Maximilian Bosch
00a5222499
nixos/sshd: validate ssh configs during build
...
With `sshd -t` config validation for SSH is possible. Until now, the
config generated by Nix was applied without any validation (which is
especially a problem for advanced config like `Match` blocks).
When deploying broken ssh config with nixops to a remote machine it gets
even harder to fix the problem due to the broken ssh that makes reverts
with nixops impossible.
This change performs the validation in a Nix build environment by
creating a store path with the config and generating a mocked host key
which seems to be needed for the validation. With a broken config, the
deployment already fails during the build of the derivation.
The original attempt was done in #56345 by adding a submodule for Match
groups to make it harder screwing that up, however that made the module
far more complex and config should be described in an easier way as
described in NixOS/rfcs#42 .
2019-05-24 20:16:53 +02:00
Greg Roodt and xeji
92e5745383
gradle: 5.0 -> 5.3.1 ( #58528 )
2019-04-01 20:59:17 +02:00
Léo Gaspard
e3b87b04b7
Revert "Merge pull request #57559 from Ekleog/iso-image-reproducibilization"
...
This reverts commit bb32e322a5 , reversing
changes made to e0b4356c0d .
2019-04-01 18:17:42 +02:00
Robert Schütz
3ed222ebd4
python36.pkgs.contextvars: 2.3 -> 2.4
2019-04-01 17:47:07 +02:00
Silvan Mosberger and GitHub
86956b98e6
Merge pull request #58639 from Infinisil/update/browserpass
...
browserpass: 2.0.22 -> 3.0.1
2019-04-01 17:31:41 +02:00
Franz Pletz
323cfa90b5
pythonPackages.aioesphomeapi: init at 1.8.0
2019-04-01 17:28:17 +02:00
Franz Pletz
40be34b3f9
xmrig-proxy: 2.11.0 -> 2.14.0
2019-04-01 17:24:33 +02:00
Franz Pletz
6f6cb6a925
xmrig: 2.13.1 -> 2.14.1
2019-04-01 17:24:33 +02:00
Simon Lackerbauer and Franz Pletz
88c31ae57c
nixos/openldap: add new options
2019-04-01 17:24:33 +02:00
Elis Hirwing and GitHub
07b24090a4
Merge pull request #58684 from dotlambda/acpilight-python3
...
acpilight: use default python3
2019-04-01 17:18:53 +02:00
Florian Klink and GitHub
8313a5dcd3
Merge pull request #58588 from shazow/fix/vlc
...
vlc: Add chromecast support; libmicrodns: Init at 0.0.10
2019-04-01 17:16:42 +02:00
Robert Schütz
2d8405b739
acpilight: use default python3
2019-04-01 16:19:13 +02:00
Tim Steinbach
03389563a2
linux: Fix kernel-testing test
2019-04-01 10:04:54 -04:00
Andrey Petrov
c37aa79639
vlc: add chromecastSupport option
...
Enables Chromecast support by default in VLC.
Fixes #58365 .
Includes release note.
2019-04-01 09:44:56 -04:00
Tim Steinbach
2fc28603b8
rdkafka: 0.11.6 -> 1.0.0
2019-04-01 08:51:48 -04:00
Tim Steinbach
5aef5c5931
kafka: Add test for 2.2
...
Also add back tests, don't seem broken anymore.
