-
-
Notifications
You must be signed in to change notification settings - Fork 13.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
nixos/step-ca: Declarative step-ca service #112322
nixos/step-ca: Declarative step-ca service #112322
Conversation
This pull request has been mentioned on NixOS Discourse. There might be relevant details there: https://discourse.nixos.org/t/typechecking-options-based-on-a-key/11517/1 |
Thanks for your work! I think this PR is in better shape than the previous one as it would support a wider range of use cases. I believe we can do with fewer suboptions though, considering that the easiest way to configure this module would be to generate it using
You could create custom types, but I think |
91acf59
to
4c94904
Compare
4c94904
to
f427ae4
Compare
f427ae4
to
1fafd5f
Compare
Yeah this does appear better and easier to use then the previous module we worked on @mohe2015 Thumbsup from me. |
This module might also benefit from having an |
0fdff61
to
f01741d
Compare
@midchildan Thanks a lot for the review and easy-to-apply Github suggestions. I implemented an |
@ofborg build step-ca I fixed a fixed-output hash. Should be good to merge when ofborg also builds. @r-rmcgibbo is it possible to trigger a rebuild? |
Hi @mohe2015, just a thought I had today about what else would make certificate management easier in NixOS. If this belongs on some other forum let me know, I'd love to join in the discussion. I came across this blog post from @Xe about setting up Grafana, Prometheus, loki, and node_exporter using NixOS. They mentioned doing TLS configuration using a custom CA. In their config it looks like they're pulling PEM files from an external HTTPS endpoint during setup. It got me wondering what it would take to make ACME and shorter-lived certs possible on the service level in NixOS, with automated renewal. Does NixOS have an ACME client that could be composed with services like NGINX that don't have internal ACME support? I think it would be an excellent complement to the For step-ca we have a TLS cert renewal approach that uses systemd timers, but the cert-renewer@ service almost always needs to be overridden to make renewal work for a given service. Certificate files have to be installed into a service-specific location, or the service has to be sent a HUP signal or restarted, etc. And if you want to add configuration for mutual TLS authentication (we ❤️ mTLS), things get a little more complex because now clients need certs too. It would be amazing if there were some sort of NixOS cert management "sidecar" that just knew how do the right thing for a given service, and could be configured with an ACME CA. |
@tashian I'm short on time right now but there actually already are options for enabling ACME. https://nixos.org/manual/nixos/stable/options.html#opt-services.nginx.virtualHosts._name_.enableACME is the option for nginx (Page loads really slow) and there exists the same option for apache2. As most services use these as reverse proxies almost every service has this builtin and otherwise you can and usually need to put them as a reverse proxy in front. https://nixos.org/manual/nixos/stable/#module-security-acme-nginx is a bigger example from the official manual and I use step-ca in my test setup the following way: {
security.acme.server = "https://localhost:9443/acme/acme/directory";
security.acme.email = "root@example.org";
security.acme.acceptTerms = true;
services.step-ca = {
enable = true;
address = "127.0.0.1";
port = 9443;
intermediatePasswordFile = "/etc/nixos/secrets/pi-smallstep-ca"; # FIXME is world readable
settings = {
dnsNames = ["localhost"];
root = ../../../secrets/root_ca.crt;
crt = ../../../secrets/intermediate_ca.crt;
key = ../../../secrets/intermediate_ca.key;
db = {
type = "badger";
dataSource = "/var/lib/step-ca/db";
};
authority = {
provisioners = [
{
type = "ACME";
name = "acme";
}
];
};
};
};
} https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/security/acme.nix contains the source of the acme module. The default seems to be checking daily for renewal which can also be configured. I don't know how good support for mTLS is but this would probably need to be implemented into nginx if it isn't already. If there is a simple config flag then you could also easily enable this in your local configuration. I don't know how well the services work with updating the certificate but that could probably be found out easily. |
5c6e106
to
29ab04b
Compare
I added myself as a maintainer and bumped the version to 0.15.10 instead of 0.15.8. There don't seem to be any relevant changes mostly small documentation things. I would love to get this merged before 21.05 and maybe adding myself as a maintainer explicitly helps. |
29ab04b
to
57406b0
Compare
57406b0
to
f87ba92
Compare
f87ba92
to
af6de2f
Compare
@aanderse could you please take a look at the module? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Great work on the module. Great support from upstream. Team effort. What more could you ask for? 🎆
There are a ton of comments so I apologize if this has already been discussed... but I just wanted to confirm that everyone understands exactly what these lines implies:
restartTriggers = [ configFile ];
reloadIfChanged = true; # allow reloads for more service availability
To clarify: the service will never automatically restart, even when software is upgraded. The sysadmin must manually restart the service any time the binary is updated if they want the new binary. Based on what the software does I figure I would just double check given the security implications on OS patching.
@aanderse Oh no, that's bad. Is it possible to get both behaviours so reload on configuration change and restart on binary change? I'm on my phone right now but as far as I remember the documentation of these options is pretty bad currently. |
Unfortunately it is not... ping @flokli we should probably do something about this finally. |
Co-authored-by: midchildan <git@midchildan.org>
af6de2f
to
01b1ddf
Compare
@aanderse I removed |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I approve the module portion of this PR 👍
NUR: 65400915fe3814023dff076f54dd2b37d8f89df6 to 2b0ef3c0313b62363015b8253c97767ed9970af0 * `d9b53827`: automatic update * `4e4f9ccb`: automatic update * `d7d3fe6b`: automatic update * `63003b96`: automatic update * `927920d9`: automatic update * `a9b0ecc3`: automatic update * `c58bab3f`: automatic update * `5f6ea895`: automatic update * `b25135e1`: automatic update * `b5a6a198`: automatic update * `17b19c08`: automatic update * `aafb5ca8`: automatic update * `f1cf3927`: automatic update * `1874ecbc`: automatic update * `fabd1d9c`: automatic update * `2315cc5f`: automatic update * `a2327569`: automatic update * `3232a66b`: automatic update * `d71685a9`: automatic update * `2e769395`: automatic update * `5647e72a`: automatic update * `f3407099`: automatic update * `fe7f6535`: automatic update * `eadbabd1`: automatic update * `efe4b2bd`: automatic update * `c4e489d1`: automatic update * `2003686c`: automatic update * `a1f4ad88`: automatic update * `1df98b0d`: automatic update * `d1b2adce`: automatic update * `18946ddf`: automatic update * `c376fbd4`: automatic update * `c807ccf8`: automatic update * `5e37af6b`: automatic update * `9af94a09`: automatic update * `5b6a6219`: automatic update * `a0cd9335`: automatic update * `8e0871ab`: automatic update * `7d4f18f3`: automatic update * `effbc610`: automatic update * `e27e222f`: automatic update * `e23f56f8`: automatic update * `5416dd11`: automatic update * `43795ee2`: automatic update * `0356c297`: automatic update * `4fc8701c`: automatic update * `cd40c3fa`: automatic update * `3741e264`: automatic update * `8576e196`: automatic