Commit graph

13430 commits

Author SHA1 Message Date
Andrew Childs f2b81a021e darwin/print-reexports: add an overview comment 2020-11-12 16:57:19 +09:00
Andrew Childs 7e49fb6592 darwin/apple-sdk: explain why Kernel.framework has no .tbd file 2020-11-12 16:57:19 +09:00
R. RyanTM aec6a8069f pcm: 202009 -> 202010 2020-11-11 14:54:20 -08:00
Tim Steinbach 413237b4ed
linux/hardened/patches/5.9: 5.9.7.a -> 5.9.8.a 2020-11-11 15:43:18 -05:00
Tim Steinbach feab19926f
linux/hardened/patches/5.4: 5.4.76.a -> 5.4.77.a 2020-11-11 15:43:18 -05:00
Tim Steinbach 7bfbd07c06
linux/hardened/patches/4.19: 4.19.156.a -> 4.19.157.a 2020-11-11 15:43:18 -05:00
Tim Steinbach 6322425d0c
linux/hardened/patches/4.14: 4.14.205.a -> 4.14.206.a 2020-11-11 15:43:17 -05:00
Tim Steinbach 470f86b851
linux: 5.9.7 -> 5.9.8 2020-11-11 15:43:17 -05:00
Tim Steinbach 193f7a49fe
linux: 5.4.76 -> 5.4.77 2020-11-11 15:43:16 -05:00
Tim Steinbach 3b27759e52
linux: 4.9.242 -> 4.9.243 2020-11-11 15:43:16 -05:00
Tim Steinbach f4ce75d98d
linux: 4.4.242 -> 4.4.243 2020-11-11 15:43:15 -05:00
Tim Steinbach 08a59efe79
linux: 4.19.156 -> 4.19.157 2020-11-11 15:43:15 -05:00
Tim Steinbach 399acdc934
linux: 4.14.205 -> 4.14.206 2020-11-11 15:43:15 -05:00
Andrew Childs 3456ef6f30 darwin/apple-sdk: use darwin stubs 2020-11-12 00:23:09 +09:00
Andrew Childs 8e6d830423 darwin/objc4: use darwin-stubs 2020-11-12 00:23:09 +09:00
Andrew Childs 193c91233c darwin/IOKit: use darwin-stubs 2020-11-12 00:23:09 +09:00
Andrew Childs 03988a5fec darwin/Security: use darwin-stubs 2020-11-12 00:23:09 +09:00
Andrew Childs b176ad9546 darwin/Libsystem: use darwin-stubs 2020-11-12 00:23:09 +09:00
Andrew Childs fd33052999 darwin/print-reexports: nixpkgs-specific utility to inspect .tbd files
Used during bootstrap to check that re-exported libraries are not
dangling.
