Vladimír Čunát
eb4792a03f
nixos manual: add a note about "nofail" FS option
...
Close #1858 , as I think the points have been well resolved.
2017-04-30 14:10:30 +02:00
Jörg Thalheim
fa5196e47e
Merge pull request #25005 from Lassulus/copytoram
...
nixos/stage1: add copytoram support
2017-04-30 11:22:45 +02:00
lassulus
87a4615e27
nixos/stage1: add copytoram support
2017-04-28 20:48:09 +02:00
Данило Глинський (Danylo Hlynskyi)
84b1c0c481
Fix imperative container code examples
...
Since some time Nixos has firewall enabled by default, so update example.
Also, remove newline escaping (it isn't needed).
Closes https://github.com/NixOS/nixpkgs/issues/25174
2017-04-24 22:31:02 +02:00
Jörg Thalheim
c84dd4f09e
Merge pull request #24526 from miltador/jetbrains
...
idea: numerous fixes and improvements
2017-04-11 13:56:20 +02:00
Carles Pagès
d5a623cb39
Update 17.03 release notes
2017-04-03 22:54:34 +02:00
Théo Zimmermann
72070e6dfc
doc: improve "getting the sources" chapter
2017-04-01 17:56:29 +02:00
Vasiliy Solovey
4fc2a86795
rl-notes 17.09: add note about idea -> jetbrains renaming
2017-04-01 12:46:27 +03:00
Robin Gloster
cbd6fb1b3a
Release Notes: tracking UIDs/GIDs is in 17.09
2017-03-31 15:51:37 +02:00
Eelco Dolstra
e241fb87a1
Update 17.03 release notes
2017-03-31 15:00:30 +02:00
Robin Gloster
163668f6c4
Release Notes 17.03: update on master
2017-03-30 22:52:08 +02:00
Joachim Fasting
c504e14c87
rl-notes 17.03: add notes about changes to the dnscrypt-proxy interface
...
(cherry picked from commit 9613677176
)
2017-03-30 13:36:08 +02:00
Joachim Fasting
8427222eca
rl-notes 17.03: add note about pre-NSS dnscrypt-proxy
...
(cherry picked from commit de5d4dc147
)
2017-03-29 00:05:48 +02:00
Christine Koppelt
e5c927cb8d
NixOS Manual: Update version numbers
2017-03-25 20:14:04 +01:00
goibhniu
170b8da281
Merge pull request #24304 from matklad/uefi-install-docs
...
docs: clarify UEFI bootloader setup
2017-03-25 13:08:06 +01:00
Aleksey Kladov
edac1d3e7a
docs: clarify UEFI bootloader setup
2017-03-25 00:48:27 +03:00
Vladimír Čunát
c1a9dc3d37
Merge branch 'master' into staging
2017-03-23 13:31:28 +01:00
Eelco Dolstra
86721a5f78
Allow attaching to non-child processes by default
...
The inability to run strace or gdb is the kind of
developer-unfriendliness that we're used to from OS X, let's not do it
on NixOS.
This restriction can be re-enabled by setting
boot.kernel.sysctl."kernel.yama.ptrace_scope" = 1;
It might be nice to have a NixOS module for enabling hardened defaults.
Xref #14392 .
Thanks @abbradar.
2017-03-21 18:48:35 +01:00
Carlos D
e6a02918ce
Expand on creating USB bootable for OS X
2017-03-21 17:31:10 +01:00
Robin Gloster
c93eb74e6a
Merge pull request #23838 from mayflower/remove-md5
...
fetch-*: remove md5 support
2017-03-21 13:27:51 +01:00
Frederik Rietdijk
94eb74eaad
Merge remote-tracking branch 'upstream/master' into HEAD
2017-03-21 13:04:37 +01:00
Frederik Rietdijk
4263c53f66
Python changelog
2017-03-21 11:05:03 +01:00
Robin Gloster
5e0f932de0
rl-notes 17.03: info on python module location
...
closes #11567
2017-03-20 23:28:51 +01:00
Robin Gloster
c066dc8416
fetch-*: add md5 support removal to rl-notes
2017-03-20 22:26:02 +01:00
Thomas Tuegel
d458b5401a
nixos/fontconfig: add Changelog message about FreeType update
2017-03-20 10:39:48 -05:00
Franz Pletz
8ab2d2ee27
rmilter service: support only one socket
2017-03-17 23:00:34 +01:00
Graham Christensen
0705346de4
Merge pull request #23512 from matthiasbeyer/doc-fix-xfce
...
doc: Remove indention from program listings
2017-03-06 17:33:13 -05:00
Matthias Beyer
87f57de8e5
Wrap command in <command>
2017-03-05 14:21:45 +01:00
Matthias Beyer
0a18a56375
nixos doc xfce: Tabs -> spaces
2017-03-05 14:20:49 +01:00
Matthias Beyer
1e3dec3baa
nixos doc xfce: Fix missing space
2017-03-05 14:20:48 +01:00
Matthias Beyer
c56587eb30
doc: Remove indention from program listings
2017-03-05 14:20:47 +01:00
Daiderd Jordan
35a65a6704
release-nodes: move disabledModules to 17.09
2017-03-05 14:17:00 +01:00
Thomas Tuegel
044c7d091b
Merge pull request #23388 from ttuegel/nixos-plasma5
...
