Martin Weinelt
d1d8dd3e55
nixos/knot: add support for XDP setups
...
The Express Data Path (XDP) is a way to circumvent the traditional Linux
networking stack and instead run an eBPF program on your NIC, that makes
the decision to provide Knot with certain packets. This is way faster
and more scalable but comes at the cost of reduced introspection.
Unfortunately the `knotc conf-check` command fails hard with missing
interfaces or IP addresses configured in `xdp.listen`, so we disable it
for now, once the `xdp` config section is set. We also promote the config
check condition to a proper option, so our conditions become public
documentation, and we allow users to deal with corner cases, that we have
not thought of yet.
We follow the pre-requisites documented in the Knot 3.3 manual, and set
up the required capabilities and allow the AF_XDP address family.
But on top of that, due to our strict hardening, we found two more
requirements, that were communicated upstream while debugging this.
- There is a requirement on AF_NETLINK, likely to query for and configure
the relevant network interface
- Running eBPF programs requires access to the `bpf` syscall, which we
deny through the `~@privileged` configuration.
In summary We now conditionally loosen the hardening of the unit once we
detect that an XDP configuration is wanted. And since we cannot
introspect arbitrary files from the `settingsFiles` option, we expose XDP
support through the `enableXDP` toggle option on the module.
2024-02-13 13:44:31 +01:00
Janik and GitHub
29f575d7e6
Merge pull request #288284 from NetaliDev/rustdesk-extra-args
...
nixos/rustdesk-server: add extra args options for hbbr and hbbs
2024-02-12 16:52:01 +01:00
Fabian Affolter and GitHub
f503294ee6
Merge pull request #283828 from fabaff/thermopro-ble-bump
...
python311Packages.thermopro-ble: 0.9.0 -> 0.10.0
2024-02-12 16:42:52 +01:00
Fabian Affolter and GitHub
d644e8f1da
Merge pull request #288229 from fabaff/appthreat-vulnerability-db-bump
...
python311Packages.appthreat-vulnerability-db: 5.6.1 -> 5.6.2
2024-02-12 16:39:46 +01:00
Martin Weinelt and GitHub
8da441b7a7
Merge pull request #288221 from dotlambda/asn1crypto-1.5.1
...
Revert "python311Packages.asn1crypto: 1.5.1 -> 1.5.1-unstable-2023.11.03"
2024-02-12 16:30:31 +01:00
evils and GitHub
fda93f9f11
liquidctl: fix test for pillow ≥ 10.2.0 ( #288085 )
...
* liquidctl: fix test for pillow ≥ 10.2.0
issue described upstream in
https://github.com/liquidctl/liquidctl/issues/661
2024-02-12 17:23:52 +02:00
Nick Cao and GitHub
92682867ac
Merge pull request #286820 from r-ryantm/auto-update/renode-dts2repl
...
renode-dts2repl: unstable-2024-02-02 -> unstable-2024-02-08
2024-02-12 10:10:43 -05:00
Nick Cao and GitHub
1f41d7bac1
Merge pull request #288289 from r-ryantm/auto-update/scheme-manpages
...
scheme-manpages: unstable-2023-08-27 -> unstable-2024-02-11
2024-02-12 10:09:58 -05:00
Nick Cao and GitHub
ab7b4cb01d
Merge pull request #288295 from r-ryantm/auto-update/werf
...
werf: 1.2.288 -> 1.2.289
2024-02-12 10:09:25 -05:00
Nick Cao and GitHub
1f56f6b90e
Merge pull request #288297 from r-ryantm/auto-update/faraday-agent-dispatcher
...
faraday-agent-dispatcher: 3.0.1 -> 3.2.1
2024-02-12 10:08:40 -05:00
Nick Cao and GitHub
b1c98bf48a
Merge pull request #288301 from r-ryantm/auto-update/obs-studio-plugins.obs-teleport
...
obs-studio-plugins.obs-teleport: 0.6.6 -> 0.7.0
2024-02-12 10:06:53 -05:00
Nick Cao and GitHub
7a9e2e423b
Merge pull request #288302 from r-ryantm/auto-update/python311Packages.types-pytz
...
