60991 Commits

Author SHA1 Message Date
nikstur
63891c13cf nixos/systemd-boot: refuse to wipe ESP when no generations found (#528461) 2026-06-05 20:37:41 +00:00
r-vdp
074f246ca9 nixosTests/zfs: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:21 +03:00
r-vdp
395784d0ef nixosTests/systemd-initrd-swraid: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:21 +03:00
r-vdp
b7e0810560 nixosTests/systemd-initrd-luks-unl0kr: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:21 +03:00
r-vdp
cf30cd9b67 nixosTests/systemd-initrd-luks-tpm2: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:20 +03:00
r-vdp
52e9fde3d4 nixosTests/systemd-initrd-luks-password: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:20 +03:00
r-vdp
1954609d88 nixosTests/systemd-initrd-luks-keyfile: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:20 +03:00
r-vdp
050b24a35b nixosTests/systemd-initrd-luks-fido2: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:20 +03:00
r-vdp
fc890171ad nixosTests/systemd-initrd-btrfs-raid: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:20 +03:00
r-vdp
709f14a90c nixosTests/lvm2: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:20 +03:00
r-vdp
ec10ce872e nixosTests/luks: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:20 +03:00
r-vdp
923a32a64f nixosTests/initrd-luks-empty-passphrase: replace direct bootctl call with switch-to-configuration invocation 2026-06-05 18:55:20 +03:00
r-vdp
7e7ed65f29 nixos/tests/lvm2: switch to runTest 2026-06-05 18:44:46 +03:00
r-vdp
133e0e4438 nixos/tests/zfs: switch to runTest 2026-06-05 18:44:45 +03:00
r-vdp
919b70b29f nixos/systemd-boot: refuse to wipe ESP when no generations found 2026-06-05 18:01:06 +03:00
Ivan Mincik
1cedf3af27 pixelfed: 0.12.6 -> 0.12.7; fix build (#526840) 2026-06-05 08:40:59 +00:00
phanirithvij
48d341a797 nixosTests.pdfding: fix tests on aarch64-linux gha
Signed-off-by: phanirithvij <phanirithvij2000@gmail.com>
2026-06-05 11:21:58 +05:30
phanirithvij
fd38c2f3a2 nixosTests.pixelfed.standard: allow running on aarch64-linux
Signed-off-by: phanirithvij <phanirithvij2000@gmail.com>
2026-06-05 11:19:52 +05:30
Michele Guerini Rocco
27c732a56b nixos/network-interfaces-scripted: fix shellcheck for bridge reload (#527817) 2026-06-04 21:41:19 +00:00
isabel
ec1fc73c9d nixos/bitmagnet: Use up to date configuration values, add restart trigger (#483029) 2026-06-04 17:46:17 +00:00
nikstur
9841bd4eb6 nixos/security/wrappers: add more context to enableWrappers description (#527948) 2026-06-04 17:28:01 +00:00
nikstur
661e163702 nixos/timesyncd: migrate to RFC 42-style settings (#516318) 2026-06-04 15:21:45 +00:00
nikstur
1f1c72470b nixos/tests/systemd-timesyncd-nscd-dnssec.nix: change name to be more specific 2026-06-04 16:56:31 +02:00
Jamie Magee
1460350c4c nixos/timesyncd: migrate to RFC 42-style settings
Replace `services.timesyncd.extraConfig` with a freeform `services.timesyncd.settings.Time` submodule, rendered via `utils.systemdUtils.lib.settingsToSections`. `extraConfig` is removed via `mkRemovedOptionModule`.

`servers` and `fallbackServers` are kept as typed wrappers; they now bridge into `settings.Time.NTP` / `settings.Time.FallbackNTP` via `mkDefault` so users can still override them through `settings.Time`.

