gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
349,662 Commits 9 Branches 0 Tags
317ef2ca5658db47fb863dc79599503d1c1a2408
Commit Graph
349662 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Bobby RongandGitHub 317ef2ca56 Merge pull request #156967 from OPNA2608/update/ptcollab 
ptcollab: 0.5.0.3 -> 0.6.0.2
 2022-01-28 16:41:15 +08:00
FliegendeWurstGitHubRenaud
 		8e660e42f6 libesmtp: 1.0.6 -> 1.1.0 
* libesmtp: 1.0.6 -> 1.1.0 (#149884)

And refresh meta attributes:
New homepage and SPDX 3.0 license identifier

Co-authored-by: Renaud <c0bw3b@users.noreply.github.com>
 2022-01-28 08:49:01 +01:00
Ryan MulliganandGitHub 02f296c273 Merge pull request #157097 from r-ryantm/auto-update/tailscale 
tailscale: 1.20.2 -> 1.20.3
 2022-01-27 21:53:21 -08:00
zowoq 5bb20f9dc7 mandown: init at 0.1.3 2022-01-28 15:30:46 +10:00
R. Ryantm 8804d87bd3 tailscale: 1.20.2 -> 1.20.3 2022-01-28 04:15:55 +00:00
piegamesandGitHub ab14cf224f Merge pull request #157080: fix buildMachines eval 2022-01-28 02:22:37 +01:00
Martin Weinelt 268157dc83 nixos/nix-daemon: fix buildMachines eval 2022-01-28 02:00:25 +01:00
Yipeng SunandGitHub 54cbee8d97 root: tweak wrapping flags for auxiliary programs, avoid forcing CMAKE_CXX_STANDARD (#157069) 2022-01-27 19:37:36 -05:00
ajs124andGitHub dff905b084 Merge pull request #157059 from helsinki-systems/drop/softether_4_25 
softether_4_25: drop
 2022-01-28 00:08:21 +01:00
Robert ScottandBjørn Forsman fef09da997 lighttpd: add patch to fix build on darwin x86_64 2022-01-28 00:02:44 +01:00
Wout MertensandGitHub ecd6b2864c Merge pull request #147557 from wmertens/nixos-ozone 
wayland: enable ozone via $NIXOS_OZONE_WL
 2022-01-27 23:46:27 +01:00
R. RyanTMandGitHub d9e21f2843 smooth: 0.9.8 -> 0.9.9 
(#156321)
 2022-01-27 23:35:11 +01:00
Ryan MulliganandGitHub 229544e8c1 Merge pull request #157037 from r-ryantm/auto-update/linode-cli 
linode-cli: 5.14.0 -> 5.15.0
 2022-01-27 14:26:42 -08:00
R. RyanTMandGitHub 37ca422c73 libosmium: 2.17.2 -> 2.17.3 
(#156566)
 2022-01-27 23:09:48 +01:00
Thomas GerbetandJonathan Ringer 725d843cc8 flatpak: 1.12.2 -> 1.12.4 
Fixes CVE-2021-43860 and CVE-2022-21682

Changes:
https://github.com/flatpak/flatpak/releases/tag/1.12.4
https://github.com/flatpak/flatpak/releases/tag/1.12.3

