keydb: drop

The keydb package is broken [1], vulnerable [2], and upstream's
last release was in October 2023 [3].

[1] https://hydra.nixos.org/build/311470939/nixlog/2
[2] Snapchat/KeyDB#918
[3] https://github.com/Snapchat/KeyDB/releases

Author: thunze

nixos/modules/services/databases/redis.nix

@@ -559,8 +559,7 @@ in
           ];
           RestrictNamespaces = true;
           LockPersonality = true;
-          # we need to disable MemoryDenyWriteExecute for keydb
-          MemoryDenyWriteExecute = cfg.package.pname != "keydb";
+          MemoryDenyWriteExecute = true;
           RestrictRealtime = true;
           RestrictSUIDSGID = true;
           PrivateMounts = true;

nixos/tests/redis.nix

@@ -10,7 +10,7 @@ let
   mkTestName =
     pkg: "${pkg.pname}_${builtins.replaceStrings [ "." ] [ "" ] (lib.versions.majorMinor pkg.version)}";
   redisPackages = {
-    inherit (pkgs) redis keydb valkey;
+    inherit (pkgs) redis valkey;
   };
   makeRedisTest =
     {

pkgs/by-name/ke/keydb/package.nix

@@ -761,6 +761,7 @@ mapAliases {
   kbibtex = throw "'kbibtex' has been removed, as it is unmaintained upstream"; # Added 2025-08-30
   kcli = throw "kcli has been removed because it has been marked as broken since at least November 2024."; # Added 2025-09-28
   keepkey_agent = throw "'keepkey_agent' has been renamed to/replaced by 'keepkey-agent'"; # Converted to throw 2025-10-27
+  keydb = throw "'keydb' has been removed as it was broken, vulnerable, and unmaintained upstream"; # Added 2025-11-08
   kgx = throw "'kgx' has been renamed to/replaced by 'gnome-console'"; # Converted to throw 2025-10-27
   khoj = throw "khoj has been removed because it has been marked as broken since at least November 2024."; # Added 2025-10-11
   kmplayer = throw "'kmplayer' has been removed, as it is unmaintained upstream"; # Added 2025-08-30