Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
80 commits
Select commit Hold shift + click to select a range
4ad768c
.github: Remove.
jsoo1 Sep 5, 2023
2e8c0be
toGNUCommandLine: Unwrap value if set by mkForce/mkOverride
jsoo1 Sep 5, 2023
7058480
testing/run: remove lazyDerivation
jsoo1 Jan 14, 2024
57da0b0
nixos-install: Disable min-free
Gabriella439 Apr 8, 2022
564e41e
nixos/grafana: fix dependencies of grafana-image-renderer.service
cookiebaker444 Nov 15, 2022
0f0140d
nixos/nghttpx: user,group,{frontend,backend}-{read,write}-timeout
jsoo1 Jan 12, 2023
00c3187
nixos/nghttpx: add python, openssl to `path`
jsoo1 Jan 12, 2023
d292bc1
nixos/systemd: check that services actually run something
jsoo1 Jan 7, 2023
28c9872
nixos/postgresql: add `upgrade.*` options
tm-drtina Jul 15, 2024
0799e65
nixos/buildkite-agents: add user option
bacchanalia Jul 2, 2024
500fe44
pythonPackages.pymisp: init at 2.4.174
arunabh98 Aug 1, 2023
64b861f
mailsend-go: init at 1.0.10
jsoo1 Aug 30, 2023
a787c34
clickhouse_jdbc: init at 0.6.0, liquibase_clickhouse: init at 0.7.3
daniel-awake Jan 17, 2024
d85ffa3
terraform-cloud-agent: init at 1.13.0
ixmatus Nov 8, 2023
5afd25a
fetchdocker: constrain build cores
tm-drtina Jun 12, 2024
b30d022
[DOWNGRADE] grub2: 2.12-rc1 -> 2.06
bacchanalia Aug 7, 2024
c28dcfa
nixos/self-deploy: add hooks (#236)
bacchanalia Sep 6, 2024
27cd1f4
nixos/stub-ld: disable by default
tm-drtina Oct 30, 2024
eddde04
apache-airflow.pythonPackages.werkzeug: downgrade to 2.2.x release
tm-drtina Dec 18, 2024
0bad901
apache-airflow.pythonPackages.pendulum: downgrade to 2.x release
tm-drtina Dec 18, 2024
2cde274
apache-airflow.pythonPackages.rich-argparse: fix test
tm-drtina Jan 29, 2025
243cf4a
nixos/sssd: assert that nscd is enabled
jsoo1 Jan 10, 2025
8f4198d
drop! python3Packages.spacy-loggers: remove optional dependency on wandb
tm-drtina Mar 4, 2025
4ce3940
apache-airflow: build with python311
tm-drtina Mar 5, 2025
5780237
apache-airflow.pythonPackages.flask-login: downgrade to 0.6.3 release
tm-drtina Mar 5, 2025
3b73667
apache-airflow.pythonPackages.flask-session: downgrade to 0.5.0 release
tm-drtina Mar 5, 2025
9080f42
Revert "nixops_unstablePlugins.nixops-aws: drop"
tm-drtina Apr 1, 2025
b2ae60d
Revert "python3{11,12}Packages.boto: drop"
tm-drtina Apr 1, 2025
fd75174
nixops-aws: broken only on python3.12+
tm-drtina Apr 1, 2025
49be59b
python3Packages.boto: broken only on python3.12+
tm-drtina Apr 1, 2025
b5effbb
drop! python3Packages.boto: remove dependency on nose
tm-drtina Apr 8, 2025
67d71b5
apache-airflow.pythonPackages.connexion: fix downgrade
tm-drtina Apr 8, 2025
bec7c10
apache-airflow.pythonPackages.flask-sqlalchemy: fix test
tm-drtina May 22, 2025
61a1f8b
apache-airflow.pythonPackages.httpcore: fix deprecation
tm-drtina May 22, 2025
3c05009
python3Packages.hyperscan: 0.7.9 -> 0.7.13
r-ryantm May 18, 2025
df13245
lixPackageSets.{lix_2_92,lix_2_93,git}.lix: fix building on darwin
getchoo May 18, 2025
ced7dda
python3Packages.aiohttp-swagger: modernize
jopejoe1 May 1, 2025
37fbb23
python3Packages.aiohttp-swagger: remove tests
jopejoe1 May 1, 2025
c875955
python3Packages.flask-limiter: fix building with latest rich
devusb Apr 19, 2025
1873231
apache-airflow.pythonPackages.pytzdata: bring back removed package
tm-drtina May 28, 2025
7cccd12
haskellPackages.HDBC-postgresql: unbreak
wolfgangwalther May 1, 2025
587b900
python3Packages.thinc: 9.1.1 -> 8.3.6
hoh May 7, 2025
95e9b3e
python3Packages.spacy: 3.8.3 -> 3.8.5
prusnak Apr 18, 2025
614f30d
python312Packages.spacy: cleanup
GaetanLepage Apr 16, 2025
3f0013a
python312Packages.spacy: re-order inputs
GaetanLepage Apr 21, 2025
0ab67a8
python312Packages.spacy: mark as broken
GaetanLepage Apr 21, 2025
