Commit Graph
100 Commits
Author SHA1 Message Date
Eelco Dolstra f713e7033e nixUnstable: Update to 1.9pre4087 2015-04-03 11:40:12 +02:00
Eelco Dolstra 94eb519e19 Add nfs4 test 2015-04-02 17:44:48 +02:00
Eelco Dolstra 1c39a47ac8 Reload, don't restart, dbus.service
Many bus clients get hopelessly confused when dbus-daemon is
restarted. So let's not do that.

Of course, this is not ideal either, because we end up stuck with a
possibly outdated dbus-daemon. But that issue will become irrelevant
in the glorious kdbus-based future.

Hopefully this also gets rid of systemd getting stuck after
dbus-daemon is restarted:

Apr 01 15:37:50 mandark systemd[1]: Failed to register match for Disconnected message: Connection timed out
Apr 01 15:37:50 mandark systemd[1]: Looping too fast. Throttling execution a little.
Apr 01 15:37:51 mandark systemd[1]: Looping too fast. Throttling execution a little.
...
2015-04-01 16:57:16 +02:00
Eelco Dolstra 33dfdbd0df php: Update to 5.4.39
CVE-2015-2787, CVE-2015-2348, CVE-2015-2305, CVE-2015-2331.
2015-04-01 16:22:12 +02:00
Eelco Dolstra 98cedb3d22 Remove obsolete .../sbin directories from $PATH 2015-04-01 16:22:12 +02:00
Eelco Dolstra fdfe4b7cde Remove unnecessary symlinks in /nix/var/nix/gcroots 2015-04-01 14:45:02 +02:00
Eelco Dolstra 4c8f0e8d1c firefox: Update to 37.0 2015-04-01 14:04:19 +02:00
Eelco Dolstra b8ccb390b3 blender: Update to 2.74 2015-04-01 13:31:05 +02:00
Eelco Dolstra 3779aa07f5 ffmpeg: Reduce dependency bloat
It was depending on Qt, MariaDB and PostgreSQL (via v4l-utils),
causing the closure size to explode from 475 MB to 1.3 GB.

http://hydra.nixos.org/job/nixpkgs/trunk/ffmpeg.x86_64-linux#tabs-charts

Also disabled a bunch of other mostly obscure dependencies.
2015-04-01 13:31:05 +02:00
Eelco Dolstra c82dc7018d Remove unused Darcs expression 2015-03-27 16:17:48 +01:00
Eelco Dolstra 5c0eb64d43 Set more precise meta.position for Haskell packages 2015-03-27 16:17:48 +01:00
Eelco Dolstra 8b2f209838 mkDerivation: Use function arguments 2015-03-27 16:17:48 +01:00
Eelco Dolstra 0e2257966f Disable packages that depend on <nixpkgs>
Nothing in Nixpkgs should use <nixpkgs>, because it can cause Nixpkgs
evaluation to depend in part on a different version of Nixpkgs,
leading to unpredictable results (including evaluation errors).
2015-03-27 16:17:48 +01:00
Eelco Dolstra b948978729 Merge pull request #7026 from KoviRobi/emacs-priority-downgrade
Downgraded Emacs priority, for exuberant ctags
2015-03-27 13:21:41 +01:00
Eelco Dolstra b4830add94 Revert "fix-darwin-dylib-names: Fix all outputs"
This reverts commit 253f3d72c2.
2015-03-24 16:27:54 +01:00
Eelco Dolstra 253f3d72c2 fix-darwin-dylib-names: Fix all outputs
This fixes the install names of the Boost dylibs on Darwin.
2015-03-24 15:59:05 +01:00
Eelco Dolstra 5cc05f6cf2 nixUnstable: Update to 1.9pre4083_5114a07 2015-03-24 14:42:37 +01:00
Eelco Dolstra 433d30b877 libguestfs: Don't build on Hydra
It produces a package over 4 GB large, and takes several hours to
build (probably because of the overhead of copying that 4 GB image).
2015-03-23 13:25:20 +01:00
Eelco Dolstra 8470b03db2 Remove unused file 2015-03-23 12:02:13 +01:00
Eelco Dolstra 8d685306c5 jwhois: Add missing meta.platforms 2015-03-23 11:51:59 +01:00
Eelco Dolstra 2ed5c2bd6b Set some meta.platforms
Also fix meta.platform -> meta.platforms in a few places.
2015-03-20 20:04:42 +01:00
Eelco Dolstra 0461f35894 Rename scrubDrv -> hydraJob and make it more effective
It now strictly evaluates all remaining attributes, preventing
unevaluated thunks that cannot be garbage-collected. It's also applied
to all jobs in Nixpkgs' release.nix.

