public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
242,434 Commits 1 Branch 0 Tags
a5872edf2f61d97a4ada2734d543eaaefe25c916
Commit Graph
242434 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jörg ThalheimandSamuel Dionne-Riel a5872edf2f nixos/installer: enable sshd by default 
Right now the UX for installing NixOS on a headless system is very bad.
To enable sshd without physical steps users have to have either physical
access or need to be very knowledge-able to figure out how to modify the
installation image by hand to put an `sshd.service` symlink in the
right directory in /nix/store. This is in particular a problem on ARM
SBCs (single board computer) but also other hardware where network is
the only meaningful way to access the hardware.

This commit enables sshd by default. This does not give anyone access to
the NixOS installer since by default. There is no user with a non-empty
password or key. It makes it easy however to add ssh keys to the
installation image (usb stick, sd-card on arm boards) by simply mounting
it and adding a keys to `/root/.ssh/authorized_keys`.
Importantly this should not require nix/nixos on the machine that
prepare the installation device and even feasiable on non-linux systems
by using ext4 third party drivers.

Potential new threats: Since this enables sshd by default a
potential bug in openssh could lead to remote code execution. Openssh
has a very good track-record over the last 20 years, which makes it
far more likely that Linux itself would have a remote code execution
vulnerability. It is trusted by millions of servers on many operating
systems to be exposed to the internet by default.

Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
 2020-09-06 20:26:08 +02:00
Robert Scott 24e513bcf0 Merge pull request #96409 from sikmir/tippecanoe 
tippecanoe: 1.35.0 -> 1.36.0
 2020-09-06 19:18:34 +01:00
R. RyanTM 7dce8e2171 python27Packages.pydub: 0.24.0 -> 0.24.1 2020-09-06 10:31:19 -07:00
Vincent Laporte d4f6c94d34 ocamlPackages.labltk: init at 8.06.9 for OCaml 4.11 2020-09-06 19:09:37 +02:00
R. RyanTM a5121f73e3 catch2: 2.12.2 -> 2.12.3 2020-09-06 18:53:20 +02:00
R. RyanTM cd435ce7d3 opencl-clhpp: 2.0.11 -> 2.0.12 2020-09-06 18:52:54 +02:00
R. RyanTM c39f775f20 icingaweb2: 2.8.0 -> 2.8.1 2020-09-06 18:52:22 +02:00
Gabriel Ebner 37379c0215 Merge pull request #97285 from gebner/cura471 2020-09-06 18:52:08 +02:00
R. RyanTM 1311343c40 fx_cast_bridge: 0.0.6 -> 0.0.7 2020-09-06 18:51:17 +02:00
R. RyanTM f151fd87d7 sysvinit: 2.96 -> 2.97 2020-09-06 18:50:48 +02:00
R. RyanTM 6c2059b334 qwt6_qt4: 6.1.4 -> 6.1.5 2020-09-06 18:50:24 +02:00
R. RyanTM 2c58c24ef8 wimlib: 1.13.1 -> 1.13.2 2020-09-06 18:50:08 +02:00
R. RyanTM f06b103ef9 eventstat: 0.04.09 -> 0.04.10 2020-09-06 18:49:52 +02:00
R. RyanTM 1876163f16 bazel-kazel: 0.0.12 -> 0.1.0 (#97074) 2020-09-06 09:39:58 -07:00
edef a6a6659e56 Merge pull request #33283 from fahadsadah/dpauxchardev 
kernel config: CONFIG_DRM_DP_AUX_CHARDEV
 2020-09-06 16:34:11 +00:00
Wael Nasreddine 92cff610d0 pgformatter: 4.3 -> 4.4 (#96920) 2020-09-06 09:32:54 -07:00
Florian Klink d7046947e5 Merge pull request #91121 from m1cr0man/master 
Restructure acme module
 2020-09-06 18:26:22 +02:00
Daniël de Kok 2dd41576fb Merge pull request #97238 from hannesweisbach/macos-tbb 
tbb: fix library install name on macOS
 2020-09-06 18:04:08 +02:00
Michael Weiss ebd2e632d6 gns3-{gui,server}: 2.2.12 -> 2.2.13 2020-09-06 16:18:57 +02:00
WORLDofPEACE 84f11a01ff Merge pull request #97287 from TethysSvensson/fetchurl-chromium 
chromium: Unblock nixos-unstable by using the correct argument to fet…
 2020-09-06 10:04:43 -04:00
Philipp Bartsch 50285e244e fractal: add gtk support to gstreamer 
Closes #96618