update * `d7e2576d`: automatic update * `e0016614`: automatic update * `24267a2a`: automatic update * `41aa0e16`: automatic update * `a0de37a0`: Add ethancedwards8-nur repository * `d9e64754`: Merge pull request nix-community/NUR#344 from ethancedwards8/add_ethancedwards8-nur * `18e3badc`: automatic update * `f8ee368e`: automatic update * `ed72647f`: automatic update * `85bf1e97`: automatic update * `4482827a`: automatic update * `8b753a47`: automatic update * `49aaf983`: automatic update * `ea029782`: Bump cachix/install-nix-action from v12 to v13 * `3ed8552d`: automatic update * `da063013`: Merge pull request nix-community/NUR#345 from nix-community/dependabot/github_actions/cachix/install-nix-action-v13 * `63c667e0`: automatic update * `babb3ea0`: automatic update * `ec69ca53`: automatic update * `2a97b16f`: Add snippets related to Flake support: avoiding infinite recursion and repos overiding * `c79f1591`: automatic update * `c3f1f568`: automatic update * `7b5f6d44`: automatic update * `252a865f`: automatic update * `b6357491`: automatic update * `914c0b74`: automatic update * `d5ed8c6d`: automatic update * `74f84460`: Merge pull request nix-community/NUR#346 from augu5te/master * `a557c715`: automatic update * `3dbc9a7b`: automatic update * `41182d4a`: automatic update * `2a583241`: automatic update * `685ca3fc`: automatic update * `b78c8746`: automatic update * `a2ea7dcb`: automatic update * `040f141f`: automatic update * `b173bf46`: automatic update * `22b19ede`: automatic update * `12033b7f`: automatic update * `9a11ff85`: automatic update * `6c6996b1`: automatic update * `575ec77e`: automatic update * `d8aa2db0`: automatic update * `01c4e536`: automatic update * `287c83a9`: automatic update * `2be5c955`: automatic update * `d6b6fa21`: automatic update * `8c611913`: automatic update * `727f9455`: automatic update * `06b22b5d`: automatic update * `44611746`: automatic update * `867fbb5d`: automatic update * `2d81c179`: automatic update * `7d5f0d78`: automatic update * `00f255a9`: automatic update * `e63dce56`: automatic update * `6ac23e60`: automatic update * `316c1fe7`: automatic update * `98bce33f`: automatic update * `40c5dbf7`: add dschrempf repository * `ba56b3ba`: automatic update * `808ca2d6`: automatic update * `c22c64ce`: automatic update * `81a6339b`: automatic update * `b0d7be4d`: automatic update * `70c96670`: Merge pull request nix-community/NUR#347 from dschrempf/master * `13b6b648`: automatic update * `0039698c`: automatic update * `de4d0dbf`: automatic update * `0536d333`: automatic update * `ed7b9760`: automatic update * `d25795fb`: automatic update * `b61297e9`: automatic update * `1c5d2872`: automatic update * `a4552744`: automatic update * `5f8c2539`: automatic update * `bed2a952`: automatic update * `e8f0c434`: automatic update * `95d11d44`: automatic update * `05a30f5d`: automatic update * `0ba8bb12`: automatic update * `5ff1ec11`: automatic update * `4bb2c6d7`: automatic update * `205118db`: automatic update * `82ee86d7`: automatic update * `470752b2`: automatic update * `afb97578`: automatic update * `a6316d3d`: automatic update * `c720b64d`: automatic update * `6289f4c2`: automatic update * `0b82da41`: automatic update * `793c454e`: automatic update * `77b34447`: automatic update * `0958ed8a`: automatic update * `0c483f7c`: automatic update * `9008dc0c`: automatic update * `576d5cd2`: automatic update * `86527dd8`: automatic update * `87662aa4`: automatic update * `9df43cee`: automatic update * `fb19a195`: automatic update * `db148728`: automatic update * `40da8ce2`: automatic update * `dd9d2551`: automatic update * `22f28bf2`: automatic update * `1449080f`: automatic update * `45da9279`: automatic update * `fc238053`: automatic update * `a85adf94`: automatic update * `91271256`: automatic update * `1d4dc820`: Add vroad/nur-packages to repos.json * `8f4b8bd8`: Merge pull request nix-community/NUR#348 from vroad/master * `484ef9a6`: automatic update * `cd99db6d`: automatic update * `c4a22550`: automatic update * `7fd6ba6b`: automatic update * `d0a53721`: automatic update * `6703736c`: automatic update * `f03eb4d6`: automatic update * `7e32885b`: automatic update * `a28d65f1`: automatic update * `c5744fe1`: automatic update * `1cf1524c`: automatic update * `2653a101`: automatic update * `8846bc34`: automatic update * `71119b48`: automatic update * `d46eede2`: automatic update * `be4f31fc`: automatic update * `40dbf2b5`: automatic update * `5866b54b`: automatic update * `a57ee1e4`: automatic update * `cbbe0af8`: automatic update * `5f942a9c`: automatic update * `e0acc2eb`: automatic update * `e30c23c3`: automatic update * `cb171016`: automatic update * `6936c67f`: automatic update * `49f1898c`: automatic update * `89da23d0`: automatic update * `814d5188`: automatic update * `2d66a5d3`: automatic update * `2eb07980`: automatic update * `8e11948d`: automatic update * `82ff543e`: automatic update * `f47ecb7d`: automatic update * `ba76092a`: automatic update * `6e80df1c`: automatic update * `cc6a3af3`: automatic update * `e35e5fb0`: automatic update * `f2da9672`: automatic update * `4c351313`: automatic update * `d725bd16`: automatic update * `52452427`: automatic update * `8a8d4660`: automatic update * `05899939`: automatic update * `2321c9a4`: automatic update * `12ba1ec0`: automatic update * `8e8f9cd0`: automatic update * `8d2df56e`: automatic update * `f5a4010a`: automatic update * `1afa6e09`: automatic update * `d78e9080`: automatic update * `834e331b`: automatic update * `1ba748d3`: automatic update * `24c06b4e`: automatic update * `df04b4bd`: automatic update * `a3e4f2b7`: automatic update * `a4b914ed`: automatic update * `4cc2ce2a`: automatic update * `b16dd10e`: automatic update * `371fd2f2`: automatic update * `7a045aef`: automatic update * `55f66e7e`: automatic update * `3517f9b1`: automatic update * `23b62d57`: automatic update * `20a2cc71`: automatic update * `f1206bc5`: automatic update * `7b7b4c86`: automatic update * `5df43638`: automatic update * `0e9d8368`: automatic update * `b5c5a996`: automatic update * `a3f4f1d0`: automatic update * `316dd071`: automatic update * `5023bfe7`: readme: use git shallow clone * `a81ba7de`: add milahu repository * `c739596e`: Merge pull request nix-community/NUR#350 from milahu/add-repo-milahu * `93ab8e53`: Merge pull request nix-community/NUR#349 from milahu/patch-1 * `2ed3b8f5`: automatic update * `433295cf`: automatic update * `ffd070a0`: remove gnidorah * `804f0770`: remove yoctocell * `d5b9b5de`: Merge pull request nix-community/NUR#352 from nix-community/ci * `bce7ad5d`: automatic update * `20923d78`: automatic update * `b720bf7d`: automatic update * `0108dcc1`: automatic update * `3a218782`: automatic update * `0811bfb0`: automatic update * `02594667`: automatic update * `75b4ce15`: automatic update * `2b0ef3c0`: automatic update emacs-overlay: d9530a7048f4b1c0f65825202a0ce1d111a1d39a to 26f0a5e1d1f3934f0d6596b2c411dba52e6d7211 * `6530e559`: Add a cron-based and manually-triggered github action to update repos/melpa * `1ab10772`: Updated repos/melpa * `e09ec472`: Run the updater every 4 hours * `98039916`: Updated repos/melpa * `e3812585`: Updated repos/melpa * `a1bb791c`: Updated repos/melpa * `ba3f46ba`: Merge pull request nix-community/emacs-overlay#127 from nuance/master * `cab95bd5`: Updated repos/melpa * `59751c38`: only run every 8 hour * `155972bb`: Updated repos/melpa * `a46200c4`: Updated repos/melpa * `80762827`: emacs-unstable: Change rev from emacs-27.2-rc2 to emacs-27.2 * `dab222ed`: ci: Configure git before running the update script * `e5b4115a`: Merge pull request nix-community/emacs-overlay#130 from nix-community/ci-fix * `144d1ea7`: Merge pull request nix-community/emacs-overlay#129 from