2016-09-02 08:40:48 +02:00
|
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
|
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
|
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
|
|
|
version="5.0"
|
|
|
|
|
xml:id="sec-release-17.03">
|
2018-05-02 01:57:09 +02:00
|
|
|
<title>Release 17.03 (“Gorilla”, 2017/03/31)</title>
|
2016-09-02 08:40:48 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
2017-03-30 19:14:56 +02:00
|
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
|
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
|
|
|
version="5.0"
|
|
|
|
|
xml:id="sec-release-17.03-highlights">
|
2018-05-02 01:57:09 +02:00
|
|
|
<title>Highlights</title>
|
2017-03-30 19:14:56 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<para>
|
|
|
|
|
In addition to numerous new and upgraded packages, this release has the
|
|
|
|
|
following highlights:
|
|
|
|
|
</para>
|
2016-09-02 08:40:48 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<itemizedlist>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
Nixpkgs is now extensible through overlays. See the
|
|
|
|
|
<link
|
2017-01-14 15:15:55 +01:00
|
|
|
xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install">Nixpkgs
|
2018-05-02 01:57:09 +02:00
|
|
|
manual</link> for more information.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
This release is based on Glibc 2.25, GCC 5.4.0 and systemd 232. The
|
|
|
|
|
default Linux kernel is 4.9 and Nix is at 1.11.8.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
The default desktop environment now is KDE's Plasma 5. KDE 4 has been
|
|
|
|
|
removed
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
The setuid wrapper functionality now supports setting capabilities.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
X.org server uses branch 1.19. Due to ABI incompatibilities,
|
|
|
|
|
<literal>ati_unfree</literal> keeps forcing 1.17 and
|
|
|
|
|
<literal>amdgpu-pro</literal> starts forcing 1.18.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
Cross compilation has been rewritten. See the nixpkgs manual for details.
|
|
|
|
|
The most obvious breaking change is that in derivations there is no
|
|
|
|
|
<literal>.nativeDrv</literal> nor <literal>.crossDrv</literal> are now
|
|
|
|
|
cross by default, not native.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
The <literal>overridePackages</literal> function has been rewritten to be
|
|
|
|
|
replaced by
|
|
|
|
|
<link
|
2017-03-30 19:14:56 +02:00
|
|
|
xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install">
|
2018-05-02 01:57:09 +02:00
|
|
|
overlays</link>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
Packages in nixpkgs can be marked as insecure through listed
|
|
|
|
|
vulnerabilities. See the
|
|
|
|
|
<link
|
nixpkgs: allow packages to be marked insecure
If a package's meta has `knownVulnerabilities`, like so:
stdenv.mkDerivation {
name = "foobar-1.2.3";
...
meta.knownVulnerabilities = [
"CVE-0000-00000: remote code execution"
"CVE-0000-00001: local privilege escalation"
];
}
and a user attempts to install the package, they will be greeted with
a warning indicating that maybe they don't want to install it:
error: Package ‘foobar-1.2.3’ in ‘...default.nix:20’ is marked as insecure, refusing to evaluate.
Known issues:
- CVE-0000-00000: remote code execution
- CVE-0000-00001: local privilege escalation
You can install it anyway by whitelisting this package, using the
following methods:
a) for `nixos-rebuild` you can add ‘foobar-1.2.3’ to
`nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
like so:
{
nixpkgs.config.permittedInsecurePackages = [
"foobar-1.2.3"
];
}
b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
‘foobar-1.2.3’ to `permittedInsecurePackages` in
~/.config/nixpkgs/config.nix, like so:
{
permittedInsecurePackages = [
"foobar-1.2.3"
];
}
Adding either of these configurations will permit this specific
version to be installed. A third option also exists:
NIXPKGS_ALLOW_INSECURE=1 nix-build ...
though I specifically avoided having a global file-based toggle to
disable this check. This way, users don't disable it once in order to
get a single package, and then don't realize future packages are
insecure.
