Luj
e21904681e
nixos/systemd-boot: strip newline from machine-id ( #375298 )
2025-03-24 11:06:53 +01:00
Weijia Wang
7bce6fbf11
nixos/limine: Fix reading generations for primary profile and specialisations ( #391210 )
2025-03-22 18:23:02 +01:00
Will Fancher
c983091366
nixos/sysusers: respect per user .enable
( #388551 )
2025-03-20 20:25:49 -04:00
isabel
2c836c5054
nixos/sysusers: respect per user .enable
2025-03-20 20:43:00 +00:00
Angelo Bulfone
9ed29c65a4
nixos/limine: Fix reading generations and specialisations
...
Previously, all generations for the primary system profile
read their data from the currently active one rather than
their own path, and specialisations in general all used
their parent bootspec rather than their own. This fixes both issues.
This commit still uses the parent path's build date for
specialisations, but this is more minor issue and the times
shouldn't be meaningfully different in most cases anyways.
2025-03-19 15:19:41 -07:00
Will Fancher
ecbf53f525
nixos/systemd: conditionally leave out some upstream units ( #374214 )
2025-03-19 16:58:14 -04:00
Will Fancher
b15e9e7d3d
nixos/initrd: add extraFirmwarePaths option ( #391166 )
2025-03-19 16:51:26 -04:00
Jared Baur
dad880d6bf
nixos/systemd: conditionally leave out some upstream units
...
Some upstream systemd units are conditionally installed into the systemd
output, so we must make sure the feature that enables their installation
is enabled on our side prior to trying to use them.
2025-03-19 08:14:48 -07:00
Benedikt Ritter
deb045e057
initrd: implement panic-on-fail interpreterless
2025-03-19 10:23:46 +01:00
Jared Baur
ea116654aa
nixos/initrd: add extraFirmwarePaths option
...
(cherry picked from commit 488d4316b9e1510c9b4a2eeb8d7e2cc66839a1fc)
2025-03-18 20:39:52 -07:00
programmerlexi
1a830fe9d9
nixos/limine: fix the install script
2025-03-18 01:06:55 +05:30
Rane
2cc1d33489
nixos/limine: cast partition index to string ( #390732 )
2025-03-18 01:01:15 +05:30
Florent Charpentier
631bed6ed9
nixos/systemd-repart: add support for repeating settings
...
fix https://github.com/NixOS/nixpkgs/issues/389478
2025-03-14 19:43:28 +01:00
Florian Klink
a8dc55f40b
nixos/logind: add "sleep" option to logindHandlerType ( #388792 )
2025-03-12 17:17:00 +02:00
nixpkgs-ci[bot]
9a807b1916
Merge master into staging-next
2025-03-11 17:36:38 +00:00
Pol Dellaiera
c39e50acb0
nixos/limine: init module ( #386368 )
2025-03-11 14:09:50 +01:00
SebastianStork
e0258ad135
nixos/logind: add "sleep" option to logindHandlerType
...
The "systemctl sleep" command was added in systemd v256.
2025-03-10 19:44:27 +01:00
John Titor
f597c68e7b
nixos/boot/systemd: enable tracefs
...
tracefs is a special-purpose filesystem in Linux used for tracing filesystem and kernel operations.
This was added to the kernel back in 2015 to replace debugfs. For security reasons, some system do not mount debugfs at all. Tracefs reduces the attack surface by allowing to trace without mounting debugfs. Additionally it provides features not supported by debugfs (such as calls for mkdir and rmdir
Debian and Arch Linux both enable this by default.
RHEL 8 and later, they enable tracefs by default.
Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
2025-03-10 22:27:41 +05:30
Connor Baker
871cda0b06
testers.shellcheck: refactor, update docs, and simplify tests ( #385940 )
2025-03-07 20:53:33 -08:00
Connor Baker
cd7df192e3
treewide: add name argument to calls to testers.shellcheck
2025-03-08 00:15:22 +00:00
programmerlexi
12779dc091
nixos/limine: init module
...
