
The project has been abandoned upstream for 2 years. For its entire
lifetime in nixpkgs, the installed binaries segfault due to static
library linking that couldn't be undone due to proprietary changes
to said libraries. In addition, there are unpatched CVEs according
to #29956.

Fixes #29956.

Signed-off-by: David Anderson <dave@natulte.net>
2020-03-12 00:39:03 +00:00
David Anderson 3d983701f9 lenovo/thinkpad/t495: init from e495.
The E495 and T495 are based on the same core Ryzen platform, so the
E495 tweaks apply similarly to the T495.

Tested on my own T495, works well.
2020-03-11 09:34:12 -07:00
David Anderson ae02b3dd1f nixos/tests/pppd: init
This test creates a PPPoE link between two machines, and verifies
that the machines can ping each other.
2019-10-15 08:36:09 -07:00
David Anderson 997a6f6f1e nixos/pppd: init 2019-10-15 08:36:09 -07:00
David Anderson c5c5baf5af maintainers: add danderson 2019-10-14 01:59:38 -07:00
David Anderson 089da1c14d nixos/sshguard: create ipsets before starting, and clean up after stopping.
The fix for #62874 introduced a race condition on startup: the postStart
commands that configure the firewall run concurrently with sshguard's
creation of the ipsets that the rules depend on. Unfortunately iptables
fails hard when referencing an ipset that doesn't exist, so this causes
non-deterministic crashlooping until sshguard wins the race.

This change fixes that race condition by always creating the ipset and
reconfiguring the firewall before starting sshguard, so that the order
of operations is always deterministic.

This change also cleans up the ipsets on sshguard shutdown, so that
removing sshguard from a running system doesn't leave state behind.

Fixes #65985.
2019-08-04 16:23:22 -07:00