2017-02-17 03:02:13 +01:00
|
|
|
xlink:href="https://nixos.org/nixpkgs/manual/#sec-allow-insecure">Nixpkgs
|
2018-05-02 01:57:09 +02:00
|
|
|
manual</link> for more information.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
PHP now defaults to PHP 7.1
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
</itemizedlist>
|
|
|
|
|
</section>
|
2016-09-02 08:40:48 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
2017-03-30 19:14:56 +02:00
|
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
|
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
|
|
|
version="5.0"
|
|
|
|
|
xml:id="sec-release-17.03-new-services">
|
2018-05-02 01:57:09 +02:00
|
|
|
<title>New Services</title>
|
2017-03-30 19:14:56 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<para>
|
|
|
|
|
The following new services were added since the last release:
|
|
|
|
|
</para>
|
2017-03-30 19:14:56 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<itemizedlist>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>hardware/ckb.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>hardware/mcelog.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>hardware/usb-wwan.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>hardware/video/capture/mwprocapture.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>programs/adb.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>programs/chromium.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>programs/gphoto2.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>programs/java.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>programs/mtr.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>programs/oblogout.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>programs/vim.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>programs/wireshark.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>security/dhparams.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/audio/ympd.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/computing/boinc/client.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/continuous-integration/buildbot/master.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/continuous-integration/buildbot/worker.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/continuous-integration/gitlab-runner.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/databases/riak-cs.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/databases/stanchion.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/desktops/gnome3/gnome-terminal-server.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/editors/infinoted.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/hardware/illum.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/hardware/trezord.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/logging/journalbeat.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/mail/offlineimap.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/mail/postgrey.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/couchpotato.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/docker-registry.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/errbot.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/geoip-updater.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/gogs.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/leaps.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/nix-optimise.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/ssm-agent.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/misc/sssd.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/arbtt.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/netdata.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/default.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/alertmanager.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/blackbox-exporter.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/json-exporter.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/nginx-exporter.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/node-exporter.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/snmp-exporter.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/unifi-exporter.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/prometheus/varnish-exporter.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/sysstat.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/telegraf.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/monitoring/vnstat.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/network-filesystems/cachefilesd.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/network-filesystems/glusterfs.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/network-filesystems/ipfs.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/dante.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/dnscrypt-wrapper.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/fakeroute.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/flannel.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/htpdate.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/miredo.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/nftables.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/powerdns.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/pdns-recursor.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/quagga.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/redsocks.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/networking/wireguard.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/system/cgmanager.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/torrent/opentracker.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/web-apps/atlassian/confluence.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/web-apps/atlassian/crowd.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/web-apps/atlassian/jira.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/web-apps/frab.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/web-apps/nixbot.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/web-apps/selfoss.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/web-apps/quassel-webserver.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/x11/unclutter-xfixes.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>services/x11/urxvtd.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>system/boot/systemd-nspawn.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>virtualisation/ecs-agent.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>virtualisation/lxcfs.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>virtualisation/openstack/keystone.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>virtualisation/openstack/glance.nix</literal>
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
</itemizedlist>
|
|
|
|
|
</section>
|
2016-09-02 08:40:48 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
2017-03-30 19:14:56 +02:00
|
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
|
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
|
|
|
version="5.0"
|
|
|
|
|
xml:id="sec-release-17.03-incompatibilities">
|
2018-05-02 01:57:09 +02:00
|
|
|
<title>Backward Incompatibilities</title>
|
2017-03-30 19:14:56 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<para>
|
|
|
|
|
When upgrading from a previous release, please be aware of the following
|
|
|
|
|
incompatible changes:
|
|
|
|
|
</para>
|
2016-09-02 08:40:48 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<itemizedlist>
|
|
|
|
|
<listitem>
|
2017-01-22 20:36:16 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Derivations have no <literal>.nativeDrv</literal> nor
|
|
|
|
|
<literal>.crossDrv</literal> and are now cross by default, not native.
|
2017-01-22 20:36:16 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2016-12-19 17:10:47 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
<literal>stdenv.overrides</literal> is now expected to take
|
|
|
|
|
<literal>self</literal> and <literal>super</literal> arguments. See
|
|
|
|
|
<literal>lib.trivial.extends</literal> for what those parameters
|
|
|
|
|
represent.
|
2016-12-19 17:10:47 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-01-27 09:58:43 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
<literal>ansible</literal> now defaults to ansible version 2 as version 1
|
|
|
|
|
has been removed due to a serious
|
|
|
|
|
<link
|
2017-01-27 09:58:43 +01:00
|
|
|
xlink:href="https://www.computest.nl/advisories/CT-2017-0109_Ansible.txt">
|
2018-05-02 01:57:09 +02:00
|
|
|
vulnerability</link> unpatched by upstream.
