Rok Garbas
748ef34f09
assertion should check for encrypted.label of the defined fileSystem
2017-09-29 19:55:28 +02:00
Joerg Thalheim
44b6a1509d
nixos/bcc: init module
...
Looks trival, but it is easy to make the mistake
to add linuxPackages.bcc to systemPackages,
which breaks if the not the default kernel is used.
2017-09-29 15:18:25 +01:00
Joerg Thalheim
5572062674
nixos/sysdig: init module
2017-09-29 15:01:21 +01:00
Franz Pletz
5b8a798137
17.09 release notes: mention KDE upgrades
2017-09-29 01:52:17 +02:00
Franz Pletz
c22d717c75
17.09 release notes: fix typos & ordering
2017-09-29 01:52:17 +02:00
Peter Hoeg
963435a462
Merge pull request #29748 from fadenb/security.pam.usb_link_fix
...
security.pam.usb: fix url
2017-09-29 07:49:10 +08:00
Franz Pletz
49f175cd0c
17.09 release notes: add network interface rename note
...
Fixes #29197 .
2017-09-29 00:07:37 +02:00
Robin Gloster
83405798e6
17.09 release notes: update information on gitlab
2017-09-28 23:14:31 +02:00
Robin Gloster
57ed9e7e1d
gitlab: 9.5.5 -> 10.0.2
2017-09-28 23:14:31 +02:00
Jörg Thalheim
12ac88af1d
Merge pull request #29890 from mbrgm/nullmailer-fix
...
nixos/nullmailer: fixes and `remotesFile` option
2017-09-28 21:29:37 +01:00
Cray Elliott
d4bdf302a3
nvidia-x11: fix eval error from 4ef82339c9
2017-09-28 13:11:16 -07:00
Eelco Dolstra
6c72efe0ba
Don't generate instance-store AMIs
...
These are obsolete, use EBS AMIs instead.
2017-09-28 17:33:13 +02:00
Jan Tojnar
dfdfb97f0f
nixos/tests/gnome3-gdm: Increase memory limit
...
The test was failing on x86_64 prematurely due to memory being exhausted.
See also 3b9f0c6a46
2017-09-28 17:20:23 +02:00
Robin Gloster
4ca4d6afca
18.03 release notes: reformat
2017-09-28 16:41:20 +02:00
Robin Gloster
a19c52a101
17.09 release notes: reformat and generate added services
2017-09-28 16:41:20 +02:00
Tristan Helmich
c6761f8578
security.pam.usb: link to wiki on github.com
...
pamusb.org no longer serves the intended content.
2017-09-28 16:00:28 +02:00
Robin Gloster
990b5a5388
release.nix: add mesos test back
...
This is working now again
2017-09-28 14:25:17 +02:00
Robin Gloster
4aeb38e5b9
Revert "kubernetes: fix hashes after dockerTools change"
...
This reverts commit 9ba024f6d8
.
2017-09-28 14:09:49 +02:00
Robin Gloster
69344de783
Revert "dockerTools.pullImage: release note regarding sha256 argument value"
...
This reverts commit ea6d37c2bb
.
2017-09-28 14:09:49 +02:00
Joerg Thalheim
91eb6cf82c
nullmailer: simplify config generation
2017-09-28 11:04:39 +01:00
Marius Bergmann
e741cc4881
nullmailer: add remotesFile
option
...
The current `remotes` option is a string option containing nullmailer remote
definitions. However, those definitions may contain secret credentials and
should therefore not be put world-readable in the nix store.
I added a `remotesFile` option, which allows to specify a path to the remotes
definition file instead. This way, the definitions can be kept outside of the
nix store with more secure file permissions.
2017-09-28 08:52:21 +02:00
Marius Bergmann
02e89de71c
nullmailer: use proper description for remotes
option
2017-09-28 08:52:21 +02:00
Marius Bergmann
f9d64a068b
nullmailer: fix relative -> absolute path in preStart script
2017-09-28 08:52:21 +02:00
Franz Pletz
d0435ba032
network-interfaces: device routes for default gateway
...
Iff interface is set, it makes sense to add device route by default.
2017-09-28 02:14:07 +02:00
Jörg Thalheim
0a6fca15fd
Merge pull request #29881 from volth/patch-67
...
nixos/tinc: add "restartTriggers" back
2017-09-28 00:57:26 +01:00
Ryan Mulligan
c6f513b56a
nixos/monit: install monit as system package, use default config file path
2017-09-28 01:20:20 +02:00
volth
ddd13e1375
nixos/tinc: add "restartTriggers" back
...
Add "restartTriggers" back to restart the Tinc daemon when its peer is removed.
Reverted #27660
2017-09-27 23:16:02 +00:00
Robin Gloster
d05b0b6b70
mesos test: fix python handling
...
Still does not succeed but advances further
(cherry picked from commit 30d09f717a
)
2017-09-28 01:15:41 +02:00
Bjørn Forsman
3c6eb3a247
nixos/iso-image.nix: add top-level /version.txt file
...
This makes it easy to identify which NixOS version is written to an USB
stick without actually booting it.