NixOS: Plasma 5 tests and warnings
2017-03-03 09:50:08 -06:00
Thomas Tuegel
ecb65eceaa
nixos/doc/manual: rename plasma5 desktop
2017-03-03 07:29:16 -06:00
Daiderd Jordan
d88721e440
modules: add support for module replacement with disabledModules
...
This is based on a prototype Nicolas B. Pierron worked on during a
discussion we had at FOSDEM.
A new version with a workaround for problems of the reverted original.
Discussion: 3f2566689
2017-03-03 13:45:22 +01:00
Vladimír Čunát
fcec3e1c72
Revert "modules: add support for module replacement with disabledModules"
...
This reverts commit 3f2566689d
for now.
Evaluation of the tested job got broken, blocking nixos-unstable.
2017-03-01 21:56:01 +01:00
Vladimír Čunát
b43614a6bb
Merge branch 'staging'
...
(Truly, this time :-)
2017-03-01 11:34:44 +01:00
Daiderd Jordan
3f2566689d
modules: add support for module replacement with disabledModules
...
This is based on a prototype Nicolas B. Pierron worked on during a
discussion we had at FOSDEM.
2017-02-28 00:14:48 +01:00
Vladimír Čunát
81b43ccd57
17.09 release notes: fix typos
2017-02-27 23:03:16 +01:00
Robin Gloster
755902b543
release-notes: add 17.09
2017-02-27 20:46:34 +01:00
Vladimír Čunát
a1919db7cd
Merge branch 'master' into staging
2017-02-27 20:15:27 +01:00
Frederik Rietdijk
f69292ddc0
Python: explain deterministic builds in release notes
2017-02-26 14:51:26 +01:00
Graham Christensen
a9c875fc2e
nixpkgs: allow packages to be marked insecure
...
If a package's meta has `knownVulnerabilities`, like so:
stdenv.mkDerivation {
name = "foobar-1.2.3";
...
meta.knownVulnerabilities = [
"CVE-0000-00000: remote code execution"
"CVE-0000-00001: local privilege escalation"
];
}
and a user attempts to install the package, they will be greeted with
a warning indicating that maybe they don't want to install it:
error: Package ‘foobar-1.2.3’ in ‘...default.nix:20’ is marked as insecure, refusing to evaluate.
Known issues:
- CVE-0000-00000: remote code execution
- CVE-0000-00001: local privilege escalation
You can install it anyway by whitelisting this package, using the
following methods:
a) for `nixos-rebuild` you can add ‘foobar-1.2.3’ to
`nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
like so:
{
nixpkgs.config.permittedInsecurePackages = [
"foobar-1.2.3"
];
}
b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
‘foobar-1.2.3’ to `permittedInsecurePackages` in
~/.config/nixpkgs/config.nix, like so:
{
permittedInsecurePackages = [
"foobar-1.2.3"
];
}
Adding either of these configurations will permit this specific
version to be installed. A third option also exists:
NIXPKGS_ALLOW_INSECURE=1 nix-build ...
though I specifically avoided having a global file-based toggle to
disable this check. This way, users don't disable it once in order to
get a single package, and then don't realize future packages are
insecure.
2017-02-24 07:41:05 -05:00
Franz Pletz
9b81dcfda2
nixos/release-notes: fix typos
2017-02-22 08:45:30 +01:00
Jörg Thalheim
27d4f8c717
Merge pull request #23046 from Zimmi48/patch-2
...
nixos/manual/networkmanager: add info on nm-applet
2017-02-22 01:40:50 +01:00
Jörg Thalheim
6a044f1841
Merge pull request #23045 from Zimmi48/patch-1
...
nixos/manual/xserver: propose more alternatives
2017-02-22 01:38:25 +01:00
Jörg Thalheim
5b14e91717
Merge pull request #22822 from Mic92/iputils
...
iputils: 20151218 -> 20161105
2017-02-22 00:37:13 +01:00
Jörg Thalheim
45719174c3
nixos/release-notes: mention iputils changes
2017-02-22 00:32:52 +01:00
Théo Zimmermann
0994d6af9d
nixos/manual/networkmanager: add info on nm-applet
2017-02-21 15:20:10 +01:00
Théo Zimmermann
361d730f35
nixos/manual/xserver: propose more alternatives
2017-02-21 14:56:26 +01:00