Commit Graph
214528 Commits
Author SHA1 Message Date
R. RyanTM 6d9f69daea gssdp: 1.2.1 -> 1.2.2 2020-02-05 10:44:00 +01:00
R. RyanTM 44295cc16b libmbim: 1.20.4 -> 1.22.0 2020-02-05 10:43:39 +01:00
R. RyanTM 6213465bba snappy: 1.1.7 -> 1.1.8 2020-02-05 10:43:23 +01:00
R. RyanTM e75b7ed17e dhcp: 4.4.1 -> 4.4.2 2020-02-05 10:43:09 +01:00
R. RyanTM de3a2cf1a0 libzip: 1.5.2 -> 1.6.0 2020-02-05 10:42:55 +01:00
R. RyanTM d0790e9fd3 openresolv: 3.9.2 -> 3.10.0 2020-02-05 10:42:43 +01:00
worldofpeace cf83cfbd4c xorg.libXft: add color emoji rendering support
https://gitlab.freedesktop.org/xorg/lib/libxft/merge_requests/1
2020-02-05 10:38:54 +01:00
Richard Marko 0c20feb231 use overlayfs by default for netboot and iso 2020-02-05 10:35:59 +01:00
Frederik Rietdijk c55efd568a Merge staging-next into staging 2020-02-05 10:33:50 +01:00
Samuel Dionne-Riel 8fb90fbf3a e2fsprogs: 1.45.4 -> 1.45.5 2020-02-05 10:35:08 +01:00
Frederik Rietdijk 76a439239e Merge master into staging-next 2020-02-05 10:28:52 +01:00
Maximilian Bosch 2b3d2dbaf9 Merge pull request #79249 from marsam/update-bazelisk
bazelisk: 1.2.1 -> 1.3.0
2020-02-05 10:05:26 +01:00
Maximilian Bosch abe70b78f3 Merge pull request #79234 from r-ryantm/auto-update/unrar
unrar: 5.8.5 -> 5.9.1
2020-02-05 09:37:56 +01:00
Maximilian Bosch e94e5cd03f Merge pull request #78647 from MetaDark/protontricks
protontricks: 1.3.1 -> 1.4
2020-02-05 09:30:18 +01:00
Maximilian Bosch 87d4951a82 Merge pull request #78660 from buckley310/dircolors
nixos/bash: configure $LS_COLORS for interactive shells
2020-02-05 09:08:41 +01:00
Maximilian Bosch bf474ab2cd Merge pull request #78354 from saksmt/jetbrains-ides
jetbrains: 2019.3.1 -> 2019.3.LATEST (1,2,3)
2020-02-05 08:57:04 +01:00
Maximilian Bosch e9d9603754 Merge pull request #78837 from r-ryantm/auto-update/teamviewer
teamviewer: 15.0.8397 -> 15.1.3937
2020-02-05 08:12:09 +01:00
wedens 7b5550a3fc nixos/grub: make memtest work with EFI
Memtest86+ doesn't support EFI, so unfree Memtest86 is used when EFI
support is enabled (systemd-boot currently also uses Memtest86 when
memtest is enabled).
2020-02-05 11:12:55 +07:00
edef 6ceebc441c google-cloud-sdk: strip the Cython gRPC library
This reduces output size by 21 MiB.
2020-02-05 01:59:09 +00:00
edef b7641eaa5a google-cloud-sdk: compact all the JSON
This reduces output size by 20 MiB.
2020-02-05 01:59:09 +00:00
edef dbaafbbf73 google-cloud-sdk: remove tests directories
This reduces output size by 4.5 MiB.
2020-02-05 01:59:09 +00:00
edef c484d6376c google-cloud-sdk: remove crcmod_osx as well
Both third_party/crcmod_osx and third_party/crcmod are only used in the
PYTHONPATH, and we already replace them with dependencies from nixpkgs.
2020-02-05 01:59:09 +00:00
Emily 6d046e1079 openresty: rebase on top of nginx package
The primary motivation of this change was to allow third-party modules
to be used with OpenResty, but it also results in a significant
reduction of code duplication.
2020-02-04 19:30:40 -06:00
Emily db3182a65d nginxModules.brotli: v0.1.2 -> unstable
The fork was merged back upstream but has yet to see a formal release.
2020-02-04 19:30:40 -06:00
Marek Fajkus 6d1e9c08e0 urweb: Fix icu headers include path
Since https://github.com/NixOS/nixpkgs/pull/62266
urweb fails to resolve <unicode/utypepes.h> in runtime (during
compilation of project).
upstream commit: https://github.com/urweb/urweb/commit/c2a217f9121dd865122bc6150c53e77bd662050d

