60991 Commits

Author SHA1 Message Date
Yuriy Taraday
505e8321d8 github-runner: Disable node20 runtime by default
Node.js 20 is now EOL, see https://github.com/NixOS/nixpkgs/issues/515284
Remove it from the default list of runtimes, but keep the support around
as long as upstream supports it.
2026-05-27 19:58:02 +02:00
K900
feb74edee5 gamescope: feature option enableWsi (#523394) 2026-05-27 17:40:10 +00:00
Malix - Alix Brunet
08d29d4cac gamescope: feature option enableWsi 2026-05-27 19:33:33 +02:00
Taeer Bar-Yam
a3d43e3230 nixos/nominatim: make UI optional 2026-05-27 19:31:34 +02:00
raiford
03db034022 nixos/llama-swap: remove ProcSubset pid limitation from service config for new performance monitoring feature
New versions of llama-swap have a performance monitoring feature that
needs access to read /proc/meminfo.
2026-05-27 09:30:24 -07:00
Yureka
415cb8023c fastnetmon: 2.0.372 -> 2.0.380 (#524864) 2026-05-27 14:42:43 +00:00
Yureka
0020162e2e nixos/tests/fastnetmon-advanced: adjust gobgp peer up message 2026-05-27 16:37:12 +02:00
Yureka
334db00fa1 nixos/fastnetmon: always define global hostgroup
Fixes nixosTests.fastnetmon-advanced with fastnetmon-advanced 2.0.376+
2026-05-27 16:37:12 +02:00
Alyssa Ross
b122c4f078 nixosTests.seatd: test service readiness
Would have prevented the regression fixed by 09384d7270 ("Revert
"sdnotify-wrapper: drop"").
2026-05-27 16:00:18 +02:00
nixpkgs-ci[bot]
63437671cb Merge master into staging-nixos 2026-05-27 13:11:51 +00:00
sinanmohd
09384d7270 Revert "sdnotify-wrapper: drop"
reverts commit e801953990.
drop deprecated header from sdnotify-wrapper
2026-05-27 15:33:26 +05:30
Lyna
e244279d81 nixos/porxie: update options for version 2026-05-27 09:16:44 +01:00
nixpkgs-ci[bot]
0f0eba0cce Merge master into staging-nixos 2026-05-27 07:29:27 +00:00
zowoq
6427465465 nixosTests.test-containers-bittorrent: enable in hydra (#521374) 2026-05-27 05:20:19 +00:00
Angel J
86694481f2 jitterentropy-rngd: add configurable memlock limit 2026-05-26 19:35:47 -07:00
Martin Weinelt
94a36f74d0 nixos/dhparams: remove
This module was deprecated in 26.05 and is being removed in 26.11.

Generating your own dhparams has been obsoleted by RFC 7919 (2016).

DHE itself has been obsoleted by ECHDE (RFC8422, 2018) and Hybrid PQ
(draft-ietf-tls-ecdhe-mlkem, 2026) key exchanges.

TLS 1.3 (RFC8446, 2018) stopped defining any DHE cipher suites and lists
this as a major difference from TLS 1.2.
2026-05-27 03:19:26 +02:00
nixpkgs-ci[bot]
deaa80b018 Merge master into staging-nixos 2026-05-27 00:45:11 +00:00
zowoq
47f37b712e nixos/nginx: drop DHE usage (#515057) 2026-05-26 22:07:10 +00:00
zowoq
71ec099fca nixos/kernel: drop boot.vesa (#518397) 2026-05-26 22:07:00 +00:00
Ramses
907350b66c switch-to-configuration-ng: harden user-unit migration second pass (#517768) 2026-05-26 20:19:08 +00:00
Toma
1630215fe2 throne: 1.0.13 -> 1.1.2 (#489883) 2026-05-26 18:38:34 +00:00
dram
42de2da71a Revert "nixos/security: warn if wrappers are disabled and wrappers are defined" 2026-05-26 22:40:17 +08:00
Michele Guerini Rocco
b012b7c207 nixos/containers: fix default gateway with privateNetwork (v2) (#524281) 2026-05-26 13:21:55 +00:00
Bobbe
62b72a4158 klipper: support using indented strings in settings 2026-05-26 14:27:52 +02:00
@mjones
aac1fdc5c2 mattermost: add .patch files for user limit and banner removal (#522925) 2026-05-26 06:33:12 +00:00
Jacek Galowicz
e72ed98bc9 various: remove vsock CID based instructions (#524287) 2026-05-26 06:32:07 +00:00
Jörg Thalheim
ec563b9896 nixos/console: fix tmpfile rule when imperativeLocale is enabled (#523974) 2026-05-26 06:27:00 +00:00
Morgan Jones
9ea1835918 nixos/mattermost: add v11 user limit changes to release notes 2026-05-25 23:26:45 -07:00
jose
fc9f1c91b2 mattermost: add patches for user limit and banner removal 2026-05-25 23:20:44 -07:00
phanirithvij
f45b56acc8 various: remove vsock CID based instructions
Signed-off-by: phanirithvij <phanirithvij2000@gmail.com>
2026-05-26 08:26:03 +05:30
George Shammas
217d834eb9 nixos/containers: fix default gateway with privateNetwork (v2)
The fix in #523016 fixes an issue with the default gateway, however it
does so by unconditionally defining `networking.interfaces.eth0`. This
makes so if you had other methods of defining the addresses for eth0,
those now get blanked out.

