Commit graph

286728 commits

Author SHA1 Message Date
Luke Granger-Brown
dfd8ae4ca0
Merge pull request #121280 from aanderse/redmine
redmine: 4.2.0 -> 4.2.1
2021-05-03 10:40:33 +01:00
Luke Granger-Brown
6ab0d3de13
Merge pull request #121346 from Shados/dante-update-1.4.3
dante: 1.4.2 -> 1.4.3
2021-05-03 10:30:23 +01:00
Luke Granger-Brown
cc406e5a05
Merge pull request #121348 from alyssais/cloud-hypervisor
cloud-hypervisor: 0.14.1 -> 15.0
2021-05-03 10:30:00 +01:00
Luke Granger-Brown
2f06f57871
Merge pull request #120595 from cstrahan/rset
rset: init at 2.1
2021-05-03 10:27:46 +01:00
Luke Granger-Brown
d721ebe9bd
Merge pull request #120798 from eduardosm/python-poppler-qt5
pythonPackages.poppler-qt5: 0.24.2 -> 21.1.0
2021-05-03 10:16:50 +01:00
Luke Granger-Brown
991a93e1f0
Merge pull request #118301 from siriobalmelli-foss/fix/python3Packages.beancount_docverif
python3Packages.beancount_docverif: add build dependency
2021-05-03 10:15:16 +01:00
Luke Granger-Brown
d6fc78b4d6
Merge pull request #120890 from 06kellyjac/tektoncd-cli
tektoncd-cli: 0.17.2 -> 0.18.0
2021-05-03 10:14:22 +01:00
Gabriel Ebner
62458574e3
Merge pull request #121361 from r-ryantm/auto-update/lean
lean: 3.29.0 -> 3.30.0
2021-05-03 11:13:53 +02:00
Luke Granger-Brown
bd90c95c8b
Merge pull request #120449 from SCOTT-HAMILTON/googleearth-pro
googleearth-pro: fix xkb keyboard and use nixpkgs libs
2021-05-03 10:13:34 +01:00
Luke Granger-Brown
4775798b80
Merge pull request #119510 from expipiplus1/joe-mx-puppet-discord
mx-puppet-discord: init at 2021-01-22
2021-05-03 10:12:45 +01:00
Luke Granger-Brown
4b42da3d85
Merge pull request #120791 from mweinelt/babeld
babeld: 1.9.2 -> 1.10
2021-05-03 10:00:12 +01:00
Luke Granger-Brown
10a0ec1180
Merge pull request #120742 from fabaff/karton-autoit-ripper
python3Packages.karton-autoit-ripper: init at 1.0.0
2021-05-03 09:59:21 +01:00
Fabian Affolter
952257c35d
Merge pull request #121478 from dotlambda/metadata-cleaner-1.0.5
metadata-cleaner: 1.0.4 -> 1.0.5
2021-05-03 10:58:46 +02:00
Michele Guerini Rocco
e5bbb1cf33
Merge pull request #121539 from lukegb/custom-ca-debug
nixos/tests/custom-ca: fix by setting Content-Type
2021-05-03 10:49:57 +02:00
Luke Granger-Brown
d922cad4d6
Merge pull request #119172 from midchildan/package/trafficserver
nixos/trafficserver: init
2021-05-03 09:48:07 +01:00
Luke Granger-Brown
d688023a47
Merge pull request #120244 from Flakebi/rgp
rgp: 1.9 -> 1.10
2021-05-03 09:45:08 +01:00
Domen Kožar
4079fe7473
Merge pull request #121515 from siraben/coq-hydra
top-level/coq-packages: remove dontDistribute
2021-05-03 10:38:41 +02:00
Luke Granger-Brown
5fddb1b015
Merge pull request #121561 from JesusMtnez/slack
slack: 4.14.0 -> 4.15.0
2021-05-03 09:35:55 +01:00
Fabian Affolter
5f59141ba8
Merge pull request #121537 from Mindavi/graphene/fix-compilation
graphene: fix build by allowing newer versions of aniso8601
2021-05-03 08:41:05 +02:00
Fabian Affolter
740310521a
Merge pull request #121325 from r-ryantm/auto-update/librespeed-cli
librespeed-cli: 1.0.7 -> 1.0.8
2021-05-03 08:37:33 +02:00
stigtsp
d422f9a23d
Merge pull request #121566 from midchildan/update/exiftool
perlPackages.ImageExifTool: apply fix for CVE-2021-22204
2021-05-03 08:28:31 +02:00
Austin Seipp
b3676834ca
Merge pull request #121544 from petabyteboy/feature/bpftools
bpftools: build bpf_asm, bpf_dbg
2021-05-03 00:46:37 -05:00
midchildan
dea7f56b5d
perlPackages.ImageExifTool: apply fix for CVE-2021-22204 2021-05-03 14:46:13 +09:00
Daniël de Kok
639730bd11
Merge pull request #121475 from danieldk/makemkv-ffmpeg
makemkv: switch from ffmpeg_3 to ffmpeg
2021-05-03 07:43:25 +02:00
Otavio Salvador
37bdc088ef cargo-msrv: init at 0.4.0
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2021-05-02 22:02:44 -07:00
Mario Rodas
ed22da947c
Merge pull request #121554 from r-ryantm/auto-update/go-tools
go-tools: 2020.2.3 -> 2020.2.4
2021-05-02 23:52:13 -05:00
Mario Rodas
6570482b44
Merge pull request #121358 from r-ryantm/auto-update/grpcurl
grpcurl: 1.8.0 -> 1.8.1
2021-05-02 23:48:55 -05:00
JesusMtnez
4eb7c561e3
slack: 4.14.0 -> 4.15.0 2021-05-03 06:44:16 +02:00
R. RyanTM
25fd0dde19 go-tools: 2020.2.3 -> 2020.2.4 2021-05-03 03:34:08 +00:00
Ben Siraphob
4ec2272826 top-level/coq-packages: remove dontDistribute
In the GitHub discussion of 527bad18d0,
it was decided to allow Hydra to build coqPackages.
2021-05-03 09:10:37 +07:00
Martin Weinelt
d0dc38c19f
Merge pull request #121525 from primeos/glances
glances: 3.1.6.2 -> 3.1.7
2021-05-03 03:23:21 +02:00
nixinator
d5a0b50f26 methane: init at 2.0.1 2021-05-02 18:12:31 -07:00
nixinator
11bb46fdc6 clanlib: init at 4.1.0
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-05-02 18:12:31 -07:00
Robert Schütz
280c8cf540
py3c: fix build with darwin (#121447) 2021-05-03 02:04:29 +02:00
Milan Pässler
c4bd0719e3
bpftools: build bpf_asm, bpf_dbg
I needed some other bpf-related tools located in the kernel source tree,
so I hijacked the bpftool package, renamed it to bpftools and added
those programs.
2021-05-03 00:59:50 +02:00
Martin Weinelt
d67fc76603
Merge pull request #120536 from mweinelt/mosquitto 2021-05-03 00:41:21 +02:00
Martin Weinelt
fb5b00d2eb
Merge pull request #120526 from mweinelt/home-assistant 2021-05-03 00:35:50 +02:00
Martin Weinelt
f41349d30d
nixos/home-assistant: Restart systemd unit on restart service
Home-assistant through its `--runner` commandline flag supports sending
exit code 100 when the `homeassistant.restart` service is called.

