491 lines
19 KiB
XML
491 lines
19 KiB
XML
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
version="5.0"
|
|
xml:id="sec-release-15.09">
|
|
|
|
<title>Release 15.09 (“Dingo”, 2015/09/30)</title>
|
|
|
|
<para>In addition to numerous new and upgraded packages, this release
|
|
has the following highlights:</para>
|
|
|
|
<itemizedlist>
|
|
|
|
<listitem>
|
|
<para>The <link xlink:href="http://haskell.org/">Haskell</link>
|
|
packages infrastructure has been re-designed from the ground up
|
|
("Haskell NG"). NixOS now distributes the latest version
|
|
of every single package registered on <link
|
|
xlink:href="http://hackage.haskell.org/">Hackage</link> -- well in
|
|
excess of 8,000 Haskell packages. Detailed instructions on how to
|
|
use that infrastructure can be found in the <link
|
|
xlink:href="http://nixos.org/nixpkgs/manual/#users-guide-to-the-haskell-infrastructure">User's
|
|
Guide to the Haskell Infrastructure</link>. Users migrating from an
|
|
earlier release may find helpful information below, in the list of
|
|
backwards-incompatible changes. Furthermore, we distribute 51(!)
|
|
additional Haskell package sets that provide every single <link
|
|
xlink:href="http://www.stackage.org/">LTS Haskell</link> release
|
|
since version 0.0 as well as the most recent <link
|
|
xlink:href="http://www.stackage.org/">Stackage Nightly</link>
|
|
snapshot. The announcement <link
|
|
xlink:href="http://lists.science.uu.nl/pipermail/nix-dev/2015-September/018138.html">"Full
|
|
Stackage Support in Nixpkgs"</link> gives additional
|
|
details.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Nix has been updated to version 1.10, which among other
|
|
improvements enables cryptographic signatures on binary caches for
|
|
improved security.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>You can now keep your NixOS system up to date automatically
|
|
by setting
|
|
|
|
<programlisting>
|
|
system.autoUpgrade.enable = true;
|
|
</programlisting>
|
|
|
|
This will cause the system to periodically check for updates in
|
|
your current channel and run <command>nixos-rebuild</command>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>This release is based on Glibc 2.21, GCC 4.9 and Linux
|
|
3.18.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>GNOME has been upgraded to 3.16.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Xfce has been upgraded to 4.12.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>KDE 5 has been upgraded to KDE Frameworks 5.10,
|
|
Plasma 5.3.2 and Applications 15.04.3.
|
|
KDE 4 has been updated to kdelibs-4.14.10.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>E19 has been upgraded to 0.16.8.15.
|
|
</para>
|
|
</listitem>
|
|
|
|
</itemizedlist>
|
|
|
|
|
|
<para>The following new services were added since the last release:
|
|
|
|
<itemizedlist>
|
|
<listitem><para><literal>services/mail/exim.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/apache-kafka.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/canto-daemon.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/confd.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/devmon.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/gitit.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/ihaskell.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/mbpfan.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/mediatomb.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/mwlib.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/parsoid.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/plex.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/ripple-rest.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/ripple-data-api.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/subsonic.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/misc/sundtek.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/monitoring/cadvisor.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/monitoring/das_watchdog.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/monitoring/grafana.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/monitoring/riemann-tools.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/monitoring/teamviewer.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/network-filesystems/u9fs.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/aiccu.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/asterisk.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/bird.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/charybdis.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/docker-registry-server.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/fan.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/firefox/sync-server.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/gateone.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/heyefi.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/i2p.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/lambdabot.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/mstpd.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/nix-serve.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/nylon.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/racoon.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/skydns.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/shout.