| Age | Commit message (Collapse) | Author |
|---|
|
Stage-2 cleanup
|
|
slimserver: Init at 7.9.0 (pkg + module)
|
|
ssmtp: use the authPassFile option instead of authPass
|
|
|
|
gyre-fonts provides high-quality TrueType substitutes for standard PostScript
fonts. Unlike most other distributions, NixOS does not install Ghostscript and
its Type 1 fonts by default, so we must get the standard fonts elsewhere.
|
|
The `preset` option was accidentally removed.
|
|
autorandr: 53d29f9 -> 855c18b and module
|
|
* Fix `fadeExclude` description.
* Fix typo in `shadowExclude`.
|
|
avahi-daemon service: Add option to enable point-to-point interfaces.
|
|
|
|
earlyoom service: init
|
|
fvwm module: init; now fvwm can be used as an xserver.windowManager
|
|
Bindfs (FUSE) provides a pseudo-filesystem and as such does not benefit from a file system check.
|
|
|
|
For whatever reason, the OCR code is not detecting ALICE but is BOB.
OCR output from login screen (blank lines omitted):
> Session none + icewm
> 08:41 <
> Thursday, April 6, 2017
> BOB FOOBAR
> Select your user and enter password
|
|
|
|
|
|
The LUKS header can be on another device (e.g. a USB stick). In my case
it can take up to two seconds until the partition on my USB stick is
available (i.e. the decryption fails without this patch). This will also
remove some redundancy by providing the shell function `wait_target` and
slightly improve the output (one "." per second and a success/failure
indication after 10 seconds instead of always printing "ok").
|
|
|
|
this way `set -x` is set early
|
|
|
|
|
|
|
|
Fixes "fsck.ext4 doesn't exist, not checking file system on ...".
|
|
Restarting them is useless since the filesystem is already
checked. Worse, restarting them causes the filesystem to be unmounted.
Also remove an override for systemd-rkill@.service which no longer
exists.
|
|
This reduces the time window during which IP addresses are gone during
switch-to-configuration. A complication is that with stopIfChanged =
true, preStop would try to delete the *new* IP addresses rather than
the old one (since the preStop script now runs after the switch to the
new configuration). So we now record the actually configured addresses
in /run/nixos/network/addresses/<interface>. This is more robust in
any case.
Issue https://github.com/NixOS/nixops/issues/640.
|
|
|
|
This reverts commit 71710fd099ce6c46b54f05c6cf769e73cf11d49f.
|
|
rtl8192su-firmware: init at unstable-2016-10-05
|
|
This reverts commit fbe6d23624b0b62cb5754d37ab81007cd4c035ab.
this breaks every non-ec2 (non-hvm) system
cc @edolstra
|
|
|
|
|
|
|
|
Unfortunately, somewhere between 16.09 and 17.03, paravirtualized
instances stopped working. They hang at the pv-grub prompt
("grubdom>"). I tried reverting to a 4.4 kernel, reverting kernel
compression from xz to bzip2 (even though pv-grub is supposed to
support xz), and reverting the only change to initrd generation
(5a8147479e794d5932273d01790c3602b8abeedc). Nothing worked so I'm
giving up.
|
|
|
|
|
|
|
|
[doc] improve "getting the sources" chapter
|
|
|
|
|
|
|
|
|
|
Docker socket is world writable. This means any user on the system is
able to invoke docker command. (Which is equal to having a root access
to the machine.)
This commit makes socket group-writable and owned by docker group.
Inspired by
https://github.com/docker/docker/blob/master/contrib/init/systemd/docker.socket
|
|
|
|
|
|
|
|
There was one confusing recent failure of this:
http://cache.nixos.org/log/myla8bc17j8spmifdxmrz9jswxwsf5w6-vm-test-run-hibernate.drv
I don't have any real ideas on what could cause the problem but there is
at least one theoretical one: the system starts hibernating before the
listener process manages to open the TCP port for listening, and it can't
open it after resuming because not enough pages from the netcat binary
have been paged in (and as the 9p filesystem holding it is now toast,
they can't be loaded anymore).
|
|
|
|
Commit 75f131da02c00027b9a8240fb74d117cb0f9d9cf added
`chown 'nginx:nginx' '/var/lib/acme'` to the pre-start script,
but since it doesn't use `chown -R`, it is possible that there
are older existing subdirs (like `acme-challenge`)
that are owned to `root` from before that commit went it.
|
|
|
