public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
216,168 Commits 1 Branch 0 Tags
a2437c37af33dabdc4e8588905ba2dd6292b94de
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vladimír Čunát 1cf4fea33f nixos/release-notes: fix a tiny typo 2020-03-05 14:03:27 +01:00
Vladimír Čunát eb5f3cac4f Merge #81631: lcov: Fix patch checksums 2020-03-04 14:22:08 +01:00
Vladimír Čunát b7f5450e4d knot-resolver: apply upstream patch 
Encrypted ZFS users were affected, in particular some NixOS users
who reported the issue upstream.  Close #81188.
 2020-03-04 13:36:54 +01:00
Vladimír Čunát fbe3eb29dd gnome-tour: fix at typo breaking metrics job 
It's an evalution problem that (unfortunately?) doesn't break
most things.
 2020-03-04 11:38:03 +01:00
Vladimír Čunát 29a7464115 knot-dns: 2.9.2 -> 2.9.3 
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.3
 2020-03-03 11:18:02 +01:00
Vladimír Čunát 4d954e528d Merge #80714: icon-lang: fix build 2020-03-02 16:15:53 +01:00
Vladimír Čunát a2afee938b Merge #81512: pkgs/bazel*: Fix path to update-srcDeps.py 2020-03-02 16:15:49 +01:00
Vladimír Čunát 855f020404 Merge #79026: blackmagic: v1.6.1-317-gc9c8b08 -> v1.6.1-409-g7a595ea 2020-03-02 15:57:23 +01:00
Vladimír Čunát fb6ceb45ba Merge #80124: llvmPackages_5.compiler-rt: fix for glibc bump 2020-03-02 15:41:52 +01:00
Vladimír Čunát 83015ff795 nixpkgs manual: fix build after pandoc(?) update 
I din't try to pinpoint the exact commit, but we started getting:
> The extension smart is not supported for docbook
Reading pandoc docs, I can't see what use to us "smart" could be
when writing the in-between docbook (to be converted to html).
https://pandoc.org/MANUAL.html#extension-smart
 2020-03-02 08:24:54 +01:00
Vladimír Čunát 5f881209f9 nixos/kresd: never force extraFeatures = false 
Fixes #81109.  Regressed in PR #78392 (26858063).
 2020-02-26 15:10:53 +01:00
Vladimír Čunát d7266d00b2 Merge #80802: netpbm: fix typo on substituteInPlace parameters 2020-02-22 17:48:11 +01:00
Vladimír Čunát ea79a830dc release-combined.tested: readd boot.biosUsb test 
It has been commented-out for some time and now removed
in commit 2de3caf, but it seems reliable in past months:
https://hydra.nixos.org/job/nixos/trunk-combined/nixos.tests.boot.biosUsb.x86_64-linux/all
so I can't see why not re-add it.  Close #15690.
 2020-02-22 10:43:26 +01:00
Vladimír Čunát de4f68d8fa release-combined: readd firefox-esr test 
It was added in PR #79786 (7a625e7) and then removed in commit 2de3caf
(apparently unintentionally as a rebase conflict).

_I think the ordering used by Eelco would sort the line this way._
 2020-02-22 10:35:52 +01:00
Vladimír Čunát e01412b5c9 Merge #80387: release-combined: readd keymap tests 2020-02-22 09:15:11 +01:00
Vladimír Čunát 7cda2823be openssl_1_0_2: mark as insecure; fixes #77503 (kinda) 
No vulnerabilities are know so far (to me), but still I'd go this way.
Especially for 20.03 it seems better to deprecate it before official
release happens.