4dbd073
python3Packages.spacy: unmark as broken
hoh May 7, 2025
b0c3b2a
python312Packages.blis: 1.2.1 -> 1.3.0
r-ryantm Apr 12, 2025
1f90862
nixos/graphite: fix name of django-admin binary
tm-drtina Jun 4, 2025
ee29580
Revert "apacheKafka: drop 3.6"
tm-drtina Jun 11, 2025
ebc3432
nixos: add nixpkgs.scopedOverlays option (#254)
bacchanalia Jun 12, 2025
183731f
Revert ".github: Remove."
tm-drtina Jun 16, 2025
bd9c3f4
Revert "toGNUCommandLine: Unwrap value if set by mkForce/mkOverride"
tm-drtina Jun 16, 2025
b04be5c
Revert "testing/run: remove lazyDerivation"
tm-drtina Jun 16, 2025
04ebb78
Revert "nixos-install: Disable min-free"
tm-drtina Jun 16, 2025
01c1efc
lixPackageSets.lix_2_92: patch for CVE-2025-4641{5,6}
RaitoBezarius Jun 24, 2025
529a200
Revert "lixPackageSets.lix_2_92: patch for CVE-2025-4641{5,6}"
bacchanalia Jul 1, 2025
cbee7e5
lixPackageSets.nix-eval-jobs: add `nix` passthru attribute
ipetkov Apr 6, 2025
b2e2f41
(partial) treewide: remove usage of deprecated apple_sdk framework stubs
bacchanalia Jul 1, 2025
42e847d
lixPackageSets.nix-fast-build: init
ipetkov Apr 6, 2025
66e0458
lixPackageSets.stable.nix-direnv: init
ipetkov Apr 12, 2025
224f030
(partial) treewide: switch instances of lib.teams.*.members to the ne…
bacchanalia Jul 1, 2025
0193acb
lixPackageSets.latest.colmena: init (#407571)
yuyuyureka May 16, 2025
a3d4db7
lixPackageSets: support splicing
alois31 Apr 10, 2025
b338d3a
lixPackageSets.*.lix: test the correct Lix in passthru.tests
alois31 May 10, 2025
e1482a7
lixPackageSets.lix_2_93: init at 2.93.0
alois31 Apr 10, 2025
8616316
lixPackageSets.git: init at 2.94.0-pre-20250509_dcb0a97000d5
alois31 Apr 10, 2025
9fd1910
lixPackageSets.git: 2.94.0-pre-20250509_dcb0a97000d5 -> 2.94.0-pre-20…
alois31 May 17, 2025
7852119
lixPackageSets.{lix_2_92,lix_2_93,git}.lix: fix building on darwin
getchoo May 18, 2025
6c29b0c
lixPackageSets.git: 2.94.0-pre-20250516_a7634f87aac5 -> 2.94.0-pre-20…
alois31 May 31, 2025
14a9f12
lixPackageSets.lix_2_90: mark as vulnerable
RaitoBezarius Jun 24, 2025
4680822
lixPackageSets.lix_2_91: patch for CVE-2025-4641{5,6}
RaitoBezarius Jun 24, 2025
333d611
lixPackageSets.lix_2_93: patch for CVE-2025-4641{5,6}
RaitoBezarius Jun 24, 2025
a312454
lixPackageSets.lix_2_92: patch for CVE-2025-4641{5,6}
RaitoBezarius Jun 24, 2025
12cac3f
lixPackageSets.git: patch for CVE-2025-4641{5,6}
RaitoBezarius Jun 24, 2025
449e292
lixPackageSets.git: 2.94.0-pre-20250621_242a228124f7 -> 2.94.0-pre-20…
alois31 Jun 24, 2025
622d74f
lixPackageSets.*.lix: use pasta for FODs on supported platforms
alois31 Jun 24, 2025
92b2269
lixPackageSets.lix_2_91: patch for the critical correctness bug
RaitoBezarius Jun 29, 2025
a932044
lixPackageSets.lix_2_92: patch for the critical correctness bug
RaitoBezarius Jun 29, 2025
1a37ae9
lixPackageSets.lix_2_93: patch for the critical correctness bug
RaitoBezarius Jun 29, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions maintainers/team-list.nix
Original file line number Diff line number Diff line change
Expand Up @@ -856,6 +856,7 @@ with lib.maintainers;
qyriad
_9999years
lf-
alois31
];
scope = "Maintain the Lix package manager inside of Nixpkgs.";
shortName = "Lix ecosystem";
Expand Down
2 changes: 1 addition & 1 deletion nixos/modules/config/stub-ld.nix
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ in
environment.stub-ld = {
enable = mkOption {
type = types.bool;
default = true;
default = false;
example = false;
description = ''
Install a stub ELF loader to print an informative error message
Expand Down
51 changes: 49 additions & 2 deletions nixos/modules/misc/nixpkgs.nix
Original file line number Diff line number Diff line change
Expand Up @@ -101,8 +101,36 @@ let
;
};