With `RestartForceExitStatus` we can listen for that specific exit code
and restart the whole systemd unit, providing an actual clean restart
with fresh processes. Additional treat exit code 100 as a successful
termination.
2021-05-03 00:21:25 +02:00
Martin Weinelt
1dbb60f562
nixos/tests/home-assistant: update maintainership to home-assistant team 2021-05-03 00:21:25 +02:00
Martin Weinelt
8ab7fc1107
nixos/tests/home-assistant: test capability passing
Configures the emulated_hue component and expects CAP_NET_BIND_SERVICE
to be passed in order to be able to bind to 80/tcp.

Also print the systemd security analysis, so we can spot changes more
quickly.
2021-05-03 00:21:25 +02:00
Martin Weinelt
7d09d7f571
nixos/home-assistant: harden systemd service
This is what is still exposed, and it should still allow things to work
as usual.

✗ PrivateNetwork=                    Service has access to the host's …      0.5
✗ RestrictAddressFamilies=~AF_(INET… Service may allocate Internet soc…      0.3
✗ DeviceAllow=                       Service has a device ACL with som…      0.1
✗ IPAddressDeny=                     Service does not define an IP add…      0.2
✗ PrivateDevices=                    Service potentially has access to…      0.2
✗ PrivateUsers=                      Service has access to other users       0.2
✗ SystemCallFilter=~@resources       System call allow list defined fo…      0.2
✗ RootDirectory=/RootImage=          Service runs within the host's ro…      0.1
✗ SupplementaryGroups=               Service runs with supplementary g…      0.1
✗ RestrictAddressFamilies=~AF_UNIX   Service may allocate local sockets      0.1

→ Overall exposure level for home-assistant.service: 1.6 OK :-)

This can grow to as much as ~1.9 if you use one of the bluetooth or nmap
trackers or the emulated_hue component, all of which required elevated
permisssions.
2021-05-03 00:21:24 +02:00
Mario Rodas
8b0515eb9a
pngquant: 2.12.5 -> 2.14.1 (#121470) 2021-05-02 23:59:08 +02:00
Luke Granger-Brown
da000ae239 nixos/tests/custom-ca: fix by setting Content-Type
This test was failing because Firefox was displaying a download prompt
rather than the page content, presumably because mumble mumble
content-type sniffing.

By explicitly setting a content-type, the test now passes.
2021-05-02 21:38:56 +00:00
Rick van Schijndel
742adf762b graphene: fix build by allowing newer versions of aniso8601
All tests seem to pass, which gives some confidence that this is ok.
2021-05-02 22:56:53 +02:00
Martin Weinelt
d942d4473d neovim, neovimUtils, neovim-qt: drop python2 support
In 2a00e53bd pynvim support for python2 was disabled, this broke the
neovim build. I really think it is time to let go of python2 support in
neovim.
2021-05-02 22:43:53 +02:00
R. RyanTM
f5e695bf3a
kubelogin-oidc: 1.23.0 -> 1.23.1 (#121440) 2021-05-02 16:39:45 -04:00
Jonathan Ringer
a060b84b32 vscod{e,ium}-fhs: add top-level aliases, add description 2021-05-02 13:38:52 -07:00
Jonathan Ringer
9bd292c929 vscod{e,ium}: Add fhs passthru 2021-05-02 13:38:52 -07:00
Jonathan Ringer
73a0b6c826 buildFHSUserEnvBubblewrap: add dieWithParent option, and /etc/nix
Allows for processes which fork to not be immediately
killed when the parent process dies.
2021-05-02 13:38:52 -07:00
Luke Granger-Brown
4518794ee5
Merge pull request #121534 from lukegb/bogus-mk2
tela-icon-theme: more changes to change the hash
2021-05-02 21:25:34 +01:00