This is just fine:
nix-build ./nixos/release.nix -A tests.kafka.kafka_2_1.x86_64-linux -A tests.kafka.kafka_2_2.x86_64-linux
2019-04-01 08:39:25 -04:00
Tim Steinbach
3db50cc82f
linux: Add testing test
2019-04-01 08:31:36 -04:00
Tim Steinbach
e072c23804
linux: 5.1-rc2 -> 5.1-rc3
2019-04-01 08:30:09 -04:00
Tim Steinbach
7b80c122cd
kafka: Add 2.2
2019-04-01 08:29:44 -04:00
Tim Steinbach
8ec5b8d4d2
kafka: 2.1.0 -> 2.1.1
2019-04-01 08:29:24 -04:00
markuskowa and GitHub
96b6a8fb0e
Merge pull request #58011 from r-ryantm/auto-update/bluez-alsa
...
bluez-alsa: 1.3.1 -> 1.4.0
2019-04-01 13:15:39 +02:00
markuskowa and GitHub
e46e12619a
Merge pull request #58645 from dtzWill/update/inter-3.4
...
inter(-ui): 3.3 -> 3.4
2019-04-01 13:05:37 +02:00
markuskowa and GitHub
ebcee16ef0
Merge pull request #58665 from lihop/init-zzuf
...
zzuf: init at 0.15
2019-04-01 12:58:53 +02:00
markuskowa and GitHub
c24ec2a5b2
Merge pull request #58496 from markuskowa/upd-snapper
...
snapper: 0.8.2 -> 0.8.3
2019-04-01 12:50:08 +02:00
markuskowa and GitHub
9cfe6a8f1e
Merge pull request #58661 from r-ryantm/auto-update/dar
...
dar: 2.6.2 -> 2.6.3
2019-04-01 12:49:48 +02:00
markuskowa and GitHub
a2561fa76f
Merge pull request #58633 from matthiasbeyer/qgit-fix-homepage
...
qgit: Fix meta.homepage
2019-04-01 10:45:24 +02:00
Leroy Hopson
9848c2b667
zzuf: init at 0.15
2019-04-01 15:43:32 +07:00
R. RyanTM
91085a26c9
dar: 2.6.2 -> 2.6.3
...
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/dar/versions
2019-04-01 01:08:36 -07:00
Mario Rodas and Vincent Laporte
16eee33e63
flow: 0.95.1 -> 0.96.0
...
Changelog: https://github.com/facebook/flow/releases/tag/v0.96.0
2019-04-01 08:59:12 +02:00
worldofpeace and GitHub
e89a4ec1fb
Merge pull request #58564 from romildo/upd.xcur2png
...
xcur2png: init at 0.7.1
2019-04-01 00:32:53 -04:00
Silvan Mosberger and GitHub
d585794021
Merge pull request #58095 from Infinisil/fix/thinc
...
pythonPackages.thinc: Fix build
2019-04-01 05:43:58 +02:00
Silvan Mosberger and GitHub
b8fbca0873
Merge pull request #58409 from Infinisil/vim-stylish-haskell-path
...
vimPlugins.vim-stylish-haskell: Patch path to executable
2019-04-01 05:41:34 +02:00
José Romildo Malaquias
4d5a4a64bf
xcur2png: init at 0.7.1
2019-04-01 00:23:09 -03:00
Will Dietz
4d7a973233
inter(-ui): 3.3 -> 3.4
...
https://github.com/rsms/inter/releases/tag/v3.4
2019-03-31 21:57:24 -05:00
worldofpeace and GitHub
f1d7b51730
Merge pull request #58566 from romildo/upd.blur-effect
...
blur-effect: init at 1.1.3
2019-03-31 21:54:31 -04:00
José Romildo Malaquias
56488c9257
blur-effect: init at 1.1.3
2019-03-31 22:36:34 -03:00
Silvan Mosberger
e98ee8d70c
nixos/browserpass: update for v3
...
See https://github.com/browserpass/browserpass-native/issues/31
Additionally browserpass was removed from systemPackages, because it
doesn't need to be installed, browsers will get the path to the binary
from the native messaging host JSON.
2019-04-01 01:24:54 +02:00
Silvan Mosberger
6104fba188
browserpass: 2.0.22 -> 3.0.1
...
See https://github.com/browserpass/browserpass-native/issues/31
This is fully backwards compatible.