DamienCassou/emacs27.2-released * `887b5772`: only run github action cron on github itself * `d93018de`: emacs/update: Fix tag globbing and exclude rc releases * `16968ada`: Updated repos/melpa * `4ee9158f`: Add Quickstart section to README.org (nix-community/emacs-overlay#42) * `b24e8ac1`: ci: autostash not-commited changes * `f64af4c1`: Updated repos/elpa * `30b40be8`: Updated repos/emacs * `c8eb6cba`: Updated repos/melpa * `ef0447c0`: Updated repos/emacs * `d2d67955`: Updated repos/elpa * `79195e2b`: Updated repos/emacs * `75a4d727`: Updated repos/melpa * `53211c8f`: Updated repos/emacs * `65c012a5`: Updated repos/melpa * `d4ae3303`: Updated repos/emacs * `e52579ab`: Updated repos/melpa * `321e7768`: Updated repos/emacs * `aba21ce8`: Updated repos/melpa * `58a4432c`: Updated repos/org * `c2b6d2eb`: Updated repos/emacs * `12b8d986`: Updated repos/melpa * `dfd7d1de`: Updated repos/emacs * `21eea849`: Updated repos/melpa * `33901c9a`: Updated repos/elpa * `181ba19e`: Updated repos/emacs * `1fcee5ca`: Updated repos/melpa * `f93d8646`: Updated repos/emacs * `15ed1f37`: Updated repos/emacs * `3f8a3e6f`: Updated repos/emacs * `85cc3a1f`: Updated repos/melpa * `94ab1f2d`: Updated repos/emacs * `c5e4ece8`: Updated repos/emacs * `47acbeca`: Updated repos/melpa * `7d96d99b`: Updated repos/elpa * `128f0fe7`: Updated repos/emacs * `90d2409a`: Updated repos/melpa * `059aa436`: Updated repos/elpa * `3cc910c6`: Updated repos/emacs * `84de27e0`: Updated repos/melpa * `119b923e`: Updated repos/melpa * `debe1c91`: Updated repos/emacs * `26f0a5e1`: Updated repos/melpa home-manager: cbf0667037e6ca16fcc38818b2aa1391de702c6a to ebbbd4f2b50703409543941e7445138dc1e7392e * `90223cf3`: home-manager: allow overriding pkgs with --arg(str) (rycee/home-manager#1889) * `447ed0fb`: bash: improve initialisation (rycee/home-manager#1850) * `ad04237d`: dircolors: apply extraConfig after settings (rycee/home-manager#1890) * `6e3d93d7`: xdg-user-dirs: add createDirectories option * `25a6a6d2`: neomutt: support list in binds.map (rycee/home-manager#1885) * `cc60c22c`: programs.git: make signing key id be optional (rycee/home-manager#1886) * `33edf558`: lib/types/fontType: Add size attribute (rycee/home-manager#1848) * `e5a260a5`: xmonad: use compiled configuration when config is not null (rycee/home-manager#1893) * `3a16ebdf`: home-manager: Add --flake option to home-manager (rycee/home-manager#1856) * `7fcfd9b5`: home-manager: format `home-manager/default.nix` * `4fd4066d`: ci: bump cachix/install-nix-action from v12 to v13 * `c12897e8`: ci: bump cachix/cachix-action from v8 to v10 * `be56b6f2`: neomutt: Add encryptByDefault support (rycee/home-manager#1882) * `56f5f41e`: README: typo fix (rycee/home-manager#1912) * `17a10287`: gtk: use font.size option in dconf (rycee/home-manager#1920) * `f567ea82`: msmtp: add extraAccounts option * `91418d3e`: programs.neomutt: Make manual configuration take precedence over generated settings (rycee/home-manager#1896) * `5c5d5622`: sway: add config.seat * `18930aaf`: sway: add sumnerevans as maintainer * `f7159a0f`: newsboat: use $XDG_CONFIG_HOME/newsboat * `073710d7`: newsboat: add sumnerevans as maintainer * `7cf69a3b`: exa: add module * `0a6227d6`: flake.nix: Add packages and defaultPackages outputs (rycee/home-manager#1913) * `348b5a5a`: gpg: make homedir configurable * `ebbbd4f2`: gpg: fix `homedir` option documentation home-manager-stable: 209566c752c4428c7692c134731971193f06b37c to 2aa20ae969f2597c4df10a094440a66e9d7f8c86 * `f019c1cf`: ci: bump peaceiris/actions-gh-pages from v3 to v3.8.0 (rycee/home-manager#1888) * `2cfbf16c`: ci: bump cachix/install-nix-action from v12 to v13 * `a36c4fe9`: ci: bump cachix/cachix-action from v8 to v10 * `2aa20ae9`: Backport “Make Git signing key id be optional” to “release-20.09” (rycee/home-manager#1903) nixos: 3a8a85da229419b42e28df07ee1fd92711dc5c25 to 389249fa9b35b3071b4ccf71a3c065e7791934df * `2da6f55e`: bambootracker: 0.4.5 -> 0.4.6 * `bfb8c5e9`: bambootracker: mark broken on darwin * `1518140e`: bambootracker: fix Darwin build * `6f5e4a08`: bambootracker: un-mark broken on darwin * `5e2f6e72`: bambootracker: fix executable on Darwin * `50dda39f`: gnome3.gnome-autoar: 0.3.0 -> 0.3.1 * `4ebba18f`: firefox-bin: 86.0.1 -> 87.0 * `29d29d0f`: libmspack: 0.7.1alpha -> 0.10.1alpha * `fb482456`: spamassassin: 3.4.4 -> 3.4.5 * `0a523bc1`: rpm: 4.15.1 -> 4.15.1.1 * `97127a47`: Merge pull request NixOS/nixpkgs#117822 from LeSuisse/libmspack-0.10.1alpha-20.09 * `caa06e96`: pythonPackages.lxml: 4.6.2 -> 4.6.3 * `4d12ddff`: python3Packages.pygments: add patch for CVE-2021-27291 * `812d5bab`: Merge pull request NixOS/nixpkgs#117901 from risicle/ris-rpm-4.15.1.1-r20.09 * `01b42905`: nixUnstable: pre20210308_1c0e3e4 -> pre20210317_8a5203d * `9e4a60cb`: nixUnstable: pre20210317_8a5203d -> pre20210326_dd77f71 * `d88cdc7b`: Merge pull request NixOS/nixpkgs#117574 from taku0/firefox-bin-87.0_release-20.09 * `d6048a5a`: maintainers: add bartuka * `b72b4ece`: whatsapp-for-linux: init-at 1.1.5 * `16cc07b3`: element-web: 1.7.23 -> 1.7.24 * `d73b7fae`: element-desktop: 1.7.23 -> 1.7.24 * `b119b472`: Merge pull request NixOS/nixpkgs#117670 from LeSuisse/gnome3.autoar-0.3.1-20.09 * `fb46901e`: python3Packages.furl: fix build * `ff761d30`: Merge pull request NixOS/nixpkgs#117843 from mweinelt/20.09/spamassassin * `f860ecee`: citrix-workspace: updated vendor documentation urls * `310885ec`: citrix-workspace: from 21.1.0 to 21.3.0 * `f8ae3ecd`: gitAndTools.git-bug: 0.7.1 -> 0.7.2 * `608c4367`: gstreamer: 1.16.2 -> 1.16.3 * `3e0a085d`: Merge pull request NixOS/nixpkgs#117978 from LeSuisse/git-bug-0.7.2-20.09 * `e4d3b272`: python3Packages.pillow: add patches for multiple vulnerabilities * `53c80b92`: perlPackages.NetNetmask: 1.9104 -> 2.0001 * `446a2ffb`: Merge pull request NixOS/nixpkgs#118095 from stigtsp/package/perl-net-netmask-2.0001-backport-20.09 * `353daf40`: perlPackages.NetCIDRLite: add patch to prevent leading zeroes in ipv4 octets * `e0deff88`: youtube-dl: 2021.03.25 -> 2021.03.31 * `7640739f`: gh: 1.7.0 -> 1.8.0 * `fe9aef01`: Merge pull request NixOS/nixpkgs#118099 from stigtsp/patch/perl-Net-Netmask-ipv4-octet-vuln-backport-20.09 * `df43bef0`: linux: 5.11.9 -> 5.11.10 * `f9ab3f81`: linux/hardened/patches/5.10: 5.10.25-hardened1 -> 5.10.26-hardened1 * `371fe559`: linux/hardened/patches/5.11: 5.11.9-hardened1 -> 5.11.10-hardened1 * `001dcf64`: python3Packages.humanize: cleanup * `c667127b`: maintainers: add rmcgibbo * `9cea2bf8`: Merge pull request NixOS/nixpkgs#118153 from SuperSandro2000/humanize * `a034097f`: youtube-dl: 2021.03.31 -> 2021.04.01 * `da7f4c48`: bundix: 2.5.0 -> 2.5.1 (NixOS/nixpkgs#118220) * `607d7b5d`: chromiumBeta,chromiumDev: Mark as broken * `2968260d`: chromiumBeta: 90.0.4430.19 -> 90.0.4430.30 * `d48d0918`: chromiumDev: 91.0.4442.4 -> 91.0.4449.6 * `8e551784`: chromiumDev: 91.0.4449.6 -> 91.0.4455.2 * `ae996929`: chromiumBeta: 90.0.4430.30 -> 90.0.4430.40 * `fd9f8cf3`: chromium: 89.0.4389.90 -> 89.0.4389.114 * `267ac70c`: chromiumBeta: 90.0.4430.40 -> 90.0.4430.51 * `0267cf5d`: Merge NixOS/nixpkgs#117408: pidgin: add dbus-python * `c923a251`: nixos/kresd: Fix unsupported regex * `319a7fb5`: Merge branch 'staging-20.09' into release-20.09 * `76dbea4c`: knot-dns: 2.9.8 -> 2.9.9 * `ce588209`: tor-browser-bundle-bin: make overrideAttrs work * `abf30931`: Merge pull request NixOS/nixpkgs#118260 from mrVanDalo/feature/tor-browser-bin-override-backport * `acb37a9e`: mautrix-whatsapp: 0.1.5 -> 0.1.6 * `dedd7d1c`: grafana: 7.4.5 -> 7.5.2 * `f5a4cc87`: Merge pull request NixOS/nixpkgs#117950 from Valodim/backport-20.09-furl * `0b13f4ac`: imagemagick7: 7.0.11-4 -> 7.0.11-5 * `46ba1c34`: Merge pull request NixOS/nixpkgs#118246 from primeos/chromium-backport * `d1ab8a24`: nixos/acme: Fix webroot issues * `3e42bfa7`: nixos/acme: Add permissions tests * `e619019d`: gh: 1.8.0 -> 1.8.1 * `42a03e47`: ungoogled-chromium: 89.0.4389.90 -> 89.0.4389.114 * `cf42e33b`: bind: add patch for CVE-2020-8621 * `be04d419`: bind: add patch for CVE-2020-8622 * `8696810d`: bind: add patch for CVE-2020-8624 * `f3631d94`: bind: add patch for CVE-2020-8625 * `b3279e3d`: shellhub-agent: 0.4.2 -> 0.5.1 * `fe17f511`: shellhub-agent: 0.5.1 -> 0.5.2 * `84689272`: shellhub-agent: 0.5.2 -> 0.6.0 * `95b9c50f`: shellhub-agent: set passthru.updateScript using genericUpdater * `e59870d3`: shellhub-agent: Fix scp support * `7c9e3af1`: gogs: 0.11.91 -> 0.12.3 * `83c9a97b`: gogs: mark as secure again * `3f89cc78`: Merge pull request NixOS/nixpkgs#118390 from gebner/gogs-backport * `17a71546`: python3Packages.pillow: add patch for CVE-2021-25287 & CVE-2021-25288 * `df53d174`: Merge pull request NixOS/nixpkgs#118097 from risicle/ris-pillow-CVEs-2021-03-r20.09 * `62927bf4`: Revert "Merge pull request NixOS/nixpkgs#118390 from gebner/gogs-backport" * `704566fc`: Merge pull request NixOS/nixpkgs#117993 from mweinelt/20.09/gstreamer * `89546cc9`: samba: 4.12.11 -> 4.12.14 * `0c7f43d5`: Merge pull request NixOS/nixpkgs#118379 from otavio/backport-shellhub * `bb6bd0ba`: ldb: 2.2.0 -> 2.2.1 * `ae4bd2b0`: swagger-codegen: 2.3.1 -> 2.4.17 * `171a5759`: swagger-codegen: 2.4.17 -> 2.4.19 * `2f3e3336`: Merge pull request NixOS/nixpkgs#117540 from jraygauthier/jrg/20-09-swagger-codegen-update * `4cf20340`: Merge pull request NixOS/nixpkgs#117929 from wandersoncferreira/backport-whatsapp-for-linux * `299b3fe3`: squid: 4.13 -> 4.14 * `7ba580b6`: thrift-0_10: mark as insecure * `caffdd1e`: thrift: mark as insecure * `cadb0637`: dhcpcd: Fix patch url (NixOS/nixpkgs#118264) * `c3365080`: openldap: 2.4.57 -> 2.4.58 * `856f48ec`: Merge pull request NixOS/nixpkgs#118440 from risicle/ris-squid-4.14-r20.09 * `67fe7b4b`: Merge pull request NixOS/nixpkgs#118402 from risicle/ris-samba-4.12.14-r20.09 * `91b77fe6`: Merge pull request NixOS/nixpkgs#118421 from risicle/ris-ldb-2.2.1-r20.09 * `85378dcb`: curl: add patches for CVE-2021-22876, CVE-2021-22890 * `26e33dc1`: Merge pull request NixOS/nixpkgs#118469 from erictapen/20.09/curl-cve-2021-22876 * `46a53566`: Merge pull request NixOS/nixpkgs#118457 from risicle/ris-openldap-2.4.58-r20.09 * `b103839d`: Merge pull request NixOS/nixpkgs#118369 from risicle/ris-bind-CVEs-2021-04-r20.09 * `cd467084`: linux: 4.14.227 -> 4.14.228 * `563fd765`: linux: 4.19.183 -> 4.19.184 * `2dc72df5`: linux: 4.4.263 -> 4.4.264 * `22bc3de9`: linux: 4.9.263 -> 4.9.264 * `e38f959e`: linux: 5.10.26 -> 5.10.27 * `0ca5d247`: linux: 5.11.10 -> 5.11.11 * `4578000f`: linux: 5.4.108 -> 5.4.109 * `19ae0893`: linux/hardened/patches/4.14: 4.14.227-hardened1 -> 4.14.228-hardened1 * `b37c1220`: linux/hardened/patches/4.19: 4.19.183-hardened1 -> 4.19.184-hardened1 * `044555a0`: linux/hardened/patches/5.10: 5.10.26-hardened1 -> 5.10.27-hardened1 * `fc916cf9`: linux/hardened/patches/5.11: 5.11.10-hardened1 -> 5.11.11-hardened1 * `e67e6a0e`: linux/hardened/patches/5.4: 5.4.108-hardened1 -> 5.4.109-hardened1 * `cb2fbad3`: pythonPackages.hetzner: 0.8.2 -> 0.8.3 * `a5f9d585`: [20.09] mpv: backport security fix * `d9620068`: zoom-us 5.5.7938.0228 -> 5.6.13632.0328 * `95d17262`: Merge branch 'release-20.09' into staging-20.09 * `3dbf8ed5`: python3Packages.gst-python: drop patch that's been included * `d6f63659`: Merge branch 'staging-20.09' into release-20.09 * `5596fb9b`: zoom-us: Remove unused argument * `cbf39a81`: Merge pull request NixOS/nixpkgs#118717 from LutzCle/nixos-20.09 * `c73ee4b3`: lib3mf: patch CVE-2021-21882 * `6921d6b4`: Merge pull request NixOS/nixpkgs#118841 from mweinelt/20.09/lib3mf * `02fa062f`: gitea: 1.13.6 -> 1.13.7 * `af807042`: python3Packages.smartypants: fix src url * `f2602a0e`: Merge pull request NixOS/nixpkgs#118867 from veprbl/pr/smartypants.py_fix_src_20_09 * `a6847cb5`: nextcloud: 21.0.0 -> 21.0.1 * `f9333b0b`: palemoon: 29.1.0 -> 29.1.1 * `628be638`: Merge pull request NixOS/nixpkgs#118918 from OPNA2608/update/palemoon-29.1.1/20.09 * `716c4e06`: thunderbird-bin: 78.9.0 -> 78.9.1 * `c6a8d77d`: thunderbird: 78.9.0 -> 78.9.1 * `ad7604dd`: imagemagick7: 7.0.11-5 -> 7.0.11-6 * `2ade6bc3`: openvswitch: 2.13.0 -> 2.13.3 * `0afff9c1`: openvswitch-lts: 2.5.9 -> 2.5.12 * `147f3ab4`: umoci: 0.4.6 -> 0.4.7 * `b39544be`: Merge pull request NixOS/nixpkgs#118981 from taku0/thunderbird-bin-78.9.1_release-20.09 * `3922da30`: nomachine-client: 7.2.3 -> 7.4.1 * `86866b5b`: mediawiki: 1.35.1 -> 1.35.2 * `3969ed75`: Merge pull request NixOS/nixpkgs#119070 from risicle/ris-openvswitch-2.13.3-r20.09 * `668bdc57`: Merge pull request NixOS/nixpkgs#119073 from risicle/ris-openvswitch-2.5.12-r20.09 * `a7ff7a57`: Merge pull request NixOS/nixpkgs#119077 from risicle/ris-umoci-0.4.7-r20.09 * `597cc4b6`: syncthing: add patch for CVE-2021-21404 * `d170a7bc`: Merge pull request NixOS/nixpkgs#119104 from LeSuisse/mediawiki-1.35.2-20.09 * `ee197ef9`: Merge pull request NixOS/nixpkgs#119089 from austinbutler/nomachine-7.4.1-20.09 * `c3253cda`: gitea: 1.13.7 -> 1.14.0 * `cce26cd8`: Merge pull request NixOS/nixpkgs#119167 from risicle/ris-syncthing-CVE-2021-21404-r20.09 * `e2249a6d`: signal-desktop: 1.40.1 -> 5.0.0 * `c3c44be1`: llvmPackages_12: Copy from llvmPackages_11 * `c400d123`: llvmPackages_12: init at 12.0.0-rc3 * `5e183875`: llvmPackages_12: Fix libunwind, openmp, libcxx, and libcxxabi * `1b3915bc`: llvmPackages_12: 12.0.0-rc3 -> 12.0.0-rc4 * `45f771a8`: llvmPackages_12: 12.0.0-rc4 -> 12.0.0-rc5 * `9106cc15`: Merge pull request NixOS/nixpkgs#119324 from primeos/signal-desktop-backport * `09bd15f1`: Merge pull request NixOS/nixpkgs#119326 from primeos/llvm-backport * `361ae9d2`: hostapd: add patch for CVE-2021-30004 * `aaa79e07`: wpa_supplicant: add patch for CVE-2021-30004 * `546fba15`: Merge pull request NixOS/nixpkgs#119358 from NinjaTrappeur/nin-hostapd-cve202130004-backport * `d3ed21f4`: linux: 4.19.184 -> 4.19.186 * `c0182afe`: linux: 4.4.264 -> 4.4.266 * `aad86b89`: linux: 4.9.264 -> 4.9.266 * `d0a2ce40`: linux: 5.10.27 -> 5.10.29 * `e1d1a6e3`: linux: 5.11.11 -> 5.11.13 * `a1847c5f`: linux: 5.4.109 -> 5.4.111 * `3e07d83a`: linux/hardened/patches/4.14: 4.14.228-hardened1 -> 4.14.230-hardened1 * `84872b7f`: linux/hardened/patches/4.19: 4.19.184-hardened1 -> 4.19.186-hardened1 * `2ce76793`: linux/hardened/patches/5.10: 5.10.27-hardened1 -> 5.10.29-hardened1 * `eecc9620`: linux/hardened/patches/5.11: 5.11.11-hardened1 -> 5.11.13-hardened1 * `5bd875bf`: linux/hardened/patches/5.4: 5.4.109-hardened1 -> 5.4.111-hardened1 * `19c47d68`: Merge pull request NixOS/nixpkgs#113415 from OPNA2608/update/bambootracker-0.4.6/20.09 * `dec334fa`: Merge pull request NixOS/nixpkgs#118320 from m1cr0man/release-20.09 * `e4168617`: panotools: 2.9.19 -> 2.9.20 * `59763ff1`: Merge pull request NixOS/nixpkgs#119400 from LeSuisse/panotools-2.9.20-20.09 * `389249fa`: chromium: 89.0.4389.114 -> 89.0.4389.128 nixos-hardware: 758bc63af2bde87563f9c27710f3dcc16ff9096f to 267d8b2d7f049d2cb9b7f4a7f981c123db19a868 * `f2b2ae01`: AMD: add configurations for graphics cards * `c52f18ba`: Add Lenovo X1 Extreme Gen2 Module * `bbb03cc6`: Remove usage of stdenv.lib * `3714e747`: Add default lenovo-thinkpad-x1 config to flake.nix * `5bf5dee4`: build(deps): bump cachix/install-nix-action from v12 to v13 * `08579018`: Merge pull request NixOS/nixos-hardware#246 from NixOS/dependabot/github_actions/cachix/install-nix-action-v13 * `eb9d3e7d`: Merge pull request NixOS/nixos-hardware#244 from NixOS/SuperSandro2000-patch-1 * `3ef0c952`: Merge pull request NixOS/nixos-hardware#245 from NomisIV/patch-1 * `7c00c8b5`: Merge pull request NixOS/nixos-hardware#242 