gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
419,381 Commits 9 Branches 0 Tags
678eed323ffd90117472cd432ebe85dddaff07f1
Commit Graph
419381 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Peter Waller 678eed323f nixos/grub: Name initrd-secrets by system, not by initrd 
Previously, secrets were named according to the initrd they were
associated with. This created a problem: If secrets were changed whilst
the initrd remained the same, there were two versions of the secrets
with one initrd. The result was that only one version of the secrets would
by recorded into the /boot partition and get used. AFAICT this would
only be the oldest version of the secrets for the given initrd version.

This manifests as #114594, which I found frustrating while trying to use
initrd secrets for the first time. While developing the secrets I found
I could not get new versions of the secrets to take effect.
Additionally, it's a nasty issue to run into if you had cause to change
the initrd secrets for credential rotation, etc, if you change them and
discover you cannot, or alternatively that you can't roll back as you
would expect.

Additional changes in this patch.

* Add a regression test that switching to another grub configuration
  with the alternate secrets works. This test relies on the fact that it
  is not changing the initrd. I have checked that the test fails if I
  undo my change.

* Persist the useBootLoader disk state, similarly to other boot state.
  * I had to do this, otherwise I could not find a route to testing the
    alternate boot configuration. I did attempt a few different ways of
    testing this, including directly running install-grub.pl, but what
    I've settled on is most like what a user would do and avoids
    depending on lots of internal details.
  * Making tests that test the boot are a bit tricky (see hibernate.nix
    and installer.nix for inspiration), I found that in addition to
    having to copy quite a bit of code I still couldn't get things to
    work as desired since the bootloader state was being clobbered.

My change to persist the useBootLoader state could break things,
conceptually. I need some help here discovering if that is the case,
possibly by letting this run through a staging CI if there is one.

Fix #114594.

cc potential reviewers:

@lopsided98 (original implementer) @joachifm (original reviewer),
@wkennington (numerous fixes to grub-install.pl), @lheckemann (wrote
original secrets test).
 2023-01-21 17:19:26 +00:00
figsodaandGitHub 0fe643128c Merge pull request #197067 from xanderio/dracula-nvim 
vimPlugins.dracula-nvim: init at 2022-10-21
 2022-10-21 15:34:08 -04:00
Samuel AinsworthandGitHub 068b477485 Merge pull request #196977 from samuela/samuela/jax 
JAX upgrades
 2022-10-21 12:11:53 -07:00
Samuel Ainsworth 38cd4258fa python3Packages.jax: 0.3.16 -> 0.3.23 2022-10-21 12:11:02 -07:00
Samuel Ainsworth bbaad9c2fa python3Packages.jaxlib{-bin}: no longer need to pin the cudaPackages version 2022-10-21 12:11:02 -07:00
Samuel Ainsworth d9a6568d1c python3Packages.jaxlib: 0.3.15 -> 0.3.22 2022-10-21 12:11:01 -07:00
Samuel Ainsworth 55b3f2ad0b python3Packages.jaxlib-bin: 0.3.0 -> 0.3.22 
* Drop support for python versions <3.10
* Drop support for cuDNN <8.2
* Add support for aarch64-darwin
 2022-10-21 12:11:01 -07:00
Guillaume GirolandGitHub 9ad4161823 Merge pull request #197022 from tomfitzhenry/dub-aarch64 
dub: enable aarch64-linux
 2022-10-21 19:06:53 +00:00
Fabian AffolterandGitHub 301aada7a6 Merge pull request #196990 from fabaff/pyprusalink 
python310Packages.pyprusalink: init at 1.1.0
 2022-10-21 20:38:19 +02:00
Fabian AffolterandGitHub d4b7556074 Merge pull request #197036 from fabaff/rns-bump 
python310Packages.rns: 0.3.14 -> 0.3.16, python310Packages.lxmf: 0.2.0 -> 0.2.1, python310Packages.nomadnet: 0.2.4 -> 0.2.5
 2022-10-21 20:38:06 +02:00
Fabian AffolterandGitHub 93c6e4f0a8 Merge pull request #197037 from fabaff/life360-bump 
python310Packages.life360: 5.1.1 -> 5.2.0
 2022-10-21 20:37:55 +02:00
SandroandGitHub 9a74be9597 Merge pull request #194946 from fee1-dead-contrib/huggle/new 2022-10-21 20:35:59 +02:00
figsodaandGitHub 3d50c8109a Merge pull request #197093 from r-ryantm/auto-update/inlyne 
inlyne: 0.2.0 -> 0.2.1
 2022-10-21 14:11:30 -04:00
SandroandGitHub 5106dc0ddb Merge pull request #196397 from fgaz/hikounomizu/init 2022-10-21 19:57:12 +02:00
Elis HirwingandGitHub 844715a8b9 Merge pull request #196819 from Stunkymonkey/freshrss-api-fix 
freshrss: fix greader-api
 2022-10-21 19:56:55 +02:00
R. Ryantm c075296bff inlyne: 0.2.0 -> 0.2.1 2022-10-21 17:41:15 +00:00
Shea LevyandGitHub 71c5816834 Merge pull request #196284 from onny/wordpresspackages-gutenberg 
wordpressPackages.plugins.gutenberg: init at 14.3.0
 2022-10-21 13:00:46 -04:00
ArtturiandGitHub 84ff6fc11d Merge pull request #197074 from Artturin/amarokicons 
amarok: add breeze-icons to be a fallback for when there are no globally
 2022-10-21 19:36:35 +03:00
Artturin bd3acf7393 amarok: add breeze-icons to be a fallback for when there are no globally 
installed icons

