Commit graph

162569 commits

Author SHA1 Message Date
Vincent Laporte 113a7562fe ocamlPackages.lablgtk3: init at 3.0.beta1 2018-12-13 09:09:09 +00:00
Sarah Brofeldt eb250e2ddd
Merge pull request #51369 from dtzWill/update/v4l-utils-1.16.2
v4l_utils: 1.16.0 -> 1.16.2
2018-12-13 10:01:25 +01:00
Tor Hedin Brønner 4a8e6b5884
Merge pull request #51910 from etu/update-topicons
gnomeExtensions.topicons-plus: 21 -> 22
2018-12-13 09:50:04 +01:00
Sarah Brofeldt d77035596f
Merge pull request #51679 from gnidorah/intelmetool
intelmetool: init at 4.8.1
2018-12-13 09:49:56 +01:00
Ivan Kozik f1b814a879 pythonPackages.lmdb: enable tests (#51931) 2018-12-13 09:08:05 +01:00
Ivan Kozik 2232135cf9 pythonPackages.Yapsy: 1.11.223 -> 1.12.0 and enable tests (#51925) 2018-12-13 08:30:49 +01:00
gnidorah bc4c3e5cb9 intelmetool: init at 4.8.1 2018-12-13 09:41:11 +03:00
David McKay 47f008676f bibata-cursors: init at 0.4.1 (#51871) 2018-12-13 00:21:55 +00:00
Alexey Shmalko f8d0069dc6
Merge pull request #51917 from nyanloutre/electron-cash-fix-unstable
electron-cash: 3.3.1 -> 3.3.2
2018-12-13 02:04:58 +02:00
Alyssa Ross b450083ee3
Merge pull request #51884 from alyssais/bundlerEnv-groups
bundlerEnv: improve handling of groups
2018-12-12 23:51:52 +00:00
Jörg Thalheim 5feba458a2
Merge pull request #50316 from arianvp/fix-dynamic-user
Disable nscd caching
2018-12-12 23:18:09 +00:00
Rok Garbas 7cbb09a2ec vimPlugins: update all plugins to latest and adding vimux and neovim-sensible plugins 2018-12-12 22:09:39 +01:00
Jan Tojnar 25ab74f853
Merge pull request #51889 from jtojnar/gnome-3.30.3
Gnome 3.30.3
2018-12-12 21:27:28 +01:00
Rok Garbas c2f6ab16a9 powerline-fonts: 2017-05-25 -> 2018-11-11 2018-12-12 20:59:07 +01:00
Jan Tojnar 09eae5380f
gnome3.libgnome-games-support: 1.4.2 → 1.4.3 2018-12-12 20:01:00 +01:00
Jan Tojnar ed14b1e688
gnome3.nautilus: 3.30.4 → 3.30.5 2018-12-12 20:01:00 +01:00
Jan Tojnar 679cadbd7a
gnome3.seahorse: 3.30 → 3.30.1.1 2018-12-12 20:01:00 +01:00
Jan Tojnar 1015575c09
gnome3.libgda: 5.2.5 → 5.2.8 2018-12-12 20:00:59 +01:00
Jan Tojnar aaaf48b2aa
libgda: move from gnome3.libgda 2018-12-12 20:00:59 +01:00
Jan Tojnar 929bf748e8
gnome3.gnome-tweaks: 3.30.1 → 3.30.2 2018-12-12 20:00:59 +01:00
Jan Tojnar 7f709c3d21
gnome3.vte: 0.54.2 → 0.54.3 2018-12-12 20:00:59 +01:00
Jan Tojnar 1079262d28
gnome3.totem: 3.26.2 → 3.30.0 2018-12-12 20:00:58 +01:00
Jan Tojnar 057d910e12
gnome3.gnome-contacts: 3.30.1 → 3.30.2 2018-12-12 20:00:58 +01:00
Jan Tojnar e77a8a5e74
evolution-data-server: 3.30.2 → 3.30.3 2018-12-12 20:00:58 +01:00
Jan Tojnar 52691cf7d9
gnome3.gnome-maps: 3.30.2.1 → 3.30.3 2018-12-12 20:00:58 +01:00
Jan Tojnar 6c138622a4
gnome3.evolution: 3.30.2 → 3.30.3 2018-12-12 20:00:46 +01:00
Aneesh Agrawal 3dbbd9f8c2 pgcli: 2.0.0 -> 2.0.1
Changelog: https://github.com/dbcli/pgcli/blob/master/changelog.rst#201
Major feature of note is Python 3.7 support.

Also default to using Python 3 because this is an application.
2018-12-12 13:56:41 -05:00
Jörg Thalheim 007dfa8adc
Merge pull request #51830 from georgewhewell/cool-retro-term-fix-darwin
cool-retro-term: fix on darwin
2018-12-12 17:53:23 +00:00
nyanloutre 2b5ceb2852 electron-cash: 3.3.1 -> 3.3.2 2018-12-12 18:30:45 +01:00
Jörg Thalheim 0d692c09e4
Merge pull request #51913 from Baughn/patch-5
nvidia: Improve assertion documentation
2018-12-12 17:28:44 +00:00
Alyssa Ross 77d25015e6
Merge pull request #51909 from Izorkin/mysql55
mysql55: 5.5.60 -> 5.5.62
2018-12-12 17:21:34 +00:00
Izorkin 594fc72a32 mysql55: broken on aarch64 2018-12-12 20:07:51 +03:00
Jörg Thalheim e2ed882c17
Merge pull request #51905 from Profpatsch/strip-nondeterminism-1.0.0
strip-nondeterminism: 0.016 -> 1.0.0
2018-12-12 17:03:31 +00:00
Jörg Thalheim f49e2ad365
Merge pull request #51758 from rasendubi/pynvim
pythonPackages.neovim-0.3.0 -> pythonPackages.pynvim-0.3.1
2018-12-12 17:01:25 +00:00
George Whewell 7875e817cf change qmltermwidget version to 2018-11-24 and add unstable to name 2018-12-12 16:32:28 +00:00
Michael Weiss e01209f2c7 signal-desktop: 1.18.1 -> 1.19.0
A new dependency (at-spi2-atk) is required for libatk-bridge-2.0.so.

