Commit Graph
100 Commits
Author SHA1 Message Date
Florian KlinkandGitHub 9ec1837f59 gerrit: 3.13.6 -> 3.14.2 (#542749) 2026-07-19 21:49:17 +00:00
Florian Klink f7ebebed87 casync: drop fuse support
Upstream does not seem to support fuse3 any time soon:
https://github.com/systemd/casync/issues/269

Drop fuse support for now to get rid of our FUSE dependency.

Closes #534923.
2026-07-19 23:35:40 +02:00
Florian KlinkandGitHub b7be7c9f10 glasgow: print error message in case of firmware mismatch (#542691) 2026-07-16 21:50:14 +00:00
Florian Klink 3a707e29d6 glasgow: print error message in case of firmware mismatch
If the firmware doesn't reproduce, this currently fails without any
error message.

Instead, print a proper error, and a diff with the desired firmware
image.
2026-07-16 23:43:37 +02:00
Florian KlinkandGitHub 327df7d066 yosys: 0.62 -> 0.67 (#542197) 2026-07-16 21:10:19 +00:00
Florian KlinkandGitHub 6a146e7407 afew: 3.0.1 -> 4.0.1 (#541691) 2026-07-16 15:46:10 +00:00
Florian Klink 45d3f8a556 afew: use build-system, dependencies
Also drop the propagated dependency on setuptools, it's not needed
anymore since 4.0.0.
2026-07-16 17:38:37 +02:00
Florian Klink f6a8557194 afew: 4.0.0 -> 4.0.1 2026-07-16 17:38:37 +02:00
Florian KlinkandGitHub 1109536483 nixos/limine: fix location for boot.loader.limine.additionalFiles (#539368) 2026-07-07 22:55:07 +00:00
Florian Klink ea89265347 nixosTests.limine.additionalFiles: init
This adds a test to check the file actually exists, and that changes
update them, serving as a regression test for #537466.
2026-07-07 23:14:45 +03:00
Florian Klink 22ef2ba154 nixos/limine: fix location for boot.loader.limine.additionalFiles
The documentation describes this as a set of files copied to /boot, with
the attribute name denoting the destination file name in /boot.

This uses essentially the same description as refind, systemd-boot and
grub. However limine put it into limine_install_dir (/boot/limine by
default) by accident, which broke downstream users.

For example, nixos-apple-silicon uses boot.loader.limine.additionalFiles
(and similar directives for other bootloaders) to update its m1n1
bootloader (which chainloads into u-boot, which chainloads into the
bootloader selected in NixOS), and due to this bug, put new versions of
it in the wrong location, effectively never updating m1n1.

Fix this, by updating the location. The next commit adds a regression VM
test for it.
2026-07-07 23:14:45 +03:00
Florian KlinkandGitHub 8bb61a40df nixos/yggdrasil: Fix stray 0-byte /private-key file (#538065) 2026-07-06 12:19:39 +00:00
Florian KlinkandGitHub eaf9c05ffb idevicerestore: 1.0.0-unstable-2025-10-02 -> 1.0.0-unstable-2026-07-26 (#538357) 2026-07-04 13:38:22 +00:00
Florian Klink e18b99e430 idevicerestore: add flokli to maintainers 2026-07-04 15:19:43 +03:00
Florian Klink 108b0263ca idevicerestore: 1.0.0-unstable-2025-10-02 -> 1.0.0-unstable-2026-07-26
Changelog:

 - 45145e9 restore: Add support for restoring macOS 27 IPSWs via DFU
 - 405fcd1 asr: Increase timeouts for slow devices
 - 6163635 logger: fix crash and undefined behavior in logger_dump_hex with zero-length buffers
 - 74e3bd9 endianness.h: Default to little endian
 - a499b62 configure: Bump libimobiledevice and libirecovery version requirements
2026-07-04 15:19:43 +03:00
Florian KlinkandGitHub b690c8b0e6 jwx: 4.0.2 -> 4.1.0 (#537337) 2026-07-01 11:43:29 +00:00
Florian Klink c0baf70601 sleuthkit: use finalAttrs.src.name instead of hardcoding source 2026-06-30 16:23:44 +03:00
Florian Klink 5b08236250 dumpifs: use finalAttrs.src.name instead of hardcoding source 2026-06-30 16:20:59 +03:00
Florian KlinkandGitHub 9654659cd1 [staging-next] systemd: fix build on musl (#536118) 2026-06-29 18:14:32 +00:00
Florian KlinkandGitHub 917a5db343 tflint-plugins.tflint-ruleset-aws: 0.47.0 -> 0.48.0 (#536589) 2026-06-29 12:08:40 +00:00
Florian KlinkandGitHub 4493739a20 openresty: 1.27.1.2 -> 1.31.1.1; add update script (#536168) 2026-06-28 22:13:04 +00:00
Florian KlinkandGitHub c68fccff48 python3Packages.itables: 2.8.0 -> 2.8.1 (#530889) 2026-06-26 20:14:58 +00:00
Florian KlinkandGitHub 4d799e2be7 python3Packages.geotorch: 0.3.0 -> 0.4.0 (#531861) 2026-06-26 20:11:16 +00:00
Florian KlinkandGitHub 5699094b6a nixos/nginx: add lua option for Lua scripting support (#535081) 2026-06-26 10:49:44 +00:00
Florian KlinkandGitHub d2bde3cf5a Allow to pass extra initrd archives to the bootloader (#534265) 2026-06-26 10:46:37 +00:00
Florian KlinkandGitHub d406556640 nixos/journald-{gateway,remote}: remove TLS support (#535263) 2026-06-25 16:12:50 +00:00
Florian KlinkandGitHub 44080b1412 nixos/zigbee2mqtt: add RestartSec (#534020) 2026-06-25 15:01:37 +00:00
Florian KlinkandGitHub 68439b2129 nixos/etc: inline small regular files into the etc-overlay metadata image (#510323) 2026-06-25 13:20:50 +00:00
Florian Klink 03495efb8b nixos/pocket-id: clarify 'secrets' option
It's not immediately obvious that this takes the keys without the `_KEY`
suffix, so better document it.
2026-06-22 15:48:12 +03:00
Florian Klink 633f52c08e nixos/acme: remove unused symbols 2026-06-21 23:47:29 +03:00
Florian Klink 78d07871f5 nixos/acme: also allow _PATH-suffixed credential files
The acmedns backend consumes a ACME_DNS_STORAGE_PATH environment
variable.

Upstream does treat this file as mutable (if you create or delete
accounts through the CLI, it would update it. We don't do this in our
module).

But the possibility for edits is probably why they didn't go with
`ACME_DNS_CONFIG` env var for the contents (as they'd be read-only), or
a `ACME_DNS_CONFIG_FILE`. (And the fact that a
`ACME_DNS_STORAGE_PATH_FILE` env var with questionable usability exists
is due to this logic being generic for most env vars).

So instead of fighting upstream over this, let's simply make our module
assertion also accept `_PATH` suffixes for `credentialFiles`.

Fixes #344684.
2026-06-21 23:47:29 +03:00
Florian Klink 39e3856dd8 nixos/zigbee2mqtt: add RestartSec
After a cold reboot, zigbee2mqtt didn't properly come up.
The logs showed it crashed too often too quickly, and then systemd
stopped trying to restart it due to rate-limiting.

It might be due to the network not being up yet, or the Zigbee
coordinator still booting.

Either way, with a RestartSec=10, it did come up.
2026-06-21 23:03:43 +03:00
Florian Klink 93c9f9cde4 nixos/zigbee2mqtt: add AF_UNIX to RestrictAddressFamilies
zigbee2mqtt supports listening on unix domain sockets, if a path is
specified in the `frontend.host` config key.

This currently fails with the following log message:

> zigbee2mqtt[4551]: Error: listen EAFNOSUPPORT: address family not supported /path/to/zigbee2mqtt.sock

Listening on unix domain sockets is a reasonable thing to have enabled,
so let's add it to the list.
2026-06-20 21:40:59 +03:00
Florian KlinkandGitHub 50338ea4bc yarn-berry-fetcher: 1.3.0 -> 1.3.1 (#530830) 2026-06-13 08:18:11 +00:00
Florian KlinkandGitHub 1eee1a273e vzeroc-ice: 2.7.3 -> 2.7.2.20 (#530824) 2026-06-12 23:29:23 +00:00
Florian KlinkandGitHub ed1ce88e87 nixos/networkmanager: create the correct configured keyfile.path (#530008) 2026-06-11 22:51:12 +00:00
Florian KlinkandGitHub ee1573e79c nixos/lib/utils: fix escapeSystemdPath for paths with "." segments (#529688) 2026-06-11 22:49:35 +00:00
Florian KlinkandGitHub 69ec94f186 prometheus-xray-exporter: init at 1.0.0 (#530701) 2026-06-11 22:07:35 +00:00
Florian Klink 136070bde1 yarn-berry-fetcher: 1.3.0 -> 1.3.1
Changes since 1.3.0:

 - Cargo.toml: drop request blocking feature flag
   https://cyberchaos.dev/yuka/yarn-berry-fetcher/-/merge_requests/20
 - Replace fallible SourceWith[out]Integrity conversion with helper
   https://cyberchaos.dev/yuka/yarn-berry-fetcher/-/merge_requests/22
 - Inline write_zip_and_check into fetch_tgz_and_write_zip,
   add error handling to zip writing
   https://cyberchaos.dev/yuka/yarn-berry-fetcher/-/merge_requests/23
2026-06-11 22:20:34 +03:00
Florian Klink e49bc27926 zeroc-ice: 2.7.3 -> 2.7.2.20
As reported in
https://github.com/NixOS/nixpkgs/pull/475929#issuecomment-4671420403,
2.7.3 is nowhere to be found / has been scrubbed upstream.

We're only still able to build this because the FOD is in
cache.nixos.org.

Meanwhile 2.7.2.20 has been tagged however, and it has the patches from
https://github.com/zeroc-ice/mcpp/pull/12 merged, so let's update our
derivation to that.

We still keep an empty `patches = []` around, as we still don't want to
use the patches from the non-forked mcpp.
2026-06-11 21:54:26 +03:00
Florian KlinkandGitHub cbcd9bbfd9 nixos/users-groups: drop the weak-hash activation warning (#529154) 2026-06-08 21:19:54 +00:00
Florian KlinkandGitHub b8d2631686 nixos/cde: replace activation script with tmpfiles (#527625) 2026-06-08 21:17:51 +00:00
Florian KlinkandGitHub 75a5d4c2c1 yarn-berry-fetchers: Allow impure env vars (#522626) 2026-06-07 17:16:43 +00:00
Florian KlinkandGitHub cc6f15dd8a yarn-berry-fetcher: 1.2.3 -> 1.3.0 (#529185) 2026-06-07 17:16:10 +00:00
Florian Klink cd7818254b yarn-berry-fetcher: 1.2.3 -> 1.3.0
This now uses reqwest, so HTTP_PROXY works.

It also now has a --fetch-concurrency flag to make the amount of
download threads configurable.
2026-06-07 19:13:05 +03:00
Florian KlinkandGitHub 2c143253c7 mycelium: 0.7.9 -> 0.7.10 (#529067) 2026-06-07 10:21:07 +00:00
Florian KlinkandGitHub 8a81bb8bd1 umockdev: fix musl build (#528848) 2026-06-06 20:44:28 +00:00
Florian KlinkandGitHub a3fc1d9feb gocryptfs: stop depending on fuse (#527732) 2026-06-05 21:41:34 +00:00
Florian KlinkandGitHub 64fff67d3d gnomeExtensions.pop-shell: 1.2.0-unstable-2025-10-01 -> 1.2.0-unstable-2026-03-31 (#506387) 2026-06-04 10:48:36 +00:00
Florian Klink 063b1b777b nixosTests.gocryptfs: make test less flaky
Sometimes files take a bit to appear.
Wait for the file to be present to not run into this.
2026-06-03 23:00:08 +02:00
Florian Klink d31f1369fb gocryptfs: add passthru.tests 2026-06-02 21:00:11 +02:00
Florian Klink 14e17b46e4 nixosTests.gocryptfs: fix test
This actually didn't work due to multiple issues:

 - Some statements used machine.execute, swallowing nonzero exit codes.
   In this particular case, it caused the mountpoint to stick around.
 - using `fileSytems."/plain"` has no effect in VM tests,
   virtualisation.fileSystems."/plain" needs to be used instead
 - `switch-to-configuration test` was invoked, so not actually switching
   at all.
 - Checking for `data.txt` to be present is a bit brittle. /tmp can be
   cleaned up. We can just add a known text and grep for that.
2026-06-02 20:57:16 +02:00
Florian KlinkandGitHub 9408d6bb7e nixosTests.gocryptfs: init (#526791) 2026-06-01 19:53:16 +00:00
Florian KlinkandGitHub 39a1309432 python3Packages.itables: 2.7.3 -> 2.8.0 (#523737) 2026-05-29 21:38:09 +00:00
Florian KlinkandGitHub 0f69ec1866 buildRustCrate: parallelize build_bin via Makefile jobserver (#503809) 2026-05-29 16:45:33 +00:00
Florian KlinkandGitHub 3bc10caca5 mycelium: 0.7.8 -> 0.7.9 (#525445) 2026-05-29 12:21:50 +00:00
Florian Klink f07e336c3f nsncd: add --version-regex to updateScript
Upstream tagged a .1.5.2 version (with a trailing dot), and r-ryantm
keeps sending PRs to bump to that.

Set --version-regex of nix-update-script to hopefully prevent it from
doing this.

See https://github.com/twosigma/nsncd/issues/202
See https://github.com/NixOS/nixpkgs/pull/518824
Closes https://github.com/NixOS/nixpkgs/pull/524808
2026-05-29 12:17:34 +02:00
Florian KlinkandGitHub addc5d2b85 python3Packages.authlib: 1.7.0 -> 1.7.2 (#523956) 2026-05-28 14:00:04 +00:00
Florian KlinkandGitHub b62d8df99d nixos/systemd-lib: use structuredAttrs instead of passAsFile for makeUnit (#498934) 2026-05-28 13:55:04 +00:00
Florian KlinkandGitHub 16664e055b nixos/pam: Refactor for performance & readability (#525090) 2026-05-28 10:59:19 +00:00
Florian KlinkandGitHub 2fcba1bf8b lensfun: update lens database (#523491) 2026-05-25 17:28:27 +00:00
Florian KlinkandGitHub 7b300c668c netron: 9.0.8 -> 9.0.9 (#523991) 2026-05-25 13:54:27 +00:00
Florian KlinkandGitHub fcdcdc34dc netron: 8.8.2 -> 9.0.8 (#522149) 2026-05-23 11:32:53 +00:00
Florian KlinkandGitHub 1082c66e84 fcp: init @ 0.2.2 (#522620) 2026-05-21 14:01:13 +00:00
Florian KlinkandGitHub 56abc29872 mycelium: 0.7.7 -> 0.7.8 (#522285) 2026-05-21 11:18:45 +00:00
Florian KlinkandGitHub ed0aa30ccc python3Packages.pcodec: 1.0.1 -> 1.0.2 (#520382) 2026-05-20 06:39:19 +00:00
Florian KlinkandGitHub 798a77fbb2 tmux: fix NULL deref in control_write on uninitialized control client (#521870) 2026-05-20 06:26:47 +00:00
Florian Klink f8bd1063a3 netron: 8.8.2 -> 9.0.8
Includes a bump to Electon 42.
See #521305.
2026-05-20 08:50:33 +03:00
Florian KlinkandGitHub ec879e646e notmuch: fix darwin build (#519887) 2026-05-14 16:03:31 +00:00
Florian KlinkandGitHub 27198194e5 Add podocarp/speedtest_exporter package and module (#514624) 2026-05-14 12:36:40 +00:00
Florian KlinkandGitHub fa5e1fea60 libdigidocpp: 4.3.0 -> 4.4.0 (#519803) 2026-05-14 12:32:55 +00:00
Florian KlinkandGitHub 7b633a2bd3 web-eid-app: 2.8.0 -> 2.9.0 (#520056) 2026-05-14 12:32:49 +00:00
Florian Klink 613439273e otel-tui: 0.7.2 -> 0.7.3
Fixes a crash when receiving lots of traces.