2020-11-12 00:23:09 +09:00
Andrew Childs 8946ff8d71 darwin/darwin-stubs: init 2020-11-12 00:23:09 +09:00
Frederik Rietdijk 4076ffe580 Merge staging-next into staging 2020-11-11 16:00:34 +01:00
Tim Steinbach e7fa508f85
linux/hardened/patches/5.9: 5.9.6.a -> 5.9.7.a 2020-11-11 09:32:04 -05:00
Tim Steinbach 7420461d12
linux/hardened/patches/5.4: 5.4.75.a -> 5.4.76.a 2020-11-11 09:32:04 -05:00
Tim Steinbach 362d24c7ee
linux/hardened/patches/4.19: 4.19.155.a -> 4.19.156.a 2020-11-11 09:32:04 -05:00
Tim Steinbach 8e364d518b
linux/hardened/patches/4.14: 4.14.204.a -> 4.14.205.a 2020-11-11 09:32:03 -05:00
Tim Steinbach 3be8a4483a
linux_latest-libre: 17744 -> 17762 2020-11-11 09:32:03 -05:00
Martin Weinelt a79902f23e
microcodeIntel: 20200616 -> 20201110
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20201110

Security advisories:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html

Fixes: CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
2020-11-11 14:25:23 +01:00
Ivan Kozik c945b47a25 linuxPackages.wireguard: fix the build on linux 5.4.76
Patch copied from https://github.com/archlinux/svntogit-packages/blob/packages/wireguard-dkms/trunk/lts.diff

This fixes:

```
In file included from <command-line>:
/build/source/src/compat/compat-asm.h:44: warning: "SYM_FUNC_START" redefined
   44 | #define SYM_FUNC_START ENTRY
      |
In file included from /build/source/src/compat/compat-asm.h:9,
                 from <command-line>:
/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/include/linux/linkage.h:218: note: this is the location of the previous definition
  218 | #define SYM_FUNC_START(name)    \
      |
In file included from <command-line>:
/build/source/src/compat/compat-asm.h:45: warning: "SYM_FUNC_END" redefined
   45 | #define SYM_FUNC_END ENDPROC
      |
In file included from /build/source/src/compat/compat-asm.h:9,
                 from <command-line>:
/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/include/linux/linkage.h:265: note: this is the location of the previous definition
  265 | #define SYM_FUNC_END(name)    \
      |
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S: Assembler messages:
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S:50: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S:176: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S:180: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S:257: Error: invalid character '(' in mnemonic
make[3]: *** [/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/scripts/Makefile.build:348: /build/source/src/crypto/zinc/blake2s/blake2s-x86_64.o] Error 1
make[3]: *** Waiting for unfinished jobs....
In file included from <command-line>:
/build/source/src/compat/compat-asm.h:44: warning: "SYM_FUNC_START" redefined
   44 | #define SYM_FUNC_START ENTRY
      |
In file included from /build/source/src/compat/compat-asm.h:9,
                 from <command-line>:
/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/include/linux/linkage.h:218: note: this is the location of the previous definition
  218 | #define SYM_FUNC_START(name)    \
      |
In file included from <command-line>:
/build/source/src/compat/compat-asm.h:45: warning: "SYM_FUNC_END" redefined
   45 | #define SYM_FUNC_END ENDPROC
      |
In file included from /build/source/src/compat/compat-asm.h:9,
                 from <command-line>:
/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/include/linux/linkage.h:265: note: this is the location of the previous definition
  265 | #define SYM_FUNC_END(name)    \
      |
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S: Assembler messages:
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:123: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:185: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:187: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:319: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1016: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1616: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1620: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1810: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1812: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1959: Error: invalid character '(' in mnemonic
make[3]: *** [/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/scripts/Makefile.build:348: /build/source/src/crypto/zinc/chacha20/chacha20-x86_64.o] Error 1
make[2]: *** [/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/Makefile:1729: /build/source/src] Error 2
make[1]: *** [/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/Makefile:179: sub-make] Error 2
make: *** [Makefile:26: module] Error 2
builder for '/nix/store/hll3sjyrwa55arzlsxnbacqdd8s842l1-wireguard-1.0.20200908.drv' failed with exit code 2
```
2020-11-10 23:23:35 -08:00
Jan Tojnar 23b939cfc3
fwupd: Fix build
Few new files are trying to be installed to /etc.

