Commit Graph
165282 Commits
Author SHA1 Message Date
danbst 68a6b47b8c lib: add shortcuts for fake hashes (fakeSha256, fakeSha512)
Fake hashes can be used as placeholders for all the places, where
Nix expression requires a hash, but we don't yet have one.

This should be more convenient than following:
- echo|sha256sum, copy into clipboard, go to editor, paste into previously
  edited place
- search nixpkgs for a random package, copy it's hash to cliboard, go to
  editor, paste into previously edited place

Nix can add support for these fake hashes. In that case printed error should contain
only 1 hash, so no more problem "which of two hashes from error should I use?"

Idea by irc:Synthetica
2019-01-10 19:27:35 +02:00
Orivej Desh 7d864c6bd6 clickhouse: build with llvmPackages_latest
This will simplify updates since the upstream tracks the latest llvm.
2019-01-06 02:46:58 +00:00
Jörg Thalheim 9d8ccfe00f Merge pull request #51398 from risicle/ris-afl-qemu-fix
afl-qemu: update to qemu 2.10.0, as specified by afl 2.52b
2019-01-06 01:50:55 +01:00
Dmitry Kalinkin 0308087b74 Merge pull request #53468 from asymmetric/anki-2.1.8
anki: 2.1.7 -> 2.1.8
2019-01-05 19:15:12 -05:00
Dmitry Kalinkin d2cfddd3b5 anki: fix build on darwin
Runtime doesn't work:

ModuleNotFoundError: No module named 'PyQt5.QtWebEngineWidgets'

This is probably because qtwebengine is broken on darwin, but doesn't
fail the build (#40149)
2019-01-05 19:13:10 -05:00
Ryan Mulligan d62e013359 Merge pull request #53158 from ryantm/haskell-binary-orphans
haskellPackages.binary-orphans: dontCheck
2019-01-05 16:03:35 -08:00
markuskowa bdbf3f964f Merge pull request #53377 from marsam/update-bfs
bfs: 1.2.4 -> 1.3.1
2019-01-06 00:42:17 +01:00
Lorenzo Manacorda 90c68f650d anki: 2.1.7 -> 2.1.8 2019-01-06 00:09:10 +01:00
Francesco Gazzetta e7551acb7b pythonPackages.staticjinja: init at 0.3.4 2019-01-05 17:09:20 -05:00
Francesco Gazzetta 779e916c3b pythonPackages.easywatch: init at 0.0.5 2019-01-05 17:09:20 -05:00
Michael Weiss 46dd27e025 pythonPackages.gcutil: Deprecate the package
The package doesn't exist anymore (even the deprecation notice is gone
[0]) and the build is currently broken:
Collecting google-apputils==0.4.1 (from gcutil==1.16.1)
  Could not find a version that satisfies the requirement
google-apputils==0.4.1 (from gcutil==1.16.1) (from versions: )
No matching distribution found for google-apputils==0.4.1 (from
gcutil==1.16.1)

