Commit Graph
100 Commits
Author SHA1 Message Date
Florian Klink f3ba51f148 Merge pull request #95353 from flokli/systemd-output-journal
nixos: remove StandardOutput=syslog, StandardError=syslog lines
2020-08-13 21:45:12 +02:00
Florian Klink 6c41fd259f Merge pull request #95362 from jtojnar/global-fc-link
nixos/fontconfig: Reintroduce unversioned fonts.conf
2020-08-13 21:16:03 +02:00
Florian Klink 4bf857a0f2 Merge pull request #94880 from LouisDK1/thunderbird_enableofficalbranding
thunderbird: Enable official branding by default
2020-08-13 19:50:13 +02:00
Florian Klink 962e15aebc nixos: remove StandardOutput=syslog, StandardError=syslog lines
Since systemd 243, docs were already steering users towards using
`journal`:

https://github.com/systemd/systemd/commit/eedaf7f322a850c5d9f49346d43420423fc6f593

systemd 246 will go one step further, it shows warnings for these units
during bootup, and will [automatically convert these occurences to
`journal`](https://github.com/systemd/systemd/commit/f3dc6af20f410702beb8e45ddf77e92289fc90c7):

> [    6.955976] systemd[1]: /nix/store/hwyfgbwg804vmr92fxc1vkmqfq2k9s17-unit-display-manager.service/display-manager.service:27: Standard output type syslog is obsolete, automatically updating to journal. Please update│······················
 your unit file, and consider removing the setting altogether.

So there's no point of keeping `syslog` here, and it's probably a better
idea to just not set it, due to:

> This setting defaults to the value set with DefaultStandardOutput= in
> systemd-system.conf(5), which defaults to journal.
2020-08-13 18:49:15 +02:00
Florian Klink 38c6c46796 Merge pull request #95247 from zowoq/deletevendor-check
gobetween, kustomize: remove deleteVendor, enable checks
2020-08-12 22:09:15 +02:00
Florian Klink 22e8ada3b3 Merge pull request #95264 from flokli/nginx-config-reload
nixos/nginx: move configuration testing script into reload command
2020-08-12 18:47:02 +02:00
Florian Klink 0c46d8f140 Merge remote-tracking branch 'origin/staging-next' into master 2020-08-12 18:44:25 +02:00
Florian Klink 300049ca51 nixos/nginx: move configuration testing script into reload command
nginx -t not only verifies configuration, but also creates (and chowns)
files. When the `nginx-config-reload` service is used, this can cause
directories to be chowned to `root`, causing nginx to fail.

This moves the nginx -t command into a second ExecReload command, which
runs as nginx's user. While fixing above issue, this will also cause the
configuration to be verified when running `systemctl reload nginx`, not
only when restarting the dummy `nginx-config-reload` unit. The latter is
mostly a workaround for missing features in our activation script
anyways.
2020-08-12 18:13:29 +02:00
Florian Klink 5aca42698e Merge pull request #93562 from flokli/fontconfig_210_remove
fontconfig_210: remove package
2020-08-12 13:45:41 +02:00
Florian Klink bab13cc0df nixos/doc/manual/release-notes: document fontconfig 2.10.x config and cache removal 2020-08-12 13:40:46 +02:00
Florian Klink b761543f16 fontconfig_210: remove
This isn't used anymore anywhere, and vulnerable to CVE-2016-5384.
2020-08-12 13:40:46 +02:00
Florian Klink f527651a67 nixos/fontconfig: stop generating fontconfig_210 config and cache
This fontconfig version isn't used anywhere inside nixpkgs anymore.
2020-08-12 13:40:45 +02:00
Florian Klink 5aa6b4c2a1 gitlab: 13.0.9 -> 13.0.12 (#94968) 2020-08-11 14:11:39 +02:00
Florian Klink 921da91c8a Merge pull request #93702 from tnias/usbguard20200723
nixos/usbguard: rework
2020-08-11 12:14:32 +02:00
Florian Klink 3cece2b33b Merge pull request #79418 from eonpatapon/terraform-providers
terraform-provider-keycloak: init at 1.20.0
2020-08-08 23:24:20 +02:00
Florian Klink da88c6eee5 nixos/railcar: fix typo 2020-08-07 18:00:28 +02:00
Florian Klink 776476c4a3 Merge pull request #94758 from toonn/wire-desktop-bump
wire-desktop: linux 3.18.2925 -> 3.19.2928, mac 3.18.3728 -> 3.19.3799
2020-08-07 10:01:04 +02:00
Florian Klink 38724d8e8e Merge pull request #94837 from aanderse/gitlab
nixos/gitlab: fix module after #94454
2020-08-07 09:05:35 +02:00
Florian Klink c1f77f4544 Merge pull request #91960 from datafoo/fix-issue-91761
nixos/networkd: update options
2020-08-07 00:37:08 +02:00
Florian Klink d7f0530a15 Merge pull request #94805 from bachp/postgresql-setup-fix
nixos/postgresql: fix setup script
2020-08-06 23:50:12 +02:00
Florian Klink 8e0b2b9177 Merge pull request #66856 from flokli/systemd-cryptsetup-lvm
systemd: build with cryptsetup support, add cryptsetup generators
2020-08-06 12:06:54 +02:00
Florian Klink 056bb77adb Merge pull request #94454 from aanderse/postgresql-cleanup
nixos/postgresql: fix several issues
2020-08-06 11:12:31 +02:00
Florian Klink 0aebcb9b6e Merge pull request #94712 from B4dM4n/libreoffice-still-icu
libreoffice-still: use icu64
2020-08-05 15:27:03 +02:00
Florian Klink 9f911ab1b5 systemd: 245.6 -> 245.7 2020-08-05 12:32:09 +02:00
Florian Klink d7d668cc23 Merge pull request #94699 from Mic92/linux-downgrade
Revert "linux: Init 5.8"
2020-08-05 08:02:36 +02:00
Florian Klink eb58711edf nixosTests.systemd: test cryptsetup support
This creates and opens a luks volume, puts its passphrase into a keyfile
and writes a /etc/crypttab. It then reboots the machine, and verifies
systemd parsed /etc/crypttab properly, and was able to unlock the volume
with the keyfile provided (as we try to mount it).

