Commit Graph
244172 Commits
Author SHA1 Message Date
Jörg ThalheimandSamuel Dionne-Riel 60d30e13f7 Update nixos/doc/manual/installation/installing.xml
Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
2020-09-06 19:44:30 +01:00
Renato Alves 068400bdfc tdm: 2.07 -> 2.08 2020-09-06 20:31:59 +02:00
Michael Weiss e6cbcc2ac1 python3Packages.scapy: 2.4.3 -> 2.4.4 (#97215) 2020-09-06 20:29:31 +02:00
Jörg ThalheimandSamuel Dionne-Riel a5872edf2f nixos/installer: enable sshd by default
Right now the UX for installing NixOS on a headless system is very bad.
To enable sshd without physical steps users have to have either physical
access or need to be very knowledge-able to figure out how to modify the
installation image by hand to put an `sshd.service` symlink in the
right directory in /nix/store. This is in particular a problem on ARM
SBCs (single board computer) but also other hardware where network is
the only meaningful way to access the hardware.

This commit enables sshd by default. This does not give anyone access to
the NixOS installer since by default. There is no user with a non-empty
password or key. It makes it easy however to add ssh keys to the
installation image (usb stick, sd-card on arm boards) by simply mounting
it and adding a keys to `/root/.ssh/authorized_keys`.
Importantly this should not require nix/nixos on the machine that
prepare the installation device and even feasiable on non-linux systems
by using ext4 third party drivers.

Potential new threats: Since this enables sshd by default a
potential bug in openssh could lead to remote code execution. Openssh
has a very good track-record over the last 20 years, which makes it
far more likely that Linux itself would have a remote code execution
vulnerability. It is trusted by millions of servers on many operating
systems to be exposed to the internet by default.

Co-authored-by: Samuel Dionne-Riel <samuel@dionne-riel.com>
2020-09-06 20:26:08 +02:00
Robert Scott 24e513bcf0 Merge pull request #96409 from sikmir/tippecanoe
tippecanoe: 1.35.0 -> 1.36.0
2020-09-06 19:18:34 +01:00
R. RyanTM 7dce8e2171 python27Packages.pydub: 0.24.0 -> 0.24.1 2020-09-06 10:31:19 -07:00
Vincent Laporte d4f6c94d34 ocamlPackages.labltk: init at 8.06.9 for OCaml 4.11 2020-09-06 19:09:37 +02:00
74b3d66baf nixos/config: add defaultPackages option
readd perl (used in shell scripts), rsync (needed for NixOps) and strace (common debugging tool)

they where previously removed in https://github.com/NixOS/nixpkgs/pull/91213

Co-authored-by: Timo Kaufmann <timokau@zoho.com>
Co-authored-by: 8573 <8573@users.noreply.github.com>
2020-09-06 18:58:20 +02:00
Dominique Martinet fd196452f0 systemd-confinement: handle ExecStarts etc being lists
systemd-confinement's automatic package extraction does not work correctly
if ExecStarts ExecReload etc are lists.

Add an extra flatten to make things smooth.

Fixes #96840.
2020-09-06 18:55:10 +02:00
R. RyanTM a5121f73e3 catch2: 2.12.2 -> 2.12.3 2020-09-06 18:53:20 +02:00
R. RyanTM cd435ce7d3 opencl-clhpp: 2.0.11 -> 2.0.12 2020-09-06 18:52:54 +02:00
R. RyanTM c39f775f20 icingaweb2: 2.8.0 -> 2.8.1 2020-09-06 18:52:22 +02:00
Gabriel Ebner 37379c0215 Merge pull request #97285 from gebner/cura471 2020-09-06 18:52:08 +02:00
R. RyanTM 1311343c40 fx_cast_bridge: 0.0.6 -> 0.0.7 2020-09-06 18:51:17 +02:00
R. RyanTM f151fd87d7 sysvinit: 2.96 -> 2.97 2020-09-06 18:50:48 +02:00
R. RyanTM 6c2059b334 qwt6_qt4: 6.1.4 -> 6.1.5 2020-09-06 18:50:24 +02:00
R. RyanTM 2c58c24ef8 wimlib: 1.13.1 -> 1.13.2 2020-09-06 18:50:08 +02:00
R. RyanTM f06b103ef9 eventstat: 0.04.09 -> 0.04.10 2020-09-06 18:49:52 +02:00
R. RyanTM 1876163f16 bazel-kazel: 0.0.12 -> 0.1.0 (#97074) 2020-09-06 09:39:58 -07:00
edef a6a6659e56 Merge pull request #33283 from fahadsadah/dpauxchardev
kernel config: CONFIG_DRM_DP_AUX_CHARDEV
2020-09-06 16:34:11 +00:00
Wael Nasreddine 92cff610d0 pgformatter: 4.3 -> 4.4 (#96920) 2020-09-06 09:32:54 -07:00
Florian Klink d7046947e5 Merge pull request #91121 from m1cr0man/master
Restructure acme module
2020-09-06 18:26:22 +02:00
Frederik Rietdijk e560459c5b Revert "utils.bash: revert #93560 for darwin, unblocks channels"
Revert the hack and the original faulty commit.

