summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Revert "nixos/yggdrasil: fix configFile option"origin/revert-217366-fix-yggdrasilRyan Lahfa2023-03-221-107/+79
* Merge pull request #217366 from puppe/fix-yggdrasil•••nixos/yggdrasil: fix configFile optionRyan Lahfa2023-03-221-79/+107
|\
| * nixos/yggdrasil: correct documentation•••The option `LinkLocalTCPPort` does not exist anymore in recent versions of Yggdrasil. The port for incoming link-local connections is now configured as part of the `MulticastInterfaces` option. Our documentation should reflect that. Martin Puppe2023-02-201-9/+9
| * nixos/yggdrasil: support HJSON files as configFile•••Yggdrasil uses HJSON as its configuration file format. The NixOS module meanwhile only supports pure JSON. This commit adds support for HJSON files. Martin Puppe2023-02-201-5/+8
| * nixos/yggdrasil: fix configFile option•••As far as I can tell the configFile option cannot have worked as intended. The Yggdrasil systemd service uses a dynamic user. As it was, there was no way to set the correct permissions on a config file beforehand which would allow the dynamic user to read the config file without making it readable for all users. But since the config file can contain a private key it *must not* be world-readable. The file must only be readable by root. The file has to be copied and the permissions have to be fixed during service startup. This can either be done in a ExecStartPre directive with the '+' prefix (which executes that command with elevated privileges), or it can be done more declarative with the LoadCredential directive. I have chosen the latter approach because it delegates more work to systemd itself. It should be noted that this has the minor tradeoff that the config file must not be larger than 1 MB. This is a limit which systemd imposes on credential files. But I think 1 MB ought to be enough for anybody ;). Martin Puppe2023-02-201-9/+31
| * nixos/yggdrasil: nixpkgs-fmtMartin Puppe2023-02-201-68/+71
* | Merge pull request #221576 from paumr/nixos-generate-config_fix_syntax•••nixos-generate-config: fix invalid sample configRyan Lahfa2023-03-221-4/+1
|\ \
| * | nixos-generate-config: fix invalid sample config•••This issue was reported in #221510 paumr2023-03-171-4/+1
* | | Merge pull request #211604 from jrobsonchase/graphite-cli•••add graphite-cli packageRyan Mulligan2023-03-221-0/+2
|\ \ \
| * | | nodePackages.graphite-cli: bring to top-levelJosh Robson Chase2023-03-221-0/+2
* | | | Merge pull request #222564 from wegank/ogre-1-9-drop•••ogre1_9: dropWeijia Wang2023-03-222-2/+1
|\ \ \ \
| * | | | ogre1_9: dropWeijia Wang2023-03-222-2/+1
* | | | | Merge pull request #222514 from viraptor/gptfdisk•••gptfdisk: fix darwin buildWeijia Wang2023-03-221-2/+5
|\ \ \ \ \
| * | | | | gptfdisk: fix darwin buildStanisław Pitucha2023-03-221-2/+5
* | | | | | Merge pull request #222353 from figsoda/sccachefigsoda2023-03-221-6/+3
|\ \ \ \ \ \ | |_|/ / / / |/| | | | |
| * | | | | sccache: 0.3.3 -> 0.4.0•••Diff: https://github.com/mozilla/sccache/compare/v0.3.3...v0.4.0 Changelog: https://github.com/mozilla/sccache/releases/tag/v0.4.0 figsoda2023-03-211-6/+3
* | | | | | Merge pull request #211152 from ThibaultLemaire/stuntrally-2.7•••stuntrally: 2.6.2 -> 2.7Weijia Wang2023-03-222-8/+26
|\ \ \ \ \ \
| * | | | | | stuntrally: 2.6.2 -> 2.7Thibault Lemaire2023-01-172-8/+26
* | | | | | | Merge pull request #222395 from doronbehar/pkg/rust_hdl•••vhdl-ls: init at 0.64.0Doron Behar2023-03-223-0/+1072
|\ \ \ \ \ \ \
| * | | | | | | vhdl-ls: init at 0.64.0Doron Behar2023-03-223-0/+1072
* | | | | | | | Merge pull request #222339 from chmod222/k3s-sqlite•••k3s: Adjust Go tags to dynamically link against sqlitesuperherointj2023-03-224-4/+16
|\ \ \ \ \ \ \ \
| * | | | | | | | k3s: Adjust tags to dynamically link against sqliteLukas Niederbremer2023-03-214-4/+16
* | | | | | | | | Merge pull request #222548 from Luflosi/yices-fix-typo•••yices: fix typo in commentSergei Trofimovich2023-03-221-1/+1