This reduces hydra-eval-jobs' memory consumption on the 14.12
release-combined jobset from 5.1 GB to 2.0 GB.
2015-03-20 19:46:18 +01:00
Eelco Dolstra 738cf42639 release-lib: Simplify 2015-03-20 19:37:55 +01:00
Eelco Dolstra 6938090725 prosody: Remove bogus recurseIntoAttrs 2015-03-20 19:34:31 +01:00
Eelco Dolstra b981eb3f7b release-lib.nix: Style cleanup 2015-03-20 19:33:08 +01:00
Eelco Dolstra ef0e4d56f5 Use builtin seq/deepSeq 2015-03-20 19:29:21 +01:00
Eelco Dolstra dda16e0c06 pam_login: Remove
We haven't used/updated this package in years.
2015-03-20 16:38:21 +01:00
Eelco Dolstra 87c86f6711 pam_console: Remove
This package is no longer used in NixOS.
2015-03-20 16:18:10 +01:00
Eelco Dolstra 2fe351c7e3 openssl: Update to 1.0.1m
Fixes various "Moderate" / "Low" CVEs:
http://openssl.org/news/secadv_20150319.txt
2015-03-19 15:57:17 +01:00
Eelco Dolstra cb7b0f3c1b Merge pull request #6898 from joachifm/redundant-params
kernelPatches: remove unused parameters
2015-03-19 15:31:03 +01:00
Eelco Dolstra 224d0d5302 Set stricter permissions on /nix/store
The nixbld group doesn't need read permission, it only needs write and
execute permission.

(cherry picked from commit 066758758e7c0768ff8da51d208cdae0f33b368c)
2015-03-18 10:58:08 +01:00
Eelco Dolstra c1e1092b8b rsyslog: Move systemd check 2015-03-17 10:13:06 +01:00
Eelco Dolstra 3e6fb3887c Merge pull request #6823 from np/sqlite
Update sqlite to 3.8.8.3
2015-03-16 13:36:33 +01:00
Eelco Dolstra ebef573641 Merge pull request #6476 from ts468/squashfs
Change kernel config: improve squashfs support of kernel
2015-03-12 21:41:53 +01:00
Eelco Dolstra fa3bcc4f1c perf: Use libunwind and libbfd
This gives better stack traces.
2015-03-11 18:15:48 +01:00
Eelco Dolstra 798e613e16 kernel: Enable kprobes and other tracing features
All of these should have minimal performance impact unless enabled at
runtime.
2015-03-11 17:14:37 +01:00
Eelco Dolstra dfc6809215 Add perf-tools 2015-03-11 17:13:23 +01:00
Eelco Dolstra b2000f05d9 Merge pull request #6758 from k0ral/mercurial
mercurial: 3.2.4 -> 3.3.2
2015-03-11 15:52:16 +01:00
Eelco Dolstra 8a9e427174 Manual tweak 2015-03-11 15:34:57 +01:00
Eelco Dolstra dbbe200691 Merge pull request #6735 from wkennington/master.eglibc
eglibc: Remove as it is now defunct
2015-03-11 13:35:41 +01:00
Eelco Dolstra 475df1a350 switch-to-configuration: Don't print already active target units
Since we restart all active target units (of which there are many),
it's hard to see the units that actually matter. So don't print that
we're starting target units that are already active.
2015-03-09 16:51:06 +01:00
Eelco Dolstra a574065a81 nixos-rebuild: Add ‘dry-activate’ command
‘nixos-rebuild dry-activate’ builds the new configuration and then
prints what systemd services would be stopped, restarted etc. if the
configuration were actually activated. This could be extended later to
show other activation actions (like uids being deleted).

