gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
973,279 Commits 9 Branches 0 Tags
c111fb7e5e3470ebff931cb2fb412ee79d8a4afb
Commit Graph

973279 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Philip Taron c111fb7e5e pam_u2f: fix usage with polkit 127 (#486044) 2026-04-01 23:56:16 +00:00
Yt fc56e12985 fishPlugins.forgit: 26.01.0 -> 26.04.0 (#505518) 2026-04-01 23:55:05 +00:00
Philip Taron 098b000a36 nixos/tests: add end-to-end pam_u2f and polkit sandbox tests 
pam-u2f: Registers a U2F credential with pamu2fcfg against a virtual
FIDO device (QEMU u2f-emulated), then logs in as alice at a TTY —
the device authenticates her automatically with no password.

pam-u2f-polkit: Verifies the polkit-agent-helper@ sandbox fix by
showing that PrivateDevices=yes blocks hidraw access (the bug), the
module overrides are applied, and fido2-token/pamu2fcfg work inside
the full polkit sandbox (the fix).
 2026-04-01 16:50:22 -07:00
Philip Taron f3648de497 polkit: fix polkit-agent-helper@ sandbox for pam_u2f 
polkit 127 switched to socket activation with a systemd unit for
polkit-agent-helper that uses PrivateDevices=yes and ProtectHome=yes.
This breaks pam_u2f (and potentially other PAM modules that interact
with hardware), because:

- PrivateDevices=yes creates a private /dev without hidraw devices,
  so FIDO tokens are inaccessible
- ProtectHome=yes blocks reading ~/.config/Yubico/u2f_keys
- StandardError=inherit causes polkit agents to misinterpret PAM
  diagnostic output as protocol errors, resulting in tight
  re-execution loops

Fix by overriding these properties in the polkit module:
- StandardError=journal unconditionally (benefits all PAM modules)
- PrivateDevices/DeviceAllow/ProtectHome when pam_u2f is enabled

Co-authored-by: Victor Luft <victor@luft.io>
 2026-04-01 16:50:18 -07:00
Gaétan Lepage 5809b092fc python3Packages.qtconsole: 5.7.1 -> 5.7.2 (#505416) 2026-04-01 23:47:59 +00:00
Philip Taron 6917611baf python3Packages.llm: 0.29 -> 0.30 (#505514) 2026-04-01 23:45:34 +00:00
R. Ryantm bbf0517a9b python3Packages.qtconsole: 5.7.1 -> 5.7.2 2026-04-01 23:35:20 +00:00
kirillrdy d7922c9d62 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 (#505847) 2026-04-01 23:22:06 +00:00
nixpkgs-ci[bot] 3b9f4320b1 asn: 0.80.4 -> 0.80.5 (#505835) 2026-04-01 23:18:09 +00:00
Philip Taron f6b8482cba libu2f-emu: init at 0-unstable-2020-09-04, add qemu build support (#505812) 2026-04-01 23:16:50 +00:00
Gergő Gutyina 172b7d4e40 webeep-sync: init at 1.0.3-unstable-2024-04-30 (#501366) 2026-04-01 23:06:51 +00:00
Gaetan Lepage 9a080ecec5 python3Packages.spyder-kernels: 3.1.3 -> 3.1.4 
Diff: https://github.com/spyder-ide/spyder-kernels/compare/v3.1.3...v3.1.4

Changelog: https://github.com/spyder-ide/spyder-kernels/blob/v3.1.4/CHANGELOG.md
 2026-04-01 23:05:41 +00:00
dotlambda c6cca75cfd python3Packages.urllib3-future: 2.18.901 -> 2.19.900 (#505843) 2026-04-01 22:57:00 +00:00
Nick Cao c3e05a12b5 python3Packages.mlx: 0.30.5 -> 0.31.1 (#504828) 2026-04-01 22:50:42 +00:00
R. Ryantm c6121046db python3Packages.urllib3-future: 2.18.901 -> 2.19.900 2026-04-01 22:36:39 +00:00
Philip Taron 49ca49bede Make ec2 tests a channel blocker (#365623) 2026-04-01 22:33:05 +00:00
Marc Jakobi 08a82c9fdd emmylua-doc-cli: 0.21.0 -> 0.22.0 (#505825) 2026-04-01 22:19:25 +00:00
Arian van Putten c5d4a896c5 nixos/release-combined: add nixos.tests.ec2-userdata 
This is to catch issues like https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-253149474
We do not want to push NixOS updates that break SSH access on EC2 instances.
 2026-04-01 15:19:20 -07:00
Arian van Putten 7ab9b03f5b nixos/tests/ec2: remove hack 
Not needed anymore. no idea why this was here
 2026-04-01 15:19:19 -07:00
Arian van Putten 0e37e9beff nixos/tests/ec2: rename ec2-nixops to ec2-userdata 
This is more accurate.

People dismissed failures in the past in this test because of the name.
We don't want that. The test is important! It tests that SSH works!

