Eelco Dolstra
7f7e18cfce
Enable hardlink and symlink restrictions
...
This prevents many time-of-check-time-of-use security bugs. Ubuntu
enables these by default as well so they shouldn't cause many
problems.
2013-03-02 20:06:02 +01:00
Eelco Dolstra
080bf5614f
Add a module for setting sysctl parameters
...
This adds an option ‘boot.kernel.sysctl’ and generates a file
/etc/sysctl/nixos.conf read by systemd-sysctl.service.
2013-03-02 20:06:02 +01:00
Bjørn Forsman
ec2378f07b
systemd-logind: fix config file header: [Logind] => [Login]
...
man logind.conf clearly states that the header is [Login] (no 'd').
Without this fix services.logind.extraConfig does not take effect
because logind ignores the invalidly named section.
2013-03-02 19:45:47 +01:00
Shea Levy
7e10bcb4fd
modules/testing/minimal-kernel: linuxPackagesFor no longer takes a 'self' argument
2013-03-02 09:10:58 -05:00
David Guibert
ed6e0262e0
bring bridge interfaces up
...
The bridge is not becoming operational until it is brought into the UP state.
When the bridge is statically configured, this is mandatory.
2013-03-02 10:24:46 +01:00
Bjørn Forsman
08c9a0ad5e
Add service.logind.extraConfig option
...
So that we can customize systemd-logind in configuration.nix.
Example:
services.logind.extraConfig = "HandleLidSwitch=ignore";
See man logind.conf for available options.
2013-03-02 00:24:34 +01:00
Rickard Nilsson
568683316b
mpd: Start service with exec
2013-02-28 19:26:19 +01:00
Lluís Batlle i Rossell
8a7b44a5e7
xfs wants 'crc32c', to be able to mount anything
...
Like btrfs.
2013-02-27 22:22:12 +01:00
Shea Levy
7ac425a22f
Merge pull request #102 from iElectric/deluge
...
Add deluged and deluge.web services
2013-02-27 11:19:08 -08:00
Domen Kozar
c50d7cbc8d
use ExecStart instead of script, this way we get rid of systemd wrapper scripts
2013-02-27 20:13:14 +01:00
Domen Kozar
bb89f2eb99
We don't need an explicit uid/gid. We also don't need web to depend
...
on deluged, since it can be started before it.
2013-02-27 20:06:10 +01:00
Shea Levy
f3d4d24d6b
dd-agent: Run as a separate user
2013-02-27 09:25:37 -05:00
Domen Kozar
71f4330d3f
use path to deluge script correctly
2013-02-27 10:58:28 +01:00
Domen Kozar
99edd5d575
run deluge under deluge user/group
2013-02-26 22:53:52 +01:00
Eelco Dolstra
85188d19c5
nix-daemon: Restart when nix.conf changes
2013-02-26 03:15:29 +01:00
Domen Kozar
259fd8e34a
don't use quotes when setting example to true
2013-02-25 22:39:47 +01:00
Rickard Nilsson
cc3549fa34
Add ActiveMQ service
2013-02-25 16:50:10 +01:00
Rickard Nilsson
e44021494c
mongodb: Add initialisation service
...
The mongodb service runs as user mongodb, and therefore
the preStart-script has no permissions to set up mongodb
directories. This is solved by adding an initialisation
service that runs as root and just sets up the required
directories.
2013-02-25 09:04:31 +01:00
Domen Kozar
a6f0d984fe
Add deluge and deluge web services
2013-02-24 17:33:48 +01:00
Rickard Nilsson
b0f33f2052
Add options for setting theme and setup-script in KDM
2013-02-22 09:34:36 +01:00
Rok Garbas
f2a0710bee
Merge pull request #97 from iElectric/mpd.mkdir
...
mkdir musicDirecotry for mpd before startnig the service
2013-02-21 20:00:48 -08:00
Domen Kozar
a953ed57c9
mkdir musicDirecotry for mpd before startnig the service
2013-02-21 23:05:40 +01:00
Shea Levy
e0f35b77d8
rename.nix: Remove annoying traces
2013-02-21 14:43:02 -05:00
Shea Levy
497aeabd23
systemd automatically mounts securityfs (if it's enabled)
2013-02-21 14:22:18 -05:00
Shea Levy
fb7b7a2887
Update EFI installation CD to meet the requirements of the new gummiboot
2013-02-21 13:30:42 -05:00
Shea Levy
5f29704861
gummiboot-builder.py: Update to latest gummiboot
2013-02-21 12:40:33 -05:00
Eelco Dolstra
7b8958b6c5
Fix the boot.hardwareScan option
...
