Luflosi
c71cb77cd6
nixos/grub: use the correct ZFS version
...
When `config.boot.zfs.enableUnstable` is set to true, grub was built with the `zfs` package even though the rest of the system uses the `zfsUnstable` package.
The effect of this can only be seen when `zfs` and `zfsUnstable` actually differ (which is not currently the case), for example when overriding one of them locally.
2023-12-29 01:53:27 +01:00
github-actions[bot]
0097df9129
Merge staging-next into staging
2023-12-27 12:01:18 +00:00
github-actions[bot]
04686e4ee3
Merge master into staging-next
2023-12-27 12:00:55 +00:00
nikstur
c9569af3e0
Merge pull request #271326 from philiptaron/shutdown.target
...
treewide: depend on `shutdown.target` if `DefaultDependencies=no` in almost every case
2023-12-27 08:33:26 +01:00
Gary Guo
39ae2babce
nixos/networkd: allow KeepCarrier in tunConfig and tapConfig
...
This is added in systemd.netdev in 252, see
https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#KeepCarrier=
2023-12-22 20:29:18 +00:00
Florian Klink
011e924109
Merge pull request #239201 from nesteroff/fix-timesync
...
systemd: disable NSCD when DNSSEC validation is disabled in timesyncd
2023-12-20 22:22:52 +02:00
github-actions[bot]
a1cd7ca146
Merge master into staging-next
2023-12-20 18:00:56 +00:00
Maciej Krüger
ff680a4c39
Merge pull request #207717 from jpathy/patch-2
2023-12-20 13:52:03 +01:00
github-actions[bot]
176c80219d
Merge master into staging-next
2023-12-20 12:00:53 +00:00
Yuri Nesterov
6008246790
systemd: disable NSCD when DNSSEC validation is disabled in timesyncd
...
When a system has a wrong date and time timesyncd is unable to synchronize it
because DNSSEC doesn't work. In order to break this chicken and egg problem
systemd-timesync disables DNSSEC validation by setting
SYSTEMD_NSS_RESOLVE_VALIDATE=0 in the unit file. However, it doesn't work in
NixOS because it uses NSCD. This patch disables NSCD in systemd-timesyncd when
SYSTEMD_NSS_RESOLVE_VALIDATE is set to 0 so that it uses NSS libraries
directly. In order for it to be able to find the libnss_resolve.so.2 library
this patch adds the systemd directory in the nix store to the LD_LIBRARY_PATH.
2023-12-20 13:21:43 +02:00
Florian Klink
c28f238f5a
Merge pull request #272946 from benaryorg/resolved_no_fallback
...
nixos/resolved: Allow upstream fallback override
2023-12-20 12:55:44 +02:00
Ex-32
c82896c292
nixos/binfmt: added assertion to prevent emulation of current system
...
should fix https://github.com/NixOS/nixpkgs/issues/218465
2023-12-19 13:05:26 -06:00
github-actions[bot]
782f18b6fe
Merge staging-next into staging
2023-12-19 12:01:35 +00:00
Florian Klink
5a57cde110
nixos/systemd/initrd: add systemd-makefs unconditionally
...
As discussed in
https://github.com/NixOS/nixpkgs/issues/274310#issuecomment-1861842634 ,
the size increase is negligible, and this might be triggered via fstab
options or the cmdline too.
systemd-growfs is an online operation, so it's taken care of in stage 2.
Fixes https://github.com/NixOS/nixpkgs/issues/274310 .
2023-12-19 08:38:03 +02:00
github-actions[bot]
5374345f82
Merge staging-next into staging
2023-12-19 00:02:47 +00:00
Sandro Jäckel
8c58a7cb4b
nixos/luksroot: add final newline to /etc/crypttab
2023-12-18 02:16:08 +01:00
jpathy
0225a786e5
nixos/networkd: allow IPv6LinkLocalAddressGenerationMode in networkConfig
...
Fixes : #199407 .
2023-12-17 19:39:59 +01:00
benaryorg
57846d0cae
nixos/resolved: Allow upstream fallback override
...
The previous code did not apply any changes to the upstream defaults on being presented with an empty list.
This changes the code to use the above behaviour on a `null` value while an empty list is passed through as normal which yields a systemd configuration line with empty value which resets it to an empty value.
Signed-off-by: benaryorg <binary@benary.org >
2023-12-15 13:07:05 +00:00
SaltyKitkat
679a417a7a
Declare removed option with mkRemovedOptionModule
2023-12-13 16:43:34 +08:00
SaltyKitkat
b2d6b30648
update oomd.nix
...
due to 7665e1796f
and 806c95e1c7
2023-12-13 16:35:39 +08:00
Ben Wolsieffer
a514d8c148
systemd-stage-1: allow non-existent /lib/firmware
...
Since 1557027 , makeModulesClosure doesn't create a lib/firmware
directory if there is no firmware in the initramfs. If this happens,
systemd-stage-1 fails to build.
/lib only contains /lib/modules and /lib/firmware, both of while are
from modulesClosure. Therefore, we can just add the entirety of
${modulesClosure}/lib to the initramfs to allow for the possibility that
lib/firmware doesn't exist. This also brings systemd-stage-1 in line
with the traditional stage-1.
2023-12-11 21:00:08 -05:00
Raito Bezarius
eecfbe397a
nixos/(tests/)journald-(remote|upload|gateway): add raitobezarius as a maintainer
2023-12-09 13:57:08 +01:00
Minijackson
2fb8bd4baf
nixos/journald-upload: init
2023-12-09 01:50:23 +01:00
Minijackson
6410e72fd2
nixos/journald-remote: init
2023-12-09 01:50:23 +01:00
Minijackson
9ab63e1ad5
nixos/journald-gateway: init
...
move services.journald.enableHttpGateway -> services.journald.gateway.enable
2023-12-09 01:50:23 +01:00
maxine
ad7955279d
Merge pull request #270011 from christoph-heiss/networkd-fix-wgpeer-doc
...
nixos/networkd: fix manpage for `WireGuardPeer` config
2023-12-06 00:33:05 +01:00
Camille Mondon
27493b4d49
nixos/clevis: init
...
Co-Authored-By: Julien Malka <julien@malka.sh >
2023-12-02 11:55:47 +00:00
Philip Taron
1f73c2a7b6
nixos/initrd-secrets: ensure correct ordering w.r.t. shutdown.target
2023-11-30 15:18:23 -08:00
Philip Taron
0db4d5b335
nixos/initrd-ssh: ensure correct ordering w.r.t. shutdown.target
2023-11-30 15:12:10 -08:00
Philip Taron
e4136ed6dd
nixos/growpart: ensure correct ordering w.r.t. shutdown.target
2023-11-30 15:09:59 -08:00
K900
9ad22d35b6
Revert "nixos/switch-to-configuration: remove explicit tmpfiles invocation"
2023-11-29 09:38:27 +03:00
Bernardo Meurer
ad1d3762bb
Merge pull request #269983 from nikstur/stc-tmpfiles
...
nixos/switch-to-configuration: remove explicit tmpfiles invocation
2023-11-28 18:26:44 -03:00
Will Fancher
7f213113e6
Merge pull request #218441 from tomfitzhenry/unl0kr
...
add boot.initrd.unl0kr
2023-11-28 16:10:11 -05:00
Christoph Heiss
4e08f16893
nixos/networkd: fix manpage for WireGuardPeer config
...