The memorySize of the VM had to be bumped, as luksFormat would otherwise
run out of memory.
2020-08-05 01:34:12 +02:00
Florian Klink 0a41d69968 systemd: substituteInPlace paths to mkswap and mke2fs (used in new cryptsetup-generator.c) 2020-08-05 00:46:59 +02:00
Florian Klink 72c8ed0389 systemd: build with cryptsetup and cryptsetup-generators
There's a circular dependency to systemd via cryptsetup and lvm2
(systemd -> cryptsetup -> lvm2 -> udev=systemd).

However, cryptsetup only really needs the devmapper component shipped
with lvm2. So build `pkgs.cryptsetup` with a lvm2 that doesn't come with
udev.
2020-08-05 00:46:57 +02:00
Florian Klink 6ed882d7e8 Merge pull request #93587 from oxalica/rust-analyzer
rust-analyzer: 2020-07-13 -> 2020-08-03
2020-08-04 20:21:35 +02:00
Florian Klink ae896e090e systemd: disable remote support
This disabled systemd-journal-upload and systemd-journal-remote.

We didn't install the unit files anyways, so this was probably not used
at all, and currently fails to build due to libmicrohttpd and systemd
code being incompatible:

```
../src/journal-remote/journal-remote-main.c: In function ‘setup_microhttpd_server’:
../src/journal-remote/journal-remote-main.c:431:38: error: passing argument 5 of ‘MHD_start_daemon’ from incompatible pointer type [-Werror=incompatible-pointer-types]
```
2020-07-31 18:38:07 +02:00
Florian Klink 84bb019048 Merge pull request #93910 from helsinki-systems/upd/nss-3.55
nss: 3.54 -> 3.55
2020-07-30 01:07:13 +02:00
Florian Klink 3817fc412d Merge pull request #93781 from matthiasbeyer/update-notmuch
notmuch: 0.29.3 -> 0.30
2020-07-26 13:25:54 +02:00
Florian Klink 12f4c3b357 Merge pull request #93850 from philandstuff/fix-darwin-yubikey-agent
yubikey-agent: fix on darwin
2020-07-26 09:57:11 +02:00
Florian Klink ebfae82674 nixos/yubikey-agent: add missing mkIf
This accidentially added pkgs.yubikey-agent to
environment.systemPackages unconditionally.
2020-07-26 09:34:24 +02:00
Florian Klink d5aa8ff17c Merge pull request #93586 from makefu/pkgs/udpt/bump
udpt: 2017-09-27 -> 3.1.1
2020-07-23 17:54:39 +02:00
Florian Klink 8f7a623af6 Merge pull request #92936 from philandstuff/add-yubikey-agent
yubikey-agent: init at 0.1.3
2020-07-23 17:52:30 +02:00
Florian Klink b4784dbb34 Merge pull request #85362 from helsinki-systems/fix-samba-kerberos
samba: Switch back to builtin Heimdal Kerberos
2020-07-23 14:33:06 +02:00
Florian Klink cd03bf0c46 Merge pull request #93367 from eadwu/vivaldi/remove-gstreamer
vivaldi: remove gstreamer
2020-07-22 19:16:18 +02:00
Florian Klink 80c2d2e2af Merge pull request #93423 from helsinki-systems/feat/gitlab-redis-url
nixos/gitlab: Make redis URL configurable
2020-07-22 19:05:28 +02:00
Florian Klink 3d50d643f9 Merge pull request #92786 from flokli/certbot-with-plugins
certbot: add certbot.withPlugins
2020-07-22 12:53:07 +02:00
Florian Klink 9d86dea417 certbot-full: init 2020-07-22 12:07:17 +02:00
Florian Klink 718a4496df certbot: add certbot.withPlugins
This can be used to wrap certbot to include some plugins.

