Commit graph

78090 commits

Author SHA1 Message Date
aszlig
28b289efa6
chromium: Refactor updater entirely in Nix
The update.sh shell script now is only a call to nix-build, which does
all the hard work of updating the Chromium source channels and the
plugins. It results in a store path with the new sources.nix that
replaces the already existing sources.nix.

Along the way, this has led to a quite massive workaround, which abuses
MD5 collisions to detect whether an URL is existing, because something
like builtins.tryEval (builtins.fetchurl url) unfortunately doesn't
work. Further explanations and implementation details are documented in
the actual implementation.

The drawback of this is that we don't have nice status messages anymore,
but on the upside we have a more robust generation of the sources.nix
file, which now also should work properly on missing upstream
sources/binaries.

This also makes it much easier to implement fetching non-GNU/Linux
versions of Chromium and we have all values from omahaproxy available as
an attribute set (see the csv2nix and channels attributes in the update
attribute).

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-02-26 20:55:17 +01:00
Jude Taylor
f6c3b13c7c ghcjs: pull in ghcjsi branch 2016-02-26 11:27:47 -08:00
zimbatm
26b59efa8a Merge pull request #13491 from grahamc/patch-1
go-1.6: remove the cacert 1.5 patch
2016-02-26 18:58:59 +00:00
Franz Pletz
082cd3edd3 Merge pull request #13473 from grahamc/libssh2-1.7.0
libssh2: 1.6.0 -> 1.7.0
2016-02-26 19:34:54 +01:00
Graham Christensen
8132a5ae76 go-1.6: remove the cacert 1.5 patch
Removed in 58dbaf69b7
2016-02-26 12:32:33 -06:00
zimbatm
2c7e5a6d8e Merge pull request #13434 from spacefrogg/oath-module
config.security.oath: new module
2016-02-26 18:06:28 +00:00
zimbatm
c183117aee Merge pull request #13441 from gilligan/add-galen-package
galen init at 2.2.1
2016-02-26 18:05:40 +00:00
zimbatm
8b4edf10cf Merge pull request #13144 from zimbatm/go-ssl-cleanup
go: remove ssl certs patches
2016-02-26 18:00:44 +00:00
zimbatm
accc1f1484 go: 1.4: disable failing test in sandbox 2016-02-26 18:00:11 +00:00
zimbatm
58dbaf69b7 go: remove ssl certs patches
Those are not needed since we now use a standard location to store our
bundles.