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/softether.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/sslh.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/tinc.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/tlsdated.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/tox-bootstrapd.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/tvheadend.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/networking/zerotierone.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/scheduling/marathon.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/security/fprintd.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/security/hologram.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/security/munge.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/system/cloud-init.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/web-servers/shellinabox.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/web-servers/uwsgi.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/x11/unclutter.nix</literal></para></listitem>
|
|
<listitem><para><literal>services/x11/display-managers/sddm.nix</literal></para></listitem>
|
|
<listitem><para><literal>system/boot/coredump.nix</literal></para></listitem>
|
|
<listitem><para><literal>system/boot/loader/loader.nix</literal></para></listitem>
|
|
<listitem><para><literal>system/boot/loader/generic-extlinux-compatible</literal></para></listitem>
|
|
<listitem><para><literal>system/boot/networkd.nix</literal></para></listitem>
|
|
<listitem><para><literal>system/boot/resolved.nix</literal></para></listitem>
|
|
<listitem><para><literal>system/boot/timesyncd.nix</literal></para></listitem>
|
|
<listitem><para><literal>tasks/filesystems/exfat.nix</literal></para></listitem>
|
|
<listitem><para><literal>tasks/filesystems/ntfs.nix</literal></para></listitem>
|
|
<listitem><para><literal>tasks/filesystems/vboxsf.nix</literal></para></listitem>
|
|
<listitem><para><literal>virtualisation/virtualbox-host.nix</literal></para></listitem>
|
|
<listitem><para><literal>virtualisation/vmware-guest.nix</literal></para></listitem>
|
|
<listitem><para><literal>virtualisation/xen-dom0.nix</literal></para></listitem>
|
|
</itemizedlist>
|
|
</para>
|
|
|
|
|
|
<para>When upgrading from a previous release, please be aware of the
|
|
following incompatible changes:
|
|
|
|
<itemizedlist>
|
|
|
|
<listitem><para><command>sshd</command> no longer supports DSA and ECDSA
|
|
host keys by default. If you have existing systems with such host keys
|
|
and want to continue to use them, please set
|
|
|
|
<programlisting>
|
|
system.stateVersion = "14.12";
|
|
</programlisting>
|
|
|
|
The new option <option>system.stateVersion</option> ensures that
|
|
certain configuration changes that could break existing systems (such
|
|
as the <command>sshd</command> host key setting) will maintain
|
|
compatibility with the specified NixOS release. NixOps sets the state
|
|
version of existing deployments automatically.</para></listitem>
|
|
|
|
<listitem><para><command>cron</command> is no longer enabled by
|
|
default, unless you have a non-empty
|
|
<option>services.cron.systemCronJobs</option>. To force
|
|
<command>cron</command> to be enabled, set
|
|
<option>services.cron.enable = true</option>.</para></listitem>
|
|
|
|
<listitem><para>Nix now requires binary caches to be cryptographically
|
|
signed. If you have unsigned binary caches that you want to continue
|
|
to use, you should set <option>nix.requireSignedBinaryCaches =
|
|
false</option>.</para></listitem>
|
|
|
|
<listitem><para>Steam now doesn't need root rights to work. Instead of using
|
|
<literal>*-steam-chrootenv</literal>, you should now just run <literal>steam</literal>.
|
|
<literal>steamChrootEnv</literal> package was renamed to <literal>steam</literal>,
|
|
and old <literal>steam</literal> package -- to <literal>steamOriginal</literal>.
|
|
</para></listitem>
|
|
|
|
<listitem><para>CMPlayer has been renamed to bomi upstream. Package
|
|
<literal>cmplayer</literal> was accordingly renamed to
|
|
<literal>bomi</literal> </para></listitem>
|
|
|
|
<listitem><para>Atom Shell has been renamed to Electron upstream. Package <literal>atom-shell</literal>
|
|
was accordingly renamed to <literal>electron</literal>
|
|
</para></listitem>
|
|
|
|
<listitem><para>Elm is not released on Hackage anymore. You should now use <literal>elmPackages.elm</literal>
|
|
which contains the latest Elm platform.</para></listitem>
|
|
|
|
<listitem>
|
|
<para>The CUPS printing service has been updated to version
|
|
<literal>2.0.2</literal>. Furthermore its systemd service has been
|
|
renamed to <literal>cups.service</literal>.</para>
|
|
|
|
<para>Local printers are no longer shared or advertised by
|
|
default. This behavior can be changed by enabling
|
|
<option>services.printing.defaultShared</option> or
|
|
<option>services.printing.browsing</option> respectively.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
The VirtualBox host and guest options have been named more
|
|
consistently. They can now found in
|
|
<option>virtualisation.virtualbox.host.*</option> instead of
|
|
<option>services.virtualboxHost.*</option> and
|
|
<option>virtualisation.virtualbox.guest.*</option> instead of
|
|
<option>services.virtualboxGuest.*</option>.