certbot.withPlugins has a similar calling convention as python*.withPackages:

```
certbot.withPlugins (cp: [ cp.certbot-dns-foo ])
```
2020-07-22 12:07:15 +02:00
Florian Klink 8ad62167e8 certbot: move to python package set, cleanup 2020-07-22 12:06:03 +02:00
Florian Klink 391a5fdc5b python-packages: fix trailing whitespaces 2020-07-22 12:04:26 +02:00
Florian Klink d5f7c6ed3c Merge pull request #89798 from nthorne/virtualbox6110
virtualbox: 6.1.6 -> 6.1.10
2020-07-21 14:32:18 +02:00
Florian Klink fec45bdfbc Merge pull request #93355 from Izorkin/nginx-unit
nixos/unit: add 'tmp' directory
2020-07-21 00:17:54 +02:00
Florian Klink f67288925a Merge pull request #93422 from helsinki-systems/fix/gitlab-sidekiq-warn
nixos/gitlab: Drop sidekiq PID file
2020-07-21 00:11:24 +02:00
Florian Klink f14799c8e7 Merge pull request #93073 from helsinki-systems/tmpfiles-packages
nixos/systemd: Implement a packages option for tmpfiles
2020-07-20 23:56:41 +02:00
Florian Klink 29d0b7b571 Merge pull request #93534 from helsinki-systems/gyp-python3
python-gyp: update with python3 support + drop python2 dependency in nss build
2020-07-20 21:16:22 +02:00
Florian Klink ab1cbc8515 Merge pull request #91746 from helsinki-systems/upd/nss-3.54
nss: 3.52.1 -> 3.54
2020-07-18 00:01:10 +02:00
Florian Klink ba20bc872f Merge pull request #93128 from Ma27/fix-rust-build-flags
rust: Fix build flags
2020-07-16 12:47:26 +02:00
Florian Klink e99389a942 Merge pull request #93001 from aanderse/gitolite
nixos/gitolite: provision data directory only before service begins
2020-07-14 20:40:35 +02:00
Florian Klink b6c53e3ac5 Merge pull request #92791 from johanot/ceph-15
ceph: 14.2.10 -> 15.2.4
2020-07-14 20:10:23 +02:00
Florian Klink b0a107335a Merge pull request #91359 from oxalica/rust-analyzer
rust-analyzer: 2020-06-08 -> 2020-07-13, and fix version display
2020-07-14 18:03:39 +02:00
Florian Klink a224b6e18f Merge pull request #93024 from flokli/lvm-fixes
lvm: cleanups
2020-07-14 13:53:15 +02:00
Florian Klink 9583669422 lvm2: passthru tests 2020-07-14 12:56:35 +02:00
Florian Klink 12d32eefed lvm2: rename enable_{cmdlib,dmeventd} to enable{Cmdlib,Dmeventd}
Make this more consistent with how these flags look like in the rest of
nixpkgs.
2020-07-14 12:00:33 +02:00
Florian Klink e55ef86ebd systemd_with_lvm2: remove
This is already handled by the lvm module, which now properly adds the
lvm systemd generators.

