Age | Commit message (Collapse) | Author |
|
This makes updates following the upstream guide possible.
|
|
|
|
Set CapabilityBoundingSet, AmbientCapabilities and NoNewPrivileges as described in XTLS/xray-install.
|
|
|
|
nixos: Fix systemd-boot test
|
|
roberth/fix-nixos-tests-nixos-rebuild-specialisations
nixosTests.nixos-rebuild-specialisations: Fix
|
|
|
|
nixos/qemu-vm: introduce `virtualisation.directBoot`
|
|
|
|
... by making the alternate configs available in machine's store.
|
|
ElvishJerricco/sd-s1-networkd-stop-on-switch-root
systemd stage 1 networking: Stop systemd-networkd on switch-root
|
|
Capturing from /dev/video* requires being member of the video group.
|
|
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
|
|
As with many things, we have scenarios where we don't want to boot on a
disk / bootloader and also we don't want to boot directly.
Sometimes, we want to boot through an OptionROM of our NIC, e.g. netboot
scenarios or let the firmware decide something, e.g. UEFI PXE (or even
UEFI OptionROM!).
This is composed of:
- `directBoot.enable`: whether to direct boot or not
- `directBoot.initrd`: enable overriding the
`config.system.build.initialRamdisk` defaults, useful for
netbootRamdisk for example.
This makes it possible.
|
|
|
|
|
|
nixos/modules: Fix ShellCheck lints
|
|
nixosTests: fix tests that relies on an empty rootfs using a bootloader
|
|
Same rationale as in caf6f41e2e1.
|
|
Same rationale as in caf6f41e2e1.
|
|
Missed deprecation fixup during the bootDisk PR.
|
|
Same rationale as caf6f41e2e1.
|
|
Same rationale as caf6f41e2e1.
|
|
Same rationale as caf6f41e2e1.
|
|
Same rationale as caf6f41e2e1.
|
|
Same rationale as caf6f41e2e1.
|
|
Same rationale as caf6f41e2e1.
|
|
Same rationale as caf6f41e2e1.
|
|
This is necessary because this test relies on switching the root fs to an empty one which
does not have a Nix store available in stage 1, therefore, we have to make this test
host-store only.
A better fix in the long term is to evaluate whether this is worth to enable a proper
Nix store image for it with EROFS?
|
|
foundationdb: cleanup
|
|
home-assistant: 2023.5.4 -> 2023.6.0
|
|
|
|
mongodb-4_2: drop
|
|
|
|
This essentially backports
https://github.com/systemd/systemd/pull/27791. `systemd-networkd.service`
is sent the `SIGTERM` signal, but it is not required to be stopped
before `initrd-switch-root.target` is reached, despite the use of
`systemctl isolate initrd-switch-root.target`. This is because when
there is no ordering at all between two units, and a transaction stops
one and starts the other, the two operations can happen
simultaneously. This means the service could still be running when
`switch-root` actually occurs. Then, stage 2 systemd will see the
service still running and decide it doesn't need to add a start
operation for it to its initial transaction. Finally, the service
exits, but only after it's already too late. If, however, there is any
ordering at all between a stopping unit and a starting unit, then the
stop operation will be done first. This way, we ensure that the
service is properly exited before doing `switch-root`.
This is something to keep in mind going forward. There may be other
services that need this treatment. These `before` and `conflicts`
definitions are the correct way to ensure a unit is actually stopped
before you reach initrd-switch-root
|
|
This isn't actually wanted by any units by default.
|
|
As recommended by ShellCheck
<https://www.shellcheck.net/wiki/SC2174>.
|
|
As recommended by ShellCheck
<https://github.com/koalaman/shellcheck/wiki/SC2034>.
|
|
himalaya: 0.7.3 -> 0.8.0
|
|
mediawiki: fix group used when apache2 is used
|
|
Mentioning esphome in the config is now causing an error. Check for the
backup module post-restart, not esphome.
|
|
mariadb: init at 11.0.2 + upgrade default from 10.6 to 10.11
|
|
|
|
nixos/sshd: add StrictModes option
|
|
unifi: drop pennae from maintainers
|
|
which is the next LTS release
|
|
|
|
|
|
nixos/hardware/i2c: fix uaccess rule
|
|
nixos/modules/web-servers/nginx/default.nix: fix minor typo
|