Shea Levy
9245516b46
gummiboot-builder.py: run nix with no build-users-group
...
During install, the bootloader script gets run inside a chroot after the
/etc/group bind-mount is unmounted. Since we're not doing any building,
this should be safe, but really nix should just not care if the group
does not exist when no build is needed.
Fixes #5494
2014-12-29 07:09:10 -05:00
Ricardo M. Correia
1d44322d53
grsecurity: Update stable and test patches
...
stable: 3.0-3.14.27-201412211908 -> 3.0-3.14.27-201412280859
test: 3.0-3.17.7-201412211910 -> 3.0-3.18.1-201412281149
2014-12-29 03:00:47 +01:00
Domen Kožar
43af22b2de
Merge pull request #5487 from luke-clifton/lc-btsync-group
...
btsync groups
2014-12-28 20:25:13 +01:00
Eelco Dolstra
ea9d391bb5
Fix ntpd
...
Since the 4.2.8 upgrade, ntpd is broken on NixOS:
Dec 28 19:06:54 hagbard ntpd[27723]: giving up resolving host 1.nixos.pool.ntp.org: Servname not supported for ai_socktype (-8)
This appears to be because DNS resolution doesn't work in chroots
anymore (due to /etc being missing). So disable chroots for now. It's
probably better to use systemd's containment facilities anyway.
2014-12-28 19:38:45 +01:00
Alexander Kjeldaas
da1f8578b0
Eradicate gzip -9 without -n
2014-12-28 13:45:27 +01:00
Luke Clifton
3c8914f94e
Changed group id to match user id
2014-12-28 19:47:12 +08:00
Luke Clifton
b625c3dd4b
Added group id to ids.nix
2014-12-28 18:10:02 +08:00
Vladimír Čunát
61d9f06760
fix a typo from 2627198b0c
2014-12-28 10:44:50 +01:00
Luke Clifton
0c477eb38f
Documentation update
2014-12-28 17:26:59 +08:00
Luke Clifton
61ff1b2b0a
Moved UMask to correct location
2014-12-28 16:44:27 +08:00
Luke Clifton
5fdd6f6a66
Change umask
2014-12-28 16:39:56 +08:00
William A. Kennington III
2627198b0c
nixos/firewall: Add ipset utility
2014-12-28 00:04:49 -08:00
Luke Clifton
5866a9df03
added group
2014-12-28 13:23:10 +08:00
Luke Clifton
fabcc2cf7b
Added btsync group to btsync user
2014-12-28 13:17:37 +08:00
Vladimír Čunát
3c050d00a5
upower: use newer version by default
...
Tested on KDE4, fixed with xfce, and was used with GNOME before.
CC @lethalman.
I did not test e19, as it won't build, probably due to #5392 @shlevy.
CC maintainer @matejc.
Also removed a forgotten unused patch.
2014-12-27 22:46:46 +01:00
Domen Kožar
ec5fcfa82c
network-manager: specify full path to sytemctl binary
...
(cherry picked from commit af8f76c2568ae9d842716d98673b3639292a920e)
Signed-off-by: Domen Kožar <domen@dev.si>
2014-12-27 11:53:07 +01:00
Bjørn Forsman
0a8623d6a9
nixos/munin: add /var/setuid-wrappers to PATH
...
/var/setuid-wrappers is an extension of the system profile, so it
belongs in PATH for the munin service.
2014-12-25 15:43:51 +01:00
aszlig
c7e3ddf7ff
nixos/synergy: Fix use of the "optional" function.
...
Commit 939edb1
reintroduced autoStart, but instead of creating a list of
units for the wantedBy list with optional it became a list of lists of
units.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-12-24 12:35:57 +01:00
Domen Kožar
a4961f09f6
Merge pull request #5390 from abbradar/nixos-isntall
...
nixos-install: fix -I flag
2014-12-23 18:15:14 +01:00
Igor Pashev
2b91b9b594
Strongswan: updown script uses ip and iptables utilities
2014-12-22 20:20:52 +00:00
Luca Bruno
79209e30b5
nixos: Add -verbose to xserverArgs example
2014-12-22 21:01:12 +01:00
lethalman
50789593df
Merge pull request #5346 from svenkeidel/disable-xserver-verbose-logging
...
disable verbose logging for XServer, fixes #4333
2014-12-22 20:59:06 +01:00
Benno Fünfstück
914b76bad4
services.mpd: use systemd's user option
...
For some reason, mpd fails to open the sound card if using mpd's user
option. Starting mpd directly as the mpd user works for me.