Other release notes:
https://github.com/ymtdzzz/otel-tui/releases/tag/v0.7.3
2026-05-14 15:03:26 +03:00
Florian KlinkandGitHub 1bebb4390c grafana-alloy: fix cross-compile (#519136) 2026-05-11 20:09:52 +00:00
Florian KlinkandGitHub e8c7f3a3e9 swgp-go: 1.9.0 -> 1.10.0 (#519120) 2026-05-11 19:34:51 +00:00
Florian KlinkandGitHub ff4630523d python3Packages.schedula: skip form-extras test that lacks proper guard (#518458) 2026-05-09 20:35:55 +00:00
Florian KlinkandGitHub a2449ae281 buildRustCrate: support propagatedBuildInputs in crate overrides (#503956) 2026-05-09 11:50:38 +00:00
Florian KlinkandGitHub 195fce926c Add siebenmann/zfs_exporter package and related module (#514423) 2026-05-07 12:32:10 +00:00
Florian KlinkandGitHub 85a3681a84 gerrit: 3.13.5 -> 3.13.6 (#515501) 2026-05-07 10:04:29 +00:00
Florian KlinkandGitHub 45c452a695 gummi: fix build with gcc15 (#517393) 2026-05-07 10:00:20 +00:00
Florian KlinkandGitHub a41f8a50ec jwx: 4.0.1 -> 4.0.2 (#517509) 2026-05-07 09:57:45 +00:00
Florian KlinkandGitHub 28774125af python3Packages.bpython: fix build (#516519) 2026-05-04 16:22:32 +02:00
Florian KlinkandGitHub fa72287967 grafana-alloy: 1.15.1 -> 1.16.0 (#516010) 2026-05-04 09:39:40 +00:00
Florian KlinkandGitHub f08b3d1fe3 nixos/lib/systemd-lib: make unitNameType work with e.g. Rust regex (#515527) 2026-05-03 13:30:39 +00:00
Florian KlinkandGitHub 7b70cce3d6 nixos/profiles/base: add explicit support for ext filesystems (#516107) 2026-05-03 13:25:56 +00:00
Florian KlinkandGitHub 94df3a60ed nixos: unset vm.mmap_rnd_compat_bits on loongarch64 (#515236) 2026-05-01 03:10:11 +00:00
Florian KlinkandGitHub 2f78b6d723 nixos: Set mmap ASLR entropy dynamically (#513771) 2026-04-28 20:44:36 +00:00
Florian Klink 1359fafb73 notmuch: drop unused argument 2026-04-27 22:08:22 +03:00
Florian Klink a945658951 notmuch: update changelog URL
See #514132 for context.
2026-04-27 22:08:22 +03:00
Florian KlinkandGitHub 3666a67db3 python3Packages.authlib: add missing input joserfc (#514038) 2026-04-27 18:40:02 +00:00
Florian KlinkandGitHub 86b83eeaea authlib: 1.6.9 -> 1.7.0 (#513635) 2026-04-27 11:40:34 +00:00
Florian KlinkandGitHub f6770b8b9f lpac, easylpac: fix Darwin build (#513669) 2026-04-27 11:38:14 +00:00
Florian Klink f2fcde71fc easylpac: lookup lpac in $PATH on darwin, too 2026-04-27 14:25:34 +03:00
Florian Klink 38edd9a367 easylpac: remove linux restriction
lpac now builds for darwin too!
2026-04-27 14:25:34 +03:00
Florian Klink f13c7066dc lpac: fix darwin build
Build with libmbim and libqmi only on linux, as these fail to evaluate.
pcsclite is provided by apple framework, similar to #459045.

We also need to set CMAKE_OSX_ARCHITECTURES to avoid trying to build for
both architectures, which fails. This requires pulling in a patch that's
already accepted upstream, but not yet in a release.
2026-04-27 14:25:34 +03:00
Florian KlinkandGitHub af59f21843 nixos/systemd-networkd: add new options for v260 (#513521) 2026-04-26 12:26:37 +00:00
Florian KlinkandGitHub 074d5dc7ea nixos: Set mmap ASLR entropy to a safe default on AArch64 (#513672) 2026-04-26 12:15:29 +00:00
Florian KlinkandGitHub 414b0bf43c mycelium: 0.7.5 -> 0.7.6 (#513295) 2026-04-26 12:14:34 +00:00
Florian KlinkandGitHub fbebe4cdf5 nixos/systemd-networkd: Allow three value variant in ipv6AcceptRAConfig.RouteMetric option (#507540) 2026-04-26 11:55:37 +00:00
Florian KlinkandGitHub 6d1dcde37e sequoia-git: avoid rec keyword (#513676) 2026-04-26 11:34:39 +00:00