from diogox/patch-1 * `40ddf363`: Document driver choice * `267d8b2d`: Merge pull request NixOS/nixos-hardware#241 from j0hax/amd-gpus nixos-unstable: ad47284f8b01f587e24a4f14e0f93126d8ebecda to e019872af81e4013fd518fcacfba74b1de21a50e * `56490749`: xscreensaver: 5.44 -> 6.00 * `e8e1973a`: Merge pull request NixOS/nixpkgs#116114 from tfmoraes/openvino * `d531ce07`: Merge pull request NixOS/nixpkgs#119227 from yanganto/gitui-14 * `5436f054`: Merge pull request NixOS/nixpkgs#119203 from khumba/system76-firmware-cli-path * `48817fe7`: Merge pull request NixOS/nixpkgs#118859 from 06kellyjac/waypoint * `b50d8644`: Merge pull request NixOS/nixpkgs#119046 from eduardosm/amule * `e355946d`: Merge pull request NixOS/nixpkgs#103546 from mnacamura/cdda-small-fix * `60fda587`: Merge pull request NixOS/nixpkgs#119213 from fabaff/karton-asciimagic * `08868ba5`: python3Packages.pylatexenc: 2.8 -> 2.10 * `e7650150`: python3Packages.tweedledum: init at 1.0.0 * `6c9c7959`: python3Packages.qiskit-terra: 0.16.4 -> 0.17.0 * `50977d75`: python3Packages.qiskit-aer: 0.7.6 -> 0.8.0 * `8a6f5a59`: python3Packages.qiskit-ignis: 0.5.2 -> 0.6.0 * `dbabad9e`: python3Packages.qiskit-aqua: 0.8.2 -> 0.9.0 * `6038a6f7`: python3Packages.qiskit: 0.24.1 -> 0.25.0 * `245f4209`: python3Packages.quandl: 3.5.0 -> 3.6.1 * `ac6da3c5`: Merge pull request NixOS/nixpkgs#119221 from dotlambda/isbnlib-3.10.7 * `1a35ed1c`: Merge pull request NixOS/nixpkgs#119222 from ewok/update-enpass-6.6.1 * `a1db6dd4`: Merge pull request NixOS/nixpkgs#119133 from jdelStrother/mysql * `8811817e`: python3Packages.jsonpath-ng: fix build * `57fe2b7d`: home-assistant-cli: 0.9.1 -> 0.9.3 * `01a8cc22`: pythonPackages.isbnlib: clarify license * `a710ac72`: Merge pull request NixOS/nixpkgs#117041 from nagy/aqbanking-update * `9f198c14`: Merge pull request NixOS/nixpkgs#116495 from r-burns/ppc64 * `512e44ab`: Merge pull request NixOS/nixpkgs#101852 from takagiy/init-wmderland * `0cdd2d69`: Merge pull request NixOS/nixpkgs#117869 from nek0/matomo_4_2_1 * `0c1d21df`: Merge pull request NixOS/nixpkgs#117905 from yoctocell/privoxy-module-fix-forward-socks5 * `ec2157bc`: Merge pull request NixOS/nixpkgs#117500 from dotlambda/pytrainer-2.0.2 * `eba751cb`: Merge pull request NixOS/nixpkgs#118602 from oxzi/bonzomatic-2021-03-07 * `d9de27d6`: Merge pull request NixOS/nixpkgs#115422 from reedrw/add-sbu * `c1ebd280`: element-web: 1.7.24 -> 1.7.25 * `9fed67fb`: element-desktop: 1.7.24 -> 1.7.25 * `39060b24`: Merge pull request NixOS/nixpkgs#118445 from SuperSandro2000/SuperSandro2000-patch-3 * `1781eead`: Merge pull request NixOS/nixpkgs#118773 from peterhoeg/doc/packagekit * `08256f7d`: Merge pull request NixOS/nixpkgs#119230 from dotlambda/isbnlib-license * `7466d22d`: Merge pull request NixOS/nixpkgs#119231 from mweinelt/home-assistant-cli * `23e39936`: python3Packages.cvxpy: 1.1.11 -> 1.1.12 * `963e98cd`: Merge pull request NixOS/nixpkgs#119117 from LeSuisse/mozjpeg-4.0.3 * `39c17f77`: Merge pull request NixOS/nixpkgs#110398 from wirew0rm/pkg/scenebuilder * `ab1a2237`: Merge pull request NixOS/nixpkgs#112322 from mohe2015/module/declarative-step-ca * `5104d563`: pythonPackages.hydrus: 431 -> 434 * `db47ed43`: Merge pull request NixOS/nixpkgs#119127 from Ma27/bump-gitea * `8a6fac4b`: qdirstat: specify license * `d1572b71`: Merge pull request NixOS/nixpkgs#119212 from jshholland/stgit-1.0 * `730a2d3a`: Merge pull request NixOS/nixpkgs#119143 from r-ryantm/auto-update/qdirstat * `48a6e637`: Merge pull request NixOS/nixpkgs#119233 from Ma27/element * `17673589`: pdfarranger: 1.7.0 -> 1.7.1 * `6f9b4f5a`: proj_5: drop * `e44319a3`: python3Packages.cvxpy: add openmp multithreading * `b126d543`: docker: move makeWrapper to nativeBuildInputs * `a9d4ba38`: geonkick: 2.6.1 -> 2.8.0 * `d6360656`: Merge pull request NixOS/nixpkgs#119209 from vbgl/ocaml-jsonrpc-1.5.0 * `5e5a40b1`: pythonPackages.diagrams: init at 0.19.1 * `3e2d34b8`: qlcplus: fix build * `a3e9412a`: Merge pull request NixOS/nixpkgs#119245 from mayflower/qlcplus-fix-build * `d549dc31`: yara: add maintainer * `a7b54d90`: erlang: add updateScript and update versions (NixOS/nixpkgs#118831) * `e05657ce`: python3Packages.botocore: 1.20.46 -> 1.20.49 * `f86f230d`: python3Packages.boto3: 1.17.46 -> 1.17.49 * `5d29cfbc`: awscli: 1.19.46 -> 1.19.49 * `ecf709f7`: python3Packages.sagemaker: 2.33.0 -> 2.34.0 * `8ef1889b`: oh-my-zsh: 2021-04-07 → 2021-04-11 * `80901ba1`: Merge pull request NixOS/nixpkgs#119242 from sternenseemann/docker-cross * `62b44d8d`: rust-analyzer: 2021-04-05 -> 2021-04-12 * `08dcbd34`: Merge pull request NixOS/nixpkgs#119237 from symphorien/pdfarrangerupdate * `2be7176a`: Merge pull request NixOS/nixpkgs#107977 from corngood/msbuild * `5ab8127b`: Merge pull request NixOS/nixpkgs#115582 from jdelStrother/bundler-override * `8fdeb355`: Merge pull request NixOS/nixpkgs#118405 from jwygoda/doitintl-bigquery-datasource * `aa32db84`: vsc-leetcode-cli: init at 2.8.0 * `c05f2fea`: node-packages.nix: generate * `d5e1e66b`: teams: 1.4.00.4855 -> 1.4.00.7556 * `79c36096`: celestia: 1.6.1 -> 1.6.2.2 (NixOS/nixpkgs#117999) * `000af0d8`: Merge pull request NixOS/nixpkgs#118658 from rhoriguchi/networkmanager * `d947ab11`: Merge pull request NixOS/nixpkgs#117464 from hercules-ci/update-nixopsUnstable * `4646cba1`: Merge pull request NixOS/nixpkgs#118354 from heijligen/obs-studio * `28687490`: Merge pull request NixOS/nixpkgs#117165 from drewrisinger/dr-pr-fix-pass-import * `311ceed8`: Merge pull request NixOS/nixpkgs#117551 from TredwellGit/nixos/rtl-sdr * `ceffd2b3`: pythonPackages.hcloud: 1.11.0 -> 1.12.0 * `9baa681c`: Merge pull request NixOS/nixpkgs#119225 from drewrisinger/dr-pr-cvxpy-bump * `c63de9b0`: Merge pull request NixOS/nixpkgs#119254 from liff/python-hcloud/v1.12.0 * `1c5fc741`: distrho-ports: fix rpath, simplify dependencies * `f985147a`: Merge pull request NixOS/nixpkgs#119250 from NeQuissimus/omz * `7d396a42`: nixos/sane: added lp and avahi group (NixOS/nixpkgs#117952) * `86c72072`: e16: init at 1.0.23 * `728c4f81`: nixos/e16: add e16 module * `1187b797`: kustomize-sops: 2.5.1 -> 2.5.2 (NixOS/nixpkgs#119031) * `25e53061`: minikube: 1.18.1 -> 1.19.0 (NixOS/nixpkgs#119050) * `4b56b816`: chezmoi: 2.0.8 -> 2.0.9 (NixOS/nixpkgs#118968) * `2623b3e5`: sd-local: 1.0.30 -> 1.0.31 (NixOS/nixpkgs#119158) * `7db1853f`: ocamlPackages.rpclib: 8.0.0 → 8.1.0 * `031da799`: coq-elpi: 1.9.4 -> 1.9.5 * `8b22df98`: coq-elpi: 1.8.0 -> 1.8.2_8.12 * `7d51a0cd`: coq-elpi: 1.6.1_8.11 -> 1.6.2_8.11 * `0c896e75`: Merge pull request NixOS/nixpkgs#118383 from fortuneteller2k/update-lutris * `5c88d256`: pythonPackages.amiibo-py: init at unstable-2021-01-16 * `e8893cc4`: Merge pull request NixOS/nixpkgs#119015 from r-ryantm/auto-update/grafana-agent * `4690d2e4`: Merge pull request NixOS/nixpkgs#119246 from cpcloud/vsc-leetcode-cli * `336ead9b`: Merge pull request NixOS/nixpkgs#119263 from IvarWithoutBones/init/amiibo.py * `afad6c45`: Merge pull request NixOS/nixpkgs#119252 from NeQuissimus/awscli * `89f7a2a5`: unipicker: unstable-2018-07-10 -> 2.0.1 * `f2e13fa1`: helm-secrets: 3.5.0 -> 3.6.1 * `ebc3e8ef`: Merge pull request NixOS/nixpkgs#119249 from liff/teams/v1.4.00.7556 * `d761d7da`: Merge pull request NixOS/nixpkgs#119251 from NeQuissimus/python3Packages.sagemaker * `d9d60d27`: Merge pull request NixOS/nixpkgs#119266 from karthikiyengar/update/unipicker-2.0.1 * `214e7a88`: python3.pkgs.twilio: remove myself as maintainer * `a12bb7e8`: gitkraken: 7.5.4 -> 7.5.5 * `b4a849d2`: Merge pull request NixOS/nixpkgs#119168 from lsix/proj_updates * `8312d977`: Merge pull request NixOS/nixpkgs#118419 from erictapen/openimagedenoise-1.3.0 * `0177881c`: Merge pull request NixOS/nixpkgs#119119 from Atemu/update/zen-kernels * `40175efa`: cypress: 6.6.0 -> 7.0.0 (NixOS/nixpkgs#118902) * `67b0424f`: Merge pull request NixOS/nixpkgs#119032 from yusdacra/update-hydrus * `d8c6a0a9`: Merge pull request NixOS/nixpkgs#119268 from flokli/twilio * `427525b1`: Merge pull request NixOS/nixpkgs#118970 from r-ryantm/auto-update/civetweb * `290c47d0`: Merge pull request NixOS/nixpkgs#119229 from tomcur/fix-distrho-ports * `122a2df9`: Merge pull request NixOS/nixpkgs#119259 from romildo/upd.e16 * `8dbd5537`: mailman-web-unstable: 2019-09-29 -> 2021-04-10 (NixOS/nixpkgs#119135) * `b493a8fe`: Merge pull request NixOS/nixpkgs#119211 from Riey/rust-analyzer * `951996e9`: Merge pull request NixOS/nixpkgs#119189 from kanashimia/xscreensaver * `b0590861`: Merge pull request NixOS/nixpkgs#119159 from mausch/kubepug * `380f2819`: Merge pull request NixOS/nixpkgs#118930 from alyssais/cvs * `eeb3107a`: Merge pull request NixOS/nixpkgs#119269 from rhoriguchi/gitkraken * `d0f5090b`: Merge pull request NixOS/nixpkgs#118927 from magnetophon/geonkick * `72896450`: Merge pull request NixOS/nixpkgs#118888 from dotlambda/urwid-readline-0.13 * `ed908ba2`: vimPlugins: update * `8e1e78a7`: nixos/babeld: allow AF_INET communication required for netlink socket * `7d927c54`: sdlpop: init at 1.21 * `c22eec42`: python3Packages.aiohomekit: 0.2.60 -> 0.2.61 * `e696669d`: vimPlugins.vim-haskell-module-name: init at 2020-01-20 * `08caa827`: home-assistant: 2021.4.3 -> 2021.4.4 * `eeb49d6d`: Merge pull request NixOS/nixpkgs#119272 from mweinelt/babeld * `f16071af`: pinnwand: apply patch for pygment lexer weirdness * `c138e8a2`: Merge pull request NixOS/nixpkgs#119026 from r-ryantm/auto-update/jackett * `6ef87761`: Merge pull request NixOS/nixpkgs#119115 from r-ryantm/auto-update/fluent-bit * `73765472`: Merge pull request NixOS/nixpkgs#119045 from r-ryantm/auto-update/lightburn * `aced8d0a`: Merge pull request NixOS/nixpkgs#111749 from r-ryantm/auto-update/flyctl * `9e927c41`: Merge pull request NixOS/nixpkgs#118955 from r-ryantm/auto-update/afterburn * `551bbedd`: Merge pull request NixOS/nixpkgs#118229 from r-ryantm/auto-update/logseq * `594ae4c2`: Merge pull request NixOS/nixpkgs#119163 from r-ryantm/auto-update/singularity * `940f476e`: exa: 0.10.0 -> 0.10.1 * `46ccfdfc`: Merge pull request NixOS/nixpkgs#119274 from fortuneteller2k/update-exa * `cc7a19c7`: Merge pull request NixOS/nixpkgs#119056 from r-ryantm/auto-update/navi * `72341ac0`: feeds: Rename to gnome-feeds * `d0656029`: Merge pull request NixOS/nixpkgs#118712 from pinpox/wezterm-01 * `fc6f90c5`: Merge pull request NixOS/nixpkgs#119275 from marsam/update-ncspot * `1ae85249`: python3Packages.pyupgrade: 2.10.0 -> 2.12.0 * `121224e1`: python3Packages.pyeconet: 0.1.13 -> 0.1.14 * `fc43a7fa`: probe-run: init at 0.2.1 * `6d145fea`: python3Packages.yeelight: 0.5.4 -> 0.6.0 * `b5ae82cb`: lowdown: 0.8.3 -> 0.8.4 * `650553aa`: Merge pull request NixOS/nixpkgs#117873 from fabaff/apkid * `f3050502`: terragrunt: 0.28.19 -> 0.28.20 * `c902fbdd`: pythonPackages.isbnlib: correct license * `8c60448e`: chromiumDev: Fix two build errors * `fc586861`: chromiumBeta: 90.0.4430.61 -> 90.0.4430.70 * `928fa589`: cypress: 7.0.0 -> 7.1.0 * `4d8ed141`: Merge pull request NixOS/nixpkgs#119302 from dotlambda/isbnlib-license * `84404547`: Merge pull request NixOS/nixpkgs#119276 from mweinelt/home-assistant * `14b80482`: remind: 03.03.05 -> 03.03.06 * `74df3bb8`: Merge pull request NixOS/nixpkgs#119304 from primeos/chromium * `4c87cb87`: Merge pull request NixOS/nixpkgs#67684 from indiscipline/minio * `14773ce5`: Merge pull request NixOS/nixpkgs#119297 from jshholland/remind-03.03.06 * `9acf306e`: tektoncd-cli: 0.17.1 -> 0.17.2 * `dd95a34b`: pythonPackages.pdfx: 1.3.1 -> 1.4.1 * `78af2c35`: pythonPackages.datadog: 0.40.0 -> 0.40.1 * `fe0524cd`: stdenv/make-derivation: unify logic for name modifications * `851c0f1c`: stdenv/make-derivation: add -static to name if building statically * `ab5025f3`: Merge pull request NixOS/nixpkgs#119296 from fabaff/bump-pyeconet * `e629341f`: Merge pull request NixOS/nixpkgs#119279 from mweinelt/pinnwand * `bc3419d1`: megapixels: 0.15.0 -> 0.16.0 * `50d38247`: stretchly: 1.2.0 -> 1.5.0 * `f4e8746c`: nix{,Unstable}: pass pname, version to mkDerivation * `6f149cea`: Merge pull request NixOS/nixpkgs#109146 from iblech/patch-sdlpop * `0b4da909`: home-assistant: enable yeelight tests * `dc492caf`: Merge pull request NixOS/nixpkgs#119273 from malob/add-vim-plugins * `262c722e`: Merge pull request NixOS/nixpkgs#119278 from marsam/update-universal-ctags * `acf402b0`: chromiumDev: Fix the build * `03a8919d`: Merge pull request NixOS/nixpkgs#119295 from fabaff/bump-pyupgrade * `d6251b9c`: Merge pull request NixOS/nixpkgs#119300 from sternenseemann/lowdown-0.8.4 * `facb2fcb`: Merge pull request NixOS/nixpkgs#119301 from 06kellyjac/terragrunt * `287c6d42`: python3Packages.swisshydrodata: 0.0.3 -> 0.1.0 * `aec6843e`: Merge pull request NixOS/nixpkgs#119305 from kolaente/update/cypress-7.1 * `6a47e84e`: signal-desktop: 1.40.1 -> 5.0.0 (NixOS/nixpkgs#119309) * `2a6ac742`: python3Packages.swisshydrodata:: enable tests * `79c375d9`: Merge pull request NixOS/nixpkgs#119311 from 06kellyjac/tektoncd-cli * `6243a105`: Merge pull request NixOS/nixpkgs#119313 from OPNA2608/update/megapixels-0.16.0/21.05 * `e0166b2a`: Merge pull request NixOS/nixpkgs#119315 from dotlambda/pdfx-1.4.1 * `3c12bf1b`: Merge pull request NixOS/nixpkgs#119316 from dotlambda/datadog-0.40.1 * `46163f6f`: nix-du: 0.3.3 -> 0.3.4 (NixOS/nixpkgs#119243) * `c91ae16e`: Merge pull request NixOS/nixpkgs#118729 from drewrisinger/dr-pr-qiskit-bump * `04224b7b`: Merge pull request NixOS/nixpkgs#119318 from 1000101/stretchly * `15c6e717`: Merge pull request NixOS/nixpkgs#102060 from addict3d/add-python-diagrams-from-github * `715d5a73`: git-cinnabar: 0.5.6 -> 0.5.7 * `edd5e61d`: Merge pull request NixOS/nixpkgs#119321 from fabaff/bump-swisshydrodata * `c7695f95`: Merge pull request NixOS/nixpkgs#119298 from fabaff/bump-yeelight * `10c66e50`: apk-tools: 2.12.2 -> 2.12.5 * `f440f9ba`: Merge pull request NixOS/nixpkgs#114465 from ncfavier/master * `888d813f`: Merge pull request NixOS/nixpkgs#119328 from alyssais/git-cinnabar * `1e0f9d1f`: kramdown-rfc2629: 1.3.37 -> 1.4.1 and move to rubyPackages (NixOS/nixpkgs#117283) * `60262e6c`: Merge pull request NixOS/nixpkgs#118478 from tomjnixon/allow-overriding-mopidy-packages * `e002b635`: Merge pull request NixOS/nixpkgs#119317 from sternenseemann/static-naming * `a469a7be`: sherpa: compile with --enable-pythia flag * `98fdab6a`: remind: remove not required assert * `42e029e4`: geckodriver: 0.26.0 -> 0.29.1 (NixOS/nixpkgs#119164) * `17efdfbb`: nixos/tests/kernel-generic: make attributes derivations, not functions * `8875a46b`: Merge pull request NixOS/nixpkgs#118475 from r-ryantm/auto-update/bchoppr * `29c1cf88`: Merge pull request NixOS/nixpkgs#116692 from r-ryantm/auto-update/BSlizr * `544283d0`: Merge pull request NixOS/nixpkgs#116688 from r-ryantm/auto-update/BSEQuencer * `b0ccb3ae`: Merge pull request NixOS/nixpkgs#116687 from r-ryantm/auto-update/BShapr * `e1cdc1c3`: fselect: update cargoSha256 * `433582ad`: clight: 4.2 → 4.5 * `3e42a66e`: gnomeExtensions.system-monitor: 2020-04-27-unstable -> unstable-2021-04-08 * `f4092dd6`: pythonPackages.colorlog: 4.8.0 -> 5.0.1 * `42ec49f7`: python3Packages.asyncio-throttle: 1.0.1 -> 1.0. * `4506c413`: python3Packages.ircstates: 0.11.7 -> 0.11.8 * `e39d091b`: python3Packages.ircrobots: 0.3.7 -> 0.3.8 * `46e4c824`: Merge pull request NixOS/nixpkgs#119067 from doronbehar/pkg/gnome-feeds/rename * `2a8570d0`: Merge pull request NixOS/nixpkgs#119333 from veprbl/pr/sherpa_with_pythia * `4e26958e`: Merge pull request NixOS/nixpkgs#115683 from r-ryantm/auto-update/x42-plugins * `9f9ab6ff`: wpa_supplicant: add patch for CVE-2021-30004 * `1a15aabb`: linux: 4.19.184 -> 4.19.186 * `de1c135d`: linux: 4.4.264 -> 4.4.266 * `643d4c3e`: linux: 4.9.264 -> 4.9.266 * `72fb1c7a`: linux: 5.10.27 -> 5.10.29 * `1c797af5`: linux: 5.11.11 -> 5.11.13 * `82c70ee9`: linux: 5.4.109 -> 5.4.111 * `c0a97559`: linux-rt_5_10: 5.10.25-rt35 -> 5.10.27-rt36 * `5a28ce64`: linux_latest-libre: 17920 -> 17990 * `bb6534f6`: linux/hardened/patches/4.14: 4.14.228-hardened1 -> 4.14.230-hardened1 * `517f128c`: linux/hardened/patches/4.19: 4.19.184-hardened1 -> 4.19.186-hardened1 * `e52ba0e7`: linux/hardened/patches/5.10: 5.10.27-hardened1 -> 5.10.29-hardened1 * `cafd9c38`: linux/hardened/patches/5.11: 5.11.11-hardened1 -> 5.11.13-hardened1 * `b9446623`: linux/hardened/patches/5.4: 5.4.109-hardened1 -> 5.4.111-hardened1 * `3da48c37`: Merge pull request NixOS/nixpkgs#119345 from mweinelt/python-random * `e282d55c`: Merge pull request NixOS/nixpkgs#119341 from eduardosm/gnome-shell-system-monitor * `2bc8805e`: Merge pull request NixOS/nixpkgs#119338 from midchildan/fix/fselect * `20761802`: Merge pull request NixOS/nixpkgs#119337 from plabadens/clight * `e13e4e6c`: Merge pull request NixOS/nixpkgs#119330 from alyssais/apk-tools * `ef9eabf7`: Merge pull request NixOS/nixpkgs#119335 from SuperSandro2000/remind * `bb2dd3ea`: Merge pull request NixOS/nixpkgs#119344 from dotlambda/colorlog-5.0.1 * `d12aba54`: nixosOptionsDoc: add markdown formatting * `6f7f5bac`: Merge pull request NixOS/nixpkgs#119277 from Pacman99/md-options * `84a794c5`: vscode-extensons.github.github-vscode-theme: 1.1.5 -> 3.0.0 (NixOS/nixpkgs#119342) * `96ff5a22`: CHOWTapeModel: init at unstable-2020-12-12 (NixOS/nixpkgs#106746) * `35a76f4d`: vimPlugins.coc-explorer: convert to nodePackages (NixOS/nixpkgs#119336) * `4480a056`: hostapd: add patch for CVE-2021-30004 * `0bd6edf3`: Merge pull request NixOS/nixpkgs#119320 from primeos/chromiumDev * `be07f22e`: Merge pull request NixOS/nixpkgs#119347 from mweinelt/wpa_supplicant * `489433ba`: google-cloud-sdk: 334.0.0 -> 336.0.0 * `863e450d`: Merge pull request NixOS/nixpkgs#119361 from iAmMrinal0/update/google-cloud-sdk * `e019872a`: fcitx5-m17n: init at 5.0.4 (NixOS/nixpkgs#119357) nixpkgs: c0e881852006b132236cbf0301bd1939bb50867e to 5268ee2ebacbc73875be42d71e60c2b5c1b5a1c7 * `888d813f`: Merge pull request NixOS/nixpkgs#119328 from alyssais/git-cinnabar * `1e0f9d1f`: kramdown-rfc2629: 1.3.37 -> 1.4.1 and move to rubyPackages (NixOS/nixpkgs#117283) * `60262e6c`: Merge pull request NixOS/nixpkgs#118478 from tomjnixon/allow-overriding-mopidy-packages * `e002b635`: Merge pull request NixOS/nixpkgs#119317 from sternenseemann/static-naming * `a6c6f06d`: terraform-providers: formatting * `ae4b052c`: terraform-providers: remove useless argument * `a469a7be`: sherpa: compile with --enable-pythia flag * `98fdab6a`: remind: remove not required assert * `6f2cc4b8`: drumgizmo: 0.9.18.1 -> 0.9.19 * `2e2b67bc`: pythonPackages.woob: init at 3.0 * `42e029e4`: geckodriver: 0.26.0 -> 0.29.1 (NixOS/nixpkgs#119164) * `17efdfbb`: nixos/tests/kernel-generic: make attributes derivations, not functions * `8875a46b`: Merge pull request NixOS/nixpkgs#118475 from r-ryantm/auto-update/bchoppr * `29c1cf88`: Merge pull request NixOS/nixpkgs#116692 from r-ryantm/auto-update/BSlizr * `c7fba6a4`: xorg.xorgserver: 1.20.10 -> 1.20.11 * `544283d0`: Merge pull request NixOS/nixpkgs#116688 from r-ryantm/auto-update/BSEQuencer * `b0ccb3ae`: Merge pull request NixOS/nixpkgs#116687 from r-ryantm/auto-update/BShapr * `e1cdc1c3`: fselect: update cargoSha256 * `433582ad`: clight: 4.2 → 4.5 * `3e42a66e`: gnomeExtensions.system-monitor: 2020-04-27-unstable -> unstable-2021-04-08 * `f4092dd6`: pythonPackages.colorlog: 4.8.0 -> 5.0.1 * `42ec49f7`: python3Packages.asyncio-throttle: 1.0.1 -> 1.0. * `4506c413`: python3Packages.ircstates: 0.11.7 -> 0.11.8 * `e39d091b`: python3Packages.ircrobots: 0.3.7 -> 0.3.8 * `46e4c824`: Merge pull request NixOS/nixpkgs#119067 from doronbehar/pkg/gnome-feeds/rename * `a3c2706c`: python3Packages.ipfshttpclient: 0.4.2.post1 -> 0.7.0, rename from ipfsapi * `2a8570d0`: Merge pull request NixOS/nixpkgs#119333 from veprbl/pr/sherpa_with_pythia * `4e26958e`: Merge pull request NixOS/nixpkgs#115683 from r-ryantm/auto-update/x42-plugins * `9f9ab6ff`: wpa_supplicant: add patch for CVE-2021-30004 * `1a15aabb`: linux: 4.19.184 -> 4.19.186 * `de1c135d`: linux: 4.4.264 -> 4.4.266 * `643d4c3e`: linux: 4.9.264 -> 4.9.266 * `72fb1c7a`: linux: 5.10.27 -> 5.10.29 * `1c797af5`: linux: 5.11.11 -> 5.11.13 * `82c70ee9`: linux: 5.4.109 -> 5.4.111 * `c0a97559`: linux-rt_5_10: 5.10.25-rt35 -> 5.10.27-rt36 * `5a28ce64`: linux_latest-libre: 17920 -> 17990 * `bb6534f6`: linux/hardened/patches/4.14: 4.14.228-hardened1 -> 4.14.230-hardened1 * `517f128c`: linux/hardened/patches/4.19: 4.19.184-hardened1 -> 4.19.186-hardened1 * `e52ba0e7`: linux/hardened/patches/5.10: 5.10.27-hardened1 -> 5.10.29-hardened1 * `cafd9c38`: linux/hardened/patches/5.11: 5.11.11-hardened1 -> 5.11.13-hardened1 * `b9446623`: linux/hardened/patches/5.4: 5.4.109-hardened1 -> 5.4.111-hardened1 * `3da48c37`: Merge pull request NixOS/nixpkgs#119345 from mweinelt/python-random * `e282d55c`: Merge pull request NixOS/nixpkgs#119341 from eduardosm/gnome-shell-system-monitor * `2bc8805e`: Merge pull request NixOS/nixpkgs#119338 from midchildan/fix/fselect * `20761802`: Merge pull request NixOS/nixpkgs#119337 from plabadens/clight * `e13e4e6c`: Merge pull request NixOS/nixpkgs#119330 from alyssais/apk-tools * `ef9eabf7`: Merge pull request NixOS/nixpkgs#119335 from SuperSandro2000/remind * `bb2dd3ea`: Merge pull request NixOS/nixpkgs#119344 from dotlambda/colorlog-5.0.1 * `d12aba54`: nixosOptionsDoc: add markdown formatting * `6f7f5bac`: Merge pull request NixOS/nixpkgs#119277 from Pacman99/md-options * `84a794c5`: vscode-extensons.github.github-vscode-theme: 1.1.5 -> 3.0.0 (NixOS/nixpkgs#119342) * `96ff5a22`: CHOWTapeModel: init at unstable-2020-12-12 (NixOS/nixpkgs#106746) * `35a76f4d`: vimPlugins.coc-explorer: convert to nodePackages (NixOS/nixpkgs#119336) * `2107c96b`: maintainers: add friedelino * `da62033a`: gradle: 7-rc-2 -> 7, bumping latest 6.8.3 -> 7 * `4480a056`: hostapd: add patch for CVE-2021-30004 * `0bd6edf3`: Merge pull request NixOS/nixpkgs#119320 from primeos/chromiumDev * `be07f22e`: Merge pull request NixOS/nixpkgs#119347 from mweinelt/wpa_supplicant * `489433ba`: google-cloud-sdk: 334.0.0 -> 336.0.0 * `8c57f223`: deno: 1.8.3 -> 1.9.0 * `54ecd524`: python3Packages.pyroute2: add pythonImportsCheck * `863e450d`: Merge pull request NixOS/nixpkgs#119361 from iAmMrinal0/update/google-cloud-sdk * `e019872a`: fcitx5-m17n: init at 5.0.4 (NixOS/nixpkgs#119357) * `6a6d2df6`: lbry: init at 0.50.2 * `8f7356a9`: python3Packages.aiodiscover: 1.3.3 -> 1.3.4 * `49118857`: python3Packages.karton-yaramatcher: init at 1.0.0 * `a99ad8f5`: Merge pull request NixOS/nixpkgs#119363 from 06kellyjac/deno * `71831341`: Merge pull request NixOS/nixpkgs#119365 from fabaff/karton-yaramatcher * `2b03b8de`: Merge pull request NixOS/nixpkgs#118929 from magnetophon/drumgizmo * `d7f66d47`: Merge pull request NixOS/nixpkgs#119340 from TredwellGit/xorg.xorgserver * `1f32dfca`: xfce.exo: 4.16.1 -> 4.16.2 * `4636ea80`: xfce.xfdashboard: 0.9.1 -> 0.9.2 * `b0ed229a`: gradle: Pin pkgs to Gradle 6 that fail with 7 * `e09882f8`: Merge pull request NixOS/nixpkgs#119370 from romildo/upd.exo * `71e2a4f4`: Merge pull request NixOS/nixpkgs#119374 from romildo/upd.xfdashboard * `61a092e6`: vscode-extensions.hashicorp.terraform: 2.9.1 -> 2.10.0 * `0736e2dd`: Merge pull request NixOS/nixpkgs#115984 from Luflosi/update/ipfshttpclient * `5720bc61`: Merge pull request NixOS/nixpkgs#119215 from DamienCassou/init-woob * `1562f6ae`: Merge pull