2017-09-28 00:54:28 +02:00
Niklas Hambüchen
f4c53f1940
consul service: Restart on failure.
...
Consul is a service you typically want to have running all the time;
it's not supposed to quit by itself.
2017-09-28 00:41:15 +02:00
Franz Pletz
8237fa43d3
Merge pull request #29697 from zimbatm/gdm-on-nvidia
...
GDM fixes
2017-09-28 00:20:18 +02:00
Rostislav Beneš
0cad98dde1
nixos/xserver,gdm: let GDM handle X server verbosity.
2017-09-28 00:18:57 +02:00
Rostislav Beneš
4ef82339c9
nixos/gdm,nvidia: new options to enable GDM on Wayland and disabling it for nvidia drivers.
2017-09-28 00:18:57 +02:00
Rostislav Beneš
4f91397c98
nixos/nvidia: populating /dev with nvidia devices at boot
2017-09-28 00:18:57 +02:00
Jörg Thalheim
2b8cba2ff5
Merge pull request #29874 from mbrgm/znc-fix
...
znc: fix openFirewall option
2017-09-27 23:08:51 +01:00
Joachim Fasting
a06f839439
nixos/release-notes: notable changes to the dnscrypt-proxy service
2017-09-27 23:47:15 +02:00
Franz Pletz
0ee866ed72
kbd service: systemd-vconsole-setup is triggered by udev
...
cc #22470
2017-09-27 23:38:29 +02:00
Franz Pletz
725dee203a
wpa_supplicant service: restart instead of stop & start
...
We now wait for dhcpcd to acquire a lease but dhcpcd is restarted on
system activation. As wpa_supplicant is stopped while dhcpcd is
restarting a significant delay is introduced on systems with wireless
network connections only. This changes the wpa_supplicant service to
also be restarted together with dhcpcd in case both services were
changed.
2017-09-27 23:38:03 +02:00
Alexander Ried
4a2442032e
Revert "kbd service: use /dev/tty1 for systemd-vconsole-setup"
...
This reverts commit 0c81594a29
.
It's no longer needed since systemd-vconsole-setup enumerates all ttys
until it finds a suitable one since systemd v234.
2017-09-27 23:37:24 +02:00
Joerg Thalheim
23f398012b
nixos: skip restarting systemd-logind to not break x11
2017-09-27 22:28:27 +01:00
Marius Bergmann
dd50575d5a
znc: fix openFirewall option
...
The current version is broken:
- there's no `openFirewall` attribute directly in the `cfg` set
- the `port` option is an attribute of the `confOptions` set
I used the proper attribute for the firewall port and moved the `openFirewall`
option directly up to the `services.znc` set, as it's rather a general option
for the whole service than a znc-specific option (which are located inside the
`confOptions` set).
2017-09-27 22:18:03 +02:00
Robin Gloster
34750bb51c
17.09 release notes: redis cluster mass-restart needed
...
see #29516
2017-09-27 22:15:13 +02:00
Vladimír Čunát
f2955e4fde
manuals: fixup steam note, as the change is in 17.09
...
I didn't notice the cherry-pick, but Globin found out immediately.
/cc #29180 .
2017-09-27 20:33:24 +02:00
Vladimír Čunát
4013b381b3
manuals: document removal of newStdcpp from steam
...
/cc #29180 .
2017-09-27 20:12:06 +02:00
Rodney Lorrimar
34eefdfb9d
nixos/release-notes: MySQL backup service breaking changes
2017-09-27 18:44:49 +02:00
Rodney Lorrimar
56eba66f77
mysqlBackup service: let it work with default settings
...
* Grants enough privileges to the configured user so that it can run
mysqldump.
* Adds a nixos test.
* Use systemd timers instead of a cronjob (by @fadenb).
* Creates a new user for backups by default, instead of using mysql
user.
* Ensures that backup user has write permissions on backup location.
* Write backup to a temporary file before renaming so that a failed
backup won't overwrite the previous backup, and so that the backup
location will never contain a partial backup.
Breaking changes:
* Renamed period to calendar to reflect the change in how to
configure the backup time.
* A failed backup will no longer result in cron sending an e-mail --
users' monitoring systems must be updated.
Resolves #24728
2017-09-27 18:44:49 +02:00
Joerg Thalheim
75ba415fbc
nixos/tinc: remove useless script argument
...
ExecStart is sufficient and more transparent to the user.
2017-09-27 17:57:39 +02:00
Joerg Thalheim
ad8cb0917f
nixos/tinc: do not add Device= by default
...
tinc can figure this out based on DeviceType.
I also got `/dev/net/tun FD in bad state` after a particular upgrade.
2017-09-27 17:57:39 +02:00
Eelco Dolstra
79d547b4bb
nix-daemon: Bump the default number of build users
...
While it's annoying to pollute the user database with a lot of nixbld*
users, 10 users is really too low for many modern systems.
2017-09-27 17:13:16 +02:00
Peter Simons
99e24590cb
nixos(spamassassin): fix trailing whitespace
2017-09-27 14:50:52 +02:00