Security advisories:
https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j
https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx
 2022-01-27 13:57:07 -08:00
ajs124 de5bdb94f3 softether_4_25: drop 2022-01-27 22:29:44 +01:00
ajs124andGitHub 2b14787033 Merge pull request #156396 from helsinki-systems/upd/mysocket 
mysocketw: switch to fork with version 3.10.27
 2022-01-27 22:21:22 +01:00
Robert HensingandGitHub da702fe9d9 Merge pull request #156857 from hercules-ci/fix-version-suffix-convention 
doc/coding-conventions: Fix version attribute suffix to match reality
 2022-01-27 22:16:15 +01:00
Linus HeckemannandGitHub 81cd4faec2 Merge pull request #156845 from mayflower/nextcloud-group 
nextcloud: make home group-readable
 2022-01-27 22:09:17 +01:00
Daniel OlsenandJonathan Ringer 68e9cd0f7e nixos/lib: Use SingleLineStr in systemd description 2022-01-27 12:56:36 -08:00
Jan TojnarandGitHub 08b1e3e03d Merge pull request #157043 from tomfitzhenry/spot-0.3.1 
spot: 0.3.0 -> 0.3.1
 2022-01-27 21:55:21 +01:00
Thomas GerbetandJonathan Ringer 1387fd0fd1 keepalived: 2.2.4 -> 2.2.7 
Fixes CVE-2021-44225.
https://www.keepalived.org/release-notes/Release-2.2.7.html
 2022-01-27 12:39:54 -08:00
Thomas GerbetandJonathan Ringer f8c8a8918a flatpak-builder: 1.2.0 -> 1.2.2 
Changes:
https://github.com/flatpak/flatpak-builder/releases/tag/1.2.2
https://github.com/flatpak/flatpak-builder/releases/tag/1.2.1

Security advisory:
https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx
 2022-01-27 12:38:04 -08:00
R. RyantmandJonathan Ringer 8909cf13be python310Packages.azure-mgmt-applicationinsights: 2.0.0 -> 2.1.0 2022-01-27 12:26:51 -08:00
R. RyantmandJonathan Ringer f329ced6f2 python310Packages.sqlite-utils: 3.22 -> 3.22.1 2022-01-27 12:25:20 -08:00
R. RyantmandJonathan Ringer 1b12139305 python39Packages.mautrix: 0.14.5 -> 0.14.6 2022-01-27 12:25:10 -08:00
R. RyantmandJonathan Ringer eff0fc087c python310Packages.sagemaker: 2.73.0 -> 2.74.0 2022-01-27 12:24:50 -08:00
Tom Fitzhenry 4e8deff9c8 spot: 0.3.0 -> 0.3.1 
https://github.com/xou816/spot/releases/tag/0.3.1
 2022-01-28 07:15:32 +11:00
Thomas GerbetandBjørn Forsman 846fafa68e lighttpd: 1.4.63 -> 1.4.64 
https://www.lighttpd.net/2022/1/19/1.4.64/
 2022-01-27 21:12:21 +01:00
SandroandGitHub 896ab6a275 Merge pull request #156899 from drupol/php/add-ds-extension 2022-01-27 20:58:44 +01:00
Alexander TsvyashchenkoandGitHub fa7b83fa48 python3Packages.objax: fix tensorboard dependency (#156909) 
Also moved `jaxlib` to `buildInputs` to avoid injecting it into dependent packages.
 2022-01-27 11:45:32 -08:00
Michael WeissandGitHub e5808c2f62 Merge pull request #154003 from primeos/signal-desktop 
signal-desktop: 5.27.1 -> 5.29.1
 2022-01-27 20:44:01 +01:00
Robert ScottandGitHub 7b13bb9479 Merge pull request #156698 from bachp/poco-1.11.0 
poco: 1.10.1 -> 1.11.1
 2022-01-27 19:42:47 +00:00
R. Ryantm 13b987abce linode-cli: 5.14.0 -> 5.15.0 2022-01-27 19:10:32 +00:00
Michael Weiss eeb0e220cd signal-desktop: 5.29.0 -> 5.29.1 2022-01-27 20:01:19 +01:00
Bernardo MeurerandGitHub 319850d2a3 Merge pull request #156663 from lovesegfault/nix-refactor 
nix: factor out common.nix
 2022-01-27 10:58:17 -08:00
RenaudandGitHub 4dc70faa6f twa: 1.9.1 -> 1.10.0 
(#156769)
 2022-01-27 19:46:26 +01:00
Jörg ThalheimandLinus Heckemann 956dab36a3 nextcloud: use tmpfiles to create group-readable home 
users.users.*.createHome makes home only owner-readable.
This breaks nginx reading static assets from nextcloud's home,
after a nixos-rebuild that did not restart nextcloud-setup.