|
|
</para>
|
|
|
|
<para>
|
|
Also, there now is support for the <literal>vboxsf</literal> file
|
|
system using the <option>fileSystems</option> configuration
|
|
attribute. An example of how this can be used in a configuration:
|
|
|
|
<programlisting>
|
|
fileSystems."/shiny" = {
|
|
device = "myshinysharedfolder";
|
|
fsType = "vboxsf";
|
|
};
|
|
</programlisting>
|
|
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
"<literal>nix-env -qa</literal>" no longer discovers
|
|
Haskell packages by name. The only packages visible in the global
|
|
scope are <literal>ghc</literal>, <literal>cabal-install</literal>,
|
|
and <literal>stack</literal>, but all other packages are hidden. The
|
|
reason for this inconvenience is the sheer size of the Haskell
|
|
package set. Name-based lookups are expensive, and most
|
|
<literal>nix-env -qa</literal> operations would become much slower
|
|
if we'd add the entire Hackage database into the top level attribute
|
|
set. Instead, the list of Haskell packages can be displayed by
|
|
running:
|
|
</para>
|
|
<programlisting>
|
|
nix-env -f "<nixpkgs>" -qaP -A haskellPackages
|
|
</programlisting>
|
|
<para>
|
|
Executable programs written in Haskell can be installed with:
|
|
</para>
|
|
<programlisting>
|
|
nix-env -f "<nixpkgs>" -iA haskellPackages.pandoc
|
|
</programlisting>
|
|
<para>
|
|
Installing Haskell <emphasis>libraries</emphasis> this way, however, is no
|
|
longer supported. See the next item for more details.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
Previous versions of NixOS came with a feature called
|
|
<literal>ghc-wrapper</literal>, a small script that allowed GHC to
|
|
transparently pick up on libraries installed in the user's profile. This
|
|
feature has been deprecated; <literal>ghc-wrapper</literal> was removed
|
|
from the distribution. The proper way to register Haskell libraries with
|
|
the compiler now is the <literal>haskellPackages.ghcWithPackages</literal>
|
|
function. The <link
|
|
xlink:href="http://nixos.org/nixpkgs/manual/#users-guide-to-the-haskell-infrastructure">User's
|
|
Guide to the Haskell Infrastructure</link> provides more information about
|
|
this subject.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
All Haskell builds that have been generated with version 1.x of
|
|
the <literal>cabal2nix</literal> utility are now invalid and need
|
|
to be re-generated with a current version of
|
|
<literal>cabal2nix</literal> to function. The most recent version
|
|
of this tool can be installed by running
|
|
<literal>nix-env -i cabal2nix</literal>.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
The <literal>haskellPackages</literal> set in Nixpkgs used to have a
|
|
function attribute called <literal>extension</literal> that users
|
|
could override in their <literal>~/.nixpkgs/config.nix</literal>
|
|
files to configure additional attributes, etc. That function still
|
|
exists, but it's now called <literal>overrides</literal>.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
The OpenBLAS library has been updated to version
|
|
<literal>0.2.14</literal>. Support for the
|
|
<literal>x86_64-darwin</literal> platform was added. Dynamic
|
|
architecture detection was enabled; OpenBLAS now selects
|
|
microarchitecture-optimized routines at runtime, so optimal
|
|
performance is achieved without the need to rebuild OpenBLAS
|
|
locally. OpenBLAS has replaced ATLAS in most packages which use an
|
|
optimized BLAS or LAPACK implementation.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
The <literal>phpfpm</literal> is now using the default PHP version
|
|
(<literal>pkgs.php</literal>) instead of PHP 5.4 (<literal>pkgs.php54</literal>).
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
The <literal>locate</literal> service no longer indexes the Nix store
|
|
by default, preventing packages with potentially numerous versions from
|
|
cluttering the output. Indexing the store can be activated by setting
|
|
<option>services.locate.includeStore = true</option>.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
The Nix expression search path (<envar>NIX_PATH</envar>) no longer
|
|
contains <filename>/etc/nixos/nixpkgs</filename> by default. You
|
|
can override <envar>NIX_PATH</envar> by setting
|
|
<option>nix.nixPath</option>.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
Python 2.6 has been marked as broken (as it no longer recieves
|
|
security updates from upstream).