This reverts commit 48264ee506105a2f5e61e5d327599e9f301bd77f.

Revert "Purity checking should accept $TMP and not just /tmp"

This reverts commit fb777be7d2.
2020-09-06 18:16:14 +02:00
Frederik Rietdijk 1d881848f8 Merge staging-next into staging 2020-09-06 18:15:07 +02:00
Frederik Rietdijk d362c0e54e Merge master into staging-next 2020-09-06 18:14:23 +02:00
Frederik Rietdijk 08eb704bc3 utils.bash: revert #93560 for darwin, unblocks channels
Temporary fix. We definitely do not want to have two separate
implementations.
2020-09-06 18:14:08 +02:00
José Romildo Malaquias bc067235a0 marwaita-manjaro: 2020-08-29 -> 1.5 2020-09-06 13:09:33 -03:00
Daniël de Kok 2dd41576fb Merge pull request #97238 from hannesweisbach/macos-tbb
tbb: fix library install name on macOS
2020-09-06 18:04:08 +02:00
elseym aaf0002f68 prometheus-unifi-poller-exporter: init module 2020-09-06 17:48:19 +02:00
elseym 8c49e5a78c tests/prometheus-exporters: allow overriding test-node-name
allows the prometheus-exporters test abstraction to work with e.g. hyphenated exporter-names
2020-09-06 17:48:00 +02:00
elseym b381aacbba nixos/unifi-poller: init unifi-poller service 2020-09-06 17:47:52 +02:00
elseym 39eaecd14f unifi-poller: init at 2.0.1 2020-09-06 17:37:50 +02:00
meutraa 59410f0969 androidStudioPackages.{dev,canary}: 4.2.0.8 -> 4.2.0.9 2020-09-06 16:14:50 +01:00
Michael Weiss ebd2e632d6 gns3-{gui,server}: 2.2.12 -> 2.2.13 2020-09-06 16:18:57 +02:00
oxalica b5212f8bf0 linux: remove dependency to utillinuxMinimal 2020-09-06 22:06:22 +08:00
WORLDofPEACE 84f11a01ff Merge pull request #97287 from TethysSvensson/fetchurl-chromium
chromium: Unblock nixos-unstable by using the correct argument to fet…
2020-09-06 10:04:43 -04:00
Philipp Bartsch 50285e244e fractal: add gtk support to gstreamer
Closes #96618

Suggested-by: Jan Tojnar <jtojnar@gmail.com>
2020-09-06 15:52:41 +02:00
Peter Hoeg 6e22c6ea6a Merge pull request #96769 from peterhoeg/m/phpfpm
nixos/phpfpm: always restart service on failure
2020-09-06 21:41:38 +08:00
José Romildo Malaquias 96542ebb19 Merge pull request #96691 from romildo/upd.iconpack-obsidian
iconpack-obsidian: 4.12 -> 4.13
2020-09-06 10:36:15 -03:00
Florian Klink 569fdb2c35 Merge pull request #93424 from helsinki-systems/feat/gitlab-mailroom
nixos/gitlab: Support incoming mail
2020-09-06 15:34:02 +02:00
José Romildo Malaquias 9df0922740 marwaita: 7.5.1 -> 7.6.1 2020-09-06 10:33:15 -03:00
Andreas Rammhold 8cf4c193b9 Merge pull request #97106 from stigtsp/package/firefox-80.0.1
firefox: 80.0 -> 80.0.1
2020-09-06 15:27:12 +02:00
Tethys Svensson 2927a19be3 chromium: Unblock nixos-unstable by using the correct argument to fetchurl 2020-09-06 14:54:42 +02:00
Mario Rodas 9380c61a19 Merge pull request #97246 from r-ryantm/auto-update/sensu-go-backend
sensu-go-backend: 5.21.1 -> 5.21.2
2020-09-06 07:50:24 -05:00
Mario Rodas 18bfc49f53 Merge pull request #97054 from dali99/add_vcsi
vsci: init at 7.0.12
2020-09-06 07:49:04 -05:00
Mario Rodas 885ce4b411 Merge pull request #97248 from r-ryantm/auto-update/sickgear
sickgear: 0.21.36 -> 0.21.42
2020-09-06 07:48:01 -05:00
Mario Rodas 8a03382c26 Merge pull request #97249 from r-ryantm/auto-update/skaffold
skaffold: 1.13.2 -> 1.14.0
2020-09-06 07:40:16 -05:00
Mario Rodas f0490fb718 Merge pull request #97223 from 06kellyjac/deno_1.3.3
deno: 1.3.2 -> 1.3.3
2020-09-06 07:37:15 -05:00
Mario Rodas 1c25cb0383 Merge pull request #97033 from pstn/jellyfin-bump
jellyfin: 10.6.3 -> 10.6.4
2020-09-06 07:35:15 -05:00
Robert Scott 39eea33d3a Merge pull request #93008 from r-ryantm/auto-update/yafaray-core
yafaray-core: 3.4.4 -> 3.5.0
2020-09-06 13:33:08 +01:00