Hopefully this helps with https://github.com/NixOS/nixpkgs/pull/340489#issuecomment-2531494744
 2026-04-01 15:19:03 -07:00
Arian van Putten 448b9932df nixos/tests/ec2: remove ec2-config test 
It has been broken for as long as I know
 2026-04-01 15:18:23 -07:00
Philip Taron 64d047a9ce nixos/amazon-image: do not force-load xen-blkfront kernel module (#313933) 2026-04-01 22:14:29 +00:00
Martin Weinelt c6ea0df341 home-assistant-custom-lovelace-modules.sankey-chart: 3.10.1 -> 3.10.2 (#505801) 2026-04-01 22:07:23 +00:00
Nick Cao d64b849bf3 glaze: 7.1.0 -> 7.2.2 (#504129) 2026-04-01 22:04:58 +00:00
zowoq 5647a31d17 terraform-providers.tencentcloudstack_tencentcloud: 1.82.77 -> 1.82.82 (#505797) 2026-04-01 21:52:02 +00:00
zowoq 78b5a8ce37 terraform-providers.cloudamqp_cloudamqp: 1.43.1 -> 1.44.0 (#505775) 2026-04-01 21:51:51 +00:00
Yt 086333f595 beamPackages.elixir_1_20: 1.20.0-rc.3 -> 1.20.0-rc.4 (#505823) 2026-04-01 21:51:09 +00:00
R. Ryantm f5f5d7d15b asn: 0.80.4 -> 0.80.5 2026-04-01 21:44:21 +00:00
Philip Taron 188aec52a6 Remove Profpatsch from most teams & maintainer fields (#505770) 2026-04-01 21:43:24 +00:00
Profpatsch 257f122e3d treewide: remove Profpatsch from most teams & maintainer fields 2026-04-01 14:34:59 -07:00
Thiago Kenji Okada 813ee5fab4 libretro.fbalpha2012: 0-unstable-2025-12-12 -> 0-unstable-2026-03-31 (#505788) 2026-04-01 21:28:24 +00:00
Adam C. Stephens 5ef2f74e55 beamPackages.elixir_1_20: 1.20.0-rc.3 -> 1.20.0-rc.4 
Changelog: https://github.com/elixir-lang/elixir/releases/tag/v1.20.0-rc.4
 2026-04-01 17:20:45 -04:00
R. Ryantm db369e0ad7 emmylua-doc-cli: 0.21.0 -> 0.22.0 2026-04-01 21:18:18 +00:00
Philip Taron 8001332b4e prevail: rename from ebpf-verifier; unstable-2023-07-15 -> 0.2.0 (#505643) 2026-04-01 21:15:43 +00:00
Philip Taron 01e9170240 colobot: fix build with boost 1.89 (#504833) 2026-04-01 21:13:51 +00:00
Philip Taron 376606ee83 ciftilib: fix build with boost 1.89 (#504819) 2026-04-01 21:13:28 +00:00
Philip Taron aa79a5067b apngasm: fix build with Boost 1.89+ (#500859) 2026-04-01 21:12:54 +00:00
kirillrdy ddf1590481 antigravity: 1.20.6 -> 1.21.9 (#503687) 2026-04-01 21:06:19 +00:00
StepBroBD 9beb29fd84 zotero: 8.0.3 -> 8.0.5 (#504115) 2026-04-01 21:02:14 +00:00
Nick Cao 6a33a3c10c python3Packages.modal: 1.3.5 -> 1.4.1 (#505776) 2026-04-01 20:59:00 +00:00
nixpkgs-ci[bot] 9b678e5f85 shelfmark{,-frontend}: 1.2.0 -> 1.2.1, add myself to maintainers (#505803) 2026-04-01 20:46:50 +00:00
Maximilian Bosch c68caabadf nixos/nextcloud: use --pipe for nextcloud-occ systemd-run (#504474) 2026-04-01 20:44:55 +00:00
Pol Dellaiera 45749f89ef winbox: set winbox4 as default (#502504) 2026-04-01 20:29:30 +00:00
installer fe690f3e3c antigravity: 1.21.6 -> 1.21.9 2026-04-01 22:26:51 +02:00
Fabian Affolter 5e71d8634c python3Packages.llama-index-llms-ollama: 0.10.0 -> 0.10.1 (#505763) 2026-04-01 20:21:48 +00:00
dish b5270da2a9 shelfmark{,-frontend}: 1.2.0 -> 1.2.1, add myself to maintainers 2026-04-01 16:17:45 -04:00
Martin Weinelt 717b057ab3 zigbee2mqtt: 2.9.1 -> 2.9.2 (#505798) 2026-04-01 20:15:53 +00:00
R. Ryantm c64874cc0b home-assistant-custom-lovelace-modules.sankey-chart: 3.10.1 -> 3.10.2 2026-04-01 20:10:30 +00:00
Martin Weinelt 4066343b47 zigbee2mqtt: 2.9.1 -> 2.9.2 
https://github.com/Koenkk/zigbee2mqtt/releases/tag/2.9.2
 2026-04-01 22:08:39 +02:00
Philip Taron da5378d4bd qemu: add u2fEmuSupport option using libu2f-emu 
Adds a u2fEmuSupport flag (default: false) to enable the u2f-emulated
virtual USB device in QEMU, backed by libu2f-emu. This allows NixOS VM
tests to use a software FIDO/U2F token without hardware.
 2026-04-01 13:07:26 -07:00