Current casualties:
$ ./maintainers/scripts/rebuild-amount.sh --print HEAD HEAD^
Estimating rebuild amount by counting changed Hydra jobs.
     87 x86_64-darwin
    161 x86_64-linux
 2020-02-21 18:49:16 +01:00
Vladimír Čunát f04825cc31 can-utils: fixup build after PR #78994 2020-02-20 21:21:08 +01:00
Vladimír Čunát 627a9ff433 lkl: fixup build after PR #78994 2020-02-20 21:07:43 +01:00
Vladimír Čunát 944775e0c5 dnsmasq: correct previous change for Darwin 
I was a bit hasty in commit 482642a73.
 2020-02-19 15:20:46 +01:00
Vladimír Čunát 482642a733 dnsmasq: fixup build after kernel header changes 
https://github.com/torvalds/linux/commit/0768e17073d
 2020-02-19 13:14:04 +01:00
Vladimír Čunát 1b96f9b68c Merge #80460: maintainers: fix 0x4A6F 2020-02-18 21:28:27 +01:00
Vladimír Čunát 03d69128b2 nettle: runtime selection of HW-accelerated code 
> Include multiple versions of certain functions in the library,
> and select the ones to use at run-time, depending on available
> processor features. Supported for ARM and x86_64.

The current version seems to accelerate AES and SHA families.

Size increase on x86_64 is <10k in our case.

It can make quite some performance difference; I tried
$ time ./result-dev/bin/nettle-hash -a sha256 /some/file/around/2G
And the total CPU time went down from 8.5s to 2s (single thread).
Now it matches the time of openssl
$ time openssl sha256 /some/file/around/2G
Of course, in real life it will be much harder to notice a difference...

Platforms without support for this (e.g. i686) seem to still build fine,
and ARMv7 cross-build also succeeds for me, so hopefully all is OK.
 2020-02-18 12:22:51 +01:00
Vladimír Čunát f595677418 efibootmgr: fixup build on i686 
Same as efivar; I believe it doesn't really needs LTO.  I checked:
nix build -f nixos/release-combined.nix nixos.iso_minimal.i686-linux
 2020-02-18 10:30:23 +01:00
Vladimír Čunát 9b4424cbb7 efivar: fixup build on i686 
I don't think it really needs LTO.
 2020-02-17 21:05:16 +01:00
Vladimír Čunát b229e9fdfd libclc: enableParallelBuilding = true 
Otherwise it takes quite some time.  Tested on a 32-threaded machine,
so there probably aren't common high-parallelism bugs.
 2020-02-14 18:33:27 +01:00
Vladimír Čunát ed77cf1c56 Merge #62890: libclc: 2017-11-29 -> 2019-06-09 (unbreak) 2020-02-14 17:59:00 +01:00
Vladimír Čunát 5a8000dc05 openssl: revert a workaround that's no longer needed 
Thanks to python3Minimal.  This reverts part of c2038483f #79738.
 2020-02-14 13:22:44 +01:00
Vladimír Čunát f6519103bf glibc: use python3Minimal instead of python3 
This should improve the speed of bootstrapping process.
Cost of evaluation also decreases a bit,
but I don't expect that will be significant.
 2020-02-14 13:19:00 +01:00
Vladimír Čunát 705a131583 Merge #79917: thunderbird*: 68.4.2 -> 68.5.0 (security) 2020-02-13 13:04:11 +01:00
Vladimír Čunát 3668d993a3 gnutls: move some docs that don't seem useful normally 2020-02-10 21:55:23 +01:00
Vladimír Čunát cfa1f136db lz4: split binaries into a separate output 
It's a little suspicious that the binaries are (apparently)
linked statically, but I assume upstream has some reasons (e.g. speed).
 2020-02-10 21:31:48 +01:00
Vladimír Čunát 35b13b52cd lz4: do the refactoring forgotten after PR #51965 2020-02-10 21:30:50 +01:00
Vladimír Čunát e94a7366e7 Merge #79738: glibc, openssl: unbreak cross eval 
(with minor caveats)
 2020-02-10 19:22:15 +01:00
Vladimír Čunát 4ff2a1641c Merge #79740: libssh2: patch CVE-2019-17498 (into staging) 2020-02-10 17:44:54 +01:00
Vladimír Čunát cc1ae9f21b make-bootstrap-tools: fixup after glibc update 
There's a generated header that got comment about the source header
from glibc.dev, which added unwanted runtime dependency.  Tested:
nix build -f pkgs/top-level/release.nix stdenvBootstrapTools.{aarch64,i686,x86_64}-linux.test
 2020-02-10 17:31:35 +01:00
Vladimír Čunát 79210713e6 nixpkgs manual: fix a typo in cross-compilation 
I can't say I really understand that much about our cross stuff,
but this seems very clear.
 2020-02-10 16:58:50 +01:00
Vladimír Čunát c2038483fd glibc, openssl: unbreak cross eval (with minor caveats) 
It's certainly better to have those two caveats than not evaluate.
Both seem rather niche.  Unfortunately I failed to find a better way.
I started testing builds of several cross variants; all seem OK.
 2020-02-10 15:52:20 +01:00
Vladimír Čunát 221274e155 rtptools: fix a typo 
/cc PR #79028.  Whitespace change: seems more common this way.
Normal eval didn't notice but it came out in the metrics job:
https://hydra.nixos.org/build/112189807
 2020-02-10 13:11:22 +01:00
Vladimír Čunát 811448e4ac reiserfsprogs: fixup build with glibc-2.30 
Inspired by https://bugs.archlinux.org/task/60204
 2020-02-10 09:46:33 +01:00
Vladimír Čunát 94bb2ff95f Merge #79609: Remove pbogdan from maintainers 2020-02-09 11:20:47 +01:00
Vladimír Čunát 8130f3c1c2 linux config: revert BPF_JIT_ALWAYS_ON=yes 
This reverts a small bit of af808bd82 from PR #73328.  Fixes #79304:
tests.installer.simpleUefiSystemdBoot.x86_64-linux