python311Packages.types-pytz: 2023.4.0.20240130 -> 2024.1.0.20240203
2024-02-12 10:06:30 -05:00
Nick Cao and GitHub
cf9f5cb8fc
Merge pull request #288230 from fabaff/asyncwhois-bump
...
python311Packages.asyncwhois: 1.0.9 -> 1.1.0
2024-02-12 10:05:46 -05:00
Nick Cao and GitHub
da97036686
Merge pull request #288231 from r-ryantm/auto-update/python311Packages.approvaltests
...
python311Packages.approvaltests: 10.3.0 -> 10.4.0
2024-02-12 10:05:05 -05:00
Nick Cao and GitHub
bf2ddcb9e9
Merge pull request #288232 from fabaff/xknxproject-bump
...
python311Packages.xknxproject: 3.5.0 -> 3.6.0
2024-02-12 10:04:33 -05:00
Maciej Krüger and GitHub
b5d14a4f80
Merge pull request #288293 from brrrocking/tribler-pydantic_1
...
tribler: deps pin pydantic_1
2024-02-12 16:01:32 +01:00
Bobby Rong and GitHub
1ffb40b297
Merge pull request #288299 from bobby285271/fix/eval
...
paper-plane: Fix eval after gtk4 4.12.5 update
2024-02-12 22:47:14 +08:00
Someone and GitHub
db19b28746
Merge pull request #285249 from GaetanLepage/torch
...
python3Packages.{torch,torch-bin}: 2.1.1 -> 2.2.0
2024-02-12 14:43:52 +00:00
R. Ryantm
0953e7043b
python311Packages.types-pytz: 2023.4.0.20240130 -> 2024.1.0.20240203
2024-02-12 14:39:02 +00:00
Nick Cao and GitHub
9349d172d4
Merge pull request #288265 from r-ryantm/auto-update/stgit
...
stgit: 2.4.3 -> 2.4.4
2024-02-12 09:34:23 -05:00
Nick Cao and GitHub
0c8e340ac7
Merge pull request #288201 from r-ryantm/auto-update/moq
...
moq: 0.3.3 -> 0.3.4
2024-02-12 09:32:46 -05:00
R. Ryantm
65facc5340
obs-studio-plugins.obs-teleport: 0.6.6 -> 0.7.0
2024-02-12 14:32:23 +00:00
Nick Cao and GitHub
022cf29baa
Merge pull request #288205 from r-ryantm/auto-update/gqlgenc
...
gqlgenc: 0.18.1 -> 0.19.0
2024-02-12 09:31:51 -05:00
Nick Cao and GitHub
c258d0288c
Merge pull request #288223 from r-ryantm/auto-update/eigenlayer
...
eigenlayer: 0.5.2 -> 0.6.1
2024-02-12 09:29:58 -05:00
Nick Cao and GitHub
56d0624e89
Merge pull request #288224 from r-ryantm/auto-update/supabase-cli
...
supabase-cli: 1.142.2 -> 1.144.2
2024-02-12 09:28:11 -05:00
Nick Cao and GitHub
54a0039fe6
Merge pull request #288226 from r-ryantm/auto-update/clash-geoip
...
clash-geoip: 20240112 -> 20240212
2024-02-12 09:27:49 -05:00
Nick Cao and GitHub
84f4366c71
Merge pull request #288174 from r-ryantm/auto-update/lychee
...
lychee: 0.14.2 -> 0.14.3
2024-02-12 09:26:19 -05:00
Nick Cao and GitHub
9e4c383b8d
Merge pull request #288177 from r-ryantm/auto-update/python311Packages.appthreat-vulnerability-db
...
python311Packages.appthreat-vulnerability-db: 5.6.1 -> 5.6.2
2024-02-12 09:25:43 -05:00
Nick Cao and GitHub
d5b3bd3aaf
Merge pull request #288182 from r-ryantm/auto-update/python311Packages.meross-iot
...
python311Packages.meross-iot: 0.4.6.0 -> 0.4.6.2
2024-02-12 09:24:40 -05:00
Nick Cao and GitHub
3865fe6b97
Merge pull request #288190 from r-ryantm/auto-update/libgbinder
...
libgbinder: 1.1.35 -> 1.1.36
2024-02-12 09:22:32 -05:00
Bobby Rong
0e123540e5
paper-plane: Fix eval after gtk4 4.12.5 update
...
