Commit Graph
174237 Commits
Author SHA1 Message Date
Maximilian Bosch 00a5222499 nixos/sshd: validate ssh configs during build
With `sshd -t` config validation for SSH is possible. Until now, the
config generated by Nix was applied without any validation (which is
especially a problem for advanced config like `Match` blocks).

When deploying broken ssh config with nixops to a remote machine it gets
even harder to fix the problem due to the broken ssh that makes reverts
with nixops impossible.

This change performs the validation in a Nix build environment by
creating a store path with the config and generating a mocked host key
which seems to be needed for the validation. With a broken config, the
deployment already fails during the build of the derivation.

The original attempt was done in #56345 by adding a submodule for Match
groups to make it harder screwing that up, however that made the module
far more complex and config should be described in an easier way as
described in NixOS/rfcs#42.
2019-05-24 20:16:53 +02:00
Greg Roodtandxeji 92e5745383 gradle: 5.0 -> 5.3.1 (#58528) 2019-04-01 20:59:17 +02:00
Léo Gaspard e3b87b04b7 Revert "Merge pull request #57559 from Ekleog/iso-image-reproducibilization"
This reverts commit bb32e322a5, reversing
changes made to e0b4356c0d.
2019-04-01 18:17:42 +02:00
Robert Schütz 3ed222ebd4 python36.pkgs.contextvars: 2.3 -> 2.4 2019-04-01 17:47:07 +02:00
Silvan MosbergerandGitHub 86956b98e6 Merge pull request #58639 from Infinisil/update/browserpass
browserpass: 2.0.22 -> 3.0.1
2019-04-01 17:31:41 +02:00
Franz Pletz 323cfa90b5 pythonPackages.aioesphomeapi: init at 1.8.0 2019-04-01 17:28:17 +02:00
Franz Pletz 40be34b3f9 xmrig-proxy: 2.11.0 -> 2.14.0 2019-04-01 17:24:33 +02:00
Franz Pletz 6f6cb6a925 xmrig: 2.13.1 -> 2.14.1 2019-04-01 17:24:33 +02:00
Simon LackerbauerandFranz Pletz 88c31ae57c nixos/openldap: add new options 2019-04-01 17:24:33 +02:00
Elis HirwingandGitHub 07b24090a4 Merge pull request #58684 from dotlambda/acpilight-python3
acpilight: use default python3
2019-04-01 17:18:53 +02:00
Florian KlinkandGitHub 8313a5dcd3 Merge pull request #58588 from shazow/fix/vlc
vlc: Add chromecast support; libmicrodns: Init at 0.0.10
2019-04-01 17:16:42 +02:00
Robert Schütz 2d8405b739 acpilight: use default python3 2019-04-01 16:19:13 +02:00
Tim Steinbach 03389563a2 linux: Fix kernel-testing test 2019-04-01 10:04:54 -04:00
Andrey Petrov c37aa79639 vlc: add chromecastSupport option
Enables Chromecast support by default in VLC.

Fixes #58365.

Includes release note.
2019-04-01 09:44:56 -04:00
Tim Steinbach 2fc28603b8 rdkafka: 0.11.6 -> 1.0.0 2019-04-01 08:51:48 -04:00
Tim Steinbach 5aef5c5931 kafka: Add test for 2.2
Also add back tests, don't seem broken anymore.

This is just fine:
nix-build ./nixos/release.nix -A tests.kafka.kafka_2_1.x86_64-linux -A tests.kafka.kafka_2_2.x86_64-linux
2019-04-01 08:39:25 -04:00
Tim Steinbach 3db50cc82f linux: Add testing test 2019-04-01 08:31:36 -04:00
Tim Steinbach e072c23804 linux: 5.1-rc2 -> 5.1-rc3 2019-04-01 08:30:09 -04:00
Tim Steinbach 7b80c122cd kafka: Add 2.2 2019-04-01 08:29:44 -04:00
Tim Steinbach 8ec5b8d4d2 kafka: 2.1.0 -> 2.1.1 2019-04-01 08:29:24 -04:00
markuskowaandGitHub 96b6a8fb0e Merge pull request #58011 from r-ryantm/auto-update/bluez-alsa
bluez-alsa: 1.3.1 -> 1.4.0
2019-04-01 13:15:39 +02:00
markuskowaandGitHub e46e12619a Merge pull request #58645 from dtzWill/update/inter-3.4
inter(-ui): 3.3 -> 3.4
2019-04-01 13:05:37 +02:00
markuskowaandGitHub ebcee16ef0 Merge pull request #58665 from lihop/init-zzuf
zzuf: init at 0.15
2019-04-01 12:58:53 +02:00
markuskowaandGitHub c24ec2a5b2 Merge pull request #58496 from markuskowa/upd-snapper
snapper: 0.8.2 -> 0.8.3
2019-04-01 12:50:08 +02:00
markuskowaandGitHub 9cfe6a8f1e Merge pull request #58661 from r-ryantm/auto-update/dar
dar: 2.6.2 -> 2.6.3
2019-04-01 12:49:48 +02:00
markuskowaandGitHub a2561fa76f Merge pull request #58633 from matthiasbeyer/qgit-fix-homepage
qgit: Fix meta.homepage
2019-04-01 10:45:24 +02:00
Leroy Hopson 9848c2b667 zzuf: init at 0.15 2019-04-01 15:43:32 +07:00
R. RyanTM 91085a26c9 dar: 2.6.2 -> 2.6.3
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/dar/versions
2019-04-01 01:08:36 -07:00
Mario RodasandVincent Laporte 16eee33e63 flow: 0.95.1 -> 0.96.0
Changelog: https://github.com/facebook/flow/releases/tag/v0.96.0
2019-04-01 08:59:12 +02:00
worldofpeaceandGitHub e89a4ec1fb Merge pull request #58564 from romildo/upd.xcur2png
xcur2png: init at 0.7.1
2019-04-01 00:32:53 -04:00
Silvan MosbergerandGitHub d585794021 Merge pull request #58095 from Infinisil/fix/thinc
pythonPackages.thinc: Fix build
2019-04-01 05:43:58 +02:00
Silvan MosbergerandGitHub b8fbca0873 Merge pull request #58409 from Infinisil/vim-stylish-haskell-path
vimPlugins.vim-stylish-haskell: Patch path to executable
2019-04-01 05:41:34 +02:00
José Romildo Malaquias 4d5a4a64bf xcur2png: init at 0.7.1 2019-04-01 00:23:09 -03:00
Will Dietz 4d7a973233 inter(-ui): 3.3 -> 3.4
https://github.com/rsms/inter/releases/tag/v3.4
2019-03-31 21:57:24 -05:00
worldofpeaceandGitHub f1d7b51730 Merge pull request #58566 from romildo/upd.blur-effect
blur-effect: init at 1.1.3
2019-03-31 21:54:31 -04:00
José Romildo Malaquias 56488c9257 blur-effect: init at 1.1.3 2019-03-31 22:36:34 -03:00
Silvan Mosberger e98ee8d70c nixos/browserpass: update for v3
See https://github.com/browserpass/browserpass-native/issues/31