finalPkgs = if opt.pkgs.isDefined then cfg.pkgs.appendOverlays cfg.overlays else defaultPkgs;
overlayedPkgs = if opt.pkgs.isDefined then cfg.pkgs.appendOverlays cfg.overlays else defaultPkgs;
splicedPackages = overlayedPkgs.__splicedPackages;

finalPkgs = if (cfg.scopedOverlays or [ ]) == [ ] then splicedPackages else
let
# cribbed of lib.makeScope
withScope = base: extension:
let
self = packages self // scope;
packages = self: extension self base;
scope = {
inherit extension packages;

newScope = scope: base.newScope (self // scope);

callPackage = self.newScope {};
callPackages = base.callPackagesWith self;
callPackageWith = autoArgs: base.callPackageWith (self // autoArgs);
callPackagesWith = autoArgs: base.callPackagesWith (self // autoArgs);

appendOverlays = fs: withScope (base.appendOverlays fs) extension;
extend = f: self.appendOverlays [f];

overrideScope = f: lib.makeScope base.newScope (lib.extends f packages);
appendOverlaysToScope = fs: withScope base (lib.composeManyExtensions ([extension] ++ fs));
extendScope = f: self.appendOverlaysToScope [f];
};
in base // self;
in
withScope splicedPackages (lib.composeManyExtensions cfg.scopedOverlays);
in