Suggested-by: Jan Tojnar <jtojnar@gmail.com>
 2020-09-06 15:52:41 +02:00
Peter Hoeg 6e22c6ea6a Merge pull request #96769 from peterhoeg/m/phpfpm 
nixos/phpfpm: always restart service on failure
 2020-09-06 21:41:38 +08:00
José Romildo Malaquias 96542ebb19 Merge pull request #96691 from romildo/upd.iconpack-obsidian 
iconpack-obsidian: 4.12 -> 4.13
 2020-09-06 10:36:15 -03:00
Florian Klink 569fdb2c35 Merge pull request #93424 from helsinki-systems/feat/gitlab-mailroom 
nixos/gitlab: Support incoming mail
 2020-09-06 15:34:02 +02:00
Andreas Rammhold 8cf4c193b9 Merge pull request #97106 from stigtsp/package/firefox-80.0.1 
firefox: 80.0 -> 80.0.1
 2020-09-06 15:27:12 +02:00
Tethys Svensson 2927a19be3 chromium: Unblock nixos-unstable by using the correct argument to fetchurl 2020-09-06 14:54:42 +02:00
Mario Rodas 9380c61a19 Merge pull request #97246 from r-ryantm/auto-update/sensu-go-backend 
sensu-go-backend: 5.21.1 -> 5.21.2
 2020-09-06 07:50:24 -05:00
Mario Rodas 18bfc49f53 Merge pull request #97054 from dali99/add_vcsi 
vsci: init at 7.0.12
 2020-09-06 07:49:04 -05:00
Mario Rodas 885ce4b411 Merge pull request #97248 from r-ryantm/auto-update/sickgear 
sickgear: 0.21.36 -> 0.21.42
 2020-09-06 07:48:01 -05:00
Mario Rodas 8a03382c26 Merge pull request #97249 from r-ryantm/auto-update/skaffold 
skaffold: 1.13.2 -> 1.14.0
 2020-09-06 07:40:16 -05:00
Mario Rodas f0490fb718 Merge pull request #97223 from 06kellyjac/deno_1.3.3 
deno: 1.3.2 -> 1.3.3
 2020-09-06 07:37:15 -05:00
Mario Rodas 1c25cb0383 Merge pull request #97033 from pstn/jellyfin-bump 
jellyfin: 10.6.3 -> 10.6.4
 2020-09-06 07:35:15 -05:00
Robert Scott 39eea33d3a Merge pull request #93008 from r-ryantm/auto-update/yafaray-core 
yafaray-core: 3.4.4 -> 3.5.0
 2020-09-06 13:33:08 +01:00
Robert Scott e523a7096a yafaray-core: restrict to x86_64-linux 
fails to build on aarch64 at least
 2020-09-06 13:29:12 +01:00
Nikolay Korotkiy a3bcf4f7cb tippecanoe: 1.35.0 -> 1.36.0 2020-09-06 15:24:28 +03:00
R. RyanTM dadab5340f yafaray-core: 3.4.4 -> 3.5.0 2020-09-06 12:59:31 +01:00
Daniël de Kok 0df5508a0e Merge pull request #97269 from marsam/update-zola 
zola: 0.11.0 -> 0.12.0
 2020-09-06 13:51:19 +02:00
Kevin Cox 9313f560fd Merge pull request #96899 from Luflosi/update/kakoune 
kakoune: 2020.08.04 -> 2020.09.01
 2020-09-06 07:50:42 -04:00
Michael Raskin 2e4f8eb79a Merge pull request #97038 from Atemu/update/linux_zen 
linux_zen: 5.8.1 -> 5.8.7
 2020-09-06 11:45:48 +00:00
Gabriel Ebner 955fe4d67b Merge pull request #96688 from j0hax/octoprint-dashboard 2020-09-06 13:35:38 +02:00
Gabriel Ebner 6841659b94 curaPlugins.octoprint: 3.5.12 -> 3.5.16 2020-09-06 13:32:41 +02:00
Gabriel Ebner 6b4f9a16c4 cura: 4.6.1 -> 4.7.1 2020-09-06 13:32:19 +02:00
Gabriel Ebner 7a0ef553bd curaengine: 4.6.1 -> 4.7.1 2020-09-06 13:32:08 +02:00
Gabriel Ebner daa77cc74a python3Packages.uranium: 4.6.1 -> 4.7.1 2020-09-06 13:31:56 +02:00
Gabriel Ebner 497ff43da1 python3Packages.libsavitar: 4.6.1 -> 4.7.1 2020-09-06 13:31:39 +02:00
Gabriel Ebner e60ff5a3d0 python3Packages.libarcus: 4.6.1 -> 4.7.1 2020-09-06 13:31:16 +02:00
Gabriel Ebner 91ad566e18 Merge pull request #96886 from doronbehar/pkg/beets/wv-test-fix 
beets: Fix wavpack mediafile test
 2020-09-06 12:46:00 +02:00
Robert Scott 45a4fa7dba Merge pull request #92978 from S-NA/updates/sndio-1.7.0 
sndio: 1.6.0 -> 1.7.0
 2020-09-06 11:38:32 +01:00
Maximilian Bosch f01fd49045 Merge pull request #97262 from colemickens/nushell 
nushell: enable for aarch64
 2020-09-06 11:49:04 +02:00
Maximilian Bosch 9d1807385b Merge pull request #97278 from zowoq/youtube-dl 
youtube-dl: 2020.07.28 -> 2020.09.06
 2020-09-06 11:43:59 +02:00