| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | wireguard: when dyn-dns refresh is enabled, reconnect after failures•••Make the dynamic-dns refresh systemd service (controlled via the
preexisting option dynamicEndpointRefreshSecond) robust to e.g. dns
failures that happen on intermittent network connections.
Background:
When dns resolution fails with a 'permanent' error ("Name or service not
known" instead of "Temporary failure in name resolution"), wireguard
won't retry despite WG_ENDPOINT_RESOLUTION_RETRIES=infinity.
-> This change should improve reliability/connectivity.
somewhat related thread: https://github.com/NixOS/nixpkgs/issues/63869
(cherry picked from commit 82c5c3c9a9b5309a329f8b247621b0f36fd9210e)
origin/backport-140890-to-release-22.11 | seb314 | 2022-12-02 | 1 | -0/+24 |
| * | Merge pull request #204095 from NixOS/backport-204089-to-release-22.11•••[Backport release-22.11] openasar: unstable-2022-10-10 -> unstable-2022-12-01 | Thiago Kenji Okada | 2022-12-02 | 1 | -3/+3 |
| |\ |
|
| | * | openasar: unstable-2022-10-10 -> unstable-2022-12-01•••(cherry picked from commit cddaa5ea0eb1167bb503fa82aed63bbee1dfd5a3)
| PedroHLC ☭ | 2022-12-02 | 1 | -3/+3 |
| |/ |
|
| * | Merge pull request #204076 from NixOS/backport-204024-to-release-22.11•••[Backport release-22.11] ft2-clone: 1.61 -> 1.62 | Francesco Gazzetta | 2022-12-02 | 1 | -2/+2 |
| |\ |
|
| | * | ft2-clone: 1.61 -> 1.62•••(cherry picked from commit b3f7ea4e42887ff826af7a3b02a749a0f0ecf517)
| R. Ryantm | 2022-12-02 | 1 | -2/+2 |
| |/ |
|
| * | Merge pull request #204071 from NixOS/backport-204045-to-release-22.11•••[Backport release-22.11] babashka: 1.0.166 -> 1.0.167 | Thiago Kenji Okada | 2022-12-02 | 1 | -2/+2 |
| |\ |
|
| | * | babashka: 1.0.166 -> 1.0.167•••(cherry picked from commit 6242ca0d36deda3d36326df6c68dc516ea9fe453)
| R. Ryantm | 2022-12-02 | 1 | -2/+2 |
| |/ |
|
| * | nixos/rl-2211: remove reference to nowhere•••The note this originally referred to was moved to the “Internal Changes”
section and later trimmed down, so the referenced content is no longer
there.
(cherry picked from commit c19ca15c415403461368ee6e9eb863c68ab42c7e)
| sternenseemann | 2022-12-01 | 2 | -6/+2 |
| * | Merge pull request #203837 from NixOS/backport-203664-to-release-22.11•••[Backport release-22.11] mujs: 1.2.0 -> 1.3.2 | Robert Scott | 2022-12-02 | 1 | -3/+13 |
| |\ |
|
| | * | mujs: 1.2.0 -> 1.3.2•••Fixes CVE-2022-44789.
