Commit Graph
100 Commits
Author SHA1 Message Date
Rickard Nilsson 225e412edb Remove myself as maintainer of some packages. 2019-08-20 15:24:01 +02:00
Rickard Nilsson 2473754ad2 mosquitto: 1.5.3 -> 1.5.4
Remove patch that has been merged upstrem.
2018-12-15 08:49:47 +01:00
Rickard Nilsson b20fcce195 nixos/nm-setup-hostsdir: RemainAfterExist -> RemainAfterExit 2018-12-15 08:33:28 +01:00
Rickard Nilsson d80292dbd2 nixos: Add option networking.networkmanager.dynamicHosts
This allows non-privileged users to configure local DNS
entries by editing hosts files read by NetworkManager's dnsmasq
instance.

Cherry-picked from e6c3d5a507909c4e0c0a5013040684cce89c35ce and
5a566004a2b12c3d91bf0acdb704f1b40770c28f.
2018-07-07 17:15:35 +02:00
Rickard Nilsson 1de251c664 haskellPackages.LDAP: Fix build 2017-12-29 11:42:20 +01:00
Rickard Nilsson d788545172 geolite-legacy: 2017-09-17 -> 2017-10-25 2017-10-25 13:55:00 +02:00
Rickard Nilsson 2fd11b762f nixos/elasticsearch: Do not try to run sysctl if running in container, since it fails 2017-10-24 22:31:06 +02:00
Rickard Nilsson 85049c5aad ruby: 2.3.4 -> 2.3.5
Fixes CVE-2017-14033, CVE-2017-0898
2017-09-30 22:43:20 +02:00
Rickard Nilsson 72b46f3631 Merge pull request #29375 from bkchr/network_manager_1_8_2
network-manager: 1.6.2 -> 1.8.2
2017-09-25 09:52:19 +02:00
Rickard Nilsson 005a672139 Merge pull request #29501 from moaxcp/obnam
obnam: 1.21 -> 1.22
2017-09-19 13:17:39 +02:00
Rickard Nilsson 31eea73f99 libsndfile: Security patches
Fixes CVE-2017-12562, CVE-2017-6892, CVE-2017-8361, CVE-2017-8363,
CVE-2017-8363, CVE-2017-8362
2017-08-17 18:33:09 +02:00
Rickard Nilsson 5f8a45c136 shadow: 4.4 -> 4.5
Fixes CVE-2017-12424
2017-08-17 13:23:56 +02:00
Rickard Nilsson 1f9d9deb8a libxslt: Patch for CVE-2017-5029 2017-08-17 13:23:49 +02:00
Rickard Nilsson 129f8d7e99 kibana: 4.6.0 -> 4.6.5
Fixes CVE-2016-10366
2017-08-14 15:03:12 +02:00
Rickard Nilsson 3c136e5fa4 dpkg: 1.18.18 -> 1.18.24
Fixes CVE-2017-8283
2017-08-14 14:00:12 +02:00
Rickard Nilsson a6cf6367e2 network-manager: hostname option is deprecated
From log:
<warn>  [1498639184.8965] keyfile: 'hostname' option is deprecated and has no effect
2017-06-28 10:56:31 +02:00
Rickard Nilsson a92bdc54e3 nixos/luks: Silence killall complain about non-existing cryptsetup processes 2017-05-16 09:50:10 +02:00
Rickard Nilsson 37847f263c haskellPackages.tailfile-hinotify: Disable test suite 2017-03-31 11:15:17 +02:00
Rickard Nilsson fb5369dbe9 haskellPackages.streaming-eversion: dontCheck 2017-03-08 17:18:18 +01:00
Rickard Nilsson 8665250844 haskellPackages.dirstream: jailbreak 2017-02-14 13:48:44 +01:00
Rickard Nilsson 232639ccbb haskellPackages: Remove jailbreak for xxhash and Glob (fixed upstream) 2017-02-14 13:47:12 +01:00
Rickard Nilsson cda4a4dcfc nixos/grafana: Don't print password warning if no password has been set 2017-02-13 23:11:40 +01:00
Rickard Nilsson e3597b9ddf grafana: 4.0.2 -> 4.1.1 2017-01-20 16:29:54 +01:00
Rickard Nilsson 7f71dd0c49 opentsdb: 2.2.0 -> 2.3.0 2017-01-20 09:52:30 +01:00
Rickard Nilsson 1948cdf3f4 elasticsearch2: Minor cleanup 2017-01-20 09:52:07 +01:00
Rickard Nilsson 86fc322e0a elasticsearch2: 2.4.0 -> 2.4.4 2017-01-20 09:51:40 +01:00
Rickard Nilsson 7b885e339b hbase: 0.98.19 -> 0.98.24 2017-01-20 09:51:05 +01:00
Rickard Nilsson b02e6cc70d libvirt and pythonPackages.libvirt: 2.2.0 -> 2.5.0 2016-12-19 11:52:02 +01:00
Rickard Nilsson 327a650f09 google-cloud-sdk: 134.0.0 -> 138.0.0 2016-12-19 09:05:45 +01:00
Rickard Nilsson 4b3f1063aa Merge pull request #21272 from mguentner/sshopts_fix
nixos-rebuild: Fix SSHOPTS typo
2016-12-19 08:18:43 +01:00
Rickard Nilsson 6bbdad7d11 haskell-xxhash: Use doJailbreak instead of sed 2016-11-01 11:34:14 +01:00
Rickard Nilsson 58707589d2 haskell-xxhash: fix build with GHC 8.x 2016-11-01 11:01:51 +01:00
Rickard Nilsson e551b3a524 grafana: 3.1.0 -> 3.1.1 2016-09-27 21:01:24 +02:00
Rickard Nilsson 65b0cfdb3d elasticsearch2: 2.3.4 -> 2.4.0 2016-09-27 20:15:38 +02:00
Rickard Nilsson ab9537ca22 nixos: Generalise the container tests in stage-2 boot
This way, stage-2 behaves correctly also for libvirt-lxc containers.