See ac193f0684 , which removes all gtk4 patches.
Fixes 4ccedfae09 .
Fixes https://gist.github.com/GrahamcOfBorg/594457cf1fc2b56ce99e5ac1add2e949 .
2024-02-12 22:21:42 +08:00
Sandro and GitHub
0ac1e72eea
Merge pull request #282460 from jchw-forks/update/ruffle
2024-02-12 15:20:53 +01:00
Nick Cao and GitHub
33b8f9b9ad
Merge pull request #288197 from r-ryantm/auto-update/cargo-chef
...
cargo-chef: 0.1.62 -> 0.1.63
2024-02-12 09:20:03 -05:00
Nick Cao and GitHub
97b96c673f
Merge pull request #288199 from r-ryantm/auto-update/python312Packages.thermopro-ble
...
python312Packages.thermopro-ble: 0.9.0 -> 0.10.0
2024-02-12 09:19:48 -05:00
Nick Cao and GitHub
1172261cc0
Merge pull request #288137 from r-ryantm/auto-update/python311Packages.vallox-websocket-api
...
python311Packages.vallox-websocket-api: 4.0.3 -> 4.1.0
2024-02-12 09:18:44 -05:00
Nick Cao and GitHub
f305fe0207
Merge pull request #288151 from r-ryantm/auto-update/beeper
...
beeper: 3.94.20 -> 3.95.22
2024-02-12 09:16:41 -05:00
Nick Cao and GitHub
5c12ce440e
Merge pull request #288156 from fabaff/hahomematic-bump
...
python311Packages.hahomematic: 2024.2.1 -> 2024.2.2
2024-02-12 09:16:19 -05:00
Nick Cao and GitHub
7e05a7255e
Merge pull request #288159 from r-ryantm/auto-update/cargo-show-asm
...
cargo-show-asm: 0.2.29 -> 0.2.30
2024-02-12 09:15:29 -05:00
Nick Cao and GitHub
f4e5f7b56f
Merge pull request #288161 from marsam/update-sonic-server
...
sonic-server: 1.4.3 -> 1.4.8
2024-02-12 09:15:15 -05:00
Nick Cao and GitHub
8dccd45590
Merge pull request #288164 from alyssais/squeekboard-homepage
...
squeekboard.meta.homepage: update
2024-02-12 09:14:20 -05:00
Nick Cao and GitHub
2780da8692
Merge pull request #288167 from r-ryantm/auto-update/codeium
...
codeium: 1.6.30 -> 1.6.34
2024-02-12 09:13:20 -05:00
R. Ryantm
5a8fb51224
faraday-agent-dispatcher: 3.0.1 -> 3.2.1
2024-02-12 14:04:41 +00:00
R. Ryantm
082bc51928
werf: 1.2.288 -> 1.2.289
2024-02-12 13:59:34 +00:00
brocking
019cdcaebe
tribler: deps pin pydantic_1
2024-02-12 13:28:01 +00:00
Ryan Lahfa and GitHub
dd864dc7dd
Merge pull request #272264 from ppom0/init-reaction
...
reaction: init at 1.3.0
2024-02-12 14:25:26 +01:00
Thiago Kenji Okada and GitHub
3839d30fca
Merge pull request #288276 from Astavie/ols
...
ols: nightly-2023-11-04 -> 0-unstable-2024-02-09
2024-02-12 13:19:40 +00:00
R. Ryantm
dd5c114933
scheme-manpages: unstable-2023-08-27 -> unstable-2024-02-11
2024-02-12 13:08:40 +00:00
Pol Dellaiera and GitHub
2d627a2a70
Merge pull request #277220 from nu-nu-ko/nixos-jellyfin-dirs
...
nixos/jellyfin: add directory options
2024-02-12 14:06:46 +01:00
Yt and GitHub
ad8d335124
Merge pull request #288168 from r-ryantm/auto-update/python311Packages.argilla
...
python311Packages.argilla: 1.23.0 -> 1.24.0
2024-02-12 12:54:22 +00:00
Jennifer Graul
c412263319
nixos/rustdesk-server: add extra args options for hbbr and hbbs
2024-02-12 13:41:08 +01:00