request NixOS/nixpkgs#119281 from enderger/lbry-init * `b94e3aa0`: libsearpc: build python3 package (NixOS/nixpkgs#119366) * `dd4b2d57`: Merge pull request NixOS/nixpkgs#119378 from rhoriguchi/vscode-extensions/hashicorp.terraform * `f3ef3cb1`: Merge pull request NixOS/nixpkgs#119294 from fabaff/bump-aiodiscover * `ccabc238`: Merge pull request NixOS/nixpkgs#119322 from marsam/update-tmux * `f3ee98f6`: mpvacious: 0.12 -> 0.14 * `2dbce914`: vscode: 1.55.0 -> 1.55.2 * `66fc4b01`: jetbrains.rider: 2021.1 -> 2021.1.1 * `14518675`: mdbook-mermaid: init at 0.8.1 * `9f7fb751`: llvm_11: Correct path for TLI-musl patch * `af7ac408`: googleearth-pro: init at 7.3.3.7786 * `4b1a7d14`: vimiv-qt: init at 0.8.0 * `e9b96bfa`: maintainers: add dschrempf * `c9997666`: jellyfin-media-player: init at 1.3.1 * `ba212ed8`: vscodium: 1.55.0 -> 1.55.2 * `98d636a2`: jellyfin-mpv-shim: 1.10.3 -> 1.10.4 * `e495cfac`: postfix: 3.5.9 -> 3.5.10 * `2a48ef14`: Merge pull request NixOS/nixpkgs#103228 from ThinkChaos/fix_k3s_start * `7eb91a2e`: river: init at master * `b3d70196`: cri-o: 1.20.1 -> 1.21.0 * `b30ee6df`: maintainers: add petrosagg * `a8937cc9`: chromium: 89.0.4389.114 -> 89.0.4389.128 * `de76aa03`: perlPackages.Mojolicious: 9.10 -> 9.17 * `6a8afedd`: perlPackages.MojoliciousPluginStatus: 1.12 -> 1.17 * `ce19511c`: convos: 6.06 -> 6.11 * `7ec8888d`: perlPackages.JSONValidator: 4.14 -> 4.16 * `41216378`: perlPackages.LinkEmbedder: 1.17 -> 1.18 * `8d7d4bc5`: perlPackages.MojoliciousPluginOpenAPI: 4.00 -> 4.02 * `19d761b7`: perlPackages.MojoliciousPluginTextExceptions: 0.01 -> 0.02 * `ca8374e0`: factorio-experimental: 1.1.31 -> 1.1.32 * `e4a617b7`: ytfzf: 1.1.2 -> 1.1.3 * `d68a8bca`: Merge pull request NixOS/nixpkgs#118122 from zakame/updates/perl-Mojolicious-9.14 * `02ca8bc9`: Merge pull request NixOS/nixpkgs#119397 from dotlambda/postfix-3.5.10 * `5429cc1a`: rl-2105: Document /etc/systemd-mutable/system is gone from the defaults, point to boot.extraSystemdUnitPaths * `950e92ca`: Merge pull request NixOS/nixpkgs#119368 from flokli/rl-systemd-mutable * `7fc935db`: coqPackages.equations: 1.2.3 → 1.2.4 * `38c34b43`: coqPackages.coq-ext-lib: add Coq 8.13 * `cba27708`: coqPackages.simple-io: enable for Coq 8.13 * `79d6e2a2`: maintainers: add larsr * `7e73508a`: ITree: init at 4.0.0 * `b95fee3a`: Merge pull request NixOS/nixpkgs#119380 from kmicklas/mpvacious-0.14 * `15de3121`: Merge pull request NixOS/nixpkgs#119384 from JamieMagee/rider-2021.1.1 * `a095f559`: jetbrains: fix url literal * `05133d55`: Merge pull request NixOS/nixpkgs#119386 from xrelkd/add/mdbook-mermaid * `d0ead902`: Revert "mailman-web-unstable: 2019-09-29 -> 2021-04-10 (NixOS/nixpkgs#119135)" * `5e4fc1cc`: mailman-web: mark broken * `c0c842c7`: Merge pull request NixOS/nixpkgs#119415 from SuperSandro2000/SuperSandro2000-patch-1 * `3977837d`: Merge pull request NixOS/nixpkgs#119393 from jojosch/jellyfin-mpv-shim-1.10.4 * `ad43df1e`: Merge pull request NixOS/nixpkgs#119404 from dotlambda/ytfzf-1.1.3 * `de2edb81`: chromium: get-commit-message.py: Deduplicate the CVE list * `316db3a1`: coqPackages.ITree: changed pname to InteractionTrees * `7e45a406`: vscode: nixpkgs-hammering suggestions * `37a8a327`: Merge pull request NixOS/nixpkgs#119392 from samuela/upkeep-bot/vscodium-1.55.2-1618381422 * `92ec5c85`: super-productivity: 1.10.45 -> 6.5.2 * `cead7d27`: python3Packages.pywemo: disable flaky test * `55ac7d45`: mailman-web: fix build * `3943b3dd`: maintainers: add branwright1 * `fd104318`: tengine: Add modules to passthru * `b7763a82`: macs2: init at 2.2.7.1 * `06dee383`: Revert "nixos/nginx: fix eval for tengine" * `1ef95a8c`: nginx: Add all the nginx tests to passthru.tests * `6f236fcf`: Merge pull request NixOS/nixpkgs#119423 from mweinelt/python/pywemo * `4aab7991`: tengine: Add passthru.tests * `6dff6329`: netbsd: take fetchcvs from buildPackages to fix eval * `59917dc3`: Merge pull request NixOS/nixpkgs#119427 from talyz/tengine-modules * `2d70d5e4`: starboard: 0.9.2 -> 0.10.0 * `f8c1312e`: materialize: init at 0.7.1 * `912e11a4`: mailman-web: 2019-09-29 -> 2021-04-10 * `5280218d`: Merge pull request NixOS/nixpkgs#118685 from petrosagg/add-materialize * `81e68008`: Merge pull request NixOS/nixpkgs#119416 from lukegb/factorio * `b667587d`: wezterm: set version number * `fc78d064`: Merge pull request NixOS/nixpkgs#119432 from 06kellyjac/master * `68fd217b`: slither-analyzer: remove from maintainers * `80a0032c`: Merge pull request NixOS/nixpkgs#119352 from lorenzleutgeb/gradle-7 * `b00d5e22`: Merge pull request NixOS/nixpkgs#119293 from jojosch/jellyfin-media-player-init * `6cdc8bcc`: Merge pull request NixOS/nixpkgs#114507 from dschrempf/vimiv-qt * `7b037c94`: Merge pull request NixOS/nixpkgs#119327 from ruuda/butane-0.11.0 * `24dc4599`: Merge pull request NixOS/nixpkgs#119387 from branwright1/river * `59c46135`: python3Packages.oci: init at 2.36.0 * `a5a359aa`: oci-cli: init at 2.23.0 * `75dd5e5b`: Merge pull request NixOS/nixpkgs#119437 from SuperSandro2000/wezterm-version * `acf0dbcc`: Merge pull request NixOS/nixpkgs#119438 from asymmetric/drop-slither * `17da2394`: Merge pull request NixOS/nixpkgs#119314 from Caascad/terraform-providers-keycloak * `51c9228c`: Merge pull request NixOS/nixpkgs#119161 from r-ryantm/auto-update/simplenote * `7a87973b`: nixos/users: require one of users.users.name.{isSystemUser,isNormalUser} * `f8a32f8d`: Merge pull request NixOS/nixpkgs#118862 from bobrik/ivan/clickhouse-cli * `6d74053a`: Merge pull request NixOS/nixpkgs#119436 from twhitehead/llvm_11-musl * `28fb287d`: Merge pull request NixOS/nixpkgs#118610 from GregorySchwartz/init/macs2 * `609765dd`: Merge pull request NixOS/nixpkgs#119095 from friedelino/upd-googlearth * `4a4ede4f`: Merge pull request NixOS/nixpkgs#119412 from ilian/oci-cli * `1da72019`: vscode-extensions.foxundermoon.shell-format: init at 7.1.0 (NixOS/nixpkgs#119451) * `f1a2ab68`: Merge pull request NixOS/nixpkgs#115332 from symphorien/usertype * `78927e60`: jetbrains.jdk: 11.0.10-b37 -> 11.0.10-b1427 * `4973dc73`: buildah: 1.20.0 -> 1.20.1 * `ba656985`: godot: clean up code * `32160034`: ocrmypdf: 11.6.0 -> 11.7.3 * `d9728289`: python3Packages.pikepdf: 2.8.0 -> 2.11.1 * `1c6935fb`: ocamlPackages.postgresql: 4.6.3 → 5.0.0 * `561038de`: numix-icon-theme: 20.06.07 -> 21.04.14 * `473f8663`: numix-icon-theme-circle: 20.09.19 -> 21.04.14 * `e083280f`: numix-icon-theme-square: 20.09.19 -> 21.04.14 * `81d784ff`: Merge pull request NixOS/nixpkgs#119457 from ethancedwards8/master * `5fd77b2c`: Merge pull request NixOS/nixpkgs#119112 from squalus/darwin-scummvm * `00da8a02`: MIDIVisualizer: 6.3 -> 6.4 * `040dd2c8`: alertmanager-irc-relay: 0.3.0 -> 0.3.1 * `4e88135f`: aws-azure-login: init at 3.3.0 (NixOS/nixpkgs#110634) * `c4aedcb1`: Merge pull request NixOS/nixpkgs#119455 from Stunkymonkey/numix-master * `dcb26988`: Merge pull request NixOS/nixpkgs#119458 from nagy/ocrmypdf * `7e281bea`: Merge pull request NixOS/nixpkgs#119459 from nagy/pikepdf * `3aec774a`: Merge pull request NixOS/nixpkgs#119381 from samuela/upkeep-bot/vscode-1.55.2-1618359022 * `0cbf687e`: fetch{cvs,svn}: Hack around splicing annoyance * `2dba1df3`: Revert "netbsd: take fetchcvs from buildPackages to fix eval" * `a8aa77b5`: python3Packages.systembridge: init at 1.1.1 * `6802c2e2`: Merge pull request NixOS/nixpkgs#119465 from alyssais/fetchcvs * `5cdcb6d1`: python3Packages.spotipy: 2.17.1 -> 2.18.0 * `4689d19e`: libbsd: Separate `out`, `dev`, and `man` outputs * `22747bac`: python3Packages.twitterapi: 2.6.10 -> 2.7.1 * `e4c44d2d`: python3Packages.mcstatus: 5.1.2 -> 5.1.4 * `6284c646`: Merge pull request NixOS/nixpkgs#119475 from fabaff/bump-twitterapi * `4825e073`: Merge pull request NixOS/nixpkgs#119466 from fabaff/bump-spotipy * `a8d5046e`