breeze-icons will be added to XDG_DATA_DIRS in the wrapper

if the user has set their own icon theme then breeze-icons won't be used
 2022-10-21 17:47:36 +03:00
SandroandGitHub 45454cd8ed Merge pull request #196986 from Icy-Thought/galaxy-buds-client 2022-10-21 16:30:30 +02:00
Bobby RongandGitHub 2615fa1055 Merge pull request #197066 from stehessel/odo/update-meta-data 
odo: update meta data
 2022-10-21 21:56:43 +08:00
Bobby RongandGitHub 3deeae9e62 Merge pull request #196999 from bobby285271/pantheon 
pantheon.wingpanel-indicator-power: 6.1.0 -> 6.2.0
 2022-10-21 21:53:50 +08:00
Jonas HeinrichandYt c54a28030f nixos/httpd: Make option adminAddr optional 2022-10-21 09:12:25 -04:00
Ryan MulliganandGitHub b7ac3c6618 Merge pull request #194431 from r-ryantm/auto-update/linode-cli 
linode-cli: 5.23.0 -> 5.24.0
 2022-10-21 05:41:52 -07:00
Ryan MulliganandGitHub d1e2bbaf67 Merge pull request #197021 from r-ryantm/auto-update/dsq 
dsq: 0.22.0 -> 0.23.0
 2022-10-21 05:39:02 -07:00
Ryan MulliganandGitHub 3d73d4e0cd Merge pull request #196920 from r-ryantm/auto-update/kubemq-community 
kubemq-community: 2.3.1 -> 2.3.2
 2022-10-21 05:38:06 -07:00
Ryan MulliganandGitHub 0427da338f Merge pull request #196946 from r-ryantm/auto-update/odo 
odo: 2.5.1 -> 3.0.0
 2022-10-21 05:37:06 -07:00
Stephan Heßelmann 7987c0b6ca odo: update meta data 2022-10-21 14:35:21 +02:00
"Alexander Sieg" f3edf110ed vimPlugins.dracula-nvim: init at 2022-10-21 2022-10-21 14:31:41 +02:00
"Alexander Sieg" 3716e5901d vimPlugins: resolve github repository redirects 2022-10-21 14:31:20 +02:00
"Alexander Sieg" 923ab8a2cb vimPlugins: update 2022-10-21 14:30:59 +02:00
Francesco GazzettaGitHubSandro
 		0eceb37a6c hikounomizu: build data in parallel 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2022-10-21 12:21:31 +00:00
Bernardo MeurerandGitHub 2b94d18320 Merge pull request #197027 from r-ryantm/auto-update/bindfs 2022-10-21 08:17:57 -04:00
Ulrik StridandVincent Laporte 05bfaaa416 ocaml-lsp: 1.12 -> 1.14 2022-10-21 14:03:00 +02:00
Ulrik StridandVincent Laporte 7eb4d82785 ligo: 0.47.0 -> 0.53.0 2022-10-21 13:55:29 +02:00
piegamesandGitHub 7ca2b0d946 Merge pull request #196971: gnomeExtensions.dash-to-dock: 74 -> 75 2022-10-21 13:11:45 +02:00
SandroandGitHub 46cae6b1d6 Merge pull request #189746 from chuangzhu/viu 2022-10-21 13:07:48 +02:00
SandroandGitHub 33eebe24c7 Merge pull request #196387 from fgaz/faircamp/unstable-2022-10-08 2022-10-21 13:07:30 +02:00
SandroandGitHub 8c3269f838 Merge pull request #196388 from fgaz/upnp-router-control/init 2022-10-21 13:07:09 +02:00
Anderson TorresandGitHub 77b67a2524 Merge pull request #196862 from atorres1985-contrib/hypr 
hypr: init at unstable-2022-05-25
 2022-10-21 08:00:20 -03:00
Martin WeineltandGitHub 64d5a730cf Merge pull request #196907 from mweinelt/firefox 2022-10-21 11:50:53 +02:00
Ulrik StridandVincent Laporte 202ea67343 ocamlPackages.mec: Use dune 3 2022-10-21 11:29:34 +02:00
Florian KlinkandGitHub 690ccd9c4a Merge pull request #196917 from flokli/nsncd 
nixos/nscd: add option to use nsncd, init nsncd
 2022-10-21 11:22:17 +02:00
Michele Guerini RoccoandGitHub ee9ca83920 Merge pull request #196911 from ngkz/fork/qtwebengine-update 
qt5.qtwebengine: 5.15.8 -> 5.15.11
 2022-10-21 10:37:37 +02:00
Michele Guerini RoccoandGitHub 3338788431 Merge pull request #197026 from r-ryantm/auto-update/bdf2psf 
bdf2psf: 1.210 -> 1.211
 2022-10-21 10:36:54 +02:00
David GuibertandGitHub 37270ca43f Merge pull request #196983 from samuela/samuela/cudnn 
cudnn: fix 8.6.0 src url after upstream change
 2022-10-21 10:25:50 +02:00
Fabian Affolter dc0be73076 python310Packages.life360: 5.1.1 -> 5.2.0 2022-10-21 10:21:06 +02:00
Fabian Affolter 834c6241a7 python310Packages.nomadnet: 0.2.4 -> 0.2.5 2022-10-21 10:18:09 +02:00
Fabian Affolter 81437922b9 python310Packages.lxmf: 0.2.0 -> 0.2.1 2022-10-21 10:17:48 +02:00
Fabian Affolter 4d268b7b39 python310Packages.rns: 0.3.14 -> 0.3.16 2022-10-21 10:17:28 +02:00