Eelco Dolstra
efa8fc2b0a
Paranoia
2015-01-15 18:37:55 +01:00
Eelco Dolstra
b9c4569b6b
nixos-install: Create /root with 700 permission
2015-01-15 18:37:55 +01:00
Eelco Dolstra
3ca275d7ba
NixOS containers: Create /root with 700 permission
...
Systemd-nspawn creates /root with 755 permission if it doesn't exist,
which is bad. So we have to create it ourselves before calling
systemd-nspawn.
2015-01-15 17:51:43 +01:00
Eelco Dolstra
24ce7ff3ea
test-instrumentation.nix: Prevent calling a pager
2015-01-15 14:39:29 +01:00
Edward Tjörnhammar
837cfbb9ea
nixos: adding nylon service with uid,gid
2015-01-14 22:08:47 +01:00
William A. Kennington III
8e5ef7da54
nixos/network-interfaces: Fix rstp support
2015-01-14 10:34:28 -08:00
Luca Bruno
804a958663
pam: add pam_wheel
2015-01-14 18:32:08 +01:00
Luca Bruno
2beb43174f
nixos-rebuild: use reload-or-restart for dbus. Closes #5767
...
Now that dbus reload has been moved before restarting units,
the reload may fail if dbus has been stopped before.
The reload-or-restart will reload dbus if it's active,
otherwise start it.
2015-01-14 16:08:47 +01:00
Rob Vermaas
df7923fa82
Merge pull request #5515 from oconnorr/master
...
GCE updates to ntp server and to fetch all ssh keys
2015-01-14 13:19:38 +01:00
Matej Cotman
4e6efec4b4
enlightenment: fix media preview
2015-01-13 14:56:35 +01:00
mokasin
dd6dfde575
Add auto-start option to containers.
2015-01-12 18:26:22 +01:00
Vladimír Čunát
72d2d59cd4
/etc/ssh/ssh_known_hosts: refactor and fix #5612
...
Generating the file was refactored to be completely in nix.
Functionally it should create the same content as before,
only adding the newlines.
CC recent updaters: @aszlig, @rickynils.
2015-01-11 22:14:25 +01:00
Peter Simons
43bae26b33
Merge pull request #5627 from oxij/update-postfix
...
postfix: make 2.11 the default, nixos: update postfix config for 2.11
2015-01-11 11:28:31 +01:00
Arseniy Seroka
4f596fb93f
Revert "zsh: profile-relative functions path"
...
This reverts commit 766207ca1d
.
We need to solve the problem with `environment.profileRelativeEnvVars`.
The best workaround is to make profileRelativeEnvVars prepend paths.
2015-01-10 22:11:13 +03:00
Shea Levy
cca8bae86e
Merge branch 'rngd-fix' of git://github.com/abbradar/nixpkgs
2015-01-08 09:36:29 -05:00
lethalman
908c47b281
Merge pull request #5550 from abbradar/fprintd
...
add fprintd support
2015-01-08 14:58:22 +01:00
William A. Kennington III
dd7efcbf36
java: More default cleanups
2015-01-07 14:55:41 -08:00
William A. Kennington III
c82410eeda
java: Normalize to the default jre / jdk
2015-01-07 14:55:41 -08:00
William A. Kennington III
9a7766e054
nixos/network-interfaces: Add mstpd support for bridges
2015-01-07 14:49:24 -08:00
Peter Simons
24f5b2a1a0
Merge pull request #5619 from oxij/various-changes-2
...
Various (hopefully) small changes
2015-01-07 16:59:10 +01:00
Jan Malakhovski
265c1c1472
postfix: make 2.11 the default, nixos: update postfix config for 2.11
...
postfix 2.11 is much more humane with respect to disk writes since it uses
sockets (which do not change inodes on accesses) instead of fifos (which do).
2015-01-07 15:43:32 +00:00
Jan Malakhovski
b6646f7ba7
nixos: make zsh use fcntl for locking history files by default
...
Without this zsh creates and then unlinks .lock files at each interactive
input line, which is inhumane with respect to disk.
2015-01-07 15:43:01 +00:00
j-keck
3ced0d94ac
doc: use postgresql94
...
update postgresql module doc to use postgresql94 (was postgresql93)
2015-01-07 13:21:18 +01:00
William A. Kennington III
20d2092ff8
nixos/base: Add efi management utilities
2015-01-07 01:52:47 -08:00
Russell O'Connor
d1a58ef7c6
google-compute-image.nix: Try to download all SSH host keys from metadata server.