Fixes: https://github.com/NixOS/nixpkgs/issues/103365
2020-11-11 01:07:27 +01:00
Dmitry Kalinkin 7c1e712c39
Merge pull request #103180 from veprbl/pr/darwin_adv_cmds_fix
darwin.adv_cmds: fix build
2020-11-10 13:26:28 -05:00
Graham Christensen f9121be82e
Merge pull request #103307 from grahamc/zfs-scripts
zfs: extend zpool scripts with :$PATH, remove sudo
2020-11-10 10:20:02 -05:00
Tim Steinbach 589bf72e97
linux: 5.9.6 -> 5.9.7 2020-11-10 09:11:56 -05:00
Tim Steinbach 8aa3123f33
linux: 5.4.75 -> 5.4.76 2020-11-10 09:11:55 -05:00
Tim Steinbach e696d5466c
linux: 4.9.241 -> 4.9.242 2020-11-10 09:11:55 -05:00
Tim Steinbach 48d83292f8
linux: 4.4.241 -> 4.4.242 2020-11-10 09:11:55 -05:00
Tim Steinbach 8f6733ca48
linux: 4.19.155 -> 4.19.156 2020-11-10 09:11:54 -05:00
Tim Steinbach 3c25cf4d13
linux: 4.14.204 -> 4.14.205 2020-11-10 09:11:51 -05:00
R. RyanTM 3ffd4b446f iptables: 1.8.5 -> 1.8.6 2020-11-10 15:06:39 +01:00
Graham Christensen b3d4f5dada
zfs: extend zpool scripts with :$PATH, remove sudo
sudo the package is not suid, so remove it from the PATH. Extend
PATH with $PATH to fetch sudo from the outer PATH. Move the generation
of `path` in to Nix, so the sed expression can use single quotes,
which prevents $PATH being interpolated at build-time.
2020-11-10 08:50:22 -05:00
Frederik Rietdijk 379aaa1e0c Merge master into staging-next 2020-11-10 10:11:08 +01:00
Peter Hoeg de2112c03d bolt: 0.8 -> 0.9 2020-11-10 08:09:47 +08:00
Jan Tojnar 3a5ba30c13 fwupd: 1.4.6 → 1.5.1
* https://github.com/fwupd/fwupd/releases/tag/1.5.0
* https://github.com/fwupd/fwupd/releases/tag/1.5.1

* The changelog mentions removed dependency on efivar but we still need the package because it also contains efiboot required dependency. https://github.com/fwupd/fwupd/pull/2485
* Blacklist options were renamed.
* Test firmware was moved to a separate repo. We need to install it or some tests will be skipped. https://github.com/fwupd/fwupd/pull/2330
* Initially, there was an option to configure dbx but in the end, it was removed in favour of bespoke dbxtool. https://github.com/fwupd/fwupd/pull/2061, https://github.com/fwupd/fwupd/pull/2318, https://github.com/fwupd/fwupd/pull/2329
* Fwupd now checks hashes of plug-ins and will complain loudly that it is tainted when “invalid” plug-in is loaded (during testing).
* Installed tests complain about not being able to access cdn, even though we are not setting CI_NETWORK env var. We need a patch to fix that.
2020-11-09 22:50:17 +01:00
Martin Weinelt 7a2455a0fd
batman-adv: 2020.3 -> 2020.4 2020-11-09 22:24:11 +01:00
Markus S. Wamser 9ed8e03a09 mupdf: mark 1.17 as insecure but as still required as dependency 2020-11-09 09:57:38 -08:00
Frederik Rietdijk 20f001c01e Merge master into staging-next 2020-11-09 14:33:52 +01:00
Daniël de Kok a5736eca8e
Merge pull request #102680 from r-ryantm/auto-update/pcm
pcm: 202008 -> 202009
2020-11-09 13:54:41 +01:00
Alyssa Ross 8f5ac08f55
Merge pull request #102381 from MetaDark/linuxPackages.xpadneo
linuxPackages.xpadneo: 0.8.3 -> 0.8.4
2020-11-09 12:22:22 +00:00
Dmitry Kalinkin f0efe2d16c
darwin.adv_cmds: fix build
Also disable pgrep that depends on pkill
2020-11-08 20:28:45 -05:00
