Commit Graph

6522 Commits

Author SHA1 Message Date
Anthony ROUSSEL
c1104aee4d nixos/gns3-server: disable SystemD hardening 2024-09-23 20:46:18 +02:00
github-actions[bot]
9a6f63ebed Merge master into staging-next 2024-09-23 18:04:34 +00:00
Martin Weinelt
9b9ca77050 nixos/logrotate: harden systemd unit (#339050) 2024-09-23 17:49:29 +02:00
Fabián Heredia Montiel
9b2a506736 Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:

- pkgs/tools/package-management/nix/default.nix
2024-09-22 13:45:27 -06:00
Fernando Rodrigues
09ae981630 24.11-release-notes/nixos/xen: fix wrong indentation inside deprecation warning
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-22 14:29:08 -03:00
Leona Maroni
761ae3237c dependency-track: init at 4.11.6 (#328669) 2024-09-22 18:49:11 +02:00
Emily
2e00bfd393 nixos: remove environment.noXlibs (#341717) 2024-09-22 16:25:00 +01:00
Maximilian Bosch
179b6bce21 Merge: linux_4_19: drop (#343283) 2024-09-22 16:46:54 +02:00
Alexander Sieg
5b67f3b831 nixos/dependency-track: init module 2024-09-22 16:38:45 +02:00
github-actions[bot]
6bb2408295 Merge master into staging-next 2024-09-22 12:05:17 +00:00
Weijia Wang
84cd38f778 globalprotect-openconnect: add core logic and packages for 2.x releases (#316526) 2024-09-22 12:07:33 +02:00
github-actions[bot]
3d52decd63 Merge master into staging-next 2024-09-22 06:04:18 +00:00
Stephen
9c795b812d nixos/doc: include how to identify device name (#343625)
Include how to identify device name

Co-authored-by: aleksana <me@aleksana.moe>
2024-09-22 10:16:15 +08:00
Fabián Heredia Montiel
777c1bc861 linux_4_19: drop since it will reach EOL within NixOS 24.11 2024-09-21 19:11:50 -06:00
github-actions[bot]
f2c1ad7ad5 Merge master into staging-next 2024-09-21 18:03:54 +00:00
Rahul Rameshbabu
156fe9a898 globalprotect-openconnect: add core logic and packages for 2.x releases
The GUI of GlobalProtect-openconnect is unfree software, while the CLI is
licensed as GPLv3-only. This packaging work focuses on the CLI, and
components required for the CLI.

Link: https://github.com/yuezk/GlobalProtect-openconnect
Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-09-21 10:36:31 -07:00
Rahul Rameshbabu
b08d6a664f globalprotect-openconnect: remove deprecated 1.x package
The 1.x iteration of globalprotect-openconnect is no longer being
developed. Remove related components from nixpkgs.

Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-09-21 10:20:21 -07:00
K900
1f9fc918ce treewide: use pkgs.nixos-enter instead of config.system.build.nixos-enter 2024-09-21 16:13:36 +03:00
h7x4
32f34d13c2 bluemap: 3.21 -> 5.3 2024-09-21 14:47:04 +02:00
github-actions[bot]
754402a237 Merge staging-next into staging 2024-09-21 00:13:41 +00:00
Ryan Horiguchi
c26ca03c4d nixos/dnsmasq: remove deprecated option "extraConfig" 2024-09-20 22:44:16 +02:00
github-actions[bot]
7fc19ff961 Merge staging-next into staging 2024-09-20 18:05:01 +00:00
Moritz Sanft
5ee6467bd3 nixos: add support for dm-verity
Co-authored-by: nikstur <nikstur@outlook.com>
Co-authored-by: WilliButz <willibutz@posteo.de>
2024-09-20 13:03:10 +02:00
Marie
29a1bcb9ec doc: 24.11: fix taskwarrior typo 2024-09-20 11:03:13 +02:00
K900
d8a54461fc Merge remote-tracking branch 'origin/staging-next' into staging 2024-09-20 07:27:56 +03:00
PassiveLemon
6e9e75f7f2 nixos/wivrn: init module 2024-09-19 15:34:31 -04:00
Pim Kunis
f1daa46d45 nixos/gatus: init module 2024-09-19 21:34:10 +02:00
Felipe Silva
51344369d5 doc: 24.11: document isync version bump 2024-09-19 19:14:55 +02:00
github-actions[bot]
44c701d84e Merge staging-next into staging 2024-09-19 06:05:13 +00:00
adisbladis
4087c4a5c9 nrfutil: reinit at 7.11.1 (#327945) 2024-09-19 03:52:13 +00:00
github-actions[bot]
f8ad48a5a2 Merge staging-next into staging 2024-09-19 00:14:04 +00:00
Emily
5320e21a4b nixos/xen: refactor dom0 configuration (#324911) 2024-09-18 23:22:38 +01:00
Fernando Rodrigues
9e5f77a3e2 nixos/xen: refactor dom0 configuration
- Cleans up downstream systemd units in favour of using upstream units.
- Xen 4.18 on Nixpkgs now supports EFI booting, so we have an EFI boot
  builder here that runs after systemd-boot-builder.py.
- Add more options for setting up dom0 resource limits.
- Adds options for the declarative configuration of oxenstored.
- Disables the automatic bridge configuration, as it was broken.
- Drops legacy BIOS boot
- Adds an EFI boot entry builder script.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
Co-authored-by: Yaroslav Bolyukin <iam@lach.pw>
2024-09-18 17:36:39 -03:00
github-actions[bot]
71d46fbcdf Merge staging-next into staging 2024-09-18 18:04:48 +00:00
h7x4
50470da36e nixos/matrix-hookshot: init module (#323196) 2024-09-18 16:04:30 +02:00
Adam C. Stephens
7f206b648b zfs: deprecate latestCompatibleLinuxPackages (#341596) 2024-09-18 10:01:00 -04:00
Finn Landweber
6974feb92c nixos/matrix-hookshot: init module 2024-09-18 13:03:42 +02:00
github-actions[bot]
b638e02a58 Merge staging-next into staging 2024-09-18 00:13:59 +00:00
Fabián Heredia Montiel
e25a409cef nix: 2.18 -> 2.24 (#335342) 2024-09-17 15:34:47 -06:00
h7x4
142e77e733 nixos/doc: add release note about nrfutil repackaging 2024-09-17 22:36:38 +02:00
Michele Guerini Rocco
e3191b8ded nixos/dhcpcd: harden and run as unprivileged user (#336988) 2024-09-17 19:21:11 +02:00
Adam Stephens
2dbc1128b3 zfs: deprecate latestCompatibleLinuxPackages
Using zfs.latestCompatibleLinuxPackages can result in downgrades to the kernel on a system, potentially causing breakage.
This breakage may not be apparent during build and switch, but only after attempting to reboot into the updated generation.
By forcing users to explicitly manage their kernel version, we can ensure that the breakage will be apparent at build time instead.
2024-09-17 08:57:38 -04:00
K900
b24e9a53ca Merge remote-tracking branch 'origin/staging-next' into staging 2024-09-17 09:07:34 +03:00
Christina Sørensen
a011aa9e02 nixos/doc: recommend usage of --use-remote-sudo when switching configurations (#342338) 2024-09-17 06:09:31 +02:00
Fernando Rodrigues
8bf0396bf6 nixos/doc: alter wording to explain the usage of --use-remote-sudo
Also recommends the usage of sudo's -E flag if --use-remote-sudo cannot
be used. This should still be discouraged IMO, as it means Nix may write
root-owned files to the user's home directory.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-16 17:55:30 -03:00
Fernando Rodrigues
116f14ed36 nixos/doc: replace nixos-rebuild commands running as root by --use-remote-sudo
After a discussion on Matrix, it has become clear that building as root
is discouraged, and the (inappropriately named) --use-remote-sudo flag
should be enouraged as the de-facto way to selectively escalate to root
after a system build has finished.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-09-16 16:01:16 +00:00
github-actions[bot]
1c3463dc7a Merge staging-next into staging 2024-09-16 12:06:19 +00:00
Sandro
fd3ddb6b60 dnscrypt-wrapper: remove package and NixOS modules (#341838) 2024-09-16 11:25:30 +02:00
Markus Theil
5b19e716f3 mention new OpenSSL default version in release notes
The new OpenSSL default 3.3.x increased the default security level,
mention this in release notes.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:45:58 +02:00
rnhmjoj
67700c521e nixos/release-notes: mention dhcpcd changes 2024-09-16 08:07:56 +02:00