2014-12-22 11:22:14 +00:00
lethalman
d0fdad5f36
Merge pull request #5419 from ehmry/tox-bootstrapd
...
tox-bootstrapd
2014-12-22 11:16:44 +01:00
Nicolas B. Pierron
6a7971bee7
Merge pull request #5416 from nbp/nixos-option-include
...
nixos-option: Support -I option
2014-12-21 15:11:11 -08:00
Nicolas B. Pierron
974edc5056
nixos-option: Use <nixpkgs/nixos> instead of <nixpkgs>.
2014-12-21 01:33:06 +01:00
Emery Hemingway
01910e84f9
nixos: tox-bootstrapd service
2014-12-20 18:20:27 -05:00
Nicolas B. Pierron
82a5f54c0d
nixos-option: Support -I option.
2014-12-20 20:30:19 +01:00
Nicolas B. Pierron
c9682a22ff
nixos-option: Produce nicer error messages in case of typos.
2014-12-20 19:52:28 +01:00
Nicolas B. Pierron
640428d3c5
nixos-option: Handle 'attrsOf submodule' options.
2014-12-20 19:16:43 +01:00
Nicolas B. Pierron
cd2f7ce9f9
nixos-option: Improve error messages to avoid reporting internal location and traces.
2014-12-19 23:00:52 +01:00
Nicolas B. Pierron
b2abfe54b3
nixos-option: Print derivation outPath within attribute sets and list, when the strict mode is used.
2014-12-19 23:00:00 +01:00
Nicolas B. Pierron
9db6a84f0b
nixos-option: Print the outPath of derivation for option values.
2014-12-19 22:33:24 +01:00
Eelco Dolstra
80a85541d5
Typo
2014-12-19 14:38:33 +01:00
Eelco Dolstra
5ad3a02938
Shut up a warning from udev
...
Issue #5260 .
2014-12-19 14:37:50 +01:00
Mathijs Kwik
6e728a42ec
virtualisation.qemuNetworkingOptions -> virtualisation.qemu.networkingOptions
2014-12-19 11:59:00 +01:00
Mathijs Kwik
6cdacdd4a2
nixos/qemu-vm: make networking options configurable
2014-12-19 08:52:06 +01:00
wmertens
a8c726da56
Merge pull request #5378 from benley/mesos
...
mesos-slave: add config option for slave attributes
2014-12-19 08:10:07 +01:00
Evgeny Egorochkin
87610ca0fd
kde4: enable akonadi by default
2014-12-19 08:59:22 +02:00
Evgeny Egorochkin
939edb1873
synergy: restore autostart option.
...
closes #5334
2014-12-19 08:25:23 +02:00
Evgeny Egorochkin
9225af50d0
resurrect torsocks-faster
2014-12-19 08:05:41 +02:00
Evgeny Egorochkin
eb0874d5ff
rename torify to tsocks, to avoid name clashes and make it clear which wrapper library is used
2014-12-19 08:05:41 +02:00
Evgeny Egorochkin
633cc58d5c
torsocks: enable by default if tor client functionality is enabled
2014-12-19 08:05:41 +02:00
Evgeny Egorochkin
824b3b1a99
tor: restore the Privoxy setup, but configure the system Privoxy instead of running a separate instance.
2014-12-19 08:05:41 +02:00
Evgeny Egorochkin
1fe5314dc5
tor: restore strong circuit isolation
2014-12-19 08:05:41 +02:00
Evgeny Egorochkin
da118cf60b
Revert "nixos: Remove torify module"
...
tsocks is still useful because it's less strict
This reverts commit 1b26faeb69
.
2014-12-19 08:05:41 +02:00
Benjamin Staffin
c47cefd05e
nixos/mesos: Parameterize mesos slave attributes
...
Added attributes to nixos/tests/mesos.nix to verify that mesos-slave
attributes work. If the generated attributes are invalid, the daemon
should fail to start.
Change-Id: I5511245add30aba658b1af22cd7355b0bbf5d15c
2014-12-18 14:47:24 -08:00
wmertens
5f7530a1d7
zfs hostId: Instructions to derive from machine-id
2014-12-18 22:52:29 +01:00
Nikolay Amiantov
22eb0e22d3
nixos-install: fix -I flag
2014-12-18 22:43:40 +03:00
aszlig
f7384b8c75
nixos/virtualbox: Revert disable hardening.
...
This reverts commit 5d67b17901
.
The issues have been resolved by ac603e208c
.
Tested this with hostonlyifs and USB support with extension pack.
Conflicts:
nixos/modules/programs/virtualbox-host.nix
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Tested-by: Mateusz Kowalczyk <fuuzetsu@fuuzetsu.co.uk>
2014-12-18 18:18:32 +01:00