Some more discussion on this:
https://github.com/NixOS/nixpkgs/commit/a7a08188bf650ababa36300a9a6f34169e2a73bf
https://github.com/NixOS/nixpkgs/commit/bfe46a653ba2f8ff9902128f485cbd87c49cbca7
2016-09-07 07:50:04 +00:00
Rickard Nilsson 28e378d462 nodePackages.elasticdump: init at 2.4.2 2016-09-06 18:22:05 +00:00
Rickard Nilsson 28ceb0f31a haskellPackages.lens: Fix dependencies for ghc7.10.x 2016-09-06 10:26:18 +02:00
Rickard Nilsson 3d03d3e615 libvirt and pythonPackages.libvirt: 2.1.0 -> 2.2.0 2016-09-06 07:47:56 +02:00
Rickard Nilsson f25006bfaf google-cloud-sdk: 113.0.0 -> 122.0.0 2016-08-24 13:19:38 +02:00
Rickard Nilsson 7a3260c590 libvirt and pythonPackages.libvirt: 2.0.0 -> 2.1.0 2016-08-21 09:51:24 +02:00
Rickard Nilsson 17c86df793 haskellPackages.aeson: Fix version in configuration-ghc-7.10.x 2016-08-21 09:50:52 +02:00
Rickard Nilsson f47ec8c744 haskellPackages.Glob: Fix version in configuration-ghc-7.10.x 2016-08-21 09:50:35 +02:00
Rickard Nilsson 8fa4dc174f Merge pull request #16899 from kragniz/lxc-2.0.3
lxc: 2.0.1 -> 2.0.3
2016-07-16 10:37:12 +02:00
Rickard Nilsson 4f8f1c30cb openssh: Use the default privilege separation dir (/var/empty)
(This is a rewritten version of the reverted commit
a927709a35, that disables the creation of
/var/empty during build so that sandboxed builds also works. For more
context, see https://github.com/NixOS/nixpkgs/pull/16966)