2019-04-01 01:24:28 +02:00
Jaakko Luttinen and Robert Helgesson
005fb92d32
josm: fix support for kendzi3d plugin
2019-04-01 00:27:49 +02:00
Will Dietz and GitHub
ede34af62e
Merge pull request #58603 from dtzWill/feature/yubico-pam
...
yubico-pam: init, nixos integration
2019-03-31 17:13:06 -05:00
aszlig
ed8f3b5fa3
chromium/updater: Fix usage of insecure MD5 hashes
...
The title of https://github.com/NixOS/nix/issues/802 says it all:
Is it time to deprecate md5?
Of course it is - we shouldn't use MD5 for our beautiful updater, but
switch to SHA1 instead. It's the future!
. . . . .
. . . . .
. . . . .-. . . .
------- ______ | `\ .
. ______ . ' ``-..-.-,.-.`. `----._______
. ------- . . `.`.-=,'='-===| SHA1 \______`--._
-------------- --- . ..-.-.-=-.-===| ____________.--"
--------- . . .- .,==-'`-'-./ /__----'^ `^ `^ `^
____ ----- -- ____ ' . _____ \______[=> => => =>
. . . .
. . . . . . .
Signed-off-by: aszlig <aszlig@nix.build >
2019-03-31 22:41:44 +02:00
worldofpeace and GitHub
d8c7f0bd3f
Merge pull request #58581 from matthiasbeyer/add-semver-tool
...
semver-tool: init at 2.1.0
2019-03-31 16:05:07 -04:00
Matthias Beyer
a9d4d87f05
qgit: Fix meta.homepage
...
Signed-off-by: Matthias Beyer <mail@beyermatthias.de >
2019-03-31 21:48:30 +02:00
Alyssa Ross and Matthias Beyer
98c22f2d03
semver-tool: init at 2.1.0
...
Cherry-picked from: https://github.com/alyssais/nixpkgs/commit/eeb175169f65201bd47ece5d0593d3c7c386077d
Although fixed so that it actually builds.
Original message:
> I chose "semver-tool" as the path for this package because "semver" is
> extremely generic, and probably more rightly belongs to node-semver[1]
> (at least judging by GitHub stars), and because "semver-tool" is the
> name of this project's GitHub repository, and because it was the name
> used in the package request[2].
>
> Closes https://github.com/NixOS/nixpkgs/issues/50945 .
>
> [1]: https://github.com/npm/node-semver
> [2]: https://github.com/NixOS/nixpkgs/issues/50945
Signed-off-by: Matthias Beyer <mail@beyermatthias.de >
2019-03-31 21:32:15 +02:00
strager and Dmitry Kalinkin
75aa8460ac
kitty: support macOS ( #56740 )
...
Install the `kitty` command-line utility and the `kitty.app` macOS
application.
* Prefer libicns (png2icns) over Apple's non-free iconutil.
* Work around warnings from Apple headers by disabling -pedantic-errors
and -Werror.
* Work around ld not support LLVM-LTO by disabling LTO.
* Make Kitty and glfw compile for macOS 10.11 (and macOS 10.10).
2019-03-31 15:18:58 -04:00
zimbatm
f88d9c3c96
direnv: 2.19.2 -> 2.20.0
2019-03-31 21:15:16 +02:00
Tim Steinbach
9ba43c07cb
linux: 5.0-rc8 -> 5.1-rc2
2019-03-31 14:37:51 -04:00
Gabriel Ebner and GitHub
05bed043b7
Merge pull request #58324 from dtzWill/update/khal-0.10.0
...
khal: 0.9.10 -> 0.10.0
2019-03-31 20:36:30 +02:00
LinArcX and Dmitry Kalinkin
9396b273cc
samim-fonts: init at 3.1.0 ( #58383 )
2019-03-31 14:03:48 -04:00
LinArcX and Dmitry Kalinkin
c29f267d92
parastoo-fonts: init at v1.0.0-alpha5 ( #58445 )
2019-03-31 14:00:06 -04:00