Initially introduced in c0fd88748a.
2020-07-14 12:00:33 +02:00
Florian Klink 20be1467ed Merge pull request #93067 from Luflosi/nextpnr-fix-macos
nextpnr: fix build on macOS
2020-07-13 22:17:49 +02:00
Florian Klink 2e2cd5c018 Merge pull request #93077 from RomanSharapov/add-configurable-keepalive
nixos/buildbot: enable configurable keepalive for buildbot worker
2020-07-13 21:21:23 +02:00
Florian Klink b97e93e8bb Merge pull request #93076 from Luflosi/update/lolcat
lolcat: 100.0.0 -> 100.0.1
2020-07-13 19:49:23 +02:00
Florian Klink 56e63ca017 gerrit: add myself to maintainers 2020-07-13 17:41:32 +02:00
Florian Klink 9f83907013 lvm2: only split bin and lib out from out if cmdlib isn't enabled 2020-07-12 23:04:33 +02:00
Florian Klink b8129312bd lvm2: fix location to systemd-run invocation 2020-07-12 23:04:33 +02:00
Florian Klink d3a991d410 lvm2: add multiple output support 2020-07-12 23:04:33 +02:00
Florian Klink df67459b89 lvm2: don't embed ./configure line in lvm2 binary 2020-07-12 23:04:33 +02:00
Florian Klink 198d1e6f5c lvm2: make --enable-cmdlib optional
This seems to be mostly used to simplify LV management tasks from a web
interface
(https://www.redhat.com/archives/linux-lvm/2008-September/msg00029.html),
and is as fat as the `lvm` binary itself
2020-07-12 23:04:33 +02:00
Florian Klink fbe7027251 lvm2: fetch sources from http instead of git
Otherwise, we end up in a dependency cycle:

systemd -> cryptsetup -> lvm -> fetchgit -> git -> openssh -> libfido2 -> hidapi -> libusb -> udev=systemd
2020-07-12 23:04:33 +02:00
Florian Klink 5e1eb7bd59 lvm2: cleanups, make udev optional
- use installTargets again ("install", and
   "install_systemd_{generators,units,configuration}" when udev is not
   null)
 - The call to the blkid binary in lvm2's 13-dm-disk.rules file
   disappeared (so we don't need to patch in blkid anymore).
   lvm seems to rely on udev's internal blkid functionality.
 - Call /run/current-system/systemd/bin/udevadm instead
   of ${systemd}/bin/udevadm in the lvm activation generator.
   This is not necessary to break the dependency cycle (as we don't use
   that file when building without udev), but a good idea anyways -
   We want to trigger the udevadm of the current system, not the one
   that lvm was built with.
2020-07-12 23:04:33 +02:00
Florian Klink 2d2b7513d9 lvm2: remove unused default.upstream file 2020-07-12 23:04:32 +02:00
Florian Klink 3b2b3f7c53 nixos/systemd: add missing defaults, make options nullable
Otherwise evaluation will fail if these are not set.
2020-07-12 12:16:26 +02:00
Florian Klink b7ff71a90c Merge pull request #92933 from RaghavSood/bug/92910
nixos/users-groups: fix mkChangedOptionModule for root password hash
2020-07-12 10:11:43 +02:00
Florian Klink 94dc0c006e Merge pull request #92759 from mdlayher/mdl-systemd-watchdog
nixos/systemd: add options for hardware watchdog management
2020-07-12 09:35:25 +02:00
Florian Klink 9a3c1892ee Merge pull request #92879 from matthuszagh/glasgow
python3Packages.glasgow: unstable-2020-02-08 -> unstable-2020-06-29
2020-07-12 00:26:48 +02:00
Florian Klink 8c0708f0bb Merge pull request #91424 from i077/restic-rclone-opts
nixos/restic: Add rclone options
2020-07-11 23:57:47 +02:00
Florian Klink 4b18e4cef6 Merge pull request #92789 from bachp/ocrmypdf-10.2.0
ocrmypdf: 9.8.2 -> 10.2.0
2020-07-11 23:45:36 +02:00
Florian Klink 12834b3e87 Merge pull request #91232 from primeos/systemd-allow-transient-hostname
systemd: Allow setting the transient hostname via DHCP
2020-07-11 22:28:52 +02:00
Florian Klink 34663b0fc1 gerrit: 3.1.5 -> 3.2.2 2020-07-11 15:07:54 +02:00
Florian Klink 0057be6ebc Merge pull request #92000 from f4814/platformio-udev
platformio: Add udev rules to package output
2020-07-11 14:10:33 +02:00
Florian Klink 785b558e66 Merge pull request #92781 from r-ryantm/auto-update/gtkwave
gtkwave: 3.3.104 -> 3.3.105
2020-07-11 13:57:57 +02:00
Florian Klink 1b78e0eeec Merge pull request #73365 from colemickens/nixpkgs-firefox-libglvnd
firefox-wrapper: rename gdkWayland->forceWayland; always use libglvnd
2020-07-11 13:49:39 +02:00
Florian Klink 2bb6bc6648 Merge pull request #92823 from colemickens/firefox-drm
firefox{,-bin}: add 'mesa', for wayland/drm
2020-07-11 13:48:22 +02:00
Florian Klink 98b2a62eda Merge pull request #92915 from Patagonicus/issue-91706
Revert "bashCompletion: speed-up test execution by using xdist"
2020-07-11 13:32:29 +02:00
Florian Klink ee472d5811 Merge pull request #92903 from eadwu/networkd/fix-field-usedns
nixos/networkd: correct DHCPv6 UseDNS field
2020-07-11 13:32:05 +02:00
Florian Klink ee9123ddb9 python3.pkgs.certbot-dns-rfc2136: init at 1.6.0 2020-07-09 11:21:50 +02:00
Florian Klink b9d97f313b python3.pkgs.certbot-dns-route53: init at 1.6.0 2020-07-09 11:21:50 +02:00
Florian Klink 9b4364d703 python3.pkgs.certbot-dns-cloudflare: init at 1.6.0 2020-07-09 11:21:50 +02:00
Florian Klink 62ff70eae6 Merge pull request #91656 from colemickens/vimplugins
vimplugins: update.py supports GitHub Access tokens; add completion-nvim, completion-treesitter
2020-07-08 22:34:49 +02:00
Florian Klink 9e5f550af9 nixos/networkd: fix systemd.network.netdevs.<name>.vlanConfig.Id example
This is passed as integer, not string.