[0]: https://download.huihoo.com/google/gdgdevkit/DVD1/developers.google.com/compute/docs/gcutil.1.html
> "Warning: gcutil is deprecated. We encourage you to transition to
> using gcloud compute ."
2019-01-05 22:56:13 +01:00
Michael Weiss 35bee29824 pythonPackages.simplejson: Update the metadata
The old homepage URL returns a 404 and the project is dual-licensed.
2019-01-05 22:56:13 +01:00
Vladimír Čunát a68ae2c205 obs-studio: restrict meta.platforms
Hydra has been trying to build it on aarch64-linux, but never succeeded:
https://hydra.nixos.org/job/nixpkgs/trunk/obs-studio.aarch64-linux/all
(It tries to feed compiler x86-specific options.)
I didn't test i686-linux, due to a transitive dependency not building
(libupnp), but there it might likely work.
2019-01-05 22:51:21 +01:00
Michael Weiss 2acda72b85 python27Packages.weboob: Override google_api_python_client 2019-01-05 22:32:49 +01:00
Michael Weiss 8d9c2fc3ff python37Packages.google_api_python_client: 1.7.4 -> 1.7.7 2019-01-05 22:32:49 +01:00
Michael Raskin f27fe449b1 pythonPackages.ldap3: switch src to fetchFromGitHub
PyPI links to a source tarball at PythonHosted that has an empty
ldap3/protocol/sasl/digestMd5.py
while the linked egg file has a non-empty file (and the upstream GitHub
repository has a non-empty file that hasn't even had a non-comment
change for some time.
2019-01-05 22:37:00 +01:00
Vladimír Čunát e6aa4d76ed Merge #53164: vlc: 3.0.4 -> 3.0.5
https://mailman.videolan.org/pipermail/videolan-announce/2018-December/000173.html
2019-01-05 22:05:41 +01:00
roconnor 9ff125c9ce Merge pull request #52868 from roconnor/bitcoin
Bitcoin: 0.17.0 -> 0.17.1
2019-01-05 15:15:16 -05:00
Will Dietz 93a5522a7b Merge pull request #53459 from dtzWill/update/gllvm-1.2.3
gllvm: 1.2.2 -> 1.2.3
2019-01-05 14:02:25 -06:00
Will Dietz d42d70aee9 Merge pull request #53417 from dtzWill/update/getdns-1.5.0
getdns: 1.4.2 -> 1.5.0, stubby: 0.2.3 -> 0.2.4
2019-01-05 13:54:26 -06:00
Will Dietz fcfdeedab9 Merge pull request #51339 from dtzWill/feature/minizincide
minizincide: init at 2.2.3
2019-01-05 13:48:52 -06:00
Will Dietz 2d79465173 Merge pull request #51700 from dtzWill/update/i2c-tools-4.1
i2c-tools: 4.0 -> 4.1
2019-01-05 13:46:26 -06:00
Will Dietz 6f886ca7aa gllvm: 1.2.2 -> 1.2.3
https://github.com/SRI-CSL/gllvm/releases/tag/v1.2.3
2019-01-05 13:39:17 -06:00
Will Dietz 5adde64416 minizincide: minor touchups per reviewer suggestion
(sourceRoot needed a "source/" prefix, FWIW)
2019-01-05 13:35:10 -06:00
Ryan Mulligan d637039acf Merge pull request #53432 from jerith666/haskell-fixes
haskell: friday: jailbreak
2019-01-05 10:48:48 -08:00
Ryan Mulligan f706777f5b haskellPackages.binary-orphans: dontCheck 2019-01-05 10:29:20 -08:00
Ryan Mulligan e5512a158c Merge pull request #53159 from ryantm/haskell-github
haskellPackages.github: dontCheck
2019-01-05 10:25:08 -08:00
Ryan Mulligan 88029fc8af Merge branch 'master' into haskell-github 2019-01-05 10:02:30 -08:00
Tadeo Kondrak 0d99389a6d wine: add perl to buildInputs to fix winemaker 2019-01-05 18:40:59 +01:00
Jörg Thalheim 09fb07e4af Merge pull request #52943 from ck3d/vdr-enableLirc
nixos vdr: introduce option enableLirc
2019-01-05 17:51:41 +01:00
Dmitry Kalinkin 8a7d9e6dd0 offlineimap: provide "OS-DEFAULT" CA certificates (#53268) 2019-01-05 17:38:10 +01:00
xeji 361d64de02 Merge pull request #53398 from Mic92/cryptominisat
cryptominisat: 5.0.1 -> 5.6.6
2019-01-05 17:34:50 +01:00
Jörg Thalheim e2b79b10b5 afl: various cleanups 2019-01-05 17:22:24 +01:00
Jörg Thalheim 5da3d039d4 qemu-afl: various cleanups 2019-01-05 17:22:06 +01:00
Jörg Thalheim 8a2389e4a1 Merge pull request #53404 from Mic92/xsslock
nixos/xss-lock: specify a default locker
2019-01-05 16:44:29 +01:00
Jörg Thalheim 2614c8a6c5 nixos/xss-lock: specify a default locker
Having a default locker is less error-prone and more convenient.
Incorrect values might leave the machine vulnerable since there is no
fallback.
2019-01-05 16:42:30 +01:00
Jörg Thalheim 37fe593d48 cryptominisat: switch to python3 2019-01-05 16:38:10 +01:00
R. RyanTM df834ee56d sysstat: 12.1.1 -> 12.1.2 (#52675)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/sysstat/versions
2019-01-05 14:47:25 +01:00
Matt McHenry 8358ffc708 haskellPackages.friday: jailbreak 2019-01-05 08:39:09 -05:00
Domen Kožar 5ec91bac2f Merge pull request #53326 from domenkozar/elm-packaging-rehaul
Elm: automate packaging with elm2nix
2019-01-05 13:20:16 +00:00
Joachim Fasting 167578163a nixos/hardened profile: always enable pti 2019-01-05 14:07:39 +01:00
Joachim Fasting 3f1f443125 nixos/hardened profile: slab/slub hardening
slab_nomerge may reduce surface somewhat

slub_debug is used to enable additional sanity checks and "red zones" around
allocations to detect read/writes beyond the allocated area, as well as
poisoning to overwrite free'd data.

The cost is yet more memory fragmentation ...
2019-01-05 14:07:37 +01:00
Joachim Fasting d62086e6fc hardened-config: allow slub/slab free poisoning 2019-01-05 14:07:36 +01:00
Joachim Fasting 11840f5c70 hardened-config: explain HARDENED_USERCOPY_FALLBACK n 2019-01-05 14:07:36 +01:00
Joachim Fasting dfd77a046d hardened-config: ensure STRICT_KERNEL_RWX
This is y in the default config, but enable it explicitly here to catch
situations where it has been disabled (explicitly or implicitly).
2019-01-05 14:07:35 +01:00
Joachim Fasting 1801aad7b8 hardened-config: clarify MODIFY_LDT_SYSCALL
This likely never worked; MODIFY_LDT_SYSCALL depends on EXPERT; enabling
EXPERT however seems to introduce quite a few changes that would need to be
properly vetted.

The version guard is unnecessary, however, as this config has been supported
since 4.3.
2019-01-05 14:07:34 +01:00
Joachim Fasting abc8ed3fca hardened-config: clarify readonly LSM hooks config
SECURITY_WRITABLE_HOOKS is implicitly controlled by SECURITY_SELINUX_DISABLE;
explicitly unsetting results in an error because the configfile builder fails
to detect that it has in fact been unset (reporting it as an unused option).
For now, leave WRITABLE_HOOKS as an "optional" config for documentation
purposes.
2019-01-05 14:07:33 +01:00
Joachim Fasting c68e8b05f0 Revert "linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT"
This reverts commit 5dda1324be.

Presumably this was done to work around build errors or something but it
works fine now.
2019-01-05 14:07:21 +01:00
Jörg Thalheim e36c93b3a0 Merge pull request #53408 from frlan/Update/Geany/1.34.1
Geany: 1.34 -> 1.34.1
2019-01-05 13:24:38 +01:00
Jörg Thalheim 9b2f0fbcdd nixos/lirc: expose socket path via passthru 2019-01-05 13:22:39 +01:00