To prevent confusion, ‘nixos-rebuild dry-run’ has been renamed to
‘nixos-rebuild dry-build’.
2015-03-09 16:50:59 +01:00
Eelco Dolstra 8cb3e3b864 httpd: Disable insecure protocols/ciphers by default
This makes us resistant to FREAK and similar attacks.
2015-03-09 14:18:12 +01:00
Eelco Dolstra 7f90cc40b4 php: Update to 5.4.38 2015-03-09 11:36:40 +01:00
Eelco Dolstra e02d926ca9 nixUnstable: Update to 1.9pre4074_e659978 2015-03-09 11:27:22 +01:00
Eelco Dolstra d31202fba2 sshd: Enable seccomp sandboxing 2015-03-09 11:27:19 +01:00
Eelco Dolstra 3b9b620656 Revert "linux: disable UEVENT_HELPER*"
This reverts commit 9f87f3ccb0 because
it causes /proc/sys/kernel/hotplug to not be cleared on Linux <= 3.14.
2015-03-06 15:59:06 +01:00
Eelco Dolstra f110e6721f chromedriver: Fix evaluation 2015-03-06 15:11:41 +01:00
Eelco Dolstra 692ed0882a Fix eval-release.nix evaluation 2015-03-06 15:09:51 +01:00
Eelco Dolstra bf0aa66c17 Only test evaluation on supported platforms 2015-03-06 14:07:45 +01:00
Eelco Dolstra f72ae4da79 samba4: Fix evaluation
http://hydra.nixos.org/build/20173661
2015-03-06 14:07:45 +01:00
Eelco Dolstra ad896e1737 Typo 2015-03-06 12:09:10 +01:00
Eelco Dolstra d409516501 Merge pull request #6680 from cocreature/openjdk8u40
openjdk8: update to jdk8u40-b25
2015-03-05 18:10:13 +01:00
Eelco Dolstra 17bc5f9b38 dhcpcd: Update to 6.6.7 2015-03-05 17:25:56 +01:00
Eelco Dolstra 9bb586943a Deal with virtualisation.xen.stored in a more standard way 2015-03-05 12:46:50 +01:00
Eelco Dolstra 6f33aa8465 orig-gcc -> orig-cc 2015-03-04 22:15:46 +01:00
Eelco Dolstra 694f01db2d intersect -> intersectLists, subtract -> subtractLists 2015-03-04 22:15:46 +01:00
Eelco Dolstra 97fcb33ac2 cudatoolkit: Fix gcc -> cc
Urgh, we shouldn't have renamed gcc to cc...
2015-03-04 22:15:46 +01:00
Eelco Dolstra 829479d1dd substract -> subtract 2015-03-04 22:15:45 +01:00
Eelco Dolstra c502efc72a linux: Enable Intel idle driver
Also build the performance governor into the kernel so there is a sane
default. Note that cpufreq.service will still load "ondemand" on
non-pstate systems.
2015-03-04 17:11:41 +01:00
Eelco Dolstra 26da67ff73 Kernel config: Separate power management and debugging 2015-03-04 17:10:47 +01:00
Eelco Dolstra 1002fb6433 Add "input" group
This is required by systemd >= 215.
2015-03-03 20:27:09 +01:00
Eelco Dolstra 8546ec7c74 Fix some uid/gid clashes 2015-03-03 20:26:36 +01:00
Eelco Dolstra a4e0278fcd Create /dev/nvidia-uvm for CUDA support 2015-03-03 20:24:14 +01:00
Eelco Dolstra 584ca36462 linux: Disable CONFIG_DEBUG_STACKOVERFLOW
This got enabled accidentally in
e64e3ad88a.
2015-03-02 23:36:05 +01:00
Eelco Dolstra 4a779f4d9a blender: Support GeForce 9xx cards 2015-03-02 00:24:04 +01:00
Eelco Dolstra ea0d6a7fc0 Add CUDA toolkit 6.5 2015-03-02 00:24:00 +01:00
Eelco Dolstra 06dfa19b99 nvidia-x11: Use GTK 2
Otherwise we end up with multiple versions of GTK in the system
closure. Also, GTK 3 is not well integrated in NixOS yet (e.g. it
doesn't respect KDE's colour scheme).
2015-03-02 00:23:43 +01:00
Eelco Dolstra 38b53b8e7d nvidia-x11: Update to 346.47 2015-03-02 00:23:43 +01:00
Eelco Dolstra 307064ceb5 Don't use machinectl to shut down containers
If the host is shutting down, machinectl may fail because it's
bus-activated and D-Bus will be shutting down. So just send a signal
to the leader process directly.