snicket2100 cd1c5633af firejail: 0.9.62 -> 0.9.64 2020-11-08 23:25:59 +01:00
Michael Raskin e1e5d73c9a
Merge pull request #103081 from andresilva/linux-zen-5.9.6
linux_zen: 5.9.3 -> 5.9.6
2020-11-08 17:15:42 +00:00
markuskowa e447841b12
Merge pull request #103132 from markuskowa/upd-rdma-core
rdma-core: 31.0 -> 31.1
2020-11-08 18:06:05 +01:00
Tim Steinbach b1bd4c09ad
Merge pull request #103028 from TredwellGit/firmwareLinuxNonfree
firmwareLinuxNonfree: 2020-09-18 -> 2020-10-22
2020-11-08 11:03:05 -05:00
Markus Kowalewski 545456ddca
rdma-core: 31.0 -> 31.1 2020-11-08 15:10:08 +01:00
André Silva 0c131ae118
linux_zen: 5.9.3 -> 5.9.6 2020-11-07 13:20:38 +00:00
Phillip Cloud 0a2f47b51b nvidia_x11.persistenced: fix build on master 2020-11-06 11:06:18 -08:00
TredwellGit 7ff16d8155 firmwareLinuxNonfree: 2020-09-18 -> 2020-10-22 2020-11-06 18:28:28 +00:00
Frederik Rietdijk 99fb79ae84 Merge master into staging-next 2020-11-06 12:51:56 +01:00
Jörg Thalheim 5a540a8996
linuxPackages.bcc: 0.16.0 -> 0.17.0 2020-11-06 10:06:34 +01:00
Peter Hoeg 11fc055836 pam_mount: add support for LUKS2 2020-11-06 10:19:36 +08:00
Anders Kaseorg d57891889d linux/hardened/patches/5.9: 5.9.1.a -> 5.9.6.a 2020-11-05 16:24:43 -08:00
Anders Kaseorg 8bf8b61c2d linux/hardened/patches/5.8: 5.8.16.a -> 5.8.18.a 2020-11-05 16:24:42 -08:00
Anders Kaseorg f9d1130ae9 linux/hardened/patches/5.4: 5.4.72.a -> 5.4.75.a 2020-11-05 16:24:40 -08:00
Anders Kaseorg 22387315b6 linux/hardened/patches/4.19: 4.19.152.a -> 4.19.155.a 2020-11-05 16:24:39 -08:00
Anders Kaseorg a435637e66 linux/hardened/patches/4.14: 4.14.202.a -> 4.14.204.a 2020-11-05 16:24:37 -08:00
Tim Steinbach 76d4a93444
linux: 5.9.5 -> 5.9.6 2020-11-05 17:28:15 -05:00
Jonathan Ringer 5d9ea37fd3 zfsUnstable: 2.0.0-rc4 -> 2.0.0-rc5 2020-11-05 08:05:05 -08:00
Tim Steinbach eeb8ffabbd
linux: 5.9.3 -> 5.9.5 2020-11-05 09:51:05 -05:00
Tim Steinbach 3b7197307b
linux: 5.4.74 -> 5.4.75 2020-11-05 09:51:05 -05:00
Tim Steinbach 5fe041997e
linux: 4.19.154 -> 4.19.155 2020-11-05 09:51:05 -05:00
Tim Steinbach 41b4c2d11b
linux: 4.14.203 -> 4.14.204 2020-11-05 09:51:02 -05:00
Timo Kaufmann 16e34d25fd
Merge pull request #93620 from lovesegfault/fix-r8168
kernelPackages.r8168: 8.047.04 -> 8.048.03
2020-11-05 09:43:53 +01:00
Jan Tojnar a821be7531
Merge branch 'master' into staging-next 2020-11-05 09:42:47 +01:00
Robert Hensing 1a5556867e Merge master into staging 2020-11-04 23:57:57 +01:00
Ryan Mulligan d1d2a00652
Merge pull request #102696 from r-ryantm/auto-update/pam_gnupg
pam_gnupg: 0.1 -> 0.2
2020-11-04 06:16:19 -08:00
Frederik Rietdijk 49cd7307d0
Merge pull request #101207 from NixOS/staging-next
Staging next
2020-11-04 10:48:08 +01:00
ajs124 c30745e053
open-iscsi: install systemd files (#97793) 2020-11-04 09:30:03 +01:00
Frederik Rietdijk 10c57af49c Merge staging-next into staging 2020-11-04 09:28:07 +01:00
Frederik Rietdijk 9e6d7d3c74 Merge master into staging-next 2020-11-04 09:27:42 +01:00
R. RyanTM 0e3c2cd8c0 pam_gnupg: 0.1 -> 0.2 2020-11-04 02:49:33 +00:00
R. RyanTM 4e1db3daf0 pcm: 202008 -> 202009 2020-11-04 00:18:43 +00:00
Finn Behrens 7787fd2413 systemd: Add an option for homed
This is disabled by default to indicate that is hasn't been adiquately
tested with NixOS yet.