If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-16 10:15:58 +02:00
Rickard Nilsson a927709a35 openssh: Use the default privilege separation dir (/var/empty)
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-14 20:54:06 +02:00
Rickard Nilsson 51c6c98529 freecad: 0.15 -> 0.16 2016-07-07 09:24:49 +02:00
Rickard Nilsson 5356154366 libvirt and pythonPackages.libvirt: 1.3.5 -> 2.0.0 2016-07-02 00:24:36 +02:00
Rickard Nilsson 8404d626ad libvirt: Fix libsystemd dependency 2016-07-01 20:12:33 +02:00
Rickard Nilsson 7d67a4da99 nixos/libvirtd: Don't use the --daemon flag now that we use the 'notify' service type 2016-07-01 18:21:42 +02:00
Rickard Nilsson 9facb7078b nixos/elasticsearch: Set a group on the user
This fixed a problem I had when running ElasticSearch in an LXC
container, and it doesn't hurt using a dedicated group instead of
nogroup anyway.
2016-07-01 18:21:42 +02:00
Rickard Nilsson a0c0f63811 nixos/libvirt: Syntactic-only refactoring 2016-06-27 13:32:24 +02:00
Rickard Nilsson 301b4e9018 nixos/libvirt: Add virtlogd and virtlockd systemd sockets and services 2016-06-27 13:32:21 +02:00
Rickard Nilsson 1b54e48561 nixos/libvirt: Adapt libvirtd.service to upstream sources 2016-06-27 13:04:52 +02:00
Rickard Nilsson 37f4889851 nixos/libvirt: Remove non-functional service libvirt-guests
It doesn't have a start script, so it hasn't worked at all in
a long time.
2016-06-27 10:34:29 +00:00
Rickard Nilsson 58e732978f spotify: 1.0.32.94 -> 1.0.32.96 2016-06-26 11:01:13 +02:00
Rickard Nilsson b43268bfeb libvirt and pythonPackages.libvirt: 1.3.3 -> 1.3.5 2016-06-26 11:01:13 +02:00
Rickard Nilsson e002504422 bosun: 0.5.0-rc4 -> 0.5.0 2016-06-26 05:58:52 +00:00
Rickard Nilsson 5193c3e1b9 jetty: 9.3.9 -> 9.3.10 2016-06-26 05:58:35 +00:00
Rickard Nilsson 548a136345 google-cloud-sdk: 109.0.0 -> 113.0.0 2016-06-10 09:07:01 +00:00
Rickard Nilsson 656c48f141 opentsdb: 2.1.1 -> 2.2.0 2016-06-10 08:17:20 +00:00
Rickard Nilsson 70338f4981 bosun: 0.5.0-alpha -> 0.5.0-rc4 2016-06-10 08:00:18 +00:00
Rickard Nilsson b9922661b8 jetty: Remove obsolete versions and init new default to 9.3.9.v20160517 2016-06-10 07:59:59 +00:00
Rickard Nilsson 335ccfcf34 hbase: 0.98.13 -> 0.98.19 2016-06-10 07:59:11 +00:00
Rickard Nilsson 9657844db2 fluentd: 0.12.6 -> 0.14.0 2016-06-10 01:35:39 +00:00
Rickard Nilsson 511565e996 kibana: 4.4.1 -> 4.5.1 2016-06-10 01:35:39 +00:00
Rickard Nilsson 4e706a13c8 openldap: Remove unused patch 2016-05-25 16:32:52 +00:00
Rickard Nilsson 92ce529880 Revert "openldap: Remove dontPatchELF"
This reverts commit 366c1e88fc, that
caused OpenLDAP to not find its own libs. See discussion in
https://github.com/NixOS/nixpkgs/commit/366c1e88fc811e1ceb03e897d883b7bd765e7627
2016-05-25 16:31:23 +00:00
Rickard Nilsson 13b8606241 qemu: 2.5.1 -> 2.6.0 2016-05-25 10:42:45 +02:00
Rickard Nilsson efe33d6e87 openldap: 2.4.42 -> 2.4.44 2016-04-01 08:51:37 +02:00
Rickard Nilsson 3b718bd5a0 rt: 4.2.12 -> 4.4.0 2016-03-23 00:17:50 +01:00
Rickard Nilsson 6ff5821be6 nixos/filesystems: Fix fs options type error 2016-03-14 17:24:36 +01:00
Rickard Nilsson 2ce19d0ba4 Merge pull request #12935 from romildo/fix-opensmtp
opensmtpd: compile with support for 'db' tables
2016-02-13 08:02:26 +01:00
Rickard Nilsson 5c20877d40 opensmtpd: Add option that can disable adding sendmail to the system path 2016-02-06 11:54:56 +01:00
Rickard Nilsson 23beba4994 goPackages.oauth2_proxy: init at 20160120
Also add missing dependency:

goPackages.hmacauth: init at 20151013
2016-02-04 11:43:37 +01:00
Rickard Nilsson e430f14da3 nixos-rebuild: Don't propagate --no-out-link arg to nix-store 2016-02-01 10:54:58 +01:00
Rickard Nilsson b5b7805543 nixos-rebuild: Do not create result symlinks for boot/switch actions (resolves #12665) 2016-02-01 10:37:53 +01:00
Rickard Nilsson 51c6383ebd nixos-rebuild: Build only the 'out' output of nix (not 'doc' and 'debug' too)
This fixes the failing NixOS installer tests.
2016-01-20 10:01:59 +01:00
Rickard Nilsson fb2eae08d5 Revert "Revert "nixos-rebuild: Add option for building and/or deploying on a remote host""
This reverts commit 78be7f5a53.
2016-01-20 10:01:59 +01:00
Rickard Nilsson ce543ebf27 elasticsearch: Fix some startup warnings 2016-01-18 15:57:59 +01:00
Rickard Nilsson d6f9f13512 bosun: Create ledisDir in pre-start script 2016-01-18 15:57:59 +01:00
Rickard Nilsson 7772293a0a Merge pull request #12099 from jmitchell/patch-1
Fix package name typo
2016-01-02 23:53:41 +01:00
Rickard Nilsson 448a2af041 nixos-rebuild: Document --build-host and --target-host options 2016-01-01 18:22:11 +01:00
Rickard Nilsson ca0c460406 nixos-rebuild: Add option for building and/or deploying on a remote host
This commit adds the options --build-host and --target-host to nixos-rebuild.