I still don't know why the regression happened, but this feature doesn't
seem important enough to block channel now, though it reportedly helps
to mitigate spectre 2 attack CVE-2017-5715.
 2020-02-09 08:22:00 +01:00
Vladimír Čunát baeed035ea Merge #78628: knot-resolver: 4.3.0 -> 5.0.1 
The service needed lots of changes. A few smaller changes
are added into the PR, e.g. replacement for PR #72014.
See the commit messages for details.
 2020-02-05 16:57:02 +01:00
Vladimír Čunát e3edb004c6 knot-resolver: 5.0.0 -> 5.0.1 
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v5.0.1
 2020-02-05 16:53:40 +01:00
Vladimír Čunát cf242659fe stdenv bootstrap tools: switch one file to official URL 2020-02-05 13:59:18 +01:00
Vladimír Čunát 48a997cd76 Merge #66528: glibc: 2.27 -> 2.30 (into staging) 
Includes update of stdenv bootstap tools (for three main platforms)
and many package fixes with new glibc.
 2020-02-05 13:41:09 +01:00
Vladimír Čunát 5ca088f1cc glibc/*.patch: revert no-op changes done in 447edaa3 
I suppose the diff of the glibc-upgrade branch is a bit cleaner
without including these unnecessary changes.
 2020-02-05 13:37:06 +01:00
Vladimír Čunát 53349b9c27 stdenv bootstrap tools: regenerate "officialy" 
From Hydra's binaries for c5aabb0 (19.09).
This time I re-tested full stdenv bootstrap on these three platforms.
https://github.com/NixOS/nixpkgs/pull/66528#issuecomment-582351637
 2020-02-05 13:04:13 +01:00
Vladimír Čunát 22284b07ef gcc: disable LTO on i686 
as a workaround to fix build after updating stdenv bootstrap
(in the followup commit).  Interested parties can improve this later.
 2020-02-05 13:02:57 +01:00
Vladimír Čunát 1af60850c5 nixosTests.misc: fix blkio sub-test with newer kernels 
The blkio.sectors file is no longer provided; by quick search:
https://issues.apache.org/jira/browse/MESOS-9848
so hopefully it's sufficient to test existence of this other file:
https://www.kernel.org/doc/html/v5.4/admin-guide/cgroup-v1/blkio-controller.html#common-files-among-various-policies

