Commit Graph
583666 Commits
Author SHA1 Message Date
Martin Weinelt d1d8dd3e55 nixos/knot: add support for XDP setups
The Express Data Path (XDP) is a way to circumvent the traditional Linux
networking stack and instead run an eBPF program on your NIC, that makes
the decision to provide Knot with certain packets. This is way faster
and more scalable but comes at the cost of reduced introspection.

Unfortunately the `knotc conf-check` command fails hard with missing
interfaces or IP addresses configured in `xdp.listen`, so we disable it
for now, once the `xdp` config section is set. We also promote the config
check condition to a proper option, so our conditions become public
documentation, and we allow users to deal with corner cases, that we have
not thought of yet.

We follow the pre-requisites documented in the Knot 3.3 manual, and set
up the required capabilities and allow the AF_XDP address family.

But on top of that, due to our strict hardening, we found two more
requirements, that were communicated upstream while debugging this.

- There is a requirement on AF_NETLINK, likely to query for and configure
  the relevant network interface
- Running eBPF programs requires access to the `bpf` syscall, which we
  deny through the `~@privileged` configuration.

In summary We now conditionally loosen the hardening of the unit once we
detect that an XDP configuration is wanted. And since we cannot
introspect arbitrary files from the `settingsFiles` option, we expose XDP
support through the `enableXDP` toggle option on the module.
2024-02-13 13:44:31 +01:00
JanikandGitHub 29f575d7e6 Merge pull request #288284 from NetaliDev/rustdesk-extra-args
nixos/rustdesk-server: add extra args options for hbbr and hbbs
2024-02-12 16:52:01 +01:00
Fabian AffolterandGitHub f503294ee6 Merge pull request #283828 from fabaff/thermopro-ble-bump
python311Packages.thermopro-ble: 0.9.0 -> 0.10.0
2024-02-12 16:42:52 +01:00
Fabian AffolterandGitHub d644e8f1da Merge pull request #288229 from fabaff/appthreat-vulnerability-db-bump
python311Packages.appthreat-vulnerability-db: 5.6.1 -> 5.6.2
2024-02-12 16:39:46 +01:00
Martin WeineltandGitHub 8da441b7a7 Merge pull request #288221 from dotlambda/asn1crypto-1.5.1
Revert "python311Packages.asn1crypto: 1.5.1 -> 1.5.1-unstable-2023.11.03"
2024-02-12 16:30:31 +01:00
evilsandGitHub fda93f9f11 liquidctl: fix test for pillow ≥ 10.2.0 (#288085)
* liquidctl: fix test for pillow ≥ 10.2.0