Adds `nixos/tests/systemd-timesyncd` to assert the rendered `timesyncd.conf` contents.
2026-06-04 16:56:31 +02:00
nikstur
f59623d121 nixos/security/wrappers: add more context to enableWrappers description 2026-06-04 15:25:23 +02:00
Michele Guerini Rocco
ed4cc7b671 nixos/wireless: restrict chown /etc/wpa_supplicant scope (#527135) 2026-06-04 11:54:49 +00:00
Ryan Omasta
585e53ec3a nixos/network-interfaces-scripted: fix shellcheck for bridge reload 2026-06-04 05:01:17 -06:00
StepBroBD
f9ab425f8f caddy: 2.11.3 -> 2.11.4 (#527408) 2026-06-04 10:44:51 +00:00
Ramses
d7f059ae28 nixos/preSwitchChecks: actually set errexit inside check bodies (#527778) 2026-06-04 10:10:09 +00:00
@mjones
3c1e298ee2 nixos/inventree: add module services and test (#508844) 2026-06-04 08:12:38 +00:00
kurogeek
c150445adf nixos/inventree: add module services and test
Co-authored-by: Bobbe <34186858+30350n@users.noreply.github.com>
2026-06-04 14:22:39 +07:00
r-vdp
69dc41f083 nixos/preSwitchChecks: actually set errexit inside check bodies
The previous `if ! ( ... )` wrapper put the check body in a context
where bash ignores `set -e`, so a failing command in the middle of a
check would not abort it and the switch would proceed. Run the
subshell outside any conditional and capture $? explicitly instead.
2026-06-04 02:18:34 +03:00
r-vdp
d26feac137 nixos/nix-channel: substitute getent path in preSwitchCheck
Follow-up to #527658.
2026-06-04 01:50:26 +03:00
Ramses
5d8b27153d nixos/nix-channel: move stale-channel warning to preSwitchChecks (#527658) 2026-06-03 21:21:38 +00:00
K900
80a70a464e nixos/calamares-plasma6: replace activation script with tmpfiles (#527639) 2026-06-03 18:08:52 +00:00
r-vdp
658f5a6a2d nixos/transmission: drop stale activationScripts reference from docs
Part of #475305.
2026-06-03 20:03:07 +03:00
r-vdp
d0b9fc3672 nixos/nix-channel: move stale-channel warning to preSwitchChecks
The standalone shellcheck test is dropped since we already shellcheck
the combined preSwitchChecks script.

Part of #475305.
2026-06-03 19:56:24 +03:00
Grimmauld
556c4bdf22 nixos/opensnitch: link network_aliases.json to /etc/opensnitchd (#525887) 2026-06-03 16:04:55 +00:00
r-vdp
466530d1d3 nixos/calamares-plasma6: replace activation script with tmpfiles
Part of #475305.
2026-06-03 18:51:52 +03:00
Pavol Rusnak
b5280b9d20 nixosTests.gocryptfs: fix test (#527254) 2026-06-03 12:40:57 +00:00
Ramses
b431330672 nixos/etc: create uninitialized /etc/machine-id with readonly /etc/ (#523894) 2026-06-03 12:20:48 +00:00
whispers
e7e7984e94 caddy: 2.11.3 -> 2.11.4
https://github.com/caddyserver/caddy/releases/tag/v2.11.4

Fixes: GHSA-vcc4-2c75-vc9v (https://github.com/caddyserver/caddy/pull/7785)
2026-06-03 07:37:20 -04:00
Niklas Korz
9ea977e104 nixos/weblate: ensure ssh wrappers are up to date
Weblate generates an SSH wrapper with some preset options
that uses the absolute path of the ssh binary internally.
As the wrapper is only regenerated when the generator itself
is changed, this absolute nix store path becomes unusable once
ssh is updated and the path is garbage collected.
As generating the wrappers is a quick operation, simply deleting the wrapper
directory before service start ensures they are up to date.
2026-06-03 09:09:33 +02:00
Adam C. Stephens
24707dd937 nixos/tests/incus: pass package to releases config (#527223) 2026-06-02 20:28:37 +00:00
Florian Klink
14e17b46e4 nixosTests.gocryptfs: fix test
This actually didn't work due to multiple issues:

 - Some statements used machine.execute, swallowing nonzero exit codes.
   In this particular case, it caused the mountpoint to stick around.
 - using `fileSytems."/plain"` has no effect in VM tests,
   virtualisation.fileSystems."/plain" needs to be used instead
 - `switch-to-configuration test` was invoked, so not actually switching
   at all.
 - Checking for `data.txt` to be present is a bit brittle. /tmp can be
   cleaned up. We can just add a known text and grep for that.
2026-06-02 20:57:16 +02:00
Matt Sturgeon
860db540f8 nixos/displayManager: improve defaultSession error 2026-06-02 18:42:17 +01:00
Adam C. Stephens
9bebd86680 nixos/tests/incus: pass package to releases config
virtual-machine releases use virtualisation.incus.package to find
where the agent-loader configuration is defined. In practice it's
likely not a problem, but when marking lts v6 on 25.11 as vulnerable
it exposed the mismatch. For correctness we should ensure the VM
tests are using the agent loader from the relevant incus package.
2026-06-02 13:36:21 -04:00
Matt Sturgeon
a3a6ad305f nixos/displayManager: interpolate option paths in docs + errors 2026-06-02 18:26:55 +01:00
Matt Sturgeon
22836e1e4d nixos/displayManager: replace ad-hoc type // { check } overrides (#525738) 2026-06-02 17:03:59 +00:00
Cosima Neidahl
c8cfee4101 lomiri.qtmir: 0.8.0-unstable-2025-05-20 -> 0.8.0-unstable-2026-03-11 (#521850) 2026-06-02 16:35:05 +00:00