Commit Graph
621256 Commits
Author SHA1 Message Date
rnhmjoj fa5ae18c14 nixos/tests/firewall: fix deprecation warning 2024-06-05 15:27:07 +02:00
rnhmjoj 3c12ef3f21 nixos/firewall: fix reverse path check failures with IPsec
The endpoint of an IPsec tunnel receives encrypted IPsec packets that
are first decrypted and then forwarded to the intended destination.
The decrypted traffic appears to originate from the same interface it
came in from, so in most cases these packets will fail the reverse path
check even if legitimate.

This change adds an exception to not reject packets that were previously
IPsec-encrypted, meaning the have been accepted, decrypted and are in
the process of being forwarded to their final destinal.

Sources:

  - https://www.kernel.org/doc/Documentation/networking/xfrm_device.txt
  - https://git.netfilter.org/nftables/commit/?id=49f6e9a846c6c8325b95debe04d5ebc3c01246fb
  - https://git.netfilter.org/nftables/commit/?id=8f55ed41d007061bd8aae94fee2bda172c0e8996
  - https://thermalcircle.de/doku.php?id=blog:linux:nftables_demystifying_ipsec_expressions
2024-06-05 15:18:35 +02:00
Fabian AffolterandGitHub 591aaa3f60 Merge pull request #308866 from r-ryantm/auto-update/python311Packages.langsmith
python311Packages.langsmith: 0.1.52 -> 0.1.53
2024-05-04 00:30:54 +02:00
kirillrdyandGitHub cf6dbf65a0 Merge pull request #306907 from rohanssrao/master
lumafly: init at 3.2.0.0
2024-05-04 08:16:21 +10:00
Pol DellaieraandGitHub a21593956c Merge pull request #308879 from r-vdp/fwupd
fwupd: 1.9.18 -> 1.9.19
2024-05-04 00:07:46 +02:00
nixpkgs-merge-bot[bot]andGitHub 57b4a0f247 Merge pull request #308769 from r-ryantm/auto-update/lbreakouthd
lbreakouthd: 1.1.7 -> 1.1.8
2024-05-03 22:05:29 +00:00
JanikandGitHub 8a708d697a Merge pull request #301283 from lilyinstarlight/fix/mattermost-desktop-stuff
mattermost-desktop: support NIXOS_OZONE_WL and fix sso login redirects
2024-05-04 00:02:20 +02:00
YtandGitHub 33d738eb12 Merge pull request #308689 from r-ryantm/auto-update/erlang_26
erlang_26: 26.2.4 -> 26.2.5
2024-05-03 21:34:34 +00:00
Pavol RusnakandGitHub 23f72abf0c Merge pull request #308796 from 0xB10C/2024-05-promethues-bitcoin-exporter-expose-package
nixos/prometheus-bitcoin-exporter: expose package option
2024-05-03 23:09:17 +02:00
Fabian AffolterandGitHub 9276413a38 Merge pull request #308862 from fabaff/ggshield-bump
ggshield: 1.25.0 -> 1.27.0
2024-05-03 23:06:27 +02:00
Pascal BachandGitHub fe25d5d5b7 Merge pull request #308496 from saschagrunert/crun
crun: 1.14.4 -> 1.15
2024-05-03 22:52:30 +02:00
Fabian AffolterandGitHub d05d357798 Merge pull request #308797 from fabaff/py-zabbix-fix
python312Packages.py-zabbix: disable failing tests on Python 3.12
2024-05-03 22:39:09 +02:00
Fabian AffolterandGitHub fa5d2cbb63 Merge pull request #308792 from fabaff/webexteamssdk-fix
python312Packages.webexteamssdk: remove vendorized versioneer
2024-05-03 22:38:55 +02:00
Robert Helgesson 2d72dfcc04 svgsym: remove broken state
This package builds fine since quite a while.
2024-05-03 22:33:18 +02:00
Fabian AffolterandGitHub 87a1d2a1c6 Merge pull request #308869 from r-ryantm/auto-update/python311Packages.playwrightcapture
python311Packages.playwrightcapture: 1.24.7 -> 1.24.8
2024-05-03 22:31:50 +02:00
Leona MaroniandGitHub d9bdb87f7d Merge pull request #307498 from SuperSandro2000/podman-storage-default
nixos/containers: move storage.settings default into config
2024-05-03 22:31:06 +02:00
nicooandGitHub a817fdac5f Merge #307770: add optional version check in testers.hasPkgConfigModules 2024-05-03 20:18:56 +00:00
ArtturinandGitHub af8edf6d75 Merge pull request #289799 from acesyde/feature/gitversion
gitversion: init at 5.12.0
2024-05-03 23:17:17 +03:00
acesydeandArtturin da37446720 gitversion: init at 5.12.0 2024-05-03 23:14:10 +03:00
r-vdp 950c89779e fwupd: 1.9.18 -> 1.9.19
Changelog: https://github.com/fwupd/fwupd/releases/tag/1.9.19
2024-05-03 22:12:00 +02:00