issue described upstream in
  https://github.com/liquidctl/liquidctl/issues/661
2024-02-12 17:23:52 +02:00
Nick CaoandGitHub 92682867ac Merge pull request #286820 from r-ryantm/auto-update/renode-dts2repl
renode-dts2repl: unstable-2024-02-02 -> unstable-2024-02-08
2024-02-12 10:10:43 -05:00
Nick CaoandGitHub 1f41d7bac1 Merge pull request #288289 from r-ryantm/auto-update/scheme-manpages
scheme-manpages: unstable-2023-08-27 -> unstable-2024-02-11
2024-02-12 10:09:58 -05:00
Nick CaoandGitHub ab7b4cb01d Merge pull request #288295 from r-ryantm/auto-update/werf
werf: 1.2.288 -> 1.2.289
2024-02-12 10:09:25 -05:00
Nick CaoandGitHub 1f56f6b90e Merge pull request #288297 from r-ryantm/auto-update/faraday-agent-dispatcher
faraday-agent-dispatcher: 3.0.1 -> 3.2.1
2024-02-12 10:08:40 -05:00
Nick CaoandGitHub b1c98bf48a Merge pull request #288301 from r-ryantm/auto-update/obs-studio-plugins.obs-teleport
obs-studio-plugins.obs-teleport: 0.6.6 -> 0.7.0
2024-02-12 10:06:53 -05:00
Nick CaoandGitHub 7a9e2e423b Merge pull request #288302 from r-ryantm/auto-update/python311Packages.types-pytz
python311Packages.types-pytz: 2023.4.0.20240130 -> 2024.1.0.20240203
2024-02-12 10:06:30 -05:00
Nick CaoandGitHub cf9f5cb8fc Merge pull request #288230 from fabaff/asyncwhois-bump
python311Packages.asyncwhois: 1.0.9 -> 1.1.0
2024-02-12 10:05:46 -05:00
Nick CaoandGitHub da97036686 Merge pull request #288231 from r-ryantm/auto-update/python311Packages.approvaltests
python311Packages.approvaltests: 10.3.0 -> 10.4.0
2024-02-12 10:05:05 -05:00
Nick CaoandGitHub bf2ddcb9e9 Merge pull request #288232 from fabaff/xknxproject-bump
python311Packages.xknxproject: 3.5.0 -> 3.6.0
2024-02-12 10:04:33 -05:00
Maciej KrügerandGitHub b5d14a4f80 Merge pull request #288293 from brrrocking/tribler-pydantic_1
tribler: deps pin pydantic_1
2024-02-12 16:01:32 +01:00
Bobby RongandGitHub 1ffb40b297 Merge pull request #288299 from bobby285271/fix/eval
paper-plane: Fix eval after gtk4 4.12.5 update
2024-02-12 22:47:14 +08:00
SomeoneandGitHub db19b28746 Merge pull request #285249 from GaetanLepage/torch
python3Packages.{torch,torch-bin}: 2.1.1 -> 2.2.0
2024-02-12 14:43:52 +00:00
R. Ryantm 0953e7043b python311Packages.types-pytz: 2023.4.0.20240130 -> 2024.1.0.20240203 2024-02-12 14:39:02 +00:00
Nick CaoandGitHub 9349d172d4 Merge pull request #288265 from r-ryantm/auto-update/stgit
stgit: 2.4.3 -> 2.4.4
2024-02-12 09:34:23 -05:00
Nick CaoandGitHub 0c8e340ac7 Merge pull request #288201 from r-ryantm/auto-update/moq
moq: 0.3.3 -> 0.3.4
2024-02-12 09:32:46 -05:00
R. Ryantm 65facc5340 obs-studio-plugins.obs-teleport: 0.6.6 -> 0.7.0 2024-02-12 14:32:23 +00:00
Nick CaoandGitHub 022cf29baa Merge pull request #288205 from r-ryantm/auto-update/gqlgenc
gqlgenc: 0.18.1 -> 0.19.0
2024-02-12 09:31:51 -05:00
Nick CaoandGitHub c258d0288c Merge pull request #288223 from r-ryantm/auto-update/eigenlayer
eigenlayer: 0.5.2 -> 0.6.1
2024-02-12 09:29:58 -05:00
Nick CaoandGitHub 56d0624e89 Merge pull request #288224 from r-ryantm/auto-update/supabase-cli
supabase-cli: 1.142.2 -> 1.144.2
2024-02-12 09:28:11 -05:00
Nick CaoandGitHub 54a0039fe6 Merge pull request #288226 from r-ryantm/auto-update/clash-geoip
clash-geoip: 20240112 -> 20240212
2024-02-12 09:27:49 -05:00
Nick CaoandGitHub 84f4366c71 Merge pull request #288174 from r-ryantm/auto-update/lychee
lychee: 0.14.2 -> 0.14.3
2024-02-12 09:26:19 -05:00
Nick CaoandGitHub 9e4c383b8d Merge pull request #288177 from r-ryantm/auto-update/python311Packages.appthreat-vulnerability-db
python311Packages.appthreat-vulnerability-db: 5.6.1 -> 5.6.2
2024-02-12 09:25:43 -05:00
Nick CaoandGitHub d5b3bd3aaf Merge pull request #288182 from r-ryantm/auto-update/python311Packages.meross-iot
python311Packages.meross-iot: 0.4.6.0 -> 0.4.6.2
2024-02-12 09:24:40 -05:00
Nick CaoandGitHub 3865fe6b97 Merge pull request #288190 from r-ryantm/auto-update/libgbinder
libgbinder: 1.1.35 -> 1.1.36
2024-02-12 09:22:32 -05:00
Bobby Rong 0e123540e5 paper-plane: Fix eval after gtk4 4.12.5 update
See ac193f0684, which removes all gtk4 patches.

