Commit graph

174067 commits

Author SHA1 Message Date
Timo Kaufmann
f2569b9116
python.pkgs.baselines: init at 0.1.5 (#58452) 2019-03-27 21:27:22 +00:00
Timo Kaufmann
e7a084bdba
python.pkgs.roboschool: init at 1.0.39 (#58451)
Needs a forked version of bullet.
2019-03-27 21:26:54 +00:00
Silvan Mosberger
a921f8a1d1
Merge pull request #57921 from rnhmjoj/monero
monero-gui: fix missing qml imports
2019-03-27 21:23:06 +01:00
Uli Baum
ea5f0983e7 tahoe-lafs: fix build 2019-03-27 21:13:14 +01:00
aszlig
ada3239253
nixos/release-notes: Add entry about confinement
First of all, the reason I added this to the "highlights" section is
that we want users to be aware of these options, because in the end we
really want to decrease the attack surface of NixOS services and this is
a step towards improving that situation.

The reason why I'm adding this to the changelog of the NixOS 19.03
release instead of 19.09 is that it makes backporting services that use
these options easier. Doing the backport of the confinement module after
the official release would mean that it's not part of the release
announcement and potentially could fall under the radar of most users.

These options and the whole module also do not change anything in
existing services or affect other modules, so they're purely optional.

Adding this "last minute" to the 19.03 release doesn't hurt and is
probably a good preparation for the next months where we hopefully
confine as much services as we can :-)

I also have asked @samueldr and @lheckemann, whether they're okay with
the inclusion in 19.03. While so far only @samueldr has accepted the
change, we can still move the changelog entry to the NixOS 19.09 release
notes in case @lheckemann rejects it.

Signed-off-by: aszlig <aszlig@nix.build>
2019-03-27 21:07:07 +01:00
Graham Christensen
6af317616e
Merge pull request #58431 from alexbiehl/alex/nix-layers
dockerTools: align generated layer archives with docker's output
2019-03-27 15:54:22 -04:00
aszlig
52299bccf5
nixos/confinement: Use PrivateMounts option
So far we had MountFlags = "private", but as @Infinisil has correctly
noticed, there is a dedicated PrivateMounts option, which does exactly
that and is better integrated than providing raw mount flags.

When checking for the reason why I used MountFlags instead of
PrivateMounts, I found that at the time I wrote the initial version of
this module (Mar 12 06:15:58 2018 +0100) the PrivateMounts option didn't
exist yet and has been added to systemd in Jun 13 08:20:18 2018 +0200.

Signed-off-by: aszlig <aszlig@nix.build>
2019-03-27 20:34:32 +01:00
aszlig
861a1cec60
nixos/confinement: Remove handling for StartOnly
Noted by @Infinisil on IRC:

   infinisil: Question regarding the confinement PR
   infinisil: On line 136 you do different things depending on
              RootDirectoryStartOnly
   infinisil: But on line 157 you have an assertion that disallows that
              option being true
   infinisil: Is there a reason behind this or am I missing something

I originally left this in so that once systemd supports that, we can
just flip a switch and remove the assertion and thus support
RootDirectoryStartOnly for our confinement module.

However, this doesn't seem to be on the roadmap for systemd in the
foreseeable future, so I'll just remove this, especially because it's
very easy to add it again, once it is supported.