resolves #79218
2020-02-04 19:30:15 -06:00
Mario Rodas 3d48206fad bazelisk: 1.2.1 -> 1.3.0
Changelog: https://github.com/bazelbuild/bazelisk/releases/tag/v1.3.0
2020-02-04 20:20:20 -05:00
Florian Klink 3c74e48d9c nixos/filesystems: ensure keys gid on /run/keys mountpoint
boot.specialFileSystems is used to describe mount points to be set up in
stage 1 and 2.

We use it to create /run/keys already there, so sshd-in-initrd scenarios
can consume keys sent over through nixops send-keys.

However, it seems the kernel only supports the gid=… option for tmpfs,
not ramfs, causing /run/keys to be owned by the root group, not keys
group.

This was/is worked around in nixops by running a chown root:keys
/run/keys whenever pushing keys [1], and as machines had to have pushed keys
to be usable, this was pretty much always the case.

This is causing regressions in setups not provisioned via nixops, that
still use /run/keys for secrets (through cloud provider startup scripts
for example), as suddenly being an owner of the "keys" group isn't
enough to access the folder.

This PR removes the defunct gid=… option in the mount script called in
stage 1 and 2, and introduces a tmpfiles rule which takes care of fixing
up permissions as part of sysinit.target (very early in systemd bootup,
so before regular services are started).

In case of nixops deployments, this doesn't change anything.
nixops-based deployments receiving secrets from nixops send-keys in
initrd will simply have the permissions already set once tmpfiles is
started.

Fixes #42344

[1]: https://github.com/NixOS/nixops/blob/884d6c3994b227eb09c307e5d25d6885c9af8220/nixops/backends/__init__.py#L267-L269
2020-02-05 01:53:26 +01:00
Florian Klink 2ec5c4adf9 Merge pull request #79244 from r-ryantm/auto-update/yubico-piv-tool
yubico-piv-tool: 1.7.0 -> 2.0.0
2020-02-05 01:11:40 +01:00
Florian Klink cbbb81c830 Merge pull request #79135 from dtzWill/fix/moby-now-linuxkit
moby: remove, merged into linuxkit in 2018
2020-02-05 01:09:15 +01:00
Silvan Mosberger c4e912ac79 Merge pull request #79243 from Infinisil/remove-hostresolvconf
nixos/resolvconf: Remove useHostResolvConf option
2020-02-05 00:53:53 +01:00
Will Dietz 3e83806771 moby: remove, merged into linuxkit in 2018
Don't alias linuxkit, as linuxkit is not a drop-in replacement.
Instead, throw with an explanation.
(thanks reviewers!)
2020-02-04 17:51:03 -06:00
Jan Tojnar f40a8a09fb Merge pull request #78913 from jtojnar/cus-fixes
common-updater-scripts: Support SRI-style hash
2020-02-05 00:47:35 +01:00
R. RyanTM 25f50a9197 yubico-piv-tool: 1.7.0 -> 2.0.0 2020-02-04 23:44:36 +00:00
Florian Klink b8a8fd0fd5 Merge pull request #79165 from sikmir/xournalpp
xournalpp: 1.0.16 -> 1.0.17
2020-02-05 00:38:55 +01:00
Silvan Mosberger 97ff64e351 nixos/resolvconf: Remove useHostResolvConf option
Never had any effect
2020-02-05 00:28:32 +01:00
Silvan Mosberger b4cc413928 Merge pull request #77594 from Frostman/fix-grub-extrafiles-mirroredboots
Fix boot.loader.grub.extraFiles when used with mirroredBoots
2020-02-05 00:22:35 +01:00
Michael Weiss 272041b85a chromium: 79.0.3945.130 -> 80.0.3987.87
https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html

This update includes 56 security fixes.

