nixpkgs/pkgs/servers
Danylo Hlynskyi 5443eee47c
nixos/postgresql: support 0750 for data directory (#65245)
* nixos/postgresql: support 0750 for data directory

This is rework of part of https://github.com/NixOS/nixpkgs/pull/46670.
My usecase was to be able to inspect PG datadir as wheel user.

PG11 now allows starting server with 0750 mask for data dir.
`groupAccess = true` now does this automatically. The only thing you have to do
is to set group ownership.

For PG10 and below, I've described a hack how this can be done. Before this PR
hack was impossible. The hack isn't ideal, because there is short
period of time when dir mode is 0700, so I didn't want to make it official.

Test/example is present too.

* postgresql: allow changing initidb arguments via module system

Closes https://github.com/NixOS/nixpkgs/issues/18829

+ some cleanups

* addressed review comments and some fixes

* whoops

* change groupAccess to tristate, to not force `chmod` on dataDir.

Making mask either 0700 or 0750 is too restrictive..

* WIP

* let's not support group mode for versions pre-11.

The only fix is to change mode to 0700 before start, because otherwise postgresql
doesn't start, and error is non-obvious.
2020-02-14 20:51:20 +02:00
..
amqp treewide: fix redirected urls 2020-01-22 11:26:22 +01:00
apache-kafka kafka: Add 2.4 2020-01-10 21:02:03 -05:00
apcupsd
asterisk
atlassian atlassian-jira: 8.6.0 -> 8.7.0 2020-02-09 11:45:07 +01:00
beanstalkd
bird bird: compile with libssh for rpki support 2019-11-17 00:47:45 +01:00
blockbook
brickd
caddy caddy2: init at 2.0.0-beta10 (#74843) 2019-12-03 13:19:38 +00:00
cayley
clickhouse
cloud-print-connector cloud-print-connector: fix build against cups 2019-12-21 11:59:08 +00:00
computing treewide: NIX_*_FLAGS -> string 2019-12-31 00:16:46 +01:00
confluent-platform
consul consul: 1.6.1 -> 1.6.2 2019-11-20 15:44:24 -08:00
corosync net-snmp: rename from net_snmp 2019-12-21 22:56:08 +00:00
coturn
couchpotato couchpotato: pin python2 2019-11-13 16:27:38 +01:00
dante dante: fix package under Linux 2019-11-19 20:23:17 +11:00
demoit
dex
dgraph
dico
dict
diod diod: fix build w/glibc-2.30 2020-01-23 00:21:22 +01:00
dns Revert "Revert "Merge master into staging-next"" 2020-02-05 19:41:25 +01:00
documize-community Revert "Revert "Merge master into staging-next"" 2020-02-05 19:41:25 +01:00
echoip
elasticmq
elasticmq-server-bin
endlessh endlessh: 1.0 -> 1.1 2020-01-31 12:00:00 -05:00
etcd
exhibitor
fcgiwrap
felix
fileshare treewide: replace make/build/configure/patchFlags with nix lists 2019-12-30 12:58:11 +01:00
fingerd/bsd-fingerd
firebird firebird: mark as broken 2020-01-28 19:52:18 +01:00
foundationdb Merge branch 'staging' into glibc230 2020-02-01 17:42:03 +01:00
freeradius freeradius: 3.0.19 -> 3.0.20 2019-11-27 15:11:39 -08:00
ftp bftpd: 5.2 -> 5.4 2020-01-15 05:41:38 +00:00
gobetween gobetween: init at 0.7.0 2020-01-17 22:50:52 -05:00
gopher/gofish
gortr gortr: init at 0.13.0 2019-11-16 23:12:50 +01:00
gotify gotify-server: 2.0.12 -> 2.0.13 2020-01-02 21:25:58 +01:00
gotty gotty: 0.0.13 -> 2.0.0-alpha.3 2019-12-06 04:26:07 +01:00
gpm
gpsd gpsd: fix build w/glibc-2.30 2020-01-30 15:24:04 +01:00
grocy grocy: init at 2.6.0 2020-02-07 23:31:04 +01:00
h2
hbase
headphones
hitch hitch: 1.5.0 -> 1.5.2 (#75243) 2019-12-08 19:10:47 +01:00
holochain-go
home-assistant appdaemon: 3.0.5 -> 4.0.1 2020-01-30 14:00:40 +00:00
http Merge staging into staging-next 2020-02-11 07:59:53 +01:00
hydron
hylafaxplus hylafaxplus: 7.0.1 -> 7.0.2 2020-02-01 02:02:09 +00:00
icecast
icingaweb2
identd
interlock
irc Treewide: fix URL permanent redirects 2019-11-16 01:41:23 +01:00
irker
isso
jackett jackett: 0.12.907 -> 0.12.1301 2020-02-06 20:17:16 +01:00
jellyfin jellyfin: use dotnet runtime instead of sdk 2020-01-19 14:30:39 -08:00
jetbrains
kippo
kwakd
ldap/389 net-snmp: rename from net_snmp 2019-12-21 22:56:08 +00:00
lidarr
limesurvey
livepeer
ma1sd
mail Merge pull request #79971 from r-ryantm/auto-update/opensmtpd 2020-02-14 12:08:05 +01:00
matrix-synapse matrix-synapse: 1.9.0 -> 1.9.1 2020-01-28 17:57:16 +01:00