Fixes #6212.
2015-02-28 19:23:00 +01:00
Eelco Dolstra 568df3f4a9 Disable the cjdns test
The cjdns module uses "import from derivation", which is a bad thing
(it causes building at evaluation time).
2015-02-27 20:55:44 +01:00
Eelco Dolstra 22d2fc3657 Fix "systemctl reload container@"
Fixes #5179.
2015-02-27 14:32:54 +01:00
Eelco Dolstra 3a31043b43 fillDiskWithRPMs: Pass --extract-over-symlinks to cpio
http://hydra.nixos.org/build/20003320
2015-02-27 14:00:11 +01:00
Eelco Dolstra 6177710ac7 Merge pull request #6046 from ts468/xen
Update: Xen 4.5 + NixOS Xen modules
2015-02-26 10:15:05 +01:00
Eelco Dolstra 9788cbb2de Re-enable Darwin builds 2015-02-25 19:27:30 +01:00
Eelco Dolstra 586b9d9525 tzdata: Update to 2015a 2015-02-25 15:24:53 +01:00
Eelco Dolstra c863acb3af Merge pull request #6563 from taku0/firefox-bin-36.0
firefox-bin: update to version 36.0; thunderbird-bin: update to version 31.5.0
2015-02-25 14:51:50 +01:00
Eelco Dolstra 36d0f367de ssh-agent: Fix asking for confirmation via $SSH_ASKPASS
This was lost back in
ffedee6ed5. Getting this to work is
slightly tricky because ssh-agent runs as a user unit, and so doesn't
know the user's $DISPLAY.
2015-02-25 14:31:17 +01:00
Eelco Dolstra 93902ea108 nsswitch.conf: Omit ldap unless ldap is enabled
This prevents programs from trying to find nss_ldap.
2015-02-25 14:31:13 +01:00
Eelco Dolstra 9e9e446880 sudo: Fix incorrect runtime path 2015-02-25 12:39:06 +01:00
Eelco Dolstra 8196962097 firefox: Update to 36.0 2015-02-24 18:50:15 +01:00
Eelco Dolstra 843f21fd6a nss: Update to 3.17.4 2015-02-24 18:50:04 +01:00
Eelco Dolstra 3facd6b66d sqlite: Update to 3.8.7.4 2015-02-24 18:42:16 +01:00
Eelco Dolstra 3d3db3550f sudo: Update to 1.8.12 2015-02-24 18:04:35 +01:00
Eelco Dolstra dad86b4f54 Fix building on Xcode
92188d9d17 broke the case where the user
has Xcode but not the command-line tools. So this commit restores
using xcrun to get the path to the SDK (falling back to / for the
non-Xcode case).

http://hydra.nixos.org/build/19953295
2015-02-24 17:07:44 +01:00
Eelco Dolstra b1ec8e6c64 apache-httpd: Update to 2.4.12
CVE-2014-3583, CVE-2014-3581, CVE-2014-8109, CVE-2013-5704.
2015-02-24 16:10:55 +01:00
Eelco Dolstra 16cf3ee9da Ensure that the home directory exists even if the user already exists 2015-02-24 11:57:38 +01:00
Eelco Dolstra 1dd423e651 samba: Update to 3.6.25, 4.1.17
CVE-2015-0240, CVE-2014-0178
2015-02-23 17:00:08 +01:00
Eelco Dolstra b70bd0879b sshd: Generate a ed25519 host key 2015-02-23 17:00:07 +01:00
Eelco Dolstra 24c10d0612 Merge pull request #6477 from ts468/stage-1-2
Enhance stage-1/2 scripts for better dealing with squashfs
2015-02-20 20:00:30 +01:00
Eelco Dolstra 5762f8f95c Add options to support signed binary caches
Typical use:

    nix.requireSignedBinaryCaches = true;
    nix.binaryCachePublicKeys = [ "hydra.nixos.org-1:CNHJZBh9K4tP3EKF6FkkgeVYsS3ohTl+oS0Qa8bezVs=" ];

(The public key of cache.nixos.org is included by default.)

Note that this requires Nix 1.9 and that most of cache.nixos.org
hasn't been signed yet.
2015-02-19 14:22:43 +01:00
Eelco Dolstra 4ac280ec49 Blacklist the nouveau driver on EC2 2015-02-18 13:04:10 +01:00
Eelco Dolstra d6c88eaeb8 Apply upstream fix for Nix on XFS
Fixes #6424.
2015-02-18 10:41:39 +01:00
Eelco Dolstra cbab474cea nixUnstable: Update 2015-02-18 10:39:47 +01:00
Eelco Dolstra 5d7000df68 Automatically set nix.nrBuildUsers to at least nix.maxJobs 2015-02-16 12:02:49 +01:00
Eelco Dolstra fb72208bcf nvidia-x11: Update to 340.76 2015-02-16 11:49:17 +01:00
Eelco Dolstra 2ba9ae0129 Fix bad licenses on CUDA packages
They were marked as "nonfree" rather than "unfree", causing them to be
allowed with allowUnfree = false.
2015-02-15 22:29:47 +01:00
Eelco Dolstra 5092d625d6 /etc/ssl/certs/ca-bundle.crt -> ca-certificates.crt
Even though there is no "official" standard location, it's better to
stick to what most distros are using.
2015-02-15 19:06:31 +01:00
Eelco Dolstra 75e1b5e317 Provide symlinks to ca-bundle.crt for compat with other distros
There is no "standard" location for the certificate bundle, so many
programs/libraries have various hard-coded default locations that
don't exist on NixOS. To make these more likely to work, provide
some symlinks.
2015-02-15 19:06:31 +01:00
Eelco Dolstra e783edc72e Merge pull request #6296 from nckx/add-kernel-config
Enable kernel configuration option FANOTIFY
2015-02-13 13:32:48 +01:00