https://git.ghostscript.com/?p=mujs.git;a=shortlog;h=refs/tags/1.3.2
(cherry picked from commit 47aefa51ccf896247c72dd3b6b2860f309282b32)
| Thomas Gerbet | 2022-12-01 | 1 | -3/+13 |
| * | | Merge pull request #204021 from NixOS/backport-204014-to-release-22.11 | Martin Weinelt | 2022-12-02 | 1 | -1/+49 |
| |\ \ |
|
| | * | | ec2-amis: add release 22.11•••(cherry picked from commit 2c90cb930422165072f611aa0168727b2fa86e0f)
| AmineChikhaoui | 2022-12-01 | 1 | -1/+49 |
| |/ / |
|
| * | | Merge pull request #204008 from NixOS/backport-204007-to-release-22.11 | Martin Weinelt | 2022-12-01 | 1 | -2/+2 |
| |\ \ |
|
| | * | | evcc: 0.108.2 -> 0.108.3•••(cherry picked from commit 7b16c6ed61dff729e30c964365c3a4a49e671ec4)
| R. Ryantm | 2022-12-01 | 1 | -2/+2 |
| |/ / |
|
| * | | Merge pull request #203663 from NixOS/backport-202327-to-release-22.11•••[Backport release-22.11] smartgithg: 21.2.2 -> 22.1.0 | Christian Kögler | 2022-12-01 | 1 | -2/+2 |
| |\ \ |
|
| | * | | smartgithg: 21.2.2 -> 22.1.0•••(cherry picked from commit 4981121b4feed9564a2a27aa7747accf8e434104)
| Korny666 | 2022-11-29 | 1 | -2/+2 |
| * | | | Merge pull request #203992 from NixOS/backport-195735-to-release-22.11•••[Backport release-22.11] nixos/tayga: init | Ryan Lahfa | 2022-12-01 | 7 | -2/+445 |
| |\ \ \ |
|
| | * | | | tayga: correct license to GPL2+•••The head of tayga.c says „This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.“
(cherry picked from commit 3e534cfde55bfd5a2e1348d25bd27bfe9c615746)
| Georg Haas | 2022-12-01 | 1 | -1/+1 |
| | * | | | nixos/tests/tayga: init•••(cherry picked from commit 8d47058b32f1f0fb1b21d73392f3b4e96d139a81)
| Georg Haas | 2022-12-01 | 3 | -1/+239 |
| | * | | | nixos/tayga: init•••(cherry picked from commit 16b789287654273d696f3fec2f1890a9fe3e9948)
| Alex Zero | 2022-12-01 | 4 | -0/+205 |
| * | | | | Merge pull request #203935 from NixOS/backport-199520-to-release-22.11•••[Backport release-22.11] nixos/sane: add openFirewall option | Ryan Lahfa | 2022-12-01 | 1 | -0/+10 |
| |\ \ \ \ |
|
| | * | | | | nixos/sane: add openFirewall option•••Open ports needed for discovery of scanners on the local network, e.g.
needed for Canon scanners (BJNP protocol).
Ref. https://github.com/NixOS/nixpkgs/issues/28406.
(cherry picked from commit c3cff074f8dc3aaa4739ae0f60d0b3c907aba164)
| Bjørn Forsman | 2022-12-01 | 1 | -0/+10 |
| * | | | | | Merge pull request #203951 from NixOS/backport-203668-to-release-22.11•••[Backport release-22.11] postgresql_jdbc: 42.5.0 -> 42.5.1 | Ryan Lahfa | 2022-12-01 | 1 | -2/+2 |
| |\ \ \ \ \
| |_|/ / /
|/| | | | |
|
| | * | | | | postgresql_jdbc: 42.5.0 -> 42.5.1•••Fixes CVE-2022-41946.
https://github.com/pgjdbc/pgjdbc/blob/REL42.5.1/CHANGELOG.md
(cherry picked from commit ee36d118681581690579293b11953b18507dd488)
| Thomas Gerbet | 2022-12-01 | 1 | -2/+2 |
| * | | | | | remove attr_encrypted gem•••(cherry picked from commit 4ac49afb5bbdf7f46df83a4cc775df68cc903ca6)
| = | 2022-12-01 | 1 | -4/+1 |
| * | | | | | gitlab: 15.6.0 -> 15.6.1•••(cherry picked from commit bbe555774f187a32aabbb96e3071e5c4f08b5744)
| = | 2022-12-01 | 6 | -14/+17 |
| * | | | | | Revert "nixos/gitlab: Use Git 2.35.x to work around git bug"•••This reverts commit f94d14899d70150abcf2823e243524397b0c1806.
git 2.35.x became unsupported by gitaly and makes the gitaly systemd
service fail.
