Commit Graph
253017 Commits
Author SHA1 Message Date
Graham Christensen f2cfecdec3 nixos ami: preflight the imds token
According to Freenode's ##AWS, the metadata server can sometimes
take a few moments to get its shoes on, and the very first boot
of a machine can see failed requests for a few moments.
2020-11-19 13:56:44 -05:00
Graham Christensen 83ea88e03f nixos: ec2 ami: support IMDSv2
AWS's metadata service has two versions. Version 1 allowed plain HTTP
requests to get metadata. However, this was frequently abused when a
user could trick an AWS-hosted server in to proxying requests to the
metadata service. Since the metadata service is frequently used to
generate AWS access keys, this is pretty gnarly. Version two is
identical except it requires the caller to request a token and provide
it on each request.

Today, starting a NixOS AMI in EC2 where the metadata service is
configured to only allow v2 requests fails: the user's SSH key is not
placed, and configuration provided by the user-data is not applied.
The server is useless. This patch addresses that.

Note the dependency on curl is not a joyful one, and it expand the
initrd by 30M. However, see the added comment for more information
about why this is needed. Note the idea of using `echo` and `nc` are
laughable. Don't do that.
2020-11-19 13:00:56 -05:00
Graham Christensen 21339b41bf nixos: openstack: have its own metadata fetcher expression
These two APIs have diverged over time and are no longer compatible.
2020-11-18 11:42:32 -05:00
Jörg ThalheimandGitHub 6625284c39 Merge pull request #104182 from helsinki-systems/fix/gst-plugins-bad 2020-11-18 17:15:21 +01:00
ajs124 19ddb6e657 freeswitch: use spandsp3 2020-11-18 17:13:30 +01:00
ajs124 4897c23904 spandsp3: init at 3.0.0 2020-11-18 17:13:29 +01:00
ajs124 99b47e7111 Revert "spandsp: 0.0.6 -> 3.0.0"
This reverts commit e184cede92.
2020-11-18 17:05:22 +01:00
R. RyanTMandJan Tojnar f2e4de720d libgda: 5.2.9 -> 5.2.10 2020-11-18 15:46:07 +01:00
Maximilian BoschandGitHub f01bfd6843 Merge pull request #104154 from WilliButz/update/grafana/v7.3.3
grafana: 7.3.2 -> 7.3.3
2020-11-18 15:34:45 +01:00
Ryan MulliganandGitHub e5e08a5062 Merge pull request #100763 from neonfuz/koreader
koreader: 2020.09 -> 2020.11
2020-11-18 06:31:35 -08:00
Doron BeharandGitHub 0365749e68 Merge pull request #103817 from doronbehar/pkg/alacritty
alacritty: 0.5.0 -> 0.6.0-rc1
2020-11-18 15:38:21 +02:00
Emery Hemingway 7e25b71132 nixos: use nativeBuildInputs in make- iso9660-image and system-tarball
The tools used to create iso9660 images and tarballs are independent of
the platform of the closure contained within.
2020-11-18 14:05:30 +01:00
Maximilian BoschandGitHub 6e9e1a0c42 Merge pull request #104157 from fadenb/synapse_1.23.0
matrix-synapse: 1.22.1 -> 1.23.0
2020-11-18 14:04:54 +01:00
Tristan Helmich 8061cdaf64 matrix-synapse: 1.22.1 -> 1.23.0 2020-11-18 12:20:20 +00:00
Jan TojnarandGitHub 9635686059 Merge pull request #104074 from jtojnar/more-gnome-updates 2020-11-18 13:05:22 +01:00
WilliButz e453e9ef98 grafana: 7.3.2 -> 7.3.3 2020-11-18 11:52:52 +01:00
Michael WeissandGitHub ad0958bf7d Merge pull request #104100 from primeos/chromium
chromium: 86.0.4240.198 -> 87.0.4280.66
2020-11-18 11:49:03 +01:00
Michele Guerini RoccoandGitHub 09506f5018 Merge pull request #104134 from r-ryantm/auto-update/btfs
btfs: 2.22 -> 2.23
2020-11-18 10:26:16 +01:00
Bernardo MeurerandFrederik Rietdijk 7edf1ced82 pypy: enable aarch64-linux platform 2020-11-18 09:55:33 +01:00
Christoph HrdinkaandGitHub 567c2d880b Merge pull request #103461 from GovanifY/pcsx2-usb-merge
pcsx2: unstable-2020-10-10 -> unstable-2020-11-13
2020-11-18 09:54:41 +01:00
Vladimír Čunát 9a38c3a11b knot-resolver: fix evaluation on darwin
I somehow forgot that libcap_ng is linux-only.  I'm missing ofborg's
darwin builder, but I might've tested evaluation at least...
2020-11-18 08:41:28 +01:00
Vincent LaporteandVincent Laporte 47b02b30e3 ocamlPackages.ppx_blob: 0.4.0 → 0.7.1 2020-11-18 08:25:15 +01:00
Vincent LaporteandVincent Laporte 597e7748d1 ocamlPackages.dispatch: 0.4.1 → 0.5.0
ocamlPackages.webmachine: 0.6.2 → 0.7.0
2020-11-18 08:24:28 +01:00
Ryan MulliganandGitHub c1e60d9584 Merge pull request #87380 from r-ryantm/auto-update/python3.7-logilab-common
python37Packages.logilab_common: 1.5.2 -> 1.6.1
2020-11-17 21:28:13 -08:00
Ryan MulliganandGitHub c12b401432 Merge pull request #104024 from ryantm/rm-shaarli
shaarli-material: remove package
2020-11-17 21:21:18 -08:00
R. RyanTM 1edae8aa7b btfs: 2.22 -> 2.23 2020-11-18 05:13:07 +00:00
Martin WeineltandJonathan Ringer a823dee9d9 python3Packages.python-didl-lite: 1.2.4 -> 1.2.5 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer f106443066 python3Packages.PyRMVtransport: 0.2.9 -> 0.2.10
Disables the test, because they require pytest-httpx, which has not been
packaged yet.
2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer 492c60ccf0 python3Packages.ntc-templates: 1.5.0 -> 1.6.0 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer c63c4f71fc python3Packages.ircstates: 0.11.3 -> 0.11.5 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer cfef6dd82c python3Packages.ircrobots: 0.3.3 -> 0.3.5 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer 204501b9cf python3Packages.clldutils: 3.5.2 -> 3.5.4 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer 77e9b46697 python3Packages.brother: 0.1.17 -> 0.1.18 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer 46463b7d47 python3Packages.async-upnp-client: 0.14.14 -> 0.14.15 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer 5c4a4a5d6f python3Packages.async_stagger: 0.3.0 -> 0.3.1 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer ed6d6ebca7 python3Packages.mocket: 3.9.2 -> 3.9.3 2020-11-17 19:23:17 -08:00
Martin WeineltandJonathan Ringer 832add5165 python3Packages.csvw: 1.8.0 -> 1.8.1 2020-11-17 19:23:17 -08:00
Aaron JanseandPeter Hoeg 52d3cc4438 tomb: 2.7 -> 2.8 2020-11-18 09:54:49 +08:00
Yorick van PeltandJonathan Ringer 9ca12dc4c7 python3Packages.reedsolo: init at 1.5.4
reedsolo: maintain, add tests, fix cython