|
2017-01-27 09:58:43 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2016-09-12 01:08:53 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
<literal>gnome</literal> alias has been removed along with
|
|
|
|
|
<literal>gtk</literal>, <literal>gtkmm</literal> and several others. Now
|
|
|
|
|
you need to use versioned attributes, like <literal>gnome3</literal>.
|
2016-09-12 01:08:53 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2016-09-24 19:26:15 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The attribute name of the Radicale daemon has been changed from
|
|
|
|
|
<literal>pythonPackages.radicale</literal> to <literal>radicale</literal>.
|
2016-09-24 19:26:15 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2016-10-11 18:09:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The <literal>stripHash</literal> bash function in
|
|
|
|
|
<literal>stdenv</literal> changed according to its documentation; it now
|
|
|
|
|
outputs the stripped name to <literal>stdout</literal> instead of putting
|
|
|
|
|
it in the variable <literal>strippedName</literal>.
|
2016-10-08 16:49:58 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
PHP now scans for extra configuration .ini files in /etc/php.d instead of
|
|
|
|
|
/etc. This prevents accidentally loading non-PHP .ini files that may be in
|
|
|
|
|
/etc.
|
2016-10-16 17:07:27 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-02-09 22:22:46 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Two lone top-level dict dbs moved into <literal>dictdDBs</literal>. This
|
|
|
|
|
affects: <literal>dictdWordnet</literal> which is now at
|
|
|
|
|
<literal>dictdDBs.wordnet</literal> and <literal>dictdWiktionary</literal>
|
|
|
|
|
which is now at <literal>dictdDBs.wiktionary</literal>
|
2017-02-09 22:22:46 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2016-11-20 15:41:38 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Parsoid service now uses YAML configuration format.
|
2016-11-20 15:41:38 +01:00
|
|
|
<literal>service.parsoid.interwikis</literal> is now called
|
|
|
|
|
<literal>service.parsoid.wikis</literal> and is a list of either API URLs
|
|
|
|
|
or attribute sets as specified in parsoid's documentation.
|
|
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2016-12-18 11:57:35 +01:00
|
|
|
<para>
|
|
|
|
|
<literal>Ntpd</literal> was replaced by
|
2016-12-18 13:31:12 +01:00
|
|
|
<literal>systemd-timesyncd</literal> as the default service to synchronize
|
|
|
|
|
system time with a remote NTP server. The old behavior can be restored by
|
2016-12-18 11:57:35 +01:00
|
|
|
setting <literal>services.ntp.enable</literal> to <literal>true</literal>.
|
|
|
|
|
Upstream time servers for all NTP implementations are now configured using
|
2016-12-18 13:31:12 +01:00
|
|
|
<literal>networking.timeServers</literal>.
|
2018-05-02 01:57:09 +02:00
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-02-09 21:16:20 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
<literal>service.nylon</literal> is now declared using named instances. As
|
|
|
|
|
an example:
|
2017-02-09 21:16:20 +01:00
|
|
|
<programlisting>
|
|
|
|
|
services.nylon = {
|
|
|
|
|
enable = true;
|
|
|
|
|
acceptInterface = "br0";
|
|
|
|
|
bindInterface = "tun1";
|
|
|
|
|
port = 5912;
|
|
|
|
|
};
|
|
|
|
|
</programlisting>
|
2018-05-02 01:57:09 +02:00
|
|
|
should be replaced with:
|
2017-02-09 21:16:20 +01:00
|
|
|
<programlisting>
|
|
|
|
|
services.nylon.myvpn = {
|
|
|
|
|
enable = true;
|
|
|
|
|
acceptInterface = "br0";
|
|
|
|
|
bindInterface = "tun1";
|
|
|
|
|
port = 5912;
|
|
|
|
|
};
|
|
|
|
|
</programlisting>
|
2018-05-02 01:57:09 +02:00
|
|
|
this enables you to declare a SOCKS proxy for each uplink.