Co-Authored-By: Gabriel Waksmundzki <czapek1337@gmail.com>
2025-03-06 08:05:08 +01:00
Samuel Dionne-Riel
6ec6eae586
Revert "nixos/grub: generate BLS entries"
2025-02-28 14:30:10 -05:00
rnhmjoj
435a72e469
nixos/grub: generate BLS entries
2025-02-28 09:51:20 +01:00
Peder Bergebakken Sundt
527be14321
nixos/doc: convert links to manpages
2025-02-21 16:31:09 +01:00
nixpkgs-ci[bot]
3a870eb511
Merge master into staging-next
2025-02-19 18:04:49 +00:00
Jörg Thalheim
55b39e42a6
install-grub: add missing rmtree ( #383269 )
2025-02-19 21:53:51 +07:00
nixpkgs-ci[bot]
a8eabdcf7f
Merge master into staging-next
2025-02-19 11:19:10 +00:00
Ramses
9abef1cee8
switch-to-configuration-ng: don't block when the lockfile is already locked ( #382797 )
2025-02-19 11:07:33 +01:00
Jörg Thalheim
39dd19122f
install-grub: add missing rmtree
2025-02-19 14:33:46 +07:00
nixpkgs-ci[bot]
9bd398d5e9
Merge master into staging-next
2025-02-18 12:05:57 +00:00
Michele Guerini Rocco
d05074f981
nixos/getty: only include if config.console.enable == true
( #363533 )
2025-02-18 11:44:42 +01:00
nixpkgs-ci[bot]
83f409d731
Merge master into staging-next
2025-02-18 06:04:52 +00:00
Jörg Thalheim
5be6db6b3d
grub modernize ( #374844 )
2025-02-18 13:03:24 +07:00
nixpkgs-ci[bot]
71e949e746
Merge master into staging-next
2025-02-18 00:14:29 +00:00
Fernando Rodrigues
cf4c8e97ad
nixos/networkd: add new options introduced in systemd 257
...
The Wireguard public key can now be read from a file.
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2025-02-17 21:51:40 +00:00
r-vdp
125edf8424
switch-to-configuration: don't block on flock, see 7a56ddaf9d
2025-02-17 13:14:25 +01:00
nixpkgs-ci[bot]
fc7fa5f568
Merge master into staging-next
2025-02-17 00:15:35 +00:00
Arian van Putten
3835432751
systemd-repart: Enable custom --empty flags in initrd ( #373414 )
2025-02-16 20:03:50 +01:00
K900
daadcbdaac
nixos/systemd-stage-1: explicitly add pkgs.runtimeShell dependency
...
Because it's no longer pkgs.bash (which is interactive), and
can be something else on other platforms anyway.
2025-02-16 19:42:14 +03:00
nixpkgs-ci[bot]
43a5de6cbb
Merge master into staging-next
2025-02-14 12:05:56 +00:00
Maximilian Bosch
4eccb53550
nixos/tmpfiles: fix docs
...
Closes #381822
Apparently, I swapped `path` and `tmpfiles-type` in
2be50b1efe
. Sorry about that 🫠
Also giving
`systemd.tmpfiles.settings.<config-name>.<path>.<tmpfiles-type>.type` a
better default in the manual than `‹name›`, i.e. `‹tmpfiles-type›` so
that it corresponds to the placeholders in the attribute path.
2025-02-14 09:42:43 +01:00
Jared Baur
3de7bccd4a
nixos/systemd-boot: strip newline from machine-id
...
To make each line in the entry file consistent, strip the newline from
the machine-id content.
2025-02-13 18:52:14 -08:00
Wolfgang Walther
b19d0f6d3d
treewide: replace substituteAll with replaceVars
2025-02-10 22:51:56 +01:00
Arian van Putten
587efe0fd0
Unbork journals audit logs and introduce audit option ( #379629 )
2025-02-10 12:09:32 +01:00
Arian van Putten
ff78e34e0b
services/journald: introduce audit option
...
We default this option to null ; which is different
from upstream which defaults this to true.
Defaulting this to true leads to log-spam in /dev/kmesg
and thus in our opinion is a bad default https://github.com/systemd/systemd/issues/15324
2025-02-07 15:58:19 +01:00
Arian van Putten
13b1062730
services/journald: re-enable systemd-journald-audit.socket
...
This was broken due to https://github.com/systemd/systemd/pull/25687
but we never noticed.
2025-02-07 14:14:53 +01:00
therainisme
0a12b8d03d
systemd: fix typo in boot.kernelParams (hierachy → hierarchy)
2025-02-07 12:06:23 +08:00
Jörg Thalheim
b29c6f5a4a
stage-2-init: fix false positives for RO Nix store mounts ( #375257 )
2025-02-02 08:58:03 +07:00
nikstur
2442d7afa9
nioxs/etc: improve docs for file ownership
2025-02-01 22:37:46 +01:00
Ramses
823a05829f
nixos/activation: pass the action as an argument to the pre-switch-checks ( #377526 )
2025-01-30 11:25:33 +01:00