Commit graph

164605 commits

Author SHA1 Message Date
Aristid Breitkreuz 167e748d94 insync: 1.4.5.37069 -> 1.5.5.37367 2018-12-27 18:07:06 +01:00
Silvan Mosberger a80f819926
Merge pull request #51945 from senden9/patch-1
Update oh-my-zsh.xml - Adapt parametername
2018-12-27 18:03:11 +01:00
Frederik Rietdijk 364c59dd94 python.pkgs.pytest_xdist: pytest-forked is needed during runtime, fixes #45060 2018-12-27 15:26:22 +01:00
R. RyanTM ebe05a7109 bacula: 9.2.2 -> 9.4.1 (#52924)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/bacula/versions
2018-12-27 15:12:54 +01:00
Elis Hirwing 544e7157b3 dmrconfig: 1.0 -> 1.1 (#52961)
Changes: https://github.com/sergev/dmrconfig/releases/tag/1.1
2018-12-27 15:11:28 +01:00
Dmitry Kalinkin 3edd5cb227
Merge pull request #51294 from eadwu/nvidia_x11/legacy_390
nvidia: expose nvidia_x11_legacy390
2018-12-27 09:08:53 -05:00
Joachim Fasting ea4f371627
nixos/security/misc: expose SMT control option
For the hardened profile disable symmetric multi threading.  There seems to be
no *proven* method of exploiting cache sharing between threads on the same CPU
core, so this may be considered quite paranoid, considering the perf cost.
SMT can be controlled at runtime, however.  This is in keeping with OpenBSD
defaults.

TODO: since SMT is left to be controlled at runtime, changing the option
definition should take effect on system activation.  Write to
/sys/devices/system/cpu/smt/control
2018-12-27 15:00:49 +01:00
Joachim Fasting e9761fa327
nixos/security/misc: expose l1tf mitigation option
For the hardened profile enable flushing whenever the hypervisor enters the
guest, but otherwise leave at kernel default (conditional flushing as of
writing).
2018-12-27 15:00:48 +01:00
Joachim Fasting 84fb8820db
nixos/security/misc: factor out protectKernelImage
Introduces the option security.protectKernelImage that is intended to control
various mitigations to protect the integrity of the running kernel
image (i.e., prevent replacing it without rebooting).

This makes sense as a dedicated module as it is otherwise somewhat difficult
to override for hardened profile users who want e.g., hibernation to work.
2018-12-27 15:00:47 +01:00
Joachim Fasting 9db84f6fcd
nixos/security/misc: use mkMerge for easier extension 2018-12-27 15:00:46 +01:00
Frederik Rietdijk 2534dddaa9 pandoc: fix build, unbreaks metrics job 2018-12-27 14:42:07 +01:00
markuskowa b8f0e2ee2f
Merge pull request #52847 from r-ryantm/auto-update/lmdb
lmdb: 0.9.22 -> 0.9.23
2018-12-27 14:22:51 +01:00
markuskowa 98561c789c
Merge pull request #52597 from lopsided98/lvm2-no-parallel
lvm2: disable parallel building
2018-12-27 14:21:25 +01:00
Orivej Desh 21f04bc66a pythonPackages.sip: enable parallel building 2018-12-27 13:10:59 +00:00
markuskowa d12025627f
Merge pull request #52950 from agracie/fix-mkl
mkl: fix hash on Darwin
2018-12-27 14:02:37 +01:00
Orivej Desh (NixOS) 880de7a9bc
Merge pull request #52956 from orivej/sip-module
pythonPackages.sip: make sip-module name overridable
2018-12-27 12:04:29 +00:00
Orivej Desh 666be18aa3 opentx: fix build, support building tests
It checks for "nano" with "if(NOT NANO STREQUAL NO)".

Broken since https://hydra.nixos.org/build/83296608 (#48286).
2018-12-27 11:40:50 +00:00
Orivej Desh 4ec84c297c pythonPackages.pyqt5: import sip as PyQt5.sip
pyqt5 5.11 has switched from sip to PyQt5.sip.
2018-12-27 11:17:22 +00:00
Orivej Desh bf1a563af0 pythonPackages.sip: make sip-module name overridable
The author of sip wants it to be a private dependency of other packages by
making it importable under different names.
2018-12-27 11:17:22 +00:00
Vladyslav M ae002fe44e
Merge pull request #52955 from Gerschtli/update/cargo-release
cargo-release: 0.10.0 -> 0.10.5
2018-12-27 12:57:18 +02:00
lewo 23ebff30a3
Merge pull request #52109 from djahandarie/master
dockerTools.buildImage: fix two bugs introduced in c88337c9ac
2018-12-27 11:17:51 +01:00
Vladyslav Mykhailichenko db5fe5d240
cargo-release: fix darwin build 2018-12-27 11:46:50 +02:00
Mario Rodas 1764870813 python37: fix darwin build
Remove issue24658 patch because is already fixed and backported to
Python 3.7 178d1c0777
2018-12-27 09:27:59 +01:00
Mario Rodas 31680c54e1 python36: fix darwin build
Remove issue24658 patch because is already fixed and backported to
Python 3.6 a5ebc205be
2018-12-27 09:27:59 +01:00
Pascal Wittmann 9f2f78b7e2
Merge pull request #52820 from r-ryantm/auto-update/pdfpc
pdfpc: 4.2.1 -> 4.3.0
2018-12-27 08:45:11 +01:00
Pascal Wittmann 9ddad11c16
Merge pull request #52877 from r-ryantm/auto-update/global
global: 6.6.2 -> 6.6.3
2018-12-27 08:44:36 +01:00
worldofpeace f3d4c91a97
Merge pull request #52954 from worldofpeace/granite/5.2.2
granite: 5.2.1 -> 5.2.2
2018-12-27 02:32:57 -05:00
worldofpeace ea331218a0 granite: various cleanups
This is just stuff that's in #48637 already that I wanted to sync.