Pascal BachandGitHub 99dcdbd0d7 Merge pull request #308511 from r-ryantm/auto-update/scc
scc: 3.2.0 -> 3.3.0
2024-05-03 22:08:34 +02:00
acesydeandArtturin ef650f0ac6 maintainers: add acesyde 2024-05-03 23:07:50 +03:00
Pascal BachandGitHub 7d034147f4 Merge pull request #308569 from r-ryantm/auto-update/poco
poco: 1.13.2 -> 1.13.3
2024-05-03 22:07:29 +02:00
ArtturinandGitHub 63885e1713 Merge pull request #308055 from sky1e/vrc-get-completions
vrc-get: Install shell completions
2024-05-03 23:03:19 +03:00
SkyeandArtturin 3003affd63 vrc-get: Install shell completions
vrc-get: Generate completions when cross-compiling
2024-05-03 23:02:02 +03:00
ArtturinandGitHub 045a097bde Merge pull request #246937 from uninsane/pr-libgnt-2.14.3
libgnt: 2.14.1 -> 2.14.3
2024-05-03 22:55:13 +03:00
Azat BahawiandGitHub 9155c3d38d Merge pull request #308846 from paveloom/mold
mold: 2.30.0 -> 2.31.0
2024-05-03 19:51:57 +00:00
Pascal BachandGitHub d121ce778b Merge pull request #308559 from r-ryantm/auto-update/brave
brave: 1.65.122 -> 1.65.126
2024-05-03 21:24:45 +02:00
nicooandGitHub 63a83204a0 Merge #308068: mpvScripts: comply with RFC166 formatting 2024-05-03 19:19:12 +00:00
nicoo a6f88138ae mpvScripts: format according to RFC166 rules 2024-05-03 19:14:06 +00:00
nicoo 294953ddb3 workflows: enforce RFC166 formatting for mpvScripts 2024-05-03 19:13:32 +00:00
R. RyanTMandGitHub 492b7b257a rwpspread: 0.2.5 -> 0.2.6 (#305629) 2024-05-03 19:11:59 +00:00
kilianarandGitHub e9be424599 calibre: 7.9.0 -> 7.10.0 (#308800)
https://github.com/kovidgoyal/calibre/releases/tag/v7.10.0
2024-05-03 19:05:06 +00:00
Pascal BachandGitHub 5eec25f7d1 Merge pull request #308628 from ruby0b/ups/init
ups: init at 0.2.1
2024-05-03 21:03:59 +02:00
R. Ryantm 5e50f80ca4 python311Packages.playwrightcapture: 1.24.7 -> 1.24.8 2024-05-03 19:03:51 +00:00
Thomas GerbetandGitHub 8528f32728 varnish75: init at 7.5.0 (#308604)
Changes: https://varnish-cache.org/docs/7.5/whats-new/changes-7.5.html
2024-05-03 19:03:01 +00:00
Pascal BachandGitHub aa5879d20d Merge pull request #308803 from r-ryantm/auto-update/media-downloader
media-downloader: 4.5.0 -> 4.6.0
2024-05-03 21:02:39 +02:00
Motiejus JakštysandGitHub 67a4ef9d1e inotify-info: unstable-2024-01-05 -> 0.0.1 (#308759) 2024-05-03 19:01:53 +00:00
Pascal BachandGitHub b7bcb5a6e7 Merge pull request #308709 from bnapolitano/master
digikam: 8.2.0 -> 8.3.0
2024-05-03 21:00:23 +02:00
Weijia WangandGitHub 210a749573 Merge pull request #308856 from annaleeleaves/cvxpy-unbreak
python311Packages.cvxpy: unbreak
2024-05-03 20:59:31 +02:00
Weijia WangandGitHub 2650cdead6 Merge pull request #308851 from r-ryantm/auto-update/shopware-cli
shopware-cli: 0.4.40 -> 0.4.42
2024-05-03 20:54:33 +02:00
Weijia WangandGitHub ced89ef408 Merge pull request #308266 from r-ryantm/auto-update/_0xproto
_0xproto: 1.603 -> 2.000
2024-05-03 20:51:15 +02:00
Pascal BachandGitHub f9b9a805b6 Merge pull request #308861 from r-ryantm/auto-update/rustscan
rustscan: 2.2.2 -> 2.2.3
2024-05-03 20:51:03 +02:00
Weijia WangandGitHub 4b7d024f9d Merge pull request #308839 from enockseth/josm-19067
josm: 19039 -> 19067
2024-05-03 20:50:08 +02:00
nixpkgs-merge-bot[bot]andGitHub 221a3d5bb3 Merge pull request #308630 from r-ryantm/auto-update/csvkit
csvkit: 1.5.0 -> 2.0.0
2024-05-03 18:49:46 +00:00
Weijia WangandGitHub 158079242d Merge pull request #308728 from wegank/genymotion-fix
genymotion: fix runtime error with qemu
2024-05-03 20:47:41 +02:00
R. Ryantm 7971ad9ee1 python311Packages.langsmith: 0.1.52 -> 0.1.53 2024-05-03 18:45:29 +00:00
K900andGitHub d716a0aa2b Merge pull request #308845 from K900/fix-jellyfin-ffmpeg
jellyfin-ffmpeg: update, fix build
2024-05-03 21:44:22 +03:00
Weijia WangandGitHub 24b2b7386e Merge pull request #304428 from r-ryantm/auto-update/functionalplus
functionalplus: 0.2.23 -> 0.2.24
2024-05-03 20:30:56 +02:00
Weijia WangandGitHub 199b424947 Merge pull request #304670 from wegank/guile-1-8-cross
release-cross: remove guile_1_8 from windowsCommon
2024-05-03 20:29:23 +02:00