Commit Graph
35454 Commits
Author SHA1 Message Date
Dries Van Daele 412b970479 Update YAP to version 6.2.2 2013-09-11 19:40:10 +02:00
Dries Van Daele 3d5e7a99f4 Update SWI-Prolog to version 6.4.1 2013-09-11 19:00:31 +02:00
Peter Simons 1103ba84fd modules/misc/ids.nix: patch tcpcrypt to use our uid
The default uid 666 exceeds SYS_UID_MAX (499), so it might not be available
anyway.
2013-09-11 18:58:37 +02:00
Peter Simons 4a7d8a84bc modules/services/networking/tcpcrypt.nix: specify start-up dependencies in systemd style
Thanks, Eelco, for pointing this out.
2013-09-11 18:56:09 +02:00
Peter Simons c749c24076 tcpcrypt: patch tcpcryptd to run under uid 93 instead of 666 2013-09-11 17:24:32 +02:00
Peter Simons e761405c50 os-specific/darwin/setfile: drop the "unfree" license
Setfile is included by other derivation, which in turns makes them unfree, too.
This causes plenty of evaluation errors on Hydra, i.e.:

  at `haskellPackages_ghc763_profiling.wx.x86_64-darwin' [nixpkgs = ..., officialRelease = false]:
  user-thrown exception: package ‘setfile’ has an unfree license, refusing to evaluate

Now, it's true that "setfile" is unfree, but this doesn't affect us: our
derivation doesn't include the actual binary -- it just contains a symlink to
"/usr/bin/SetFile". Arguably, our setfile derivation is free and we can
re-distribute it.
2013-09-11 13:08:46 +02:00
Vladimír Čunát 2dc0f91806 mesa: fix the default DRI driver dir to /run/opegl-driver{,-32} 2013-09-11 11:38:15 +02:00
Peter Simons b6501c0097 modules/misc/ids.nix: add a comment explaining why tcpcryptd has uid 666. 2013-09-11 11:09:30 +02:00
Rob Vermaas aa28196ec4 Update hash for fail2ban 2013-09-11 10:44:14 +02:00
Vladimír Čunát aa8e8303e1 Merge branch 'x-updates' into master 2013-09-11 08:37:03 +02:00
Peter Simons b728835bc1 Merge pull request #953 from errge/statvfs
Add statvfs haskell library
2013-09-10 15:32:34 -07:00
Peter Simons 0afcc637d7 Add support for opportunistic TCP encryption.
Set "networking.tcpcrypt.enable = true;" to enable opportunistic TCP encryption
based on the user-space tools available from <http://tcpcrypt.org>.

Network attackers come in two varieties: passive and active (man-in-the-middle).
Passive attacks are much simpler to execute because they just require listening
on the network. Active attacks are much harder as they require listening and
modifying network traffic, often requiring very precise timing that can make
some attacks impractical.

Opportunistic encryption cannot protect against active attackers, but it *does*
protect against passive attackers. Furthermore, Tcpcrypt is powerful enough to
stop active attacks, too, if the application using it performs authentication.

A complete description of the protocol extension can be found at
<http://tools.ietf.org/html/draft-bittau-tcp-crypt-00>.
2013-09-10 23:32:55 +02:00
Peter Simons e08fab28f5 Um, make that 'linuxHeaders26'. Sorry. 2013-09-10 21:16:33 +02:00
Peter Simons 5a75874b96 all-packages.nix: add 'linuxHeaders36' attribute
We have that version of the kernel headers in Nixpkgs already, there was
just no attribute for them.
2013-09-10 21:15:41 +02:00
Rickard Nilsson d1882a1940 trac: Update to 1.0.1. The old version did not work at all with the current genshi package (0.7). 2013-09-10 19:19:27 +02:00
Eelco Dolstra b73deae714 nix: Update to 1.6 2013-09-10 17:53:29 +02:00
Vladimír Čunát bb6b42385d Merge PR #901: adding Storm
vcunat edit: use symlink instead of hardlink (failed for me with a
cross-device error), minor whitespace cleanup
2013-09-10 16:18:31 +02:00
Gergely Risko b2c97f6ca5 Add statvfs haskell library 2013-09-10 16:06:56 +02:00
Eelco Dolstra 70fee5da11 Fix Nixpkgs evaluation
The evaluation of liferea causes an error:

  error: assertion failed at `/tmp/nix-build-nixpkgs-tarball-1.0pre28992_1628c03.drv-0/git-export/pkgs/desktops/gnome-2/desktop/libgweather/default.nix:4:1'

Why this happens is a mystery, since liferea doesn't depend on
libgweather.  The problem can be reproduced by evaluating:

  builtins.toXML (import <nixpkgs> { system = "x86_64-darwin"; }).liferea

It seems to have something to do with builderDefs magic in webkit_gtk2.