Originally this sub-test was added in 58e40f84.
 2020-02-02 13:20:03 +01:00
Vladimír Čunát 3c46f9d63b Merge #79052: libxml2: patch for CVE-2020-7595 
... into staging
 2020-02-02 09:58:01 +01:00
Vladimír Čunát 31ab6fdec5 Merge #78978: lua5: Fix src URLs 
The rebuilds happen because changing the end-part of URL
changes the name of the resulting file as placed into nix store
(those names were wrong/confusing before this change)
 2020-02-01 09:52:56 +01:00
Vladimír Čunát bba954f34e nixos release notes: document linuxPackages update 2020-01-31 15:58:46 +01:00
Vladimír Čunát 02bf0557c0 nixos/kresd: add .instances option 2020-01-31 15:22:52 +01:00
Vladimír Čunát ae74a0e27c (nixos/)knot-resolver: 4.3.0 -> 5.0.0 
Minor incompatibilities due to moving to upstream defaults:
  - capabilities are used instead of systemd.socket units
  - the control socket moved:
    /run/kresd/control -> /run/knot-resolver/control/1
  - cacheDir moved and isn't configurable anymore
  - different user+group names, without static IDs

Thanks Mic92 for multiple ideas.
 2020-01-31 15:22:52 +01:00
Vladimír Čunát 0a8fb01b80 nixos/kresd: fix a recent error in description 2020-01-31 15:06:27 +01:00
Vladimír Čunát 93ad21dedd knot-resolver: remove older lua path workarounds 
Part of this is approximate revert of commit f0d2da43a7.
 2020-01-31 15:06:20 +01:00
Vladimír Čunát e980e7a3ab knot-resolver: enable checks on aarch64 
The cqueues fix is in nixpkgs already, so it works now.
 2020-01-30 18:48:57 +01:00
Vladimír Čunát 3aa308a680 linuxPackages: 4.19 -> 5.4 
It's a longterm version that has been out for quite some time:
5.4.15 and 5.5 are current.  I've been using it, so far I'm not aware
of any issues with it.

Feature freeze for the next NixOS release is in two weeks,
so now seems to be high time to decide the default kernel version.
https://discourse.nixos.org/t/nixos-20-03-feature-freeze/5655
 2020-01-28 16:32:25 +01:00
Vladimír Čunát e8907eaea3 Merge #78604: pciutils: 3.6.2 -> 3.6.4 (into staging) 2020-01-28 15:10:14 +01:00
Vladimír Čunát b47ec9a6b3 Merge #75437: kramdown-rfc2629: init at 1.2.13 
I left it open much longer than planned.  Re-tested it creates html.
 2020-01-28 14:12:26 +01:00
Vladimír Čunát 1ee3c7b405 Revert "knot-resolver: skip a broken test" 
This reverts commit 5c0567dcc6.
The issue had been fixed but I forgot to remove this workaround.
 2020-01-25 13:42:46 +01:00
Vladimír Čunát b200b6bea4 Merge #78452: thunderbird*: 68.4.1 -> 68.4.2 2020-01-25 13:42:46 +01:00
Vladimír Čunát 018e2972c7 Merge #77682: glog: remove static flag 
It was re-introduced by incorrect merge-conflict resolution.
 2020-01-14 19:08:48 +01:00
Vladimír Čunát 2aea16c4d6 glibc: depend on libidn2 (and libunistring, transitively) 
It's a bit hacky, but ATM I can't see any better way for glibc >= 2.28.