In detail it's:

  - Patching in the use of meson

  - Add wrapGAppsHook and hicolor-icon-theme
    There's a demo application and granite
     provides some generic icons.

  - Included patches so third party apps still work
2018-12-27 02:27:29 -05:00
worldofpeace 3cf8821ce3
Merge pull request #52786 from romildo/upd.matcha
matcha: 2018-11-12 -> 2018-12-24
2018-12-26 23:55:17 -05:00
worldofpeace 3e6e9f5639
Merge pull request #52872 from r-ryantm/auto-update/kid3
kid3: 3.6.2 -> 3.7.0
2018-12-26 23:45:33 -05:00
worldofpeace 984c843181
Merge pull request #52895 from ivan/qbittorrent-4.1.5
qbittorrent: 4.1.4 -> 4.1.5
2018-12-26 22:06:22 -05:00
Tobias Happ f15466ecf7 cargo-release: 0.10.0 -> 0.10.5 2018-12-27 04:04:11 +01:00
worldofpeace 3ccb95ea81
Merge pull request #52949 from ivan/comment-fix
all-packages.nix: remove obsolete comments
2018-12-26 22:00:33 -05:00
worldofpeace 9f06d1885d granite: 5.2.1 -> 5.2.2 2018-12-26 21:48:47 -05:00
Orivej Desh 056627a3bf Merge "cura: 3.4.1 -> 3.6.0" 2018-12-27 02:26:19 +00:00
Orivej Desh 8112354f4f cura: 3.4.1 -> 3.6.0 2018-12-27 02:21:02 +00:00
Orivej Desh 3ce19d96b3 curaengine: 3.4.1 -> 3.6.0 2018-12-27 02:19:24 +00:00
Orivej Desh b742250b31 python3Packages.uranium: 3.5.1 -> 3.6.0 2018-12-27 02:18:31 +00:00
Orivej Desh ab95c92349 python3Packages.libarcus: 3.4.1 -> 3.6.0 2018-12-27 02:18:31 +00:00
Orivej Desh cbdaa29c3e python3Packages.libsavitar: init at 3.6.0 2018-12-27 02:18:31 +00:00
agracie a3fc481b76 mkl: fix hash on Darwin 2018-12-26 20:57:08 -05:00
Orivej Desh 9b3204d41b pythonPackages.uranium: add missing dependency on shapely
Needed since 3.5.1: 0c6d90b42d
2018-12-27 01:34:15 +00:00
Ivan Kozik 78c56d758d all-packages.nix: remove obsolete comments
cgroup2 cpu controller support was merged into Linux 4.15:
22714a2ba4
2018-12-27 01:18:12 +00:00
Matthew Bauer 9d9a993b73
Merge pull request #52867 from matthewbauer/emacs-mac-7.4
emacs-mac: 7.2 → 7.4
2018-12-26 17:49:00 -06:00
R. RyanTM 4c10970b1a
gpsprune: 19.1 -> 19.2
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/gpsprune/versions
2018-12-27 00:02:44 +01:00
Samuel Dionne-Riel 889ef35303 linuxPackages_4_{19,20}: works around bug with overlayfs.
See: https://github.com/NixOS/nixpkgs/issues/48828#issuecomment-445208626
2018-12-26 22:51:31 +00:00
Dmitry Kalinkin 8e79ebc523
Merge pull request #52934 from veprbl/pr/arrow_cpp_gtest_fix
arrow-cpp: fix build
2018-12-26 17:43:38 -05:00
Alyssa Ross 626cc7eb21
Merge pull request #52860 from marsam/init-ruby-26
ruby_2_6: init at 2.6.0
2018-12-26 20:49:08 +00:00
Orivej Desh 5c5c83fb4e qt5: update nixpkgs directory in readme 2018-12-26 20:21:35 +00:00
aszlig b0f9e47271
ip2unix: 1.2.0 -> 2.0.0
New upstream features:

  - New ignore rule option, which prevents conversion to Unix socket.
  - A way to increase the verbosity via the -v command line argument.
  - Reams of log messages in addition to the FATAL errors we had so far.
  - Use Syslog format for logging if stderr is a socket.
  - Set FD_CLOEXEC on systemd socket file descriptors as soon as they're
    associated.

Upstream fixes:

  - Use right endian conversion functions in port matching.
  - Pass is_unix to child socket on accept to prevent accidentally
    replacing an already converted Unix socket by a new Unix socket. The
    latter would be a socket that's not accepted, which would eventually
    lead to an error.
  - Correctly handle setsockopts used with other levels than SOL_SOCKET.

Upstream changes:

  - Improve wording and add more descriptions in README and manpage.
  - The implementation for fetching systemd sockets now no longer uses
    libsystemd, thus the build-time dependency is no longer required.
  - New serialiser for passing rules to the preloaded library in a more
    compact form instead of using YAML, so it's less likely that we'll
    hit the maximum stack size.
  - Systemd sockets are now associated during rule initialisation and
    thus behave more predictable in complex setups.

On our side, the dependency on systemd is only needed for running the
tests, as it uses the systemd-socket-activate helper. Socket association
is now done by ip2unix directly and doesn't rely on libsystemd anymore.

Built and tested on i686-linux and x86_64-linux.

Signed-off-by: aszlig <aszlig@nix.build>
2018-12-26 19:36:49 +01:00