Closes https://github.com/NixOS/nixpkgs/issues/91172.
2020-07-08 20:43:17 +02:00
Florian Klink 6e63209f28 Merge pull request #92635 from petabyteboy/feature/gitlab-13-0-9
gitlab: 13.0.8 -> 13.0.9
2020-07-08 20:12:34 +02:00
Florian Klink 7f6f990d53 certbot: 1.3.0 -> 1.6.0
This includes https://github.com/certbot/certbot/pull/8081, so we can
stop shipping our custom patch to workaroung things, and start packaging
more certbot plugins.

Other release notes:
 - https://github.com/certbot/certbot/releases/tag/v1.4.0
 - https://github.com/certbot/certbot/releases/tag/v1.5.0
 - https://github.com/certbot/certbot/releases/tag/v1.6.0
2020-07-08 11:50:31 +02:00
Florian Klink d986fccd9d gitlab: 13.0.6 -> 13.0.8 (#92060) 2020-07-06 22:44:18 +02:00
Florian Klink f12ad780bf Merge pull request #90280 from danielfullmer/qemu-vm-uefi-aarch64
EFI improvements for qemu-vm.nix
2020-07-06 22:04:27 +02:00
Florian Klink e218d2f13c Merge pull request #92479 from r-ryantm/auto-update/python2.7-twilio
python27Packages.twilio: 6.39.0 -> 6.43.0
2020-07-06 21:25:10 +02:00
Florian Klink 52c3a80050 Merge pull request #91084 from utdemir/intro-stream-layered-image
dockerTools: add streaming image support, improve speed and reduce IO
2020-06-29 10:20:19 +02:00
Florian Klink aed85b7279 Merge pull request #85223 from arianvp/acme-fix-nginx-after
nixos/acme: Fix ordering of certificate requests (#81482)
2020-06-29 10:17:25 +02:00
Florian Klink 9e248c9ec9 Merge pull request #91046 from NinjaTrappeur/nin-delete-vm-state
test-driver.py: delete VM state directory after test run
2020-06-28 18:41:38 +02:00
Florian Klink 5897105701 Merge pull request #88598 from betaboon/xdg-desktop-portal-172
xdg-desktop-portal: 1.6.0 -> 1.7.2
2020-06-24 09:45:20 +02:00
Florian Klink 3521a4760f xdg-desktop-portal-gtk: 1.6.0 -> 1.7.1 2020-06-24 09:28:27 +02:00
Florian Klink 6c1b8969b6 Merge pull request #91371 from B4dM4n/generic-extlinux-compatible-docbook
nixos/generic-extlinux-compatible: fix docbook syntax
2020-06-23 21:12:36 +02:00