Signed-off-by: Luka Blaskovic <lblasc@tvbeat.com>
 2020-01-14 08:27:00 +00:00
Vladimír Čunát 0c75f51304 stdenv bootstrap: disable dejagnu tests 
There's a failure - I don't know why.  The checks from "normal" dejagnu
still succeed, so I assume this commit is quite a safe work-around.
 2020-01-14 08:27:00 +00:00
Vladimír Čunát 7048b566c1 Merge #77526: krita: set -Wno-deprecated-copy for gcc 
This reduces the build log length to fix the build on the Hydra.
 2020-01-11 21:54:33 +01:00
Vladimír Čunát e4c89a66fe openssl_1_0_2: 1.0.2t -> 1.0.2u (low-severity security) 
Fixes #77266: CVE-2019-1551
https://www.openssl.org/news/secadv/20191206.txt

(cherry picked from commit 961d0cf9f5)
Oops - I realized too late that the rebuild amount is minimal,
so why not have it immediately in master.
 2020-01-11 10:25:38 +01:00
Vladimír Čunát 961d0cf9f5 openssl_1_0_2: 1.0.2t -> 1.0.2u (low-severity security) 
Fixes #77266: CVE-2019-1551
https://www.openssl.org/news/secadv/20191206.txt
 2020-01-11 10:14:10 +01:00
Vladimír Čunát a1d4878723 Merge #77499: thunderbird*: 68.3.1 -> 68.4.1 (security) 
https://www.thunderbird.net/en-US/thunderbird/68.4.1/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2020-04/
 2020-01-11 09:54:14 +01:00
Vladimír Čunát f703a3a04a firefox-esr-60: mark as vulnerable 
The last release was in September, so it's surely "vulnerable" now.
https://www.mozilla.org/en-US/firefox/60.9.0/releasenotes/