2015-01-06 12:06:54 -05:00
Nikolay Amiantov
dbc0395b2b
nixos/rngd: some fixes
2015-01-06 17:27:07 +03:00
Russell O'Connor
3251948029
Generate SSH host public key from the private key.
2015-01-05 15:20:55 -05:00
Russell O'Connor
d1cbbff1e3
Call wget directly in fetch-ssh-keys service.
2015-01-05 15:20:55 -05:00
Russell O'Connor
6382e16014
google-compute-image.nix: unconditionally clean up /root/key.pub /root/authorized-keys-metadata
2015-01-05 15:18:02 -05:00
Russell O'Connor
b19ab1f046
google-comute-image.nix: set umask 077 when downloading private keys from the metadata server.
2015-01-05 15:01:49 -05:00
Russell O'Connor
e548a4330d
google-compute-image.nix: use internal google NTP server.
2015-01-05 12:45:23 -05:00
Peter Simons
ea94a6d653
nixos/modules/services/misc/nix-daemon.nix: document meaning of '0' for the buildCores attribute
2015-01-05 15:38:08 +01:00
Rob Vermaas
c5caa853ec
dd-agent: set SSL_CERT_FILE for dogstatsd.
...
(cherry picked from commit c67204dec27a86e2235afb2aebf48bc53dd804d0)
2015-01-05 13:15:22 +01:00
Eelco Dolstra
ae7d79cd61
Fix some bad gids
...
Issue #3727 .
2015-01-05 11:58:17 +01:00
Rob Vermaas
ea9530b5c7
Fix GCE image build.
...
(cherry picked from commit 98af87cd4abb0cd77e8a51cfdf6913a92d088784)
2015-01-05 09:35:35 +01:00
William A. Kennington III
8ec82fcb18
nixos/samba: Allow package version setting
2015-01-03 21:45:16 -08:00
Kirill Elagin
766207ca1d
zsh: profile-relative functions path
...
This is needed mostly for autocompletion.
2015-01-04 02:02:59 +03:00
Nikolay Amiantov
a164a0b4c5
nixos/fprintd: add service and pam support
2015-01-03 19:50:40 +03:00
Domen Kožar
3d7ff07258
fix manual
2015-01-03 16:32:07 +01:00
Domen Kožar
1f523bb23d
clarify things about hashed passwords and mutableUsers
2015-01-02 17:32:56 +01:00
William A. Kennington III
8627110091
icedtea: Make major version nonspecific attrs
2015-01-02 00:24:49 -08:00
Nicolas B. Pierron
816229593a
Merge pull request #5441 from nbp/mkAlias
...
modules: Extract mkAliasDefinition from the rename.nix NixOS module.
2015-01-01 06:59:42 -08:00
Eelco Dolstra
e62cb5585d
Merge pull request #5507 from DamienCassou/systemd-user-timers
...
Add systemd.user.timers
2014-12-30 15:40:43 +01:00
Damien Cassou
dcc93abe74
Add systemd.user.timers
2014-12-30 05:46:36 +01:00
Tobias Geerinckx-Rice
c64257b8e5
Fix user-facing typos (mainly in descriptions)
2014-12-30 03:31:03 +01:00
Jaka Hudoklin
1b19b7a3bf
Merge pull request #5491 from offlinehacker/cadvisor
...
Add cadvisor package and nixos module
2014-12-29 17:58:43 +01:00
Shea Levy
9245516b46
gummiboot-builder.py: run nix with no build-users-group
...
During install, the bootloader script gets run inside a chroot after the
/etc/group bind-mount is unmounted. Since we're not doing any building,
this should be safe, but really nix should just not care if the group
does not exist when no build is needed.
Fixes #5494
2014-12-29 07:09:10 -05:00
Ricardo M. Correia
1d44322d53
grsecurity: Update stable and test patches
...
stable: 3.0-3.14.27-201412211908 -> 3.0-3.14.27-201412280859
test: 3.0-3.17.7-201412211910 -> 3.0-3.18.1-201412281149
2014-12-29 03:00:47 +01:00
Domen Kožar
43af22b2de
Merge pull request #5487 from luke-clifton/lc-btsync-group
...
btsync groups
2014-12-28 20:25:13 +01:00
Jaka Hudoklin
b6198f08e3
nixos: add cadvisor service
2014-12-28 20:21:41 +01:00