Fixes #95 .
2013-02-21 11:32:51 +01:00
viric
f43729298d
Merge pull request #93 from aristidb/master
...
Implementation: services.xserver.driSupport32Bits: Intel support via mesa (#92 )
2013-02-20 11:52:22 -08:00
Shea Levy
e80cfe7d2d
gummiboot-builder.py: Not rewriting entries probably doesn't save much time, and is problematic in the case where you delete the latest generation before your rebuild
2013-02-19 20:47:23 -05:00
Shea Levy
6c6d40452f
Stage 1 mounts securityfs, so require that in the kernel
2013-02-19 20:47:23 -05:00
Vladimír Čunát
9de455cf2e
Merge pull request #53 from jcumming/zfs.121204
...
add a zfs module
2013-02-19 11:35:20 -08:00
Vladimír Čunát
8e765363d5
Merge pull request #86 from maggesi/blcr-updates
...
blcr module: fix (and simplify)
2013-02-19 11:30:52 -08:00
Vladimír Čunát
c2a213e559
Merge pull request #70 from cpages/master
...
Support driSupport32Bit for nvidia legacy 304
2013-02-19 11:29:14 -08:00
Aristid Breitkreuz
37be1c8982
x11/mesa: driSupport32Bit for the mesa implementation
2013-02-19 18:28:25 +01:00
Shea Levy
338ef594c7
Add boot.initrd.compressor option
2013-02-19 11:55:39 -05:00
Shea Levy
b83be79adf
default-websockify: Stop when reconfigured (i.e. new ports added/removed)
2013-02-18 11:55:46 -05:00
Shea Levy
762ea5c578
websockify: Add unit descriptions
2013-02-18 11:55:10 -05:00
Shea Levy
969fe07be6
Websockify: End descriptions with a period.
2013-02-18 11:51:33 -05:00
Eelco Dolstra
18e8724e64
Log the configuration when booting / switching
2013-02-18 15:39:47 +01:00
Eelco Dolstra
202340e3f6
nixos-rebuild build-vm: Override filesystems defined in the normal config
2013-02-18 15:39:47 +01:00
Peter Simons
a5e443295b
Merge pull request #90 from iElectric/xbmc
...
Add xbmc window manager
2013-02-18 01:31:43 -08:00
Peter Simons
09bfc9a53e
modules/config/fonts.nix: revert "export GDFONTPATH in /etc/profile"
...
This reverts commit 2802538dc2
. The idea
was good, but unfortunately $GDFONTPATH has a different format, i.e.
programs that use this variable don't descend into the directories
listed here like fontconfig does, so we cannot use the same values for
both settings.
2013-02-17 23:13:27 +01:00
Peter Simons
2802538dc2
modules/config/fonts.nix: export GDFONTPATH in /etc/profile
...
Set the environment variable GDFONTPATH to the list of directories where fonts
are expected to be installed. This is search path is used by same GD-based
applications, such as Gnuplot.
Alternatively, we could rely on fontconfig to achieve the same thing, i.e. by
running
for n in $(fc-list | sed -r -e 's|^([^:]+):.*$|\1|'); do echo $(dirname "$n"); done | sort | uniq
to get that list at run-time, but the static approach feels more deterministic.
2013-02-17 22:47:08 +01:00
Domen Kozar
4a66331625
add xbmc window manager
2013-02-16 23:19:09 +01:00
Eelco Dolstra
233cc2fdaa
Add a module for MiniDLNA
...
Now my NixOS machine can serve videos to my Bluray player!
2013-02-16 23:08:53 +01:00
Shea Levy
08fdc234c8
Fix manual build
2013-02-15 14:36:20 -05:00
Shea Levy
59a4df3159
Add websockify service
2013-02-14 21:50:41 -05:00
Shea Levy
3ad424632b
Linux 3.6 has been EOL'd, hopefully 3.7 works for the fuloong2f
2013-02-14 14:37:00 -05:00
Shea Levy
b669633d63
gummiboot-builder.py: Handle the case where there's no /etc/machine-id.
...
Bug hit by add^_ in IRC when installing from the livecd, as there's no /mnt/etc/machine-id
2013-02-12 10:47:52 -05:00
Eelco Dolstra
46b7ddf402
Add option to disable predictable network interface naming
2013-02-11 16:01:01 +01:00