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
Any use of module arguments such as <varname>pkgs</varname> to access
|
|
library functions, or to define <literal>imports</literal> attributes
|
|
will now lead to an infinite loop at the time of the evaluation.
|
|
</para>
|
|
|
|
<para>
|
|
In case of an infinite loop, use the <command>--show-trace</command>
|
|
command line argument and read the line just above the error message.
|
|
|
|
<screen>
|
|
$ nixos-rebuild build --show-trace
|
|
…
|
|
while evaluating the module argument `pkgs' in "/etc/nixos/my-module.nix":
|
|
infinite recursion encountered
|
|
</screen>
|
|
</para>
|
|
|
|
|
|
<para>
|
|
Any use of <literal>pkgs.lib</literal>, should be replaced by
|
|
<varname>lib</varname>, after adding it as argument of the module. The
|
|
following module
|
|
|
|
<programlisting>
|
|
{ config, pkgs, ... }:
|
|
|
|
with pkgs.lib;
|
|
|
|
{
|
|
options = {
|
|
foo = mkOption { … };
|
|
};
|
|
config = mkIf config.foo { … };
|
|
}
|
|
</programlisting>
|
|
|
|
should be modified to look like:
|
|
|
|
<programlisting>
|
|
{ config, pkgs, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
{
|
|
options = {
|
|
foo = mkOption { <replaceable>option declaration</replaceable> };
|
|
};
|
|
config = mkIf config.foo { <replaceable>option definition</replaceable> };
|
|
}
|
|
</programlisting>
|
|
</para>
|
|
|
|
<para>
|
|
When <varname>pkgs</varname> is used to download other projects to
|
|
import their modules, and only in such cases, it should be replaced by
|
|
<literal>(import <nixpkgs> {})</literal>. The following module
|
|
|
|
<programlisting>
|
|
{ config, pkgs, ... }:
|
|
|
|
let
|
|
myProject = pkgs.fetchurl {
|
|
src = <replaceable>url</replaceable>;
|
|
sha256 = <replaceable>hash</replaceable>;
|
|
};
|
|
in
|
|
|
|
{
|
|
imports = [ "${myProject}/module.nix" ];
|
|
}
|
|
</programlisting>
|
|
|
|
should be modified to look like:
|
|
|
|
<programlisting>
|
|
{ config, pkgs, ... }:
|
|
|
|
let
|
|
myProject = (import <nixpkgs> {}).fetchurl {
|
|
src = <replaceable>url</replaceable>;
|
|
sha256 = <replaceable>hash</replaceable>;
|
|
};
|
|
in
|
|
|
|
{
|
|
imports = [ "${myProject}/module.nix" ];
|
|
}
|
|
</programlisting>
|
|
</para>
|
|
|
|
</listitem>
|
|
|
|
</itemizedlist>
|
|
</para>
|
|
|
|
|
|
<para>Other notable improvements:
|
|
|
|
<itemizedlist>
|
|
|
|
<listitem><para>The nixos and nixpkgs channels were unified,
|
|
so one <emphasis>can</emphasis> use <literal>nix-env -iA nixos.bash</literal>
|
|
instead of <literal>nix-env -iA nixos.pkgs.bash</literal>.
|
|
See <link xlink:href="https://github.com/NixOS/nixpkgs/commit/2cd7c1f198">the commit</link> for details.
|
|
</para></listitem>
|
|
|
|
<listitem>
|
|
<para>
|
|
Users running an SSH server who worry about the quality of their
|
|
<literal>/etc/ssh/moduli</literal> file with respect to the
|
|
<link
|
|
xlink:href="https://stribika.github.io/2015/01/04/secure-secure-shell.html">vulnerabilities
|
|
discovered in the Diffie-Hellman key exchange</link> can now
|
|
replace OpenSSH's default version with one they generated
|
|
themselves using the new
|
|
<option>services.openssh.moduliFile</option> option.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem> <para>
|
|
A newly packaged TeX Live 2015 is provided in <literal>pkgs.texlive</literal>,
|
|
split into 6500 nix packages. For basic user documentation see
|
|
<link xlink:href="https://github.com/NixOS/nixpkgs/blob/release-15.09/pkgs/tools/typesetting/tex/texlive-new/default.nix#L1"
|
|
>the source</link>.
|
|
Beware of <link xlink:href="https://github.com/NixOS/nixpkgs/issues/9757"
|
|
>an issue</link> when installing a too large package set.
|
|
|
|
The plan is to deprecate and maybe delete the original TeX packages
|
|
until the next release.
|
|
</para> </listitem>
|
|
|
|
<listitem><para>
|
|
<option>buildEnv.env</option> on all Python interpreters
|
|
is now available for nix-shell interoperability.
|
|
</para> </listitem>
|
|
</itemizedlist>
|
|
|
|
</para>
|
|
|
|
</section>
|