Also libstdc++.so.6 is now required from stdenv.cc.cc.lib (stdenv.cc.cc
doesn't offer it). The binary will only find libstdc++.so.6 via
$LD_LIBRARY_PATH (i.e. not via rpath, the run-time search path).
2018-12-12 17:30:49 +01:00
Robert Schütz 34f04810cf
Merge pull request #51904 from worldofpeace/secretstorage/3.1.0
python3Packages.secretstorage: 2.3.1 -> 3.1.0
2018-12-12 16:50:41 +01:00
Svein Ove Aas 4e5b365644
nvidia: Improve assertion documentation 2018-12-12 15:25:39 +00:00
worldofpeace 851e2c7e21 python3Packages.secretstorage: 2.3.1 -> 3.1.0
Changelog: https://github.com/mitya57/secretstorage/blob/master/changelog

Pertinent changes:

- ported from dbus-python to jeepney
  Thusly Python 3.5 or newer is required.
- We can use pypi
- Add pygobject3
2018-12-12 10:22:57 -05:00
worldofpeace 9f66479ffc python3Packages.jeepney: init at 0.4 2018-12-12 10:22:56 -05:00
Arian van Putten 1d5f4cbb78 nixos/nscd: Add a descriptive comment to the nscd configuration 2018-12-12 15:35:46 +01:00
Arian van Putten ef6ed03e2f nixos/nscd: Address doc feedback 2018-12-12 15:35:40 +01:00
Arian van Putten a74619c1ae nixos/nscd: also add netgroup to the config
It was the last database that wasn't listed.
2018-12-12 15:35:40 +01:00
Arian van Putten de76c16f9c nixos/nscd: Merge nscd and sssd-nscd config 2018-12-12 15:35:40 +01:00
Arian van Putten 335b41b3fb nixos/nscd: Add release note entry about nscd changes 2018-12-12 15:35:40 +01:00
Arian van Putten 99d3279952 nixos/nscd: Disable negative caching of hosts
Hopefully fixes #50290
2018-12-12 15:35:40 +01:00
Arian van Putten e712417936 nixos/nscd: Disable caching of group and passwd
Systemd provides an option for allocating DynamicUsers
which we want to use in NixOS to harden service configuration.
However, we discovered that the user wasn't allocated properly
for services. After some digging this turned out to be, of course,
a cache inconsistency problem.

When a DynamicUser creation is performed, Systemd check beforehand
whether the requested user already exists statically. If it does,
it bails out. If it doesn't, systemd continues with allocating the
user.

However, by checking whether the user exists,  nscd will store
the fact that the user does not exist in it's negative cache.
When the service tries to lookup what user is associated to its
uid (By calling whoami, for example), it will try to consult
libnss_systemd.so However this will read from the cache and tell
report that the user doesn't exist, and thus will return that
there is no user associated with the uid. It will continue
to do so for the cache duration time.  If the service
doesn't immediately looks up its username, this bug is not
triggered, as the cache will be invalidated around this time.
However, if the service is quick enough, it might end up
in a situation where it's incorrectly reported that the
user doesn't exist.

Preferably, we would not be using nscd at all. But we need to
use it because glibc reads  nss modules from /etc/nsswitch.conf
by looking relative to the global LD_LIBRARY_PATH.  Because LD_LIBRARY_PATH
is not set globally (as that would lead to impurities and ABI issues),
glibc will fail to find any nss modules.
Instead, as a hack, we start up nscd with LD_LIBRARY_PATH set
for only that service. Glibc will forward all nss syscalls to
nscd, which will then respect the LD_LIBRARY_PATH and only
read from locations specified in the NixOS config.
we can load nss modules in a pure fashion.

However, I think by accident, we just copied over the default
settings of nscd, which actually caches user and group lookups.
We already disable this when sssd is enabled, as this interferes
with the correct working of libnss_sss.so as it already
does its own caching of LDAP requests.
(See https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/usingnscd-sssd)

Because nscd caching is now also interferring with libnss_systemd.so
and probably also with other nsss modules, lets just pre-emptively
disable caching for now for all options related to users and groups,
but keep it for caching hosts ans services lookups.

Note that we can not just put in /etc/nscd.conf:
enable-cache passwd no

As this will actually cause glibc to _not_ forward the call to nscd
at all, and thus never reach the nss modules. Instead we set
the negative and positive cache ttls  to 0 seconds as a workaround.
This way, Glibc will always forward requests to nscd, but results
will never be cached.

Fixes #50273
2018-12-12 15:35:40 +01:00
Arian van Putten eb88005130 nixos/systemd: Add a regression test for #50273 2018-12-12 15:35:39 +01:00
Elis Hirwing e8ef485246
gnomeExtensions.topicons-plus: 21 -> 22 2018-12-12 14:39:50 +01:00
Profpatsch 5cbd18af4e strip-nondeterminism: 0.016 -> 1.0.0
Add to toplevel as well.
2018-12-12 14:38:13 +01:00