This is the same appproach we've taken for esr-52.
 2020-01-10 17:08:01 +01:00
Vladimír Čunát 9e0c8f0cbe ppp: remove falsifian from meta.maintainers 
https://github.com/NixOS/nixpkgs/pull/66528#issuecomment-572762705
 2020-01-09 22:52:11 +01:00
Vladimír Čunát 5c780036c5 Merge branch 'master' into staging-next 
The nss rebuild isn't so small.
 2020-01-08 22:48:13 +01:00
Vladimír Čunát 754d02df72 gdk-pixbuf: upstream patch to fix the nixos test 
Tested nixos.tests.installed-tests.gdk-pixbuf.x86_64-linux
atop the current nixpkgs master.
 2020-01-08 15:36:39 +01:00
Vladimír Čunát 37e1da2874 ffmpeg: 3.4.6 -> 3.4.7 (security) 
Fixes #73628 (many CVEs).
https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/289a79d545e83a:/Changelog
 2019-12-29 10:40:04 +01:00
Vladimír Čunát c3d4998e41 Merge #75803: kresd service: unify listen declarations 2019-12-27 15:55:38 +01:00
Vladimír Čunát 743f3cc258 Merge #76118: thunderbird*: 68.3.0 -> 68.3.1 
https://www.thunderbird.net/en-US/thunderbird/68.3.1/releasenotes/#changes
 2019-12-22 17:19:11 +01:00
Vladimír Čunát 6fd5a4383b Revert "release: remove metrics from unstable channel (temporarily)" 
This reverts commit 96d73edaf3.
IPv6 connectivity restored by ISP a few hours after I pushed
the workaround.  Apparently it was something complicated;
I suppose that has to do with the issue appearing on Friday 13th
during full moon ;-)
 2019-12-18 20:50:10 +01:00
Vladimír Čunát 96d73edaf3 release: remove metrics from unstable channel (temporarily) 
Since friday the metrics machine (along with other replaceable ones)
has no public-IP connectivity.  I hoped I'd be able to resolve this
with ISP quickly, but apparently not.  Let's not block the channel
at least.  The metrics data can get filled retrospectively by restarting
the individual Hydra jobs.
 2019-12-18 11:07:52 +01:00
Vladimír Čunát 7139b127b3 gcc7: 7.4.0 -> 7.5.0 
It's bugfix-only; these tend to be fairly safe,
and we don't really use gcc7 anymore by default.
I tested building gcc7 and gfortran7 on x86_64-linux.
https://gcc.gnu.org/ml/gcc-announce/2019/msg00003.html
 2019-12-16 11:40:59 +01:00
Vladimír Čunát 877eedec61 knot-dns: 2.9.1 -> 2.9.2 (bugfixes) 
https://gitlab.labs.nic.cz/knot/knot-dns/tags/v2.9.2
 2019-12-12 10:36:39 +01:00
Vladimír Čunát 24a4f45319 knot-resolver: 4.2.2 -> 4.3.0 (security) 
Fixes CVE-2019-19331 (DoS), but other changes as well:
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.3.0
 2019-12-04 16:22:49 +01:00
Vladimír Čunát 39ecc2db19 Merge #73797: ldns: 1.7.0 -> 1.7.1 2019-11-20 13:34:09 +01:00
Vladimír Čunát e32d557967 Merge #45957: nixos manual: releases workflow improvements 
Let's merge NOW; I'm not doing the same mistake again.
 2019-11-20 13:31:24 +01:00
Vladimír Čunátandasymmetric be6e0bf5c3 nixos manual: releases workflow nitpicks 
Co-Authored-By: asymmetric <lorenzo@mailbox.org>
 2019-11-20 13:29:06 +01:00
Vladimír Čunát ed9fb90b28 Merge #73572: darwin.CF: hack around build failures 
... into staging-next.  Fixes #66811, kinda.
 2019-11-18 11:26:43 +01:00
Vladimír Čunát 908f6240d8 Merge #72958: libexif: fix CVE-2018-20030 2019-11-16 18:26:13 +01:00
Vladimír Čunát 233f36303b libexif: convert to fetchpatch 2019-11-16 18:22:59 +01:00
Vladimír Čunát 35566eb61a knot-dns: 2.9.0 -> 2.9.1 
It's mainly bugfixes:
https://gitlab.labs.nic.cz/knot/knot-dns/raw/v2.9.1/NEWS
 2019-11-12 10:58:45 +01:00
Vladimír Čunát 802c81efa4 Merge #71401: unzip: CVE-2019-13232 (into staging) 2019-11-09 15:29:58 +01:00
Vladimír Čunát 8302338ae9 Merge #72278: keepalived: 1.4.2 -> 1.4.5, patch CVE-2018-19115 2019-11-09 10:29:11 +01:00
Vladimír Čunát f364708ce9 Merge #72092: libtiff: 4.0.10 -> 4.1.0 (security) 
into staging.  This fixes CVE-2019-7663 and incorporates other patches.
 2019-11-09 10:13:06 +01:00
Vladimír Čunát 019fcab7f5 Merge #72054: gdal: add patch for CVE-2019-17545 2019-11-09 09:38:10 +01:00
Vladimír Čunát 832f46a703 gst-plugins-base: use fetchpatch for better hash stability 
/cc original PR #70283.
 2019-11-09 07:51:00 +01:00
Vladimír Čunát 457e94d900 Merge branch 'master' into staging-next 
~4k rebuilds on each Linux.
 2019-11-09 07:26:53 +01:00
Vladimír Čunát a9cbe1592a Merge #72548: libuv: 1.32.0 -> 1.33.1 (into staging) 2019-11-02 18:40:41 +01:00
Vladimír Čunát a2e12f9db9 Merge #72364: firefox*: 70.0 -> 70.0.1 2019-11-02 09:44:02 +01:00
Vladimír Čunát 3c5f5b1cde Fix link in PULL_REQUEST_TEMPLATE.md (the same link) 2019-10-28 19:25:05 +01:00
Vladimír Čunát 9a54d17799 nixos release notes: interfaces might get renamed 
Fixes #71086.
 2019-10-20 20:12:03 -04:00
Vladimír Čunát 610afbca84 Revert "go: apply upstream patch" 
This reverts commit d8218de5c5.
It makes no sense after the parent commit.
 2019-10-16 10:49:23 +02:00
Vladimír Čunát 0bd5120e22 knot-dns: 2.8.4 -> 2.9.0 
I can't see any large incompatibilities.
https://gitlab.labs.nic.cz/knot/knot-dns/tags/v2.9.0
 2019-10-14 14:31:46 +02:00