Signed-off-by: Christoph Heiss <christoph@c8h4.io >
2023-11-26 00:43:55 +01:00
nikstur
fa41730b86
nixos/switch-to-configuration: remove explicit tmpfiles invocation
2023-11-25 21:39:10 +01:00
nicoo
744b456b49
nixos/systemd: Mark down the options description
2023-11-22 10:49:51 +00:00
nicoo
3f5e19aaf3
nixos/systemd: Link manpages in options' description
2023-11-22 10:49:50 +00:00
nicoo
f1b17edaea
nixos/systemd: Refactor package option
2023-11-22 10:49:50 +00:00
nicoo
aba2edda44
nixos/systemd: Refactor references to config.systemd
2023-11-22 10:49:50 +00:00
nicoo
667e7ca0bd
nixos/systemd: refactor option definitions
...
- factor out `config.systemd.`;
- remove `lib.mdDoc` no-op.
2023-11-22 10:49:50 +00:00
Ryan Lahfa
cbd983e1cd
Merge pull request #266151 from JulienMalka/append-secret-reproducible
2023-11-19 16:16:01 +01:00
Will Fancher
b606ebb355
Merge pull request #266990 from ElvishJerricco/systemd-boot-boot-pass-flags-to-update
...
nixos/systemd-boot: pass EFI variable flags during update too
2023-11-18 12:34:10 -05:00
Patrick Steinhardt
a8617e2b0d
nixos/networkd: allow configuring AckFilter for CAKE qdisc
...
The CAKE section for systemd.network units allows configuring whether or
not redundant ACKs should be dropped. This option corresponds to the
respective tc-cake(8) params "ack-filter", "ack-filter-aggressive" or
"no-ack-filter".
Add support for these values in the `cakeConfig` module so that users
can configure it.
2023-11-19 03:40:51 +11:00
Philip Taron
bc7a939ced
nixos/networkd: add [IPVLAN] and [IPVTAP] configuration options to systemd.netdev files
...
[IPVLAN](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVLAN%5D%20Section%20Options )
[IPVTAP](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVTAP%5D%20Section%20Options )
2023-11-18 08:43:21 +01:00
Philip Taron
7686f24675
nixos/networkd: add ipvtap kind to netdev and IPVTAP= to network
...
From `man systemd.netdev`: https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#Supported%20netdev%20kinds
From `man systemd.network`: https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#IPoIB=
2023-11-18 08:43:21 +01:00
Julien Malka
81e378618e
nixos/systemd-boot: allow for bootspec-less generations
...
Generation built with old versions of NixOS with no bootspec
support may still be present on the system and must be
accounted for.
2023-11-17 14:39:04 +01:00
Ryan Lahfa
75fbff2576
Merge pull request #263442 from JulienMalka/systemd-boot-bootspec
2023-11-15 08:40:19 +01:00
Samuel Dionne-Riel
3d88cc85dd
Merge pull request #262595 from tpwrules/fix-extra-config-documentation
...
nixos/kernel: correct kernelPatches.extraConfig documentation
2023-11-14 22:40:04 -05:00
zzywysm
3f4c802d26
initrd/autofs4: remove legacy references to autofs4 kernel module
...
Back in 2018, the kernel decided to remove the autofs4 module.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a2225d931f75ddd3c39f4d0d195fad99dfd68671
This caused immediate problems with systemd, so the kernel allowed autofs4 as a config option that would simply map back to autofs.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d02d21ea007b6b33cdaf15c2f84fb1fea996ecc2
Earlier this year, in July 2023, the kernel got tired of people not adapting to the autofs change, and forced the issue by fixing it within the kernel defconfigs, which NixOS uses as a starting point for their own kernel configs.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1f2190d6b7112d22d3f8dfeca16a2f6a2f51444e
This commit reflects the post-2018 reality by changing the remaining autofs4 references to autofs. Since this change initially happened in kernel 4.18 and we no longer support 4.x kernels, we don't need any backwards-compatibility tweaks.
2023-11-14 15:37:50 -05:00
Julien Malka
372d07dc29
nixos/systemd-boot: conform backend to RFC-0125
...
Now the builder is using Bootspec documents.
2023-11-14 20:37:07 +01:00