{
Expand Down Expand Up @@ -194,6 +222,25 @@ in
'';
};

scopedOverlays = lib.mkOption {
default = [];
example = lib.literalExpression
''
[
(self: super: {
# Log commands run in builds of configuration files
runCommand = name: args: text: super.runCommand name args '''
set +x
''${text}
''';
]
'';
type = lib.types.listOf overlayType;
description = ''
List of overlays to apply in a new scope after `nixpkgs.overlays` is applied accessed trough the `pgks` module argument.
'';
};

hostPlatform = lib.mkOption {
type = lib.types.either lib.types.str lib.types.attrs; # TODO utilize lib.systems.parsedPlatform
example = {
Expand Down Expand Up @@ -356,7 +403,7 @@ in
# which is somewhat costly for Nixpkgs. With an explicit priority, we only
# evaluate the wrapper to find out that the priority is lower, and then we
# don't need to evaluate `finalPkgs`.
lib.mkOverride lib.modules.defaultOverridePriority finalPkgs.__splicedPackages;
lib.mkOverride lib.modules.defaultOverridePriority finalPkgs;
};

assertions =
Expand Down
1 change: 1 addition & 0 deletions nixos/modules/module-list.nix
Original file line number Diff line number Diff line change
Expand Up @@ -688,6 +688,7 @@
./services/home-automation/zigbee2mqtt.nix
./services/home-automation/zwave-js.nix
./services/home-automation/zwave-js-ui.nix
./services/infrastructure/terraform-cloud-agent/default.nix
./services/logging/SystemdJournal2Gelf.nix
./services/logging/awstats.nix
./services/logging/filebeat.nix
Expand Down
18 changes: 12 additions & 6 deletions nixos/modules/services/continuous-integration/buildkite-agents.nix
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,12 @@ let
type = lib.types.str;
};

user = lib.mkOption {
default = "buildkite-agent-${name}";
description = "The username of the agent";
type = lib.types.passwdEntry lib.types.str;
};

extraGroups = lib.mkOption {
default = [ "keys" ];
description = "Groups the user for this buildkite agent should belong to";
Expand Down Expand Up @@ -178,26 +184,26 @@ in

config.users.users = mapAgents (
name: cfg: {
"buildkite-agent-${name}" = {
name = "buildkite-agent-${name}";
${cfg.user} = {
name = cfg.user;
home = cfg.dataDir;
createHome = true;
description = "Buildkite agent user";
extraGroups = cfg.extraGroups;
isSystemUser = true;
group = "buildkite-agent-${name}";
group = cfg.user;
};
}
);
config.users.groups = mapAgents (
name: cfg: {
"buildkite-agent-${name}" = { };
${cfg.user} = { };
}
);

config.systemd.services = mapAgents (
name: cfg: {
"buildkite-agent-${name}" = {
${cfg.user} = {
description = "Buildkite Agent";
wantedBy = [ "multi-user.target" ];
after = [ "network.target" ];
Expand Down Expand Up @@ -241,7 +247,7 @@ in

serviceConfig = {
ExecStart = "${cfg.package}/bin/buildkite-agent start --config ${cfg.dataDir}/buildkite-agent.cfg";
User = "buildkite-agent-${name}";
User = cfg.user;
RestartSec = 5;
Restart = "on-failure";
TimeoutSec = 10;
Expand Down
14 changes: 12 additions & 2 deletions nixos/modules/services/databases/clickhouse.nix
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,14 @@ in

package = lib.mkPackageOption pkgs "clickhouse" { };

usersXml = lib.mkOption {
type = lib.types.path;
description = ''
ClickHouse server users.xml override for
declaring user access permissions and privileges
'';
};

};

};
Expand All @@ -27,6 +35,8 @@ in

config = lib.mkIf cfg.enable {

services.clickhouse.usersXml = lib.mkDefault (cfg.package + "/etc/clickhouse-server/users.xml");

users.users.clickhouse = {
name = "clickhouse";
uid = config.ids.uids.clickhouse;
Expand Down Expand Up @@ -63,11 +73,11 @@ in

environment.etc = {
"clickhouse-server/config.xml" = {
source = "${cfg.package}/etc/clickhouse-server/config.xml";
source = cfg.package + "/etc/clickhouse-server/config.xml";
};

"clickhouse-server/users.xml" = {
source = "${cfg.package}/etc/clickhouse-server/users.xml";
source = cfg.usersXml;
};
};

Expand Down
Loading