http://hydra.nixos.org/build/6039089
2013-09-10 15:54:06 +02:00
Eelco Dolstra c4092f2a8d firewall.nix: Less verbosity 2013-09-10 15:17:52 +02:00
Eelco Dolstra 94bb48be78 firewall.nix: Don't make missing rpfilter support a fatal error
This makes upgrading from Linux 3.2 to 3.4 a bit nicer.
2013-09-10 15:17:52 +02:00
Eelco Dolstra 64d648e92e Update nixUnstable 2013-09-10 13:57:32 +02:00
Domen Kožar 1628c03c4e upgrade deform and deform_bootstrap 2013-09-10 12:28:10 +02:00
Vladimír Čunát ea8a7bcd0c libav: update 9.8 -> 9.9
It's supposed to include some security-related fixes.
2013-09-10 10:42:33 +02:00
Peter Simons aeefa7b070 Cabal-1.18.0: this version won't build without deepseq 1.3 or later 2013-09-09 15:07:38 +02:00
Peter Simons 66f905c14e haskell-yesod-platform: update to version 1.2.4.2 2013-09-09 15:07:37 +02:00
Peter Simons 563786deff haskell-unix-bytestring: update to version 0.3.7 2013-09-09 15:07:37 +02:00
Peter Simons 32d609654c haskell-free: update to version 3.4.2 2013-09-09 15:07:37 +02:00
Peter Simons bca133d225 haskell-dimensional: update to version 0.12.1.1 2013-09-09 15:07:37 +02:00
Peter Simons 7e8b474485 haskell-digestive-functors-heist: update to version 0.8.0.0 2013-09-09 15:07:37 +02:00
Peter Simons 09477f6002 haskell-HaRe: update to version 0.7.0.2 2013-09-09 15:07:36 +02:00
Peter Simons 28c5958658 haskell-thyme: disable the test suite some more 2013-09-09 15:07:36 +02:00
Peter Simons 0e7783c608 haskell-exceptions: re-generate with cabal2nix 2013-09-09 15:07:35 +02:00
Rob Vermaas eac934c83a Fix collectd, couldn't run due to missing pthread_cancel. 2013-09-09 13:05:50 +02:00
Rob Vermaas 3a8adb7014 Update nixops to 1.1 2013-09-09 13:03:59 +02:00
Peter Simons 0c5cf00829 tcpcrypt: add current HEAD of the Github master branch 2013-09-09 12:56:22 +02:00
Peter Simons 2282809b35 libnetfilter_queue: add version 1.0.2 2013-09-09 12:52:31 +02:00
Peter Simons 9f6d539707 cabal-install-1.18.0.1: this package requires Cabal 1.18.x to compile 2013-09-09 12:23:00 +02:00
Peter Simons a9d625b3dc haskell-tagsoup: Revert "update to version 0.13"
This reverts commit d0b0d530b6. The new version
breaks the build of Pandoc.
2013-09-09 10:44:55 +02:00
Peter Simons da69f13863 haskell-pandoc-types: Revert "update to version 1.12"
This reverts commit 17f8b63837. The new version
breaks Pandoc, curiously enough. Who would have thought? Everyone seems to be
going Snoyman these days.
2013-09-09 10:43:15 +02:00
Peter Simons b2a54d51b5 haskell-vault: jailbreak to fix build with older versions of GHC 2013-09-09 10:20:27 +02:00
Peter Simons d58b4205c8 haskell-thyme: disable unit tests
https://github.com/liyang/thyme/issues/4
2013-09-09 10:02:30 +02:00
Peter Simons 2943574903 haskell-citeproc-hs: jailbreak to fix build with recent pandoc-types 2013-09-08 22:56:29 +02:00
Peter Simons 53f8f8f50d haskell-digestive-functors-heist: jailbreak to fix the build with recent heist 2013-09-08 22:56:29 +02:00
Peter Simons c8c7a8dc42 haskell-keter: update to version 1.0.1 2013-09-08 22:56:29 +02:00
Peter Simons c690153d55 haskell-yesod: update to version 1.2.2.1 2013-09-08 22:56:29 +02:00
Peter Simons 39ac320e8e haskell-yesod-platform: update to version 1.2.4.1 2013-09-08 22:56:29 +02:00
Peter Simons fb3e61ffb8 haskell-yesod-form: update to version 1.3.2.1 2013-09-08 22:56:29 +02:00
Peter Simons 60264d6136 haskell-yesod-core: update to version 1.2.4.2 2013-09-08 22:56:28 +02:00
Peter Simons 8b15f9ce5a haskell-yesod-bin: update to version 1.2.3.2 2013-09-08 22:56:28 +02:00