Commit Graph
908494 Commits
Author SHA1 Message Date
David Wronek 2ec19a64cc nixos/firewall-nftables: fix multicast ping
We can currently observe that pinging the multicast IPv6 address ff02::1
does not work as expected. This is because conntrack is marking the
ICMPv6 replies as invalid and thus is dropping them.

This can behaviour can be seen with these commands:
1. Get handle of the rule above the conntrack rule:
   ```
   nft -a list ruleset inet
   ```
2. Insert a rule to log all packets marked as invalid by conntrack:
   ```
   nft insert rule inet nixos-fw \
     input position <handle> ct state invalid \
     log prefix \"ct invalid: \"
   ```
3. Starting pinging ff02::1 and observe dmesg

This change adds a rule to allow all ICMPv6 echo replies (type 129)
before the conntrack rule starts taking action.

Signed-off-by: David Wronek <david.wronek@mainlining.org>
2025-12-07 21:37:36 +01:00
Gergő GutyinaandGitHub a40440f13e taterclient-ddnet: 10.6.0 -> 10.7.0 (#462586) 2025-12-07 19:53:56 +00:00
Gaétan LepageandGitHub efb8065d9e python3Packages.textual: 6.7.1 -> 6.8.0 (#468740) 2025-12-07 19:53:09 +00:00
nixpkgs-ci[bot]andGitHub d9a4f3a230 qtappinstancemanager: 1.3.0 -> 1.3.1 (#468688) 2025-12-07 19:44:09 +00:00
Gaétan LepageandGitHub e024d9c6c7 vimPlugins.mini-cmdline: init at 2025-12-07 (#468741) 2025-12-07 19:34:06 +00:00
Thomas GerbetandGitHub e0622a1cc2 cbmp: regenerate lockfile (#466669) 2025-12-07 19:25:41 +00:00
Martin WeineltandGitHub 0eb8e5c620 home-assistant-custom-lovelace-modules.advanced-camera-card: 7.19.4 -> 7.20.0 (#468701) 2025-12-07 19:25:27 +00:00
dotlambdaandGitHub 35f5c43125 ansible: 2.19.4 -> 2.20.0 (#458928) 2025-12-07 19:24:55 +00:00
nixpkgs-ci[bot]andGitHub 541b22a72b netbird-dashboard: 2.20.1 -> 2.23.0 (#468502) 2025-12-07 19:24:53 +00:00
nixpkgs-ci[bot]andGitHub 7fa2afcff1 lux-cli: 0.20.2 -> 0.22.0 (#468718) 2025-12-07 18:51:32 +00:00
Théo Bori de59e6bbfa taterclient-ddnet: 10.6.0 -> 10.7.0 2025-12-07 19:48:52 +01:00
K900andGitHub ad03163818 nixos/plasma6: fix fingerprint unlocking (#466094) 2025-12-07 18:39:08 +00:00
dotlambdaandGitHub 68b892fc84 home-assistant-custom-components.mypyllant: init at 0.9.9 (#467747) 2025-12-07 18:24:31 +00:00
Wolfgang WaltherandGitHub 324e20a96b workflows/backport: advertise that merge bot can be used on eligible backports (#468727) 2025-12-07 18:14:41 +00:00
Nikolay KorotkiyandGitHub 82e55e7124 xournalpp: move to by-name/, add update script, 1.2.9 -> 1.2.10 (#468704) 2025-12-07 18:11:44 +00:00
oddlamaandGitHub 233a01dae3 udp-over-tcp: init at 0.4.0 (+ nixos/udp-over-tcp) (#418826) 2025-12-07 19:12:00 +01:00
Heitor Augusto a078496659 vimPlugins.mini-cmdline: init at 2025-12-07 2025-12-07 15:03:37 -03:00
Gaetan Lepage 084645a6d5 python3Packages.textual: 6.7.1 -> 6.8.0
Diff: https://github.com/Textualize/textual/compare/v6.7.1...v6.8.0

