summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Update nixos/modules/services/system/cachix-agent/default.nix•••Co-authored-by: pennae <82953136+pennae@users.noreply.github.com> (cherry picked from commit 91cc0cf63bc9959f9cdcc60ab15cf2eae6d870b1) origin/backport-155009-to-release-21.11Domen Kožar2022-01-181-1/+1
* nixos: add cachix-agent service•••(cherry picked from commit 42994be64b12ed7713aaf6f50ae550f999057833) Domen Kožar2022-01-182-0/+58
* Merge pull request #155480 from NixOS/backport-153279-to-release-21.11•••[Backport release-21.11] element-desktop: fix "Sqlcipher support is missing"Janne Heß2022-01-181-1/+4
|\
| * element-desktop: fix "Sqlcipher support is missing"•••(cherry picked from commit b85a0597380060def713a7ff3b13a6478c1a265c) Austin Butler2022-01-181-1/+4
|/
* Merge pull request #155470 from NixOS/backport-155443-to-release-21.11•••[Backport release-21.11] nixos/modules/syncthing: add 22000/udp to firewallpennae2022-01-181-2/+2
|\
| * nixos/modules/syncthing: add 22000/udp to firewall•••(cherry picked from commit f533a6d2bdd11bf901c7d370e7ddd604b245cf98) Zane van Iperen2022-01-181-2/+2
|/
* Merge pull request #155412 from NixOS/backport-155407-to-release-21.11•••[Backport release-21.11] nixos/mosquitto: wait for network-online.target, not network.targetpennae2022-01-181-1/+1
|\
| * nixos/mosquitto: wait for network-online.target, not network.target•••network.target is reached earlier, but with much fewer services available. DNS is likely to be not functional before network-online.target, so waiting for that seems better for that reason alone. the existing backends for network-online.target all seem to do reasonable things (wait until all links are in *some* stable state), so we shouldn't lose anything from waiting. (cherry picked from commit dc101d9fef9c4c4f27251cdb500dd7b21aa3718f) pennae2022-01-171-1/+1
* | Merge pull request #155366 from NixOS/backport-155122-to-release-21.11•••[Backport release-21.11] php: 7.4.26 -> 7.4.27, 8.0.13 -> 8.0.14Elis Hirwing2022-01-182-4/+4
|\ \
| * | php: 8.0.13 -> 8.0.14•••(cherry picked from commit 5fc1a37f1be2f8b1b50125926fe1d1bf6ecb1377) Pol Dellaiera2022-01-171-2/+2
| * | php: 7.4.26 -> 7.4.27•••(cherry picked from commit 6e4afa39a5952a5d834cbe2d5d7f03a469b8d1c9) Pol Dellaiera2022-01-171-2/+2
* | | Merge pull request #155434 from NixOS/backport-152126-to-release-21.11•••[Backport release-21.11] mkFranzDerivation: fix tray icon on WaylandBobby Rong2022-01-181-1/+2
|\ \ \
| * | | mkFranzDerivation: fix tray icon on Wayland•••(cherry picked from commit 8a9a6919de9e65736921b7336098901ff2e89b85) Henri Menke2022-01-171-1/+2
|/ / /
* | | Merge pull request #155268 from mweinelt/21.11/hostapdMartin Weinelt2022-01-172-0/+45
|\ \ \ | |_|/ |/| |
| * | wpa_supplicant: patch patch SAE/EAP-pwd side-channel attack update 2Martin Weinelt2022-01-161-0/+22
| * | hostapd: patch SAE/EAP-pwd side-channel attack update 2Martin Weinelt2022-01-161-0/+23
* | | lighttpd: add patch for CVE-2022-22707•••(cherry picked from commit e8146a035f3aba0fb6a16e7b08cd3fc64ddf8d8b) Robert Scott2022-01-171-0/+9
* | | Merge pull request #154801 from NixOS/backport-154467-to-release-21.11•••[Backport release-21.11] ferdi: 5.6.5 -> 5.6.10Maximilian Bosch2022-01-171-2/+2
|\ \ \
| * | | ferdi: 5.6.5 -> 5.6.10•••(cherry picked from commit 2875c98aaf193dac2c5f05c272b65357a5e92889) origin/backport-154467-to-release-21.11R. Ryantm2022-01-121-2/+2
* | | | Merge pull request #155388 from NixOS/backport-155374-to-release-21.11•••[Backport release-21.11] uriparser: Fix cross buildingJanne Heß2022-01-171-2/+2
|\ \ \ \
| * | | | uriparser: Fix cross building•••When cross building, we need to disable building tests or cmake will complain about the missing gtest. Also switching from targetPlatform to buildPlatform caused doCheck to be properly set to false (cherry picked from commit 9049874ff1e79408862d0ca7b854315c20526c73) Janne Heß2022-01-171-2/+2
|/ / / /