Fixes 4ccedfae09.
Fixes https://gist.github.com/GrahamcOfBorg/594457cf1fc2b56ce99e5ac1add2e949.
2024-02-12 22:21:42 +08:00
SandroandGitHub 0ac1e72eea Merge pull request #282460 from jchw-forks/update/ruffle 2024-02-12 15:20:53 +01:00
Nick CaoandGitHub 33b8f9b9ad Merge pull request #288197 from r-ryantm/auto-update/cargo-chef
cargo-chef: 0.1.62 -> 0.1.63
2024-02-12 09:20:03 -05:00
Nick CaoandGitHub 97b96c673f Merge pull request #288199 from r-ryantm/auto-update/python312Packages.thermopro-ble
python312Packages.thermopro-ble: 0.9.0 -> 0.10.0
2024-02-12 09:19:48 -05:00
Nick CaoandGitHub 1172261cc0 Merge pull request #288137 from r-ryantm/auto-update/python311Packages.vallox-websocket-api
python311Packages.vallox-websocket-api: 4.0.3 -> 4.1.0
2024-02-12 09:18:44 -05:00
Nick CaoandGitHub f305fe0207 Merge pull request #288151 from r-ryantm/auto-update/beeper
beeper: 3.94.20 -> 3.95.22
2024-02-12 09:16:41 -05:00
Nick CaoandGitHub 5c12ce440e Merge pull request #288156 from fabaff/hahomematic-bump
python311Packages.hahomematic: 2024.2.1 -> 2024.2.2
2024-02-12 09:16:19 -05:00
Nick CaoandGitHub 7e05a7255e Merge pull request #288159 from r-ryantm/auto-update/cargo-show-asm
cargo-show-asm: 0.2.29 -> 0.2.30
2024-02-12 09:15:29 -05:00
Nick CaoandGitHub f4e5f7b56f Merge pull request #288161 from marsam/update-sonic-server
sonic-server: 1.4.3 -> 1.4.8
2024-02-12 09:15:15 -05:00
Nick CaoandGitHub 8dccd45590 Merge pull request #288164 from alyssais/squeekboard-homepage
squeekboard.meta.homepage: update
2024-02-12 09:14:20 -05:00
Nick CaoandGitHub 2780da8692 Merge pull request #288167 from r-ryantm/auto-update/codeium
codeium: 1.6.30 -> 1.6.34
2024-02-12 09:13:20 -05:00
R. Ryantm 5a8fb51224 faraday-agent-dispatcher: 3.0.1 -> 3.2.1 2024-02-12 14:04:41 +00:00
R. Ryantm 082bc51928 werf: 1.2.288 -> 1.2.289 2024-02-12 13:59:34 +00:00
brocking 019cdcaebe tribler: deps pin pydantic_1 2024-02-12 13:28:01 +00:00
Ryan LahfaandGitHub dd864dc7dd Merge pull request #272264 from ppom0/init-reaction
reaction: init at 1.3.0
2024-02-12 14:25:26 +01:00
Thiago Kenji OkadaandGitHub 3839d30fca Merge pull request #288276 from Astavie/ols
ols: nightly-2023-11-04 -> 0-unstable-2024-02-09
2024-02-12 13:19:40 +00:00
R. Ryantm dd5c114933 scheme-manpages: unstable-2023-08-27 -> unstable-2024-02-11 2024-02-12 13:08:40 +00:00
Pol DellaieraandGitHub 2d627a2a70 Merge pull request #277220 from nu-nu-ko/nixos-jellyfin-dirs
nixos/jellyfin: add directory options
2024-02-12 14:06:46 +01:00
YtandGitHub ad8d335124 Merge pull request #288168 from r-ryantm/auto-update/python311Packages.argilla
python311Packages.argilla: 1.23.0 -> 1.24.0
2024-02-12 12:54:22 +00:00
Jennifer Graul c412263319 nixos/rustdesk-server: add extra args options for hbbr and hbbs 2024-02-12 13:41:08 +01:00