2020-11-03 17:35:26 -05:00
R. RyanTM bc8715adbb lxcfs: 4.0.5 -> 4.0.6 2020-11-03 09:18:52 -08:00
R. RyanTM a765199f1e i2c-tools: 4.1 -> 4.2 2020-11-03 08:56:06 -08:00
R. RyanTM f3096f3400 ipset: 7.6 -> 7.7 2020-11-03 08:52:51 -08:00
Tim Steinbach b7880ce6ec
linux-rt_5_4: 5.4.70-rt40 -> 5.4.74-rt41 2020-11-03 10:54:25 -05:00
Tim Steinbach f652a024bb
linux: 5.9.2 -> 5.9.3 2020-11-03 10:54:25 -05:00
Tim Steinbach 7e9c6235f1
linux: 5.8.17 -> 5.8.18 2020-11-03 10:54:24 -05:00
Tim Steinbach f249558f95
linux: 5.4.73 -> 5.4.74 2020-11-03 10:54:21 -05:00
Tim Steinbach 5030e5cdc7
linux: 5.10-rc1 -> 5.10-rc2 2020-11-03 08:47:16 -05:00
Tim Steinbach 86542cc097
Merge pull request #100645 from andresilva/linux-zen-5.9
linux_zen: 5.8.13 -> 5.9.3
2020-11-03 08:44:35 -05:00
Frederik Rietdijk 470f05cb5d Merge staging-next into staging 2020-11-03 12:06:41 +01:00
Frederik Rietdijk 237966224d Merge master into staging-next 2020-11-03 12:06:06 +01:00
Kira Bruneau ef16b3f77c linuxPackages.xpadneo: 0.8.3 -> 0.8.4 2020-11-02 21:33:16 -05:00
Mario Rodas 5fa1a7f27f
Merge pull request #101280 from r-ryantm/auto-update/alsa-topology-conf
alsa-topology-conf: 1.2.3 -> 1.2.4
2020-11-02 18:24:09 -05:00
Mario Rodas 3901f6ecd4
Merge pull request #101302 from r-ryantm/auto-update/alsa-ucm-conf
alsa-ucm-conf: 1.2.3 -> 1.2.4
2020-11-02 18:20:03 -05:00
Mario Rodas 5459a313cd
Merge pull request #102309 from marsam/update-lxc
lxc: 4.0.4 -> 4.0.5
2020-11-02 17:53:13 -05:00
Ryan Mulligan f723ed8d69
Merge pull request #102523 from r-ryantm/auto-update/libratbag
libratbag: 0.14 -> 0.15
2020-11-02 12:26:38 -08:00
R. RyanTM 5e4b485d86 libratbag: 0.14 -> 0.15 2020-11-02 19:42:21 +00:00
R. RyanTM 7c1ff55c77 libfabric: 1.11.0 -> 1.11.1 2020-11-02 09:48:56 -08:00
Antoine Eiche 859a44ebc0 systemd: set withRemote true by default
This also adds the libmicrohttpd as a `buildInput` when `withRemote`
is true.
2020-11-02 09:07:52 +01:00