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | yices: fix typo in commentLuflosi2023-03-221-1/+1
|/ / / / / / / / /
* | | | | | | | | Merge pull request #222545 from K900/nft-avoid-wildcards•••nixos/firewall-nftables: avoid using wildcardsK9002023-03-221-2/+14
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | nixos/firewall-nftables: avoid using wildcards•••Those were added in kernel 5.13, which is newer than our oldest supported. K9002023-03-221-2/+14
|/ / / / / / / / /
* | | | | | | | | Merge pull request #222522 from K900/fix-systemtapBernardo Meurer2023-03-221-14/+2
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | systemtap: remove hack, fix buildK9002023-03-221-14/+2
* | | | | | | | | | Merge pull request #220001 from wegank/isabelle-arm•••isabelle: add aarch64-linux supportWeijia Wang2023-03-221-5/+15
|\ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | isabelle: add aarch64-linux supportWeijia Wang2023-03-071-5/+15
* | | | | | | | | | | Merge pull request #222526 from wegank/wxgtk30-drop•••wxGTK30, wxmac: dropWeijia Wang2023-03-226-262/+7
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | wxGTK30, wxmac: dropWeijia Wang2023-03-226-262/+7
* | | | | | | | | | | | keyd: add keyd service and test•••The keyd package already exists, but without a systemd service. Keyd requires write access to /var/run to create its socket. Currently the directory it uses can be changed with an environment variable, but the keyd repo state suggests that this may turn into a compile-time option. with that set, and some supplementary groups added, we can run the service under DynamicUser. Co-authored-by: pennae <82953136+pennae@users.noreply.github.com> woojiq2023-03-226-0/+204
* | | | | | | | | | | | Merge pull request #222511 from qowoz/nix-update•••nix-update: 0.15.1 -> 0.16.0figsoda2023-03-222-6/+9
|\ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | nix-update: 0.15.1 -> 0.16.0•••Diff: https://github.com/Mic92/nix-update/compare/0.15.1...0.16.0 Changelog: https://github.com/Mic92/nix-update/releases/tag/0.16.0 zowoq2023-03-222-6/+9
* | | | | | | | | | | | | Merge pull request #222156 from Mic92/sysdig•••sysdig: 0.30.2 -> 0.31.37c6f434c2023-03-221-6/+7
|\ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | sysdig: 0.30.2 -> 0.31.3Jörg Thalheim2023-03-201-6/+7
* | | | | | | | | | | | | | Merge pull request #222117 from jzbor/update-skippy-xd•••skippy-xd: richardgv/skippy-xd unstable-2023-03-10 -> dreamcat4 0.6.07c6f434c2023-03-221-4/+4
|\ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | skippy-xd: richardgv/skippy-xd unstable-2023-03-10 -> dreamcat4 0.6.0•••Updating to the latest release 0.6.0 and switching to the currently actively maintained fork from dreamcat4. jzbor2023-03-201-4/+4
* | | | | | | | | | | | | | | ocamlPackages.ezjsonm: 1.2.0 → 1.3.0Vincent Laporte2023-03-221-4/+4
* | | | | | | | | | | | | | | ocamlPackages.yaml: use Dune 3Vincent Laporte2023-03-222-1/+4
* | | | | | | | | | | | | | | ocamlPackages.lustre-v6: use Dune 3Vincent Laporte2023-03-221-0/+1
* | | | | | | | | | | | | | | ocamlPackages.ppx_deriving_yaml: use Dune 3Vincent Laporte2023-03-221-0/+1
* | | | | | | | | | | | | | | ocamlPackages.cooltt: use Dune 3Vincent Laporte2023-03-221-1/+5
* | | | | | | | | | | | | | | ocamlPackages.mustache: use Dune 3Vincent Laporte2023-03-221-1/+1
* | | | | | | | | | | | | | | ocamlPackages.cow: use Dune 3Vincent Laporte2023-03-221-4/+4
* | | | | | | | | | | | | | | Merge pull request #222272 from viraptor/git-trim-darwin•••git-trim: fix darwin buildStanisław Pitucha2023-03-222-3/+4
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | | git-trim: fix darwin build•••Add the required framework to dependencies. Stanisław Pitucha2023-03-222-3/+4
* | | | | | | | | | | | | | | | Merge pull request #221347 from bzizou/ucx•••ucx: 1.13.1 -> 1.14.0 and optional ROCm supportmarkuskowa2023-03-221-18/+17
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | | | ucx: 1.13.1 -> 1.14.0 and optional ROCm supportBruno Bzeznik2023-03-221-18/+17