Commit Graph
173780 Commits
Author SHA1 Message Date
Florian Klink 8817bbefdb nixos/ldap: set proper User= and Group= for nslcd service
eb90d97009 broke nslcd, as /run/nslcd was
created/chowned as root user, while nslcd wants to do parts as nslcd
user.

This commit changes the nslcd to run with the proper uid/gid from the
start (through User= and Group=), so the RuntimeDirectory has proper
permissions, too.

In some cases, secrets are baked into nslcd's config file during startup
(so we don't want to provide it from the store).

This config file is normally hard-wired to /etc/nslcd.conf, but we don't
want to use PermissionsStartOnly anymore (#56265), and activation
scripts are ugly, so redirect /etc/nslcd.conf to /run/nslcd/nslcd.conf,
which now gets provisioned inside ExecStartPre=.

This change requires the files referenced to in
users.ldap.bind.passwordFile and users.ldap.daemon.rootpwmodpwFile to be
readable by the nslcd user (in the non-nslcd case, this was already the
case for users.ldap.bind.passwordFile)

fixes #57783
2019-03-28 13:08:47 +01:00
Florian Klink 0a1451afe3 nixos/ldap: rename password file options properly
users.ldap.daemon.rootpwmodpw -> users.ldap.daemon.rootpwmodpwFile
users.ldap.bind.password -> users.ldap.bind.passwordFile

as users.ldap.daemon.rootpwmodpw never was part of a release, no
mkRenamedOptionModule is introduced.
2019-03-27 02:53:56 +01:00
Florian KlinkandGitHub 2dc4153633 Merge pull request #58406 from andir/avahi
avahi: apply patches for CVE-2017-6519 & CVE-2018-1000845
2019-03-27 00:03:36 +01:00
Florian KlinkandGitHub 8e81880061 Merge pull request #58401 from flokli/gitlab-11.9.1
gitlab: 11.9.0 -> 11.9.1
2019-03-26 23:39:46 +01:00
Vladyslav MandGitHub b7aefd4174 Merge pull request #58317 from r-ryantm/auto-update/libxl
libxl: 3.8.1 -> 3.8.4
2019-03-27 00:34:29 +02:00
Alexey ShmalkoandGitHub bd11aadc2b Merge pull request #58376 from dtzWill/update/cmocka-1.1.3
cmocka: 1.1.1 -> 1.1.3
2019-03-26 23:11:47 +02:00
Vladyslav MandGitHub 1c9b39ef71 Merge pull request #58378 from minijackson/waybar-0.5.0
waybar: 0.4.0 -> 0.5.0
2019-03-26 23:10:46 +02:00
Silvan MosbergerandGitHub 007e94cdb3 Merge pull request #58250 from thedavidmeister/2019-03-25-monero-14.0.2
2019 03 25 monero 14.0.2
2019-03-26 21:58:45 +01:00
Dmitry KalinkinandGitHub 0eb2c1927e Merge pull request #58326 from veprbl/pr/pyarrow_fix_2
pythonPackages.pyarrow: fix build
2019-03-26 16:47:40 -04:00
Michael Weiss 6fc7d8a15e androidStudioPackages.{dev,canary}: 3.5.0.6 -> 3.5.0.7 2019-03-26 21:39:07 +01:00
Andreas Rammhold 87a762269f avahi: apply patches for CVE-2017-6519 & CVE-2018-1000845 2019-03-26 21:32:00 +01:00
Daiderd JordanandGitHub b0f4ef9127 Merge pull request #57687 from jacereda/libcaca-nox
libcaca: make x11 optional, disabled on darwin
2019-03-26 21:25:03 +01:00
Peter SimonsandGitHub ffc14a60b5 Merge pull request #58391 from r-ryantm/auto-update/nbd
nbd: 3.18 -> 3.19
2019-03-26 21:17:41 +01:00
Florian Klink ec319793b4 gitlab: 11.9.0 -> 11.9.1 2019-03-26 21:00:04 +01:00
Florian Klink e558347243 gitaly: 1.27.0 -> 1.27.1 2019-03-26 20:59:46 +01:00
Minijackson e3dadb1231 waybar: 0.4.0 -> 0.5.0 2019-03-26 20:45:42 +01:00
Daiderd JordanandGitHub 018d329dbc Merge pull request #57928 from averelld/plex-update
plex: 1.14.1.5488 -> 1.15.1.791
2019-03-26 20:22:34 +01:00
Peter SimonsandGitHub 806d022395 Merge pull request #58381 from dtzWill/update/gnupg-2.2.15
gnupg: 2.2.14 -> 2.2.15
2019-03-26 20:14:37 +01:00
R. RyanTM ad70015295 nbd: 3.18 -> 3.19
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/nbd/versions
2019-03-26 11:43:48 -07:00
Jaka HudoklinandGitHub 5c74e42bec Merge pull request #56718 from xtruder/pkgs/brig/init
brig: init at 0.3.0
2019-03-26 19:42:31 +01:00
Matthew BauerandGitHub e8c84d3449 Merge pull request #58283 from dylex/bootzlib
fetchurl: use fetchurlBoot for zlib deps
2019-03-26 14:13:18 -04:00
gnidorahandBjørn Forsman ae024556c9 qmmp: 1.2.5 -> 1.3.1 2019-03-26 18:51:41 +01:00
Peter Simons 803e956919 liquidhaskell: switch ghc-8.6.x version to the 'develop' branch to fix the build 2019-03-26 17:20:35 +01:00
Peter Simons 999450f7d3 hackage-packages.nix: automatic Haskell package set update
This update was generated by hackage2nix v2.14.2-4-gd25a3c5 from Hackage revision
https://github.com/commercialhaskell/all-cabal-hashes/commit/12f5245f28163f1900c07cbfc3d93b72f7dfef5c.
2019-03-26 17:20:34 +01:00
Peter Simons 3732f1fe7e LTS Haskell 13.14 2019-03-26 17:20:34 +01:00
Will DietzandGitHub e2d96d329b Merge pull request #58300 from dywedir/broot
broot: 0.7.2 -> 0.7.4
2019-03-26 11:18:09 -05:00
Will Dietz 4f1d76275e gnupg: 2.2.14 -> 2.2.15
https://dev.gnupg.org/T4434
2019-03-26 11:09:54 -05:00
Robert SchützandGitHub d1bdc54849 python37Packages.pyshp: 2.0.1 -> 2.1.0 (#57442)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-pyshp/versions
2019-03-26 16:54:45 +01:00
Robert SchützandGitHub 29cec94d94 python.pkgs.cartopy: fix build (#58361)
fallout of https://github.com/NixOS/nixpkgs/pull/54182
2019-03-26 16:48:57 +01:00
Matthew BauerandGitHub 2a3167c8c0 Merge pull request #57461 from booxter/turses
turses: fix crash when starting with existing config file
2019-03-26 11:44:58 -04:00
Will Dietz 0db0c895bd cmocka: 1.1.1 -> 1.1.3
1.1.2: https://cmocka.org/archive/cmocka/2018-08/0000003.html
1.1.3: https://cmocka.org/archive/cmocka/2018-09/0000000.html
2019-03-26 10:27:43 -05:00
Dmitry Kalinkin 2645454bc7 pyarrow: remove tests that can break on darwin 2019-03-26 10:35:56 -04:00
Vincent LaporteandGitHub 853b589f78 ocamlPackages.cairo2: 0.5 -> 0.6 (#57965) 2019-03-26 15:11:37 +01:00
Robert SchützandGitHub 4ad932483c Merge pull request #56884 from kwohlfahrt/isort
pythonPackages.isort: 4.3.4 -> 4.3.15
2019-03-26 15:03:57 +01:00
Robert Schütz 6dac4d5f8e python.pkgs.cssselect2: no isort etc. tests
The isort tests were broken after upgrading the isort package.
2019-03-26 14:57:53 +01:00
Kai Wohlfahrt f61ed7f4cd pythonPackages.isort: 4.3.4 -> 4.3.16
We set $TMPDIR, because isort refuses to run in paths containing
'build' (since that is part of Python's typical build infrastructure).
2019-03-26 13:30:17 +00:00
Vincent LaporteandVincent Laporte 6a45d871c7 ocamlPackages.lablgtk3: use buildDunePackage 2019-03-26 14:17:50 +01:00
Vincent LaporteandVincent Laporte f56d52bbc3 ocamlPackages.zmq: use buildDunePackage 2019-03-26 14:17:50 +01:00
Vincent LaporteandVincent Laporte 7a2426ca77 dune: move into ocamlPackages 2019-03-26 14:17:50 +01:00
Peter SimonsandGitHub 98dcfed615 Merge pull request #57818 from illegalprime/fix/gnupg-cross
gnupg: use config flags to find lib prefix instead of their binary tools
2019-03-26 13:57:43 +01:00
Aaron Bull SchaeferandRobert Schütz ef48aaff73 pythonPackages.ansible: 2.7.8 -> 2.7.9 (#58285) 2019-03-26 13:36:35 +01:00
R. RyanTMandRobert Schütz 2d14a88f53 python37Packages.Quandl: 3.4.5 -> 3.4.6 (#57447)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-quandl/versions
2019-03-26 13:29:14 +01:00
R. RyanTMandRobert Schütz b71c15b410 python37Packages.shodan: 1.10.4 -> 1.11.1 (#57457)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-shodan/versions
2019-03-26 13:24:44 +01:00
R. RyanTMandRobert Schütz d0d43fb21c python37Packages.shellingham: 1.2.8 -> 1.3.0 (#57456)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-shellingham/versions
2019-03-26 13:23:28 +01:00
Jaka HudoklinandGitHub 0a06afa7ed Merge pull request #55898 from xtruder/pkgs/rootlesskit/init
feat(roolesskit): init at 0.3.0-alpha.2
2019-03-26 12:58:30 +01:00
Florian KlinkandGitHub d73f16d676 Merge pull request #58332 from r-ryantm/auto-update/masterpdfeditor
masterpdfeditor: 5.2.20 -> 5.3.22
2019-03-26 11:16:37 +01:00
Florian KlinkandGitHub d402472b54 Merge pull request #57774 from bgamari/update-gitlab
gitlab: Update to 11.9.0
2019-03-26 11:08:33 +01:00
Florian KlinkandGitHub 476760bfeb Merge pull request #57578 from bgamari/gitlab-extra-initializers
nixos/gitlab: Allow configuration of extra initializers
2019-03-26 11:08:11 +01:00
Florian KlinkandGitHub c717fe09aa Merge pull request #58257 from max-wittig/patch-2
gitlab-runner: 11.8.0 -> 11.9.0
2019-03-26 11:07:05 +01:00
Elis HirwingandGitHub 86d923ee6c Merge pull request #58325 from r-ryantm/auto-update/lxrandr
lxrandr: 0.3.1 -> 0.3.2
2019-03-26 10:57:02 +01:00