(cherry picked from commit 6b3629a3a29773f28f4069d24fc7cbc872c783dc)
| M. A | 2022-12-01 | 1 | -22/+6 |
| * | | | | | gitlab: 15.4.4 -> 15.6.0•••https://about.gitlab.com/releases/2022/11/22/gitlab-15-6-released/
(cherry picked from commit ca5f7a9bba18db04b9c61decf59c3017a4034aab)
| M. A | 2022-12-01 | 13 | -755/+869 |
| * | | | | | Merge pull request #203770 from NixOS/backport-201219-to-release-22.11 | Martin Weinelt | 2022-12-01 | 1 | -14/+15 |
| |\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | * | | | | webkitgtk: Bind NixOS directories to sandbox last•••Since https://github.com/WebKit/WebKit/commit/31ac354cbeecf866f9a38f7b2f8f59f7975d3f6a,
bubblewrap gets called the following way on NixOS system,
when it has `share/fonts` in `environment.pathsToLink`:
$ bwrap --ro-bind /nix/store /nix/store --ro-bind /run/current-system /run/current-system --ro-bind-try /run/current-system/sw/share/fonts /run/current-system/sw/share/fonts -- $(realpath $(which true))
bwrap: Can't mkdir parents for /run/current-system/sw/share/fonts: No such file or directory
It fails because `/run/current-system/sw` is a symlink
so bubblewrap is not be able to add another mountpoint inside.
Ideally, we would remove the `/run/current-system/sw` bind mount
and mount only specific subdirectories we need, like the fonts.
Unfortunately, it is not clear what else is needed. For example,
in the past, Pipewire’s Jack module was loaded from `/run/current-system/sw/lib`
https://github.com/NixOS/nixpkgs/commit/756e60344fd83427148d8acf416c63573404a2e9
So, for now, let’s keep the and mount and move the binding of NixOS directories
to the end. Adding bindings starting at leaves and moving to root should be fine.
While at it, let’s also make the binding of `/run/current-system` conditional
since it will not be available outside of NixOS.
Fixes: https://github.com/NixOS/nixpkgs/issues/197085
(cherry picked from commit f930ba6aba43853d1f1733a9718585c6c80d890d)
| Jan Tojnar | 2022-11-30 | 1 | -14/+15 |
| * | | | | | Merge pull request #203772 from NixOS/backport-202002-to-release-22.11•••[Backport release-22.11] mattermost: 7.4.0 -> 7.5.1 | Ryan Mulligan | 2022-12-01 | 1 | -3/+3 |
| |\ \ \ \ \ |
|
| | * | | | | | mattermost: 7.4.0 -> 7.5.1•••(cherry picked from commit f7e4c1882d0b077fa426f8ef9ed05c7f9ed1b23f)
| Ilan Joselevich | 2022-11-30 | 1 | -3/+3 |
| | |/ / / / |
|
| * | | | | | Merge pull request #203925 from NixOS/backport-203723-to-release-22.11 | Martin Weinelt | 2022-12-01 | 1 | -0/+1 |
| |\ \ \ \ \ |
|
| | * | | | | | module-list: include AMD SEV module•••Signed-off-by: Roman Volosatovs <rvolosatovs@riseup.net>
(cherry picked from commit a2251e2225bceec4928bdb9fff90daa365695b58)
| Roman Volosatovs | 2022-12-01 | 1 | -0/+1 |
| | | |/ / /
| |/| | | |
|
| * | | | | | Merge pull request #203934 from NixOS/backport-203927-to-release-22.11•••[Backport release-22.11] deno: 1.28.2 -> 1.28.3 | figsoda | 2022-12-01 | 2 | -8/+8 |
| |\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | * | | | | deno: 1.28.2 -> 1.28.3•••(cherry picked from commit 554648019bf3bf69b1027c33f56d8df3aac7c63e)
| 06kellyjac | 2022-12-01 | 2 | -8/+8 |
| |/ / / / |
|
| * | | | | nixos: disable systemd-oomd when enableUnifiedCgroupHierarchy is false•••Or else systemd-oomd gets marked as failed due to
"Userspace Out-Of-Memory (OOM) Killer was skipped because of a failed condition check (ConditionControlGroupController=v2)."
and cause the system to enter degraded state.