Changelog: https://github.com/Textualize/textual/blob/v6.8.0/CHANGELOG.md
2025-12-07 17:57:07 +00:00
Gergő GutyinaandGitHub aa1bf8ebf5 janet: 1.39.1 -> 1.40.1 (#462646) 2025-12-07 17:52:21 +00:00
Michael Daniels b4db7c6341 workflows/backport: advertise that merge bot can be used on eligible backports
Some maintainers aren't aware that the merge bot had this capability added.
This would be more prominent than the existing label.
2025-12-07 12:50:51 -05:00
dotlambdaandGitHub 2ccffce580 proj: 9.7.0 -> 9.7.1 (#467270) 2025-12-07 17:24:24 +00:00
Gergő GutyinaandGitHub dc57dcfb58 r2modman: 3.2.9 -> 3.2.10 (#462547) 2025-12-07 17:23:39 +00:00
dotlambdaandGitHub 5515a048bd python3Packages.iocsearcher: 2.4.8 -> 2.5.7 (#468532) 2025-12-07 17:16:16 +00:00
dotlambdaandGitHub bb5281a4c5 python3Packages.pyupgrade: 3.21.1 -> 3.21.2 (#468572) 2025-12-07 17:15:36 +00:00
dotlambdaandGitHub 5e91bbd959 python3Packages.rdflib: 7.2.1 -> 7.5.0 (#468540) 2025-12-07 17:15:07 +00:00
Gergő GutyinaandGitHub b64a79e5be glamoroustoolkit: 1.1.32 -> 1.1.47 (#462532) 2025-12-07 17:09:21 +00:00
Ashish SHUKLA ae21cbf3da janet: 1.39.1 -> 1.40.1
Changes: https://github.com/janet-lang/janet/releases/tag/v1.40.0
         https://github.com/janet-lang/janet/releases/tag/v1.40.1
2025-12-07 17:02:46 +00:00
Ben SiraphobandGitHub 14752e9850 fq: 0.15.1 -> 0.16.0 (#468714) 2025-12-07 16:15:28 +00:00
h7x4andGitHub d2085f4873 dell-bios-fan-control: init package and module (#439978) 2025-12-07 16:13:58 +00:00
John EricsonandGitHub 11973bc841 treewide: fix nix-env eval in cross (#467887) 2025-12-07 16:04:43 +00:00
Gergő GutyinaandGitHub c2c036c7da deadlock-mod-manager: 0.10.1 -> 0.11.1 (#466159) 2025-12-07 16:00:02 +00:00
R. Ryantm d8399ccb38 fq: 0.15.1 -> 0.16.0 2025-12-07 15:53:39 +00:00
Gergő GutyinaandGitHub 940aeb927f python3Packages.cs50: init at 9.4.0 (#410240) 2025-12-07 15:52:01 +00:00
cyclopentane 4a52646221 xournalpp: 1.2.9 -> 1.2.10 2025-12-07 16:38:07 +01:00
cyclopentane ca40c960a8 xournalpp: add update script 2025-12-07 16:38:06 +01:00
Gary Guo 4578ec70df nixos/plasma6: fix smartcard unlocking
Similar to fprint changes, ensure that kde-smartcard is dedicated to
smartcard and other two PAM configs don't use smartcard.
2025-12-07 15:36:36 +00:00
Amadej Kastelic f84a5f1265 python3Packages.cs50: init at 9.4.0 2025-12-07 16:35:40 +01:00
R. Ryantm ba18b0e46c lux-cli: 0.20.2 -> 0.22.0 2025-12-07 15:27:46 +00:00
Jan TojnarandGitHub 1ab1a74861 gimp: 3.0.4 -> 3.0.6 (#459702) 2025-12-07 15:26:47 +00:00
numinitandGitHub 96dd20689f nebula: add PKCS#11 support with passthru tests (#468346) 2025-12-07 15:26:34 +00:00
cyclopentane a732d1503a xournalpp: move to by-name/ 2025-12-07 16:24:33 +01:00
Gaétan LepageandGitHub d7c20b2b2b lib.maintainers.perchun -> PerchunPak (#468687) 2025-12-07 15:23:47 +00:00
Yohann BonifaceandGitHub 2646bb1867 iosevka: 33.3.5 -> 33.3.6 (#468524) 2025-12-07 15:05:42 +00:00
AleksanaandGitHub 5f71711bda python3Packages.leanblueprint: 0.0.18 -> 0.0.19 (#466113) 2025-12-07 15:05:26 +00:00
Yohann BonifaceandGitHub 5d1542ce96 nvs: 1.10.7 -> 1.11.0 (#468566) 2025-12-07 15:05:25 +00:00
AleksanaandGitHub 27596973e6 bootdev-cli: 1.20.6 -> 1.21.1 (#468473) 2025-12-07 15:03:25 +00:00
R. Ryantm 58d23ad9af home-assistant-custom-lovelace-modules.advanced-camera-card: 7.19.4 -> 7.20.0 2025-12-07 15:03:21 +00:00
ArtturinandGitHub 7e5c7e0be9 formats.javaProperties: fix cross-compilation (#468123) 2025-12-07 14:54:52 +00:00
PerchunPak 3f8be5ef33 lib.maintainers.perchun -> PerchunPak
Should be easier for people to ping me
2025-12-07 15:53:57 +01:00
Gaétan LepageandGitHub 195cc2c629 models-dev: 0-unstable-2025-12-03 -> 0-unstable-2025-12-05 (#468025) 2025-12-07 14:50:56 +00:00