|
2017-02-09 21:16:20 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>overridePackages</literal> function no longer exists. It is
|
|
|
|
|
replaced by
|
|
|
|
|
<link
|
2017-01-14 15:15:55 +01:00
|
|
|
xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install">
|
2018-05-02 01:57:09 +02:00
|
|
|
overlays</link>. For example, the following code:
|
2017-01-14 15:15:55 +01:00
|
|
|
<programlisting>
|
|
|
|
|
let
|
2017-01-16 00:16:37 +01:00
|
|
|
pkgs = import <nixpkgs> {};
|
2017-01-14 15:15:55 +01:00
|
|
|
in
|
|
|
|
|
pkgs.overridePackages (self: super: ...)
|
|
|
|
|
</programlisting>
|
2018-05-02 01:57:09 +02:00
|
|
|
should be replaced by:
|
2017-01-14 15:15:55 +01:00
|
|
|
<programlisting>
|
|
|
|
|
let
|
2017-01-17 22:24:44 +01:00
|
|
|
pkgs = import <nixpkgs> {};
|
2017-01-14 15:15:55 +01:00
|
|
|
in
|
2017-07-05 13:15:02 +02:00
|
|
|
import pkgs.path { overlays = [(self: super: ...)]; }
|
2017-01-14 15:15:55 +01:00
|
|
|
</programlisting>
|
|
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-01-22 19:53:19 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Autoloading connection tracking helpers is now disabled by default. This
|
|
|
|
|
default was also changed in the Linux kernel and is considered insecure if
|
|
|
|
|
not configured properly in your firewall. If you need connection tracking
|
|
|
|
|
helpers (i.e. for active FTP) please enable
|
|
|
|
|
<literal>networking.firewall.autoLoadConntrackHelpers</literal> and tune
|
|
|
|
|
<literal>networking.firewall.connectionTrackingModules</literal> to suit
|
|
|
|
|
your needs.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-02-04 12:48:11 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
<literal>local_recipient_maps</literal> is not set to empty value by
|
|
|
|
|
Postfix service. It's an insecure default as stated by Postfix
|
|
|
|
|
documentation. Those who want to retain this setting need to set it via
|
|
|
|
|
<literal>services.postfix.extraConfig</literal>.
|
2017-02-04 12:48:11 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-02-21 23:18:30 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Iputils no longer provide ping6 and traceroute6. The functionality of
|
|
|
|
|
these tools has been integrated into ping and traceroute respectively. To
|
|
|
|
|
enforce an address family the new flags <literal>-4</literal> and
|
|
|
|
|
<literal>-6</literal> have been added. One notable incompatibility is that
|
|
|
|
|
specifying an interface (for link-local IPv6 for instance) is no longer
|
|
|
|
|
done with the <literal>-I</literal> flag, but by encoding the interface
|
|
|
|
|
into the address (<literal>ping fe80::1%eth0</literal>).
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-01-28 02:46:16 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The socket handling of the <literal>services.rmilter</literal> module has
|
|
|
|
|
been fixed and refactored. As rmilter doesn't support binding to more than
|
|
|
|
|
one socket, the options <literal>bindUnixSockets</literal> and
|
|
|
|
|
<literal>bindInetSockets</literal> have been replaced by
|
|
|
|
|
<literal>services.rmilter.bindSocket.*</literal>. The default is still a
|
|
|
|
|
unix socket in <literal>/run/rmilter/rmilter.sock</literal>. Refer to the
|
|
|
|
|
options documentation for more information.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-20 22:26:02 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The <literal>fetch*</literal> functions no longer support md5, please use
|
|
|
|
|
sha256 instead.