Instead, move the logic around so we only define
networking.interfaces.eth0 if we really have to.
2026-05-25 22:17:45 -04:00
Martin Weinelt
0e2dde1883 nixos/lix: load tun kmod for pasta (#524016) 2026-05-25 22:41:17 +00:00
Martin Weinelt
34fbf0285a nixos/lix: load tun kmod for pasta
With kernel lockdown the tun kmod is not necessarily available in stage2,
but Lix dependes on it through pasta.

nix-daemon[682677]: remote pid 682659 is user build (trusted)
nix-daemon[682711]: Failed to open() /dev/net/tun: No such device
nix-daemon[682702]: Failed to set up tap device in namespace
2026-05-25 23:45:07 +02:00
Ramses
ac76bfd72f command-not-found: don't require lib.mkForce to set dbPath (#517324) 2026-05-25 20:54:18 +00:00
Michael Daniels
430ce36b37 nixos/tests/vsftpd: enable vsftpd pam service (#520930) 2026-05-25 20:11:03 +00:00
Michael Daniels
fa813fd9ae nixos/vsftpd: release note PAM regression (#517011) 2026-05-25 19:47:38 +00:00
Ilan Joselevich
4c60b6fde1 nixos/matterjs-server: init
Assisted-by: Claude:claude-opus-4-7
2026-05-25 21:57:42 +03:00
Michael Daniels
952c40b32b nixosTests.pam-zfs-key: fix dataset mounting (#521699) 2026-05-25 18:29:46 +00:00
ArisoN
84160ddeb8 nixos/firewalld: add reload triggers for config file changes
When firewalld serves as the backend for networking.firewall, changes
to allowedTCPPorts, zones, settings etc. rewrite /etc/firewalld/*
but firewalld.service was never reloaded. Add reloadTriggers pointing
to firewalld.conf, all zone XMLs and service XMLs so
switch-to-configuration reloads the daemon on nixos-rebuild switch.

nixos/firewalld: treefmt
2026-05-25 17:25:01 +03:00
Sandro
9623bda6bb zsh: unbreak nixos module build for dynamic dhcp hostname (#485244) 2026-05-25 13:35:39 +00:00
Nick Cao
edb50db13d tayga: 0.9.5 -> 0.9.6 (#484615) 2026-05-25 12:33:08 +00:00
Yohann Boniface
7abdd6c20d maintainers: drop lnl7 (#520863) 2026-05-25 11:51:44 +00:00
Kajus Naujokaitis
4fa7d03656 nixos/console: fix tmpfile rule when imperativeLocale is enabled
Signed-off-by: Kajus Naujokaitis <kajusn@gmail.com>
2026-05-25 14:44:13 +03:00
Robert Hensing
ccbf6da64e types.attrList: init (#510698) 2026-05-25 11:34:46 +00:00
Yohann Boniface
b2fe0bc745 maintainers: remove mbbx6spp (#521212) 2026-05-25 11:21:33 +00:00
Michael Hoang
6d1bbc317c nixos/nginx: drop option for configuring DHE
This option is no longer necessary as DHE is deprecated in NixOS as of #513396
and ECDHE does not require any configuration changes.
2026-05-25 09:18:10 +02:00
Michael Hoang
6db66126ec nixos/nginx: sync Mozilla recommended cipher list
https://ssl-config.mozilla.org/#server=nginx&config=intermediate&guideline=6.0
https://wiki.mozilla.org/Security/Server_Side_TLS#Version_History
2026-05-25 09:15:25 +02:00
Aliaksandr
5edd54e7ec nixos/kernel: drop boot.vesa
Deprecated in 2020 because Xorg works better with kernel modesetting,
and the original 800x600 default is rarely the right choice anyway.
Users who still need a VESA fallback can inline
`boot.kernelParams = [ "vga=0x317" "nomodeset" ];`.

`mkRemovedOptionModule` makes the removal noisy: setting `boot.vesa`
will now fail evaluation with a pointer to the replacement.
2026-05-25 09:25:01 +03:00
Kira Bruneau
fd27832e66 nixos/gamemode: add package option (#523641) 2026-05-24 23:07:41 +00:00
Sandro Jäckel
cb2ed10279 nixos/immich: fix matplotlib warning in machine-learning
machine-learning[1920443]: mkdir -p failed for path /var/empty/.config/matplotlib: [Errno 1] Operation not permitted: '/var/empty/.config'
machine-learning[1920443]: Matplotlib created a temporary cache directory at /tmp/matplotlib-uo52wf71 because there was an issue with the default path (/var/empty/.config/matplotlib); it is highly recommended to set the MPLCONFIGDIR environment variable to a writable directory, in particular to speed up the import of Matplotlib and to better support multiprocessing.
2026-05-25 00:31:04 +02:00