matterbridge matterbridge: 1.11.0 -> 1.16.3 (#77454) 2020-01-10 18:04:22 +00:00
mattermost
mautrix-telegram mautrix-telegram: 0.7.0 -> 0.7.1 2020-02-04 22:28:15 +01:00
mautrix-whatsapp mautrix-whatsapp: 2020-01-07 -> 2020-01-12 2020-01-17 19:58:39 +01:00
mediatomb
meguca
memcached memcached: 1.5.21 -> 1.5.22 2020-02-10 13:22:37 +01:00
mesos-dns
metabase metabase: 0.34.1 -> 0.34.2 2020-02-09 03:13:41 -06:00
meteor meteor: 1.8.1 -> 1.8.2 2019-12-07 19:15:05 +01:00
miniflux miniflux: 2.0.18 -> 2.0.19 2019-12-19 17:43:16 +01:00
minio
mirrorbits
misc airsonic: 10.4.2 -> 10.5.0 2019-12-07 21:56:45 +01:00
monitoring treewide: change fetchCargoTarball default to opt-out 2020-02-13 22:41:37 -08:00
mpd mpd: 0.21.18 -> 0.21.19 2020-02-08 18:16:13 +00:00
mqtt/mosquitto mosquitto: 1.6.7 -> 1.6.8 2020-01-22 03:55:00 +00:00
mtprotoproxy mtprotoproxy: 1.0.8 -> 1.0.9 2020-01-26 08:27:31 +00:00
mumsi
mxisd mxisd: use latest gradle 2020-01-10 04:21:18 +01:00
nas
nats-server
nats-streaming-server
neard
news/leafnode
nextcloud nextcloud: 17.0.2 -> 18.0.0 2020-01-22 02:34:54 +00:00
nginx-sso nginx-sso: 0.23.0 -> 0.24.0 2020-01-14 23:44:05 -05:00
nosql victoriametrics: init at v1.32.5 2020-01-29 19:52:10 +01:00
nsq
oauth2_proxy
openafs openafs_1_8: 1.8.3 -> 1.8.5 (#75104) 2019-12-07 11:58:19 -05:00
openxpki
osrm-backend
p910nd
pies
plex treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
polipo
pounce pounce: 1.0p1 -> 1.1 2020-02-11 20:04:58 +00:00
prayer prayer: fix build w/glibc-2.30 2020-01-30 15:36:40 +01:00
ps3netsrv
pulseaudio qpaeq: init at 13.0 2020-01-21 09:57:06 +01:00
quagga net-snmp: rename from net_snmp 2019-12-21 22:56:08 +00:00
radarr radarr: 0.2.0.1358 -> 0.2.0.1450 2019-12-07 18:58:55 +01:00
radicale
rainloop rainloop-standard: Fix pname and license (#73963) 2019-11-23 15:36:28 +01:00
rippled rippled: 1.2.1 -> 1.4.0 2020-01-12 19:23:31 +00:00
roon-server
roundcube Merge pull request #76896 from Vskilet/roundcube-update 2020-01-03 21:50:03 +01:00
routinator treewide: change fetchCargoTarball default to opt-out 2020-02-13 22:41:37 -08:00
rpcbind
rt
sabnzbd
samba samba: 4.11.3 -> 4.11.5 2020-01-27 13:40:09 +01:00
scylladb
search groonga: 9.1.1 -> 9.1.2 2020-02-08 08:33:39 +00:00
ser2net ser2net: init at 4.1.1 2020-01-22 16:42:27 +01:00
serf
serviio
shairplay
shairport-sync shairport-sync: 3.3.4 -> 3.3.5 2019-11-29 08:09:00 -08:00
shellinabox shellinabox: fix CVE-2018-16789 2019-11-03 16:44:17 +01:00
shishi
sickbeard sickgear: 0.20.0 -> 0.21.5 2020-02-09 09:51:16 +01:00
silc-server
simplehttp2server
sip freeswitch: include configuration templates, enable parallel building 2020-01-07 16:52:57 +02:00
sks
skydns
slimserver
smcroute
softether
sonarr
sql nixos/postgresql: support 0750 for data directory (#65245) 2020-02-14 20:51:20 +02:00
squid squid: 4.9 -> 4.10 2020-01-30 13:59:46 +00:00
sslh
syncserver
tacacsplus
tautulli tautulli: 2.1.42 -> 2.1.44 2020-02-10 18:10:18 +01:00
tegola
teleport
tmate-ssh-server
traefik
trezord trezord-go: 2.0.27 -> 2.0.28 2020-02-11 20:34:46 +01:00
trickster
tt-rss tt-rss-theme-feedly: 2.0.0 -> 2.3.1 2020-01-17 11:54:21 +00:00
ttyd
tvheadend
u9fs
udpt
uftp uftp: 4.10 -> 4.10.1 2020-01-30 15:59:11 +00:00
uhub uhub: *Flags are lists 2019-12-30 12:15:29 +01:00
ums
unfs3
unifi unifiStable: 5.12.22 -> 5.12.35 2019-11-25 13:27:09 +01:00
unpfs treewide: change fetchCargoTarball default to opt-out 2020-02-13 22:41:37 -08:00
uwsgi treewide: NIX_*_COMPILE -> string 2019-12-31 00:13:29 +01:00
varnish treewide: replace make/build/configure/patchFlags with nix lists 2019-12-30 12:58:11 +01:00
web-apps matomo: 3.13.1 -> 3.13.2 2020-02-11 19:16:13 +01:00
webmetro treewide: change fetchCargoTarball default to opt-out 2020-02-13 22:41:37 -08:00
x11 Merge pull request #75163 from rnhmjoj/gohu 2020-02-14 00:46:05 +01:00
xandikos xandikos: init at 0.1.0 2019-12-16 18:02:27 +01:00
xinetd
xmpp ejabberd: 19.09.1 -> 20.01 2020-01-26 21:37:14 +00:00
zoneminder zoneminder: Fix installation location for cgi-bin (#76855) 2020-01-18 16:41:57 -05:00
zookeeper