reedsolo: Apply suggestions from code review

Co-authored-by: Jonathan Ringer <jonringer@users.noreply.github.com>
2020-11-17 16:41:17 -08:00
Jonathan RingerandJonathan Ringer 283900f4d2 python3Packages.xmlschema: 1.2.5 -> 1.3.1 2020-11-17 16:33:25 -08:00
Ryan MulliganandGitHub cb0908a810 Merge pull request #100482 from Narice/report-out-of-date-packages
Added out-of-date package reports to github templates
2020-11-17 16:21:05 -08:00
Ryan MulliganandGitHub ef20cdc5f0 Merge pull request #104025 from r-ryantm/auto-update/bitwarden
bitwarden: 1.22.2 -> 1.23.0
2020-11-17 16:13:04 -08:00
Ryan MulliganandGitHub 6c74dc7672 Merge pull request #102128 from bryanasdev000/package-velero-1.5.2
velero: 1.5.1 -> 1.5.2
2020-11-17 16:10:24 -08:00
Ryan MulliganandGitHub ac68b39e5d Merge pull request #103874 from r-ryantm/auto-update/helmfile
helmfile: 0.134.0 -> 0.134.1
2020-11-17 15:04:53 -08:00
Dmitry KalinkinandGitHub d712598fe2 Merge pull request #103641 from veprbl/pr/awkward1_0_4_3
python3Packages.awkward1: 0.2.38 -> 0.4.4
2020-11-17 17:33:09 -05:00
Kim LindbergerandGitHub d5b146418e Merge pull request #103146 from talyz/keepassxc-networking
keepassxc: Enable networking by default
2020-11-17 23:31:06 +01:00
zowoq 87aa3671e8 cockroachdb: workaround trimpath build failure 2020-11-18 08:13:34 +10:00
zowoq 702c242558 quorum: workaround trimpath build failure 2020-11-18 08:13:34 +10:00
zowoq 11c19be426 direnv: workaround hardcoded GOFLAGS 2020-11-18 08:13:34 +10:00
zowoq d1884cbadf minio: drop redundant trimpath flag 2020-11-18 08:13:34 +10:00