Additionally browserpass was removed from systemPackages, because it
doesn't need to be installed, browsers will get the path to the binary
from the native messaging host JSON.
2019-04-01 01:24:54 +02:00
Silvan Mosberger 6104fba188 browserpass: 2.0.22 -> 3.0.1
See https://github.com/browserpass/browserpass-native/issues/31

This is fully backwards compatible.
2019-04-01 01:24:28 +02:00
Jaakko LuttinenandRobert Helgesson 005fb92d32 josm: fix support for kendzi3d plugin 2019-04-01 00:27:49 +02:00
Will DietzandGitHub ede34af62e Merge pull request #58603 from dtzWill/feature/yubico-pam
yubico-pam: init, nixos integration
2019-03-31 17:13:06 -05:00
aszlig ed8f3b5fa3 chromium/updater: Fix usage of insecure MD5 hashes
The title of https://github.com/NixOS/nix/issues/802 says it all:

    Is it time to deprecate md5?

Of course it is - we shouldn't use MD5 for our beautiful updater, but
switch to SHA1 instead. It's the future!

       .    .          .       .           .
  .              .        .          .               .
    .    .           .           .        .-.   .         .     .
           -------     ______             | `\                .
.   ______   .            '   ``-..-.-,.-.`.  `----._______
           .  -------   .   . `.`.-=,'='-===| SHA1  \______`--._
 --------------      ---   .  ..-.-.-=-.-===|   ____________.--"
               ---------  . . .- .,==-'`-'-./  /__----'^  `^  `^  `^
   ____   -----     --  ____   ' . _____   \______[=>  =>  =>  =>
         .                   .       .                .
   .          .     .     .              .        .          .

Signed-off-by: aszlig <aszlig@nix.build>
2019-03-31 22:41:44 +02:00
worldofpeaceandGitHub d8c7f0bd3f Merge pull request #58581 from matthiasbeyer/add-semver-tool
semver-tool: init at 2.1.0
2019-03-31 16:05:07 -04:00
Matthias Beyer a9d4d87f05 qgit: Fix meta.homepage
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
2019-03-31 21:48:30 +02:00
Alyssa RossandMatthias Beyer 98c22f2d03 semver-tool: init at 2.1.0
Cherry-picked from: https://github.com/alyssais/nixpkgs/commit/eeb175169f65201bd47ece5d0593d3c7c386077d
Although fixed so that it actually builds.

Original message:

> I chose "semver-tool" as the path for this package because "semver" is
> extremely generic, and probably more rightly belongs to node-semver[1]
> (at least judging by GitHub stars), and because "semver-tool" is the
> name of this project's GitHub repository, and because it was the name
> used in the package request[2].
>
> Closes https://github.com/NixOS/nixpkgs/issues/50945.
>
> [1]: https://github.com/npm/node-semver
> [2]: https://github.com/NixOS/nixpkgs/issues/50945

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
2019-03-31 21:32:15 +02:00
stragerandDmitry Kalinkin 75aa8460ac kitty: support macOS (#56740)
Install the `kitty` command-line utility and the `kitty.app` macOS
application.

* Prefer libicns (png2icns) over Apple's non-free iconutil.
* Work around warnings from Apple headers by disabling -pedantic-errors
  and -Werror.
* Work around ld not support LLVM-LTO by disabling LTO.
* Make Kitty and glfw compile for macOS 10.11 (and macOS 10.10).
2019-03-31 15:18:58 -04:00
zimbatm f88d9c3c96 direnv: 2.19.2 -> 2.20.0 2019-03-31 21:15:16 +02:00
Tim Steinbach 9ba43c07cb linux: 5.0-rc8 -> 5.1-rc2 2019-03-31 14:37:51 -04:00
Gabriel EbnerandGitHub 05bed043b7 Merge pull request #58324 from dtzWill/update/khal-0.10.0
khal: 0.9.10 -> 0.10.0
2019-03-31 20:36:30 +02:00
LinArcXandDmitry Kalinkin 9396b273cc samim-fonts: init at 3.1.0 (#58383) 2019-03-31 14:03:48 -04:00
LinArcXandDmitry Kalinkin c29f267d92 parastoo-fonts: init at v1.0.0-alpha5 (#58445) 2019-03-31 14:00:06 -04:00