CVEs:
CVE-2020-6381 CVE-2020-6382 CVE-2019-18197 CVE-2019-19926 CVE-2020-6385
CVE-2019-19880 CVE-2019-19925 CVE-2020-6387 CVE-2020-6388 CVE-2020-6389
CVE-2020-6390 CVE-2020-6391 CVE-2020-6392 CVE-2020-6393 CVE-2020-6394
CVE-2020-6395 CVE-2020-6396 CVE-2020-6397 CVE-2020-6398 CVE-2020-6399
CVE-2020-6400 CVE-2020-6401 CVE-2020-6402 CVE-2020-6403 CVE-2020-6404
CVE-2020-6405 CVE-2020-6406 CVE-2019-19923 CVE-2020-6408 CVE-2020-6409
CVE-2020-6410 CVE-2020-6411 CVE-2020-6412 CVE-2020-6413 CVE-2020-6414
CVE-2020-6415 CVE-2020-6416 CVE-2020-6417
2020-02-05 00:20:16 +01:00
Silvan Mosberger fc8864b446 Merge pull request #77673 from volth/cpan2nix-2020-01-14
perlPackages: batch update
2020-02-05 00:19:14 +01:00
Florian Klink b27f806da8 Merge pull request #79173 from chkno/nerd-fonts
nerdfonts: 2.0.0 -> 2.1.0
2020-02-05 00:17:39 +01:00
markuskowa 8148b20300 Merge pull request #79238 from markuskowa/upd-snapper
snapper: 0.8.8 -> 0.8.9
2020-02-04 23:53:18 +01:00
Damien Bihel 9f64b84739 ber_metaocaml: fix install order.
Indeed, all standard modules with compiler-libs are not included (
eg. Optcompile).

closes #77680
2020-02-04 16:06:24 -06:00
Florian Klink eb09e82120 Merge pull request #79162 from misuzu/systemd-sleep-config
nixos/systemd: add `systemd.sleep.extraConfig` config option
2020-02-04 23:02:53 +01:00
Markus Kowalewski b8fb5ddaf6 snapper: 0.8.8 -> 0.8.9 2020-02-04 22:52:34 +01:00
Maximilian Bosch 89d13541e5 mautrix-telegram: 0.7.0 -> 0.7.1
https://github.com/tulir/mautrix-telegram/releases/tag/v0.7.1
2020-02-04 22:28:15 +01:00
Maximilian Bosch f28acbdd33 Merge pull request #79221 from Ma27/bump-oracle-sqldeveloper
sqldeveloper: {17.4.1.054.0712,18.2.0.183.1748} -> 19.4.0.354.1759
2020-02-04 22:25:44 +01:00
Profpatsch 84630a1d90 Merge pull request #68469 from uri-canva/bazel-deps
bazel-deps: remove
2020-02-04 21:14:44 +01:00
Nikolay Korotkiy a1caeda72c viking: 1.7 -> 1.8 2020-02-04 23:07:14 +03:00
R. RyanTM a91faae4a6 unrar: 5.8.5 -> 5.9.1 2020-02-04 19:51:34 +00:00
Dmitry Kalinkin a745c846d4 pythonPackages.hglib: fix tests 2020-02-04 12:47:05 -05:00
Ben Darwin 00cd1d0f21 ocamlPackages.parmap: init at 1.1 2020-02-04 17:49:45 +01:00