* | | | release.nix: fix eval with aarch64-, but not x86_64-darwin supported•••We emit a few jobs conditionally on supportDarwin which only checked for x86_64-darwin in the past. This change makes it more modular by transforming it into an attribute set which holds the two darwin arches. Jobs needing aarch64-darwin or x86_64-darwin are now only emitted if their respective platform is actually in supportedSystems. This issue was discovered because the staging-next-21.11 jobset had commented out x86_64-darwin (presumably due to a build load issue). (cherry picked from commit 533eb9866c6dfe56637f2f8c76fcca3c7b47f72f) sternenseemann2022-01-171-5/+8
* | | | Merge pull request #153858 from NixOS/backport-153273-to-release-21.11Patrick Hilhorst2022-01-173-17/+17
|\ \ \ \
| * | | | nixos/test-driver: also passthru driverInteractive•••(cherry picked from commit d4dc638d77fc31aaa3000090e50a69fa6096fb86) origin/backport-153273-to-release-21.11Patrick Hilhorst2022-01-073-17/+17
* | | | | Merge pull request #155365 from NixOS/backport-155305-to-release-21.11•••[Backport release-21.11] vscode-extensions.stkb.rewrap: 1.15.4 -> 1.16.0Bobby Rong2022-01-171-2/+2
|\ \ \ \ \ | |_|_|_|/ |/| | | |
| * | | | vscode-extensions.stkb.rewrap: 1.15.4 -> 1.16.0•••(cherry picked from commit 31dda65403b5a81ad90baaa7b2aafd4645319517) datafoo2022-01-171-2/+2
|/ / / /
* | | | Merge pull request #155201 from NixOS/backport-154193-to-release-21.11•••[Backport release-21.11] keycloak: 15.1.0 -> 16.1.0 + module improvementsKim Lindberger2022-01-173-34/+114
|\ \ \ \
| * | | | keycloak service: allow to set empty frontend URL•••This together with extraConfig: { "subsystem=undertow"."server=default-server"."http-listener=default"."proxy-address-forwarding" = true; "subsystem=undertow"."server=default-server"."https-listener=https"."proxy-address-forwarding" = true; } Allows to run Keycloak behind a reverse proxy that provides X-Forwarded-* headers. (cherry picked from commit 97a0cf62f098d21a31c4dc03294e4919e88c225f) Nikolay Amiantov2022-01-162-2/+11
| * | | | keycloak service: add themes support•••Custom themes can be packaged and then added using `themes` config attribute. (cherry picked from commit 84f70eefd1c4f90e892164afa39931a9fc5ba8db) Nikolay Amiantov2022-01-162-2/+56
| * | | | keycloak service: use 'attrsOf anything' for extraConfig•••(cherry picked from commit a42abe27c0b58749f1c563fc77305d145c739746) Nikolay Amiantov2022-01-161-1/+1
| * | | | keycloak service: update HTTPS configuration•••Keycloak 16.1.0 uses different way to configure HTTPS. This requires us to order commands correctly, otherwise linked objects will fail. (cherry picked from commit 827267a27f300a8fe503986da2570bc3b9252e69) Nikolay Amiantov2022-01-161-4/+16
| * | | | keycloak service: ordering for CLI script•••Allow update commands in the script to be ordered using `mkOrder`. If we encounter ordered sub-objects we sort them by priority. To implement this we now explicitly pass current node in `recurse`, which also allows us to clean up edge case for top-level node. Also refactor `recurse` to avoid passing result text argument; we weren't tail recursive before anyway. (cherry picked from commit 3c7e78cc6ab73ca9b0dbcb376122befa59098300) Nikolay Amiantov2022-01-161-23/+28
| * | | | keycloak: 15.1.0 -> 16.1.0•••(cherry picked from commit 9bbcc98e304962e4b9b6a911707b87d1cedf8b83) Nikolay Amiantov2022-01-161-2/+2
* | | | | Merge pull request #155271 from blitz/tailscale-update•••[21.11] tailscale: 1.14.6 -> 1.20.1Bobby Rong2022-01-172-6/+6
|\ \ \ \ \
| * | | | | tailscale: 1.18.2 -> 1.20.1•••https://github.com/tailscale/tailscale/releases/tag/v1.20.1 (cherry picked from commit cca85c7c3d1e4708b89a92d5bd11200aa2d6675a) Ivan Petkov2022-01-161-3/+3
| * | | | | tailscale: remove old xversion tag•••Tailscale stopped using that tag several releases ago. (cherry picked from commit 6675c8e96d401881c60f3add3c5703319fc645f4) Brad Fitzpatrick2022-01-161-2/+0
| * | | | | tailscale: 1.18.1 -> 1.18.2•••https://github.com/tailscale/tailscale/releases/tag/v1.18.2 (cherry picked from commit 73f84c6a7e36b1dc2492f4e5bc966f1b222efdf2) Thomas Gerbet2022-01-161-2/+2
| * | | | | tailscale: 1.14.6 -> 1.18.1•••(cherry picked from commit 42a7e36904bae3a1eea01b189ddd1dfdad4509e0) James Walker2022-01-162-4/+6
| | |_|_|/ | |/| | |
* | | | | Merge pull request #155164 from NixOS/backport-154976-to-release-21.11•••[Backport release-21.11] Kernels 2022-01-14ajs1242022-01-172-28/+28
|\ \ \ \ \ | |/ / / / |/| | | |
| * | | | linux/hardened/patches/5.4: 5.4.170-hardened1 -> 5.4.171-hardened1•••(cherry picked from commit e19681509b81005eff58ea063c8d2669642aaf36) TredwellGit2022-01-161-5/+5
| * | | | linux/hardened/patches/5.15: 5.15.12-hardened1 -> 5.15.14-hardened1•••(cherry picked from commit ead5545be3916a68d69a6a1095ea8b750d43f3fb) TredwellGit2022-01-161-5/+5
| * | | | linux/hardened/patches/5.10: 5.10.89-hardened1 -> 5.10.91-hardened1•••(cherry picked from commit f14a7feff2c34a9546b828b10d0dff8336a2c649) TredwellGit2022-01-161-5/+5
| * | | | linux/hardened/patches/4.19: 4.19.224-hardened1 -> 4.19.225-hardened1•••(cherry picked from commit 56224051e3b96df0b4004ba981c6423d9784ea4a) TredwellGit2022-01-161-5/+5
| * | | | linux/hardened/patches/4.14: 4.14.261-hardened1 -> 4.14.262-hardened1•••(cherry picked from commit 230a6813d9ef8efa262730983b77401d1dbc8e27) TredwellGit2022-01-161-5/+5
| * | | | linux-rt_5_4: 5.4.161-rt67 -> 5.4.170-rt68•••(cherry picked from commit c5f9bb4d2185d04ac9f3f00feced506ff0170ffc) TredwellGit2022-01-161-3/+3
* | | | | Merge pull request #155127 from NixOS/backport-155126-to-release-21.11Ninjatrappeur2022-01-161-1/+0
|\ \ \ \ \
| * | | | | prosody: remove outdated passthrough test reference•••4369bebd9a32658ded22b580886587cdc577a29d removed the prosody-mysql test. We forgot to remove the associated passthru test entry in the prosody derivation. (cherry picked from commit 3469429c39f09f0f6b848e76a1c24770bae02d83) Félix Baylac-Jacqué2022-01-151-1/+0
* | | | | | Merge pull request #155141 from NixOS/backport-155138-to-release-21.11•••[Backport release-21.11] signal-desktop: Fix "Failed to load GLES library: libGLESv2.so.2"Michael Weiss2022-01-161-0/+3
|\ \ \ \ \ \
| * | | | | | signal-desktop: Fix "Failed to load GLES library: libGLESv2.so.2"•••A new symlink is required to fix the following error: [3744707:0100/000000.911609:ERROR:egl_util.cc(74)] Failed to load GLES library: libGLESv2.so.2: libGLESv2.so.2: cannot open shared object file: No such file or directory zsh: segmentation fault (core dumped) signal-desktop --enable-features=UseOzonePlatform --ozone-platform=wayland The GPU acceleration still fails (not sure if it worked before) but at least "signal-desktop --enable-features=UseOzonePlatform --ozone-platform=wayland" launches again (without "--disable-gpu"): [40492:0115/184719.611780:ERROR:gpu_process_host.cc(968)] GPU process exited unexpectedly: exit_code=139 [40492:0115/184720.256775:ERROR:gpu_process_host.cc(968)] GPU process exited unexpectedly: exit_code=139 [40492:0115/184720.892093:ERROR:gpu_process_host.cc(968)] GPU process exited unexpectedly: exit_code=139 [40620:0115/184721.033949:ERROR:sandbox_linux.cc(376)] InitializeSandbox() called with multiple threads in process gpu-process. [40620:0115/184721.069600:ERROR:gl_utils.cc(318)] [.RendererMainThread-0x227200113f00]GL Driver Message (OpenGL, Performance, GL_CLOSE_PATH_NV, High): GPU stall due to ReadPixels [40620:0115/184721.133265:ERROR:gl_utils.cc(318)] [.RendererMainThread-0x227200113f00]GL Driver Message (OpenGL, Performance, GL_CLOSE_PATH_NV, High): GPU stall due to ReadPixels [40620:0115/184721.158341:ERROR:gl_utils.cc(318)] [.RendererMainThread-0x227200113f00]GL Driver Message (OpenGL, Performance, GL_CLOSE_PATH_NV, High): GPU stall due to ReadPixels (After three GPU process crashes Chromium should automatically fall back to software rendering.) Fix #155050 (it only fixes the crashes though, not the underlying issue, but that's likely all we can do for the moment as other Linux distributions are affected as well; Ozone/Wayland is just not stable yet) (cherry picked from commit 892a9971b04a8e2d1661331469554b556ac620ae) Michael Weiss2022-01-151-0/+3
| |/ / / / /
* | | | | | Merge pull request #150551 from justinas/backport-freon-45•••[21.11] gnomeExtensions.freon: 44 -> 45, patch binary pathsBobby Rong2022-01-162-3/+109
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | |