270 lines
10 KiB
XML
270 lines
10 KiB
XML
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="sec-release-17.09">
|
|
|
|
<title>Release 17.09 (“Hummingbird”, 2017/09/??)</title>
|
|
|
|
<para>In addition to numerous new and upgraded packages, this release
|
|
has the following highlights: </para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
The GNOME version is now 3.24.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The user handling now keeps track of deallocated UIDs/GIDs. When a user
|
|
or group is revived, this allows it to be allocated the UID/GID it had before.
|
|
A consequence is that UIDs and GIDs are no longer reused.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The module option <option>services.xserver.xrandrHeads</option> now
|
|
causes the first head specified in this list to be set as the primary
|
|
head. Apart from that, it's now possible to also set additional options
|
|
by using an attribute set, for example:
|
|
<programlisting>
|
|
{ services.xserver.xrandrHeads = [
|
|
"HDMI-0"
|
|
{
|
|
output = "DVI-0";
|
|
primary = true;
|
|
monitorConfig = ''
|
|
Option "Rotate" "right"
|
|
'';
|
|
}
|
|
];
|
|
}
|
|
</programlisting>
|
|
This will set the <literal>DVI-0</literal> output to be the primary head,
|
|
even though <literal>HDMI-0</literal> is the first head in the list.
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>The following new services were added since the last release:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para></para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
|
|
<para>When upgrading from a previous release, please be aware of the
|
|
following incompatible changes:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
<literal>aiccu</literal> package was removed. This is due to SixXS
|
|
<link xlink:href="https://www.sixxs.net/main/"> sunsetting</link> its IPv6 tunnel.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
Top-level <literal>idea</literal> package collection was renamed.
|
|
All JetBrains IDEs are now at <literal>jetbrains</literal>.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>flexget</literal>'s state database cannot be upgraded to its
|
|
new internal format, requiring removal of any existing
|
|
<literal>db-config.sqlite</literal> which will be automatically recreated.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The ipfs package now doesn't ignore the <literal>dataDir</literal> option anymore. If you've ever set this option to anything other than the default you'll have to either unset it (so the default gets used) or migrate the old data manually with
|
|
<programlisting>
|
|
dataDir=<valueOfDataDir>
|
|
mv /var/lib/ipfs/.ipfs/* $dataDir
|
|
rmdir /var/lib/ipfs/.ipfs
|
|
</programlisting>
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The following changes apply if the <literal>stateVersion</literal> is changed to 17.09 or higher.
|
|
For <literal>stateVersion = "17.03</literal> or lower the old behavior is preserved.
|
|
</para>
|
|
<para>
|
|
The <literal>postgres</literal> default version was changed from 9.5 to 9.6.
|
|
</para>
|
|
<para>
|
|
The <literal>postgres</literal> superuser name has changed from <literal>root</literal> to <literal>postgres</literal> to more closely follow what other Linux distributions are doing.
|
|
</para>
|
|
<para>
|
|
The <literal>postgres</literal> default <literal>dataDir</literal> has changed from <literal>/var/db/postgres</literal> to <literal>/var/lib/postgresql/$psqlSchema</literal> where $psqlSchema is 9.6 for example.
|
|
</para>
|
|
<para>
|
|
The <literal>mysql</literal> default <literal>dataDir</literal> has changed from <literal>/var/mysql</literal> to <literal>/var/lib/mysql</literal>.
|
|
</para>
|
|
<para>
|
|
Radicale's default package has changed from 1.x to 2.x. Instructions to migrate can be found <link xlink:href="http://radicale.org/1to2/"> here </link>. It is also possible to use the newer version by setting the <literal>package</literal> to <literal>radicale2</literal>, which is done automatically when <literal>stateVersion</literal> is 17.09 or higher. The <literal>extraArgs</literal> option has been added to allow passing the data migration arguments specified in the instructions; see the <filename xlink:href="https://github.com/NixOS/nixpkgs/blob/master/nixos/tests/radicale.nix">radicale.nix</filename> NixOS test for an example migration.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <literal>caddy</literal> service was previously using an extra
|
|
<literal>.caddy</literal> in the data directory specified with the
|
|
<literal>dataDir</literal> option. The contents of the
|
|
<literal>.caddy</literal> directory are now expected to be in the
|
|
<literal>dataDir</literal>.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <literal>ssh-agent</literal> user service is not started by default
|
|
anymore. Use <literal>programs.ssh.startAgent</literal> to enable it if
|
|
needed. There is also a new <literal>programs.gnupg.agent</literal>
|
|
module that creates a <literal>gpg-agent</literal> user service. It can
|
|
also serve as a SSH agent if <literal>enableSSHSupport</literal> is set.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <literal>services.tinc.networks.<name>.listenAddress</literal>
|
|
option had a misleading name that did not correspond to its behavior. It
|
|
now correctly defines the ip to listen for incoming connections on. To
|
|
keep the previous behaviour, use
|
|
<literal>services.tinc.networks.<name>.bindToAddress</literal>
|
|
instead. Refer to the description of the options for more details.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>tlsdate</literal> package and module were removed. This is due to the project
|
|
being dead and not building with openssl 1.1.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>wvdial</literal> package and module were removed. This is due to the project
|
|
being dead and not building with openssl 1.1.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>cc-wrapper</literal>'s setup-hook now exports a number of
|
|
environment variables corresponding to binutils binaries,
|
|
(e.g. <envar>LD</envar>, <envar>STRIP</envar>, <envar>RANLIB</envar>,
|
|
etc). This is done to prevent packages' build systems guessing, which is
|
|
harder to predict, especially when cross-compiling. However, some packages
|
|
have broken due to this—their build systems either not supporting, or
|
|
claiming to support without adequate testing, taking such environment
|
|
variables as parameters.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>services.firefox.syncserver</literal> now runs by default as a
|
|
non-root user. To accomodate this change, the default sqlite database
|
|
location has also been changed. Migration should work automatically.
|
|
Refer to the description of the options for more details.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <literal>compiz</literal> window manager and package was
|
|
removed. The system support had been broken for several years.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
Touchpad support should now be enabled through
|
|
<literal>libinput</literal> as <literal>synaptics</literal> is
|
|
now deprecated. See the option
|
|
<literal>services.xserver.libinput.enable</literal>.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
grsecurity/PaX support has been dropped, following upstream's
|
|
decision to cease free support. See
|
|
<link xlink:href="https://grsecurity.net/passing_the_baton.php">
|
|
upstream's announcement</link> for more information.
|
|
No complete replacement for grsecurity/PaX is available presently.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <literal>gnupg</literal> package used to suffix its programs
|
|
with <literal>2</literal>, like <command>gpg2</command> and
|
|
<command>gpgv2</command>. This suffix has since been dropped,
|
|
and the programs are now simply <command>gpg</command>,
|
|
<command>gpgv</command>, etc.
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>Other notable improvements:</para>
|
|
|
|
<itemizedlist>
|
|
|
|
<listitem>
|
|
<para>
|
|
Modules can now be disabled by using <link
|
|
xlink:href="https://nixos.org/nixpkgs/manual/#sec-replace-modules">
|
|
disabledModules</link>, allowing another to take it's place. This can be
|
|
used to import a set of modules from another channel while keeping the
|
|
rest of the system on a stable release.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
Updated to FreeType 2.7.1, including a new TrueType engine.
|
|
The new engine replaces the Infinality engine which was the default in
|
|
NixOS. The default font rendering settings are now provided by
|
|
fontconfig-penultimate, replacing fontconfig-ultimate; the new defaults
|
|
are less invasive and provide rendering that is more consistent with
|
|
other systems and hopefully with each font designer's intent. Some
|
|
system-wide configuration has been removed from the Fontconfig NixOS
|
|
module where user Fontconfig settings are available.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
ZFS/SPL have been updated to 0.7.0, <literal>zfsUnstable, splUnstable</literal>
|
|
have therefore been removed.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The <option>time.timeZone</option> option now allows the value
|
|
<literal>null</literal> in addition to timezone strings. This value
|
|
allows changing the timezone of a system imperatively using
|
|
<command>timedatectl set-timezone</command>. The default timezone
|
|
is still UTC.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
Nixpkgs overlays may now be specified with a file as well as a directory. The
|
|
value of <literal><nixpkgs-overlays></literal> may be a file, and
|
|
<filename>~/.config/nixpkgs/overlays.nix</filename> can be used instead of the
|
|
<filename>~/.config/nixpkgs/overalys</filename> directory.
|
|
</para>
|
|
<para>
|
|
See the overlays chapter of the Nixpkgs manual for more details.
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<literal>sha256</literal> argument value of
|
|
<literal>dockerTools.pullImage</literal> expression must be
|
|
updated since the mechanism to download the image has been
|
|
changed. Skopeo is now used to pull the image instead of the
|
|
Docker daemon.
|
|
</para>
|
|
</listitem>
|
|
|
|
</itemizedlist>
|
|
|
|
</section>
|