|
2017-03-20 22:26:02 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 13:27:55 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The dnscrypt-proxy module interface has been streamlined around the
|
|
|
|
|
<option>extraArgs</option> option. Where possible, legacy option
|
|
|
|
|
declarations are mapped to <option>extraArgs</option> but will emit
|
|
|
|
|
warnings. The <option>resolverList</option> has been outright removed: to
|
|
|
|
|
use an unlisted resolver, use the <option>customResolver</option> option.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
torbrowser now stores local state under
|
|
|
|
|
<filename>~/.local/share/tor-browser</filename> by default. Any browser
|
|
|
|
|
profile data from the old location, <filename>~/.torbrowser4</filename>,
|
|
|
|
|
must be migrated manually.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The ihaskell, monetdb, offlineimap and sitecopy services have been
|
|
|
|
|
removed.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
</itemizedlist>
|
|
|
|
|
</section>
|
2016-09-02 08:40:48 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
2017-03-30 19:14:56 +02:00
|
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
|
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
|
|
|
version="5.0"
|
|
|
|
|
xml:id="sec-release-17.03-notable-changes">
|
2018-05-02 01:57:09 +02:00
|
|
|
<title>Other Notable Changes</title>
|
2016-09-02 08:40:48 +02:00
|
|
|
|
2018-05-02 01:57:09 +02:00
|
|
|
<itemizedlist>
|
|
|
|
|
<listitem>
|
2017-02-08 19:36:22 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Module type system have a new extensible option types feature that allow
|
|
|
|
|
to extend certain types, such as enum, through multiple option
|
|
|
|
|
declarations of the same option across multiple modules.
|
2017-02-08 19:36:22 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
<literal>jre</literal> now defaults to GTK+ UI by default. This improves
|
|
|
|
|
visual consistency and makes Java follow system font style, improving the
|
|
|
|
|
situation on HighDPI displays. This has a cost of increased closure size;
|
|
|
|
|
for server and other headless workloads it's recommended to use
|
|
|
|
|
<literal>jre_headless</literal>.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Python 2.6 interpreter and package set have been removed.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-01 11:34:44 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The Python 2.7 interpreter does not use modules anymore. Instead, all
|
|
|
|
|
CPython interpreters now include the whole standard library except for
|
|
|
|
|
`tkinter`, which is available in the Python package set.
|
2017-02-22 15:56:16 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Python 2.7, 3.5 and 3.6 are now built deterministically and 3.4 mostly.
|
|
|
|
|
Minor modifications had to be made to the interpreters in order to
|
|
|
|
|
generate deterministic bytecode. This has security implications and is
|
|
|
|
|
relevant for those using Python in a <literal>nix-shell</literal>. See the
|
|
|
|
|
Nixpkgs manual for details.
|
|
|
|
|
</para>
|
|
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
|
|
|
|
<para>
|
|
|
|
|
The Python package sets now use a fixed-point combinator and the sets are
|
|
|
|
|
available as attributes of the interpreters.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The Python function <literal>buildPythonPackage</literal> has been
|
|
|
|
|
improved and can be used to build from Setuptools source, Flit source, and
|
|
|
|
|
precompiled Wheels.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-20 23:27:16 +01:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
When adding new or updating current Python libraries, the expressions
|
|
|
|
|
should be put in separate files in
|
|
|
|
|
<literal>pkgs/development/python-modules</literal> and called from
|
|
|
|
|
<literal>python-packages.nix</literal>.
|
2017-03-20 23:27:16 +01:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-28 23:07:54 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The dnscrypt-proxy service supports synchronizing the list of public
|
|
|
|
|
resolvers without working DNS resolution. This fixes issues caused by the
|
|
|
|
|
resolver list becoming outdated. It also improves the viability of
|
|
|
|
|
DNSCrypt only configurations.
|
2017-03-28 23:07:54 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Containers using bridged networking no longer lose their connection after
|
|
|
|
|
changes to the host networking.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
ZFS supports pool auto scrubbing.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-03-30 19:14:56 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
The bind DNS utilities (e.g. dig) have been split into their own output
|
|
|
|
|
and are now also available in <literal>pkgs.dnsutils</literal> and it is
|
|
|
|
|
no longer necessary to pull in all of <literal>bind</literal> to use them.
|
2017-03-30 19:14:56 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
<listitem>
|
2017-04-03 22:54:34 +02:00
|
|
|
<para>
|
2018-05-02 01:57:09 +02:00
|
|
|
Per-user configuration was moved from <filename>~/.nixpkgs</filename> to
|
|
|
|
|
<filename>~/.config/nixpkgs</filename>. The former is still valid for
|
|
|
|
|
<filename>config.nix</filename> for backwards compatibility.
|
2017-04-03 22:54:34 +02:00
|
|
|
</para>
|
2018-05-02 01:57:09 +02:00
|
|
|
</listitem>
|
|
|
|
|
</itemizedlist>
|
|
|
|
|
</section>
|
2016-09-02 08:40:48 +02:00
|
|
|
</section>
|