--build-host instructs nixos-rebuild to perform all nix builds on the
specified host (via ssh). Build results are then copied back to the
local machine and used when activating the system.

--build-target instructs nixos-rebuild to activate the configuration
not on the local machine but on the specified remote host. Build
results are copied to the target machine and then activated there (via ssh).

It is possible to combine the usage of --build-host and --target-host,
in which case you can perform the build on one remote machine and deploy
the configuration to another remote machine. The only requirement is that
the build host has a working ssh connection to the target host (if the
target is not local), and that the local machine can connect to both
the target and the build host. Also, your user must be allowed to copy
nix closures between the local machine and the target and host machines.

At no point in time are the configuration sources (the nix files) copied
anywhere. Instead, nix evaluation always happens locally
(with nix-instantiate). The drv-file is then copied and realised remotely
(with nix-store).

As a convenience, if only --target-host is specified, --build-host is
implicitly set to that host too. So if you want to build locally and deploy
remotely you have to explicitly set "--build-host localhost".

To activate (test, boot or switch) you need to have root access to the
target host. You can specify this by "--target-host root@myhost".

I have tested the obvious scenarios and they are working. Some of the
combinations of --build-host and --target-host and the various actions might
not make much sense, and should maybe be forbidden (like setting a remote
target host when building a VM), and some combinations might not work at all.
2016-01-01 18:21:59 +01:00
Rickard Nilsson c634e5cd24 Merge pull request #11730 from spwhitt/mopidy
Mopidy Improvements
2015-12-17 20:42:13 +01:00
Rickard Nilsson 46905425cf Merge pull request #11477 from jgillich/mopidy-gmusic
mopidy-gmusic: init at 1.0.0
2015-12-15 10:15:51 +01:00
Rickard Nilsson 38196171e8 Merge pull request #10773 from rvl/longview
Linode Longview package and module
2015-11-24 13:16:30 +01:00
Rickard Nilsson 3e18ddae49 Merge pull request #11005 from robbinch/fix-nix-serve
Change argument --port to --listen in nix-serve.nix
2015-11-16 11:43:31 +01:00
Rickard Nilsson fa3dad1f9c nixos/bosun: Make the check frequency configurable 2015-11-07 23:59:23 +01:00
Rickard Nilsson e0a650d87a printrun: 2014^C01 -> 20150310 2015-10-27 11:23:12 +01:00
Rickard Nilsson d4bebcbd12 collectd: 5.4.2 -> 5.5.0 2015-10-22 13:07:56 +02:00
Rickard Nilsson 321a6b2248 google-cloud-sdk: 0.9.74 -> 0.9.82 2015-10-20 12:15:00 +02:00
Rickard Nilsson 38fa633b3a Merge pull request #10423 from waern/ghcjs-parameterise
ghcjs: make it easier to override shims and ghcjs-boot
2015-10-16 22:20:28 +02:00
Rickard Nilsson c0a83cbc49 opentsdb nixos module: Add option for defining OpenTSDB's configuration 2015-09-30 18:31:27 +02:00
Rickard Nilsson 94eac9ccbd opentsdb: 2.1.0 -> 2.1.1 2015-09-29 14:26:12 +02:00
Rickard Nilsson ed140ff927 bosun,scollector: Fix NixOS modules to use bin attr of go pkgs 2015-09-04 21:46:10 +02:00
Rickard Nilsson 30313a8fb8 google-cloud-sdk: 0.9.65 -> 0.9.74 2015-08-26 02:03:13 +02:00
Rickard Nilsson 0d52a300f6 Merge pull request #9158 from mstarzyk/obnam
obnam: Add dependency on python fuse. Fixes 'obnam mount'.
2015-08-12 11:11:49 +02:00
Rickard Nilsson d212c666cf Merge pull request #9205 from vbgl/zim-63
zim: 0.62 -> 0.63
2015-08-12 11:10:42 +02:00
Rickard Nilsson ab6737a70a Merge pull request #9210 from nathanielbaxter/dev/keepass
keepass: update 2.29 -> 2.30
2015-08-12 11:10:10 +02:00
Rickard Nilsson cef8f0180d Merge pull request #9213 from j-keck/sbt0.13.9
sbt: 0.13.8 -> 0.13.9
2015-08-12 11:02:42 +02:00