See bfebc7342e
2016-02-26 17:58:58 +00:00
Robin Gloster
e392824fb3 dnsmasq: enable pie hardening 2016-02-26 17:55:51 +00:00
Robin Gloster
62f65d15ca chrony: enable pie hardening 2016-02-26 17:54:46 +00:00
Robin Gloster
87e64f153b cron: enable pie hardening 2016-02-26 17:27:28 +00:00
Charles Strahan
53ea7dee75 emacs: fix priority for ctags
This fixes the previous attempt (in commit 46d1dd5) to make ctags' ctags
override emacs' ctags. The higher the value of the priority attribute,
the higher the priority (see the definition of `buildEnv`).
2016-02-26 12:27:04 -05:00
Robin Gloster
631c09bbe5 checksec: clean up 2016-02-26 17:26:03 +00:00
Robin Gloster
a73762200d socat: enable pie hardening 2016-02-26 16:45:49 +00:00
Robin Gloster
310fa56788 nginx: enable pie hardening 2016-02-26 16:38:26 +00:00
Robin Gloster
b6279950bd openssh: enable pie hardening 2016-02-26 16:30:26 +00:00
Robin Gloster
c045d2de37 signing-party: 2.1 -> 2.2 2016-02-26 16:08:51 +00:00
Robin Gloster
46b0d51636 flow: 0.18 -> 0.22 2016-02-26 15:59:24 +00:00
Robin Gloster
351173c2dd stunnel: 5.29 -> 5.30 2016-02-26 15:51:08 +00:00
Robin Gloster
7412bffd9e self: use default compiler 2016-02-26 15:42:23 +00:00
Michael Raskin
32e954db64 Reverting dependency src for revert 2016-02-26 16:28:08 +01:00
Nikolay Amiantov
c88a06a860 cups service: set path for cups-genppdupdate 2016-02-26 18:27:41 +03:00
Nikolay Amiantov
d9c10d6f56 gutenprint: fix cups and gimp paths
Also disable GIMP support by default to reduce closure
2016-02-26 18:27:41 +03:00
Michael Raskin
66febbdfa7 Temporarily revert LibreOffice update 2016-02-26 16:26:34 +01:00
Peter Simons
2bcec4272f Merge pull request #13480 from phile314/master
uhc: 1.1.9.2 -> 1.1.9.3
2016-02-26 13:18:13 +01:00
zimbatm
3833591d95 Merge pull request #13164 from romildo/fix/eclipse-plugin-cup
eclipse-plugins-cup: fix plugin file names
2016-02-26 11:23:28 +00:00
zimbatm
8d4c2340d3 Merge pull request #13396 from mayflower/pkg/gitlab
gitlab: 8.0.5 -> 8.5.1, service improvements
2016-02-26 11:19:28 +00:00
Domen Kožar
a469681a51 Merge pull request #13365 from abbradar/cups-second-attempt
CUPS update (second attempt)
2016-02-26 11:13:30 +00:00
Philipp Hausmann
fbd857ab72
uhc: 1.1.9.2 -> 1.1.9.3 2016-02-26 12:12:53 +01:00
Domen Kožar
c99d589162 Merge pull request #13116 from kragniz/requests2-2.9.1
requests2: 2.8.1 -> 2.9.1
2016-02-26 11:11:36 +00:00
Domen Kožar
fe9f5dbbbc Merge pull request #6600 from 4z3/tlsdate
tlsdate doesn't build on x86_64-darwin
2016-02-26 10:59:00 +00:00
zimbatm
c86e10c115 Merge pull request #13469 from tg-x/acme-external
simp_le: external_pem.sh plugin is now called external.sh
2016-02-26 10:48:55 +00:00
zimbatm
d8c3a83b5c Merge pull request #13477 from cstrahan/vte-ng
vte-ng: 0.42.1.a -> 0.42.4.a
2016-02-26 10:46:06 +00:00
vbgl
d39595c54f Merge pull request #13404 from knedlsepp/fix-darwin-tcl-tk
Fix darwin tcl tk
2016-02-26 11:38:26 +01:00
Frederik Rietdijk
48085add39 Merge pull request #13461 from FRidh/kcalc
kde5.kcalc: init at 15.12
2016-02-26 11:33:42 +01:00
Franz Pletz
0bbe8e1884 Merge pull request #13454 from grahamc/xerces
xerces-c: 3.1.1 -> 3.1.3
2016-02-26 11:25:25 +01:00
zimbatm
6035c3a136 Merge pull request #9400 from Mathnerd314/package-overrides-fix
all-packages: Apply packageOverrides package-by-package
2016-02-26 10:17:53 +00:00
Franz Pletz
ef0325e940 Merge pull request #13435 from tg-x/calc
calc: init at 2.12.5.3
2016-02-26 11:16:11 +01:00
Franz Pletz
d5a2c4cb05 libinput: Add libwacom dependency
Fixes #13476 & #13147.
2016-02-26 11:03:28 +01:00
aszlig
716b79d3a5
chromium: Provide SHA256s for beta/dev plugins
As stated in the parent commit, the 32bit Chrome package is not
available upstream, so let's at least provide the SHA256 hash for the
64bit package.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-02-26 10:55:51 +01:00
aszlig
459642b8de
chromium/updater: Allow a single plugin arch
Until now, if we have a failure to fetch either the 32bit Debian package
or the 64bit Debian package, neither of these will be put into
sources.nix.

Unfortunately the beta/dev channels do not have a 32bit Debian package,
so even though there is a 64bit Debian package available we don't get
plugins *at* *all*.

This also introduces a nicer error message rather than just failing with
an assertion in fetchurl because we did not provide url/urls.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-02-26 10:55:51 +01:00
José Romildo Malaquias
0e94a1be40 eclipse-plugins-cup: add dependency on the zest plugin 2016-02-26 06:42:04 -03:00
José Romildo Malaquias
205398c427 eclipse-plugin-zest: init at 3.9.101
eclipse-plugins-cup: remove plugins.nix.orig that was wrongly added.
2016-02-26 06:42:04 -03:00
José Romildo Malaquias
ef11f77c8f eclipse-plugins-cup: fix plugin file names 2016-02-26 06:42:04 -03:00
Eelco Dolstra
20682386ca Merge pull request #13472 from doshitan/fix-ec2-data
ec2-data: ensure providing a SSH host key is actually optional
2016-02-26 10:41:44 +01:00
Christoph Hrdinka
bd5e2d723c pcsx2: init at 1.4.0 2016-02-26 10:21:31 +01:00
Franz Pletz
af17efd014 Merge pull request #13466 from benley/git-stree-0.4.5
git-stree: init at 0.4.5
2016-02-26 09:59:47 +01:00
Franz Pletz
db2b0c8406 Merge pull request #13430 from nico202/yarp
yarp (+ libace): init at 2.3.64
2016-02-26 09:29:21 +01:00