Closes #112639
 2022-01-27 19:13:50 +01:00
Will CohenandGitHub 7ec99ea7cf qt5.qtwebkit: add disambiguate handle for darwin (#156809) 2022-01-27 13:00:11 -05:00
Fabian AffolterandGitHub f90310a12f Merge pull request #157016 from applePrincess/exploitdb-2022-01-26 
exploitdb: 2022-01-25 -> 2022-01-26
 2022-01-27 18:54:34 +01:00
Bernardo MeurerandGitHub fe55576eea Merge pull request #156997 from TredwellGit/linux 
Kernels 2022-01-27
 2022-01-27 09:52:03 -08:00
ajs124andGitHub 47a2176ec8 Merge pull request #156998 from mweinelt/smartctl-exporter-fixups 
prometheus.exporters.smartctl: fixes
 2022-01-27 18:49:49 +01:00
Martin WeineltandGitHub 3a4bed480a Merge pull request #156937 from mweinelt/firefox 2022-01-27 18:41:56 +01:00
Bernardo MeurerandGitHub 5f9b470ff0 Merge pull request #154809 from helsinki-systems/feat/stc-proper-unit-file-parser 
nixos/switch-to-configuration: Proper unit file parser and clean/fix lower part of the script
 2022-01-27 09:35:34 -08:00
Aaron AndersenandGitHub 3cafa47a66 Merge pull request #157019 from dali99/fix-mx-puppet-discord-module 
nixos/mx-puppet-discord: Change systemd unit description to avoid new…
 2022-01-27 12:02:59 -05:00
maralornandGitHub 037eb0a617 Merge pull request #156491 from NixOS/haskell-updates 
haskellPackages: update stackage and hackage
 2022-01-27 18:01:42 +01:00
Malte Brandy caef341934 Merge branch 'master' into haskell-updates 2022-01-27 17:48:01 +01:00
Malte Brandy c1e2f12203 haskellPackages: mark builds failing on hydra as broken 
This commit has been generated by maintainers/scripts/haskell/mark-broken.sh
 2022-01-27 17:47:21 +01:00
StigandGitHub 196873f601 Merge pull request #155116 from wentasah/amc-add-oodoc 
auto-multiple-choice: add OpenOfficeOODoc perl module as dependency
 2022-01-27 17:37:02 +01:00
Martin Weinelt 12c26aca1f prometheus.exporters.smartctl: Fix autodiscovery 
When no devices are given the exporter tries to autodiscover available
disks. The previous DevicePolicy was however preventing the exporter
from accessing any device at all, since only explicitly mentioned ones
were allowed.

This commit adds an allow rule for several device classes that I could
find on my machines, that gets set when no devices are explicitly
configured.

There is an existing problem with nvme devices, that expose a character
device at `/dev/nvme0`, and a (namespaced) block device at
`/dev/nvme0n1`. The character device does not come with permissions that
we could give to the exporter without further impacting the hardening.

  crw------- 1 root root 247, 0 27. Jan 03:10 /dev/nvme0
  brw-rw---- 1 root disk 259, 0 27. Jan 03:10 /dev/nvme0n1

The autodiscovery only finds the character device, which the exporter
unfortunately does not have access to.

However a simple udev rule can be used to resolve this:

  services.udev.extraRules = ''
    SUBSYSTEM=="nvme", KERNEL=="nvme[0-9]*", GROUP="disk"
  '';

Unfortunately I'm not fully aware of the security implications this
change carries and we should question upstream (systemd) why they did
not include such a rule.
The disk group has no members on any of my machines.

  ❯ getent group disk
  disk:x:6:
 2022-01-27 17:33:27 +01:00