Signed-off-by: aszlig <aszlig@nix.build>
2019-03-27 20:22:37 +01:00
Sarah Brofeldt
431d8e3038
Merge pull request #58454 from srhb/brig-fix-metrics
brig: Fix build of metrics jobs, cleanup
2019-03-27 20:17:50 +01:00
Väinö Järvelä
d984875aff websocat: Fix on macOS 2019-03-27 14:00:09 -05:00
Sarah Brofeldt
d57fbbe747 brig: Remove unused fetchgx arg 2019-03-27 19:35:42 +01:00
Sarah Brofeldt
1b59764672 brig: Fix callPackage 2019-03-27 19:35:09 +01:00
Maximilian Bosch
315643e12b
Merge pull request #58004 from r-ryantm/auto-update/atlassian-cli
atlassian-cli: 7.8.0 -> 8.0.0
2019-03-27 19:34:05 +01:00
worldofpeace
8137fa520b
Merge pull request #58447 from borisbabic/terminator_fix
terminator: fix missing gobject bindings
2019-03-27 13:40:57 -04:00
Boris Babic
34898d58ca terminator: fix missing gobject bindings
See: https://github.com/NixOS/nixpkgs/issues/56943
2019-03-27 18:00:54 +01:00
worldofpeace
c036b3e4c2
Merge pull request #58443 from dotlambda/cherrypy-18.1.1
python3.pkgs.cherrypy: 18.1.0 -> 18.1.1
2019-03-27 12:29:59 -04:00
Domen Kožar
8559b0a36a Remove yarn2nix, see #20637 (#58424) 2019-03-27 17:16:00 +01:00
Jaka Hudoklin
0d5b6e149d
Merge pull request #58351 from xtruder/pkgs/rippled/1.2.1
rippled: 1.2.0 -> 1.2.1
2019-03-27 17:13:16 +01:00
Robert Schütz
3d4286e1a8 python3.pkgs.cherrypy: 18.1.0 -> 18.1.1 2019-03-27 16:48:55 +01:00
Robert Schütz
489d7351da python.pkgs.cherrypy: spilt expression in two 2019-03-27 16:48:08 +01:00
Dmitry Kalinkin
9f889a4da3
Merge pull request #56440 from veprbl/pr/qt5_qtwebengine_darwin_fix2
qt5.qtwebengine: fix on darwin (again)
2019-03-27 11:21:47 -04:00
Maximilian Bosch
3fc3096da8
Merge pull request #58432 from aanderse/mailcatcher
nixos/mailcatcher: init module for existing package
2019-03-27 16:11:15 +01:00
R. RyanTM
7abf9be865 yoshimi: 1.5.10.1 -> 1.5.10.2 (#57517)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/yoshimi/versions
2019-03-27 15:53:39 +01:00
R. RyanTM
9e281d5eed vbam: 2.1.0 -> 2.1.1 (#57499)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/visualboyadvance-m/versions
2019-03-27 15:52:51 +01:00
R. RyanTM
6943a854d4 synthv1: 0.9.4 -> 0.9.5 (#57487)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/synthv1/versions
2019-03-27 15:52:01 +01:00
R. RyanTM
3efcc923b3 lynis: 2.7.1 -> 2.7.2 (#57310)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/lynis/versions
2019-03-27 15:49:48 +01:00
Will Dietz
ba31c45cbb microcodeIntel: 20180807a -> 20190312 (from intel github)
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/microcode-20190312/releasenote#L85
2019-03-27 09:49:10 -05:00
R. RyanTM
d7c393239d mcelog: 161 -> 162 (#57317)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/mcelog/versions
2019-03-27 15:48:44 +01:00
R. RyanTM
471dedff45 samplv1: 0.9.4 -> 0.9.5 (#57480)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/samplv1/versions
2019-03-27 15:47:20 +01:00
R. RyanTM
829ed264c8 python37Packages.cassandra-driver: 3.16.0 -> 3.17.0 (#57388)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-cassandra-driver/versions
2019-03-27 15:46:02 +01:00
R. RyanTM
4442cd8a72 padthv1: 0.9.4 -> 0.9.5 (#57353)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/padthv1/versions
2019-03-27 15:44:51 +01:00
R. RyanTM
1b73fd1954 paml: 4.9h -> 4.9i (#57354)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/paml/versions
2019-03-27 15:44:21 +01:00
R. RyanTM
b598b453d7 polar-bookshelf: 1.12.0 -> 1.13.10 (#57370)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/polar-bookshelf/versions
2019-03-27 15:42:49 +01:00
R. RyanTM
fe99c0424f ocamlPackages.ocaml_extlib: 1.7.5 -> 1.7.6
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/ocaml4.06.1-extlib/versions
2019-03-27 15:29:13 +01:00
Tim Steinbach
95f568b9bd
linux: 5.0.4 -> 5.0.5 2019-03-27 10:09:55 -04:00
Tim Steinbach
ec83ff060e
linux: 4.19.31 -> 4.19.32 2019-03-27 10:09:43 -04:00
Tim Steinbach
e3bee73c18
linux: 4.14.108 -> 4.14.109 2019-03-27 10:09:31 -04:00
Tim Steinbach
ebd253309e
linux: 4.9.165 -> 4.9.166 2019-03-27 10:09:03 -04:00
Aaron Andersen
c99ea1c203 nixos/mailcatcher: add nixos test 2019-03-27 09:56:46 -04:00
Michael Raskin
947421fbbc
Merge pull request #58372 from dtzWill/update/bdf2psf-1.191
bdf2psf: 1.190 -> 1.191
2019-03-27 13:52:11 +00:00
Vincent Laporte
f5f8d85419
Merge pull request #58435 from rixed/ocaml-syslog-also-opt
ocaml-syslog: fix missing cmxa file
2019-03-27 14:43:24 +01:00
Cedric Cellier
b3876e522e ocaml-syslog: fix missing cmxa file
Makefile does not produce native library by default.
2019-03-27 14:38:02 +01:00
Will Dietz
7bdbdd248f
Merge pull request #58371 from dtzWill/update/mkv-32
mkvtoolnix,libmatroska,libebml: updates
2019-03-27 08:37:41 -05:00
Will Dietz
ef3801b418
Merge pull request #58252 from dtzWill/feature/manrope
manrope: init at 3
2019-03-27 08:37:11 -05:00
Will Dietz
7f583dfef8
Merge pull request #57935 from dtzWill/update/electron-2019-03
electron{,-3}: 2019-03 updates
2019-03-27 08:35:32 -05:00
Aaron Andersen
395ec8c0d4 nixos/mailcatcher: init module for existing package 2019-03-27 09:15:47 -04:00
Will Dietz
40f9083c45 oxipng: 2.2.0 -> 2.2.1 2019-03-27 08:13:45 -05:00
Cedric Cellier
1777055209 ocamlPackages.stdint: 0.5.0 -> 0.5.1 2019-03-27 13:53:58 +01:00
Robert Schütz
5f47ad0f8a home-assistant: 0.90.1 -> 0.90.2 2019-03-27 12:46:51 +01:00
Michael Weiss
c4eff69dca
Merge pull request #58215 from primeos/iputils
iputils: 20180629 -> 20190324
2019-03-27 12:23:56 +01:00