Ref https://github.com/NixOS/nixpkgs/issues/195085
(cherry picked from commit 43ee81aa254ba9cf858643c607735051b8c42a38)
| Bjørn Forsman | 2022-12-01 | 1 | -0/+4 |
| * | | | | jellyfin: 10.8.7 -> 10.8.8•••(cherry picked from commit 1f507b8797f3fe384c3e1c6c6aacf6629825650e)
| Johannes Schleifenbaum | 2022-12-01 | 1 | -2/+2 |
| * | | | | jellyfin-web: 10.8.7 -> 10.8.8•••(cherry picked from commit 7c7c43225d5227f58c58b4edf8163c61d1133761)
| Johannes Schleifenbaum | 2022-12-01 | 2 | -4/+4 |
| * | | | | clamav: 0.105.1 -> 1.0.0•••(cherry picked from commit 0ebbb53975985058598ad2960dace27106026d57)
| ajs124 | 2022-12-01 | 1 | -2/+2 |
| * | | | | Merge pull request #203901 from NixOS/backport-203893-to-release-22.11•••[Backport release-22.11] poetry2nix: 1.36.0 -> 1.37.0 | adisbladis | 2022-12-01 | 5 | -19/+345 |
| |\ \ \ \ |
|
| | * | | | | poetry2nix: 1.36.0 -> 1.37.0•••(cherry picked from commit 083a6cfa96eaf770480462a93a7512b5349f3007)
| adisbladis | 2022-12-01 | 5 | -19/+345 |
| |/ / / / |
|
| * | | | | Merge pull request #203845 from NixOS/backport-203417-to-release-22.11•••[Backport release-22.11] python3Packages.tensorflow: fix build on aarch64-darwin | Mario Rodas | 2022-12-01 | 4 | -47/+51 |
| |\ \ \ \ |
|
| | * | | | | python3Packages.tensorflow: mark as broken on x86_64-darwin•••(cherry picked from commit e98bfb0d4eb707f87a545d5417131e2869edd4c4)
| Thibault Gagnaux | 2022-12-01 | 1 | -1/+1 |
| | * | | | | python3Packages.tensorflow: refactor fetchAttrs•••(cherry picked from commit a38051bfe0a12f1bd08e9a059e0b62dd78ed0429)
| Thibault Gagnaux | 2022-12-01 | 1 | -10/+8 |
| | * | | | | python3Packages.tensorflow: set LIBTOOL on darwin only•••Co-authored-by: Dmitry Kalinkin 245573+veprbl@users.noreply.github.com
(cherry picked from commit ef693e09b9702560e37b3bd5abb23d397d39d1a9)
| Thibault Gagnaux | 2022-12-01 | 1 | -2/+1 |
| | * | | | | python3Packages.tensorflow: patch even more shebangs•••(cherry picked from commit 1bd32e6b425f5f942a453e8136c786d48df31fab)
| Thibault Gagnaux | 2022-12-01 | 1 | -1/+2 |
| | * | | | | python3Packages.tensorflow: set LIBTOOL env on aarch64-darwin•••(cherry picked from commit 2311dabeab316fa88e38b375cf18e84621bf60ae)
| Thibault Gagnaux | 2022-12-01 | 1 | -4/+7 |
| | * | | | | python3Packages.pymanopt: skip test_second_order_function_approximation tests•••(cherry picked from commit 4318e51734c215d6e6b9a53d5cb86d58678744ba)
| Robert Scott | 2022-12-01 | 1 | -8/+10 |
| | * | | | | python3Packages.tensorflow-bin: 2.9.1 -> 2.9.3•••(cherry picked from commit 6921d24405d47b287bbf966d1993c24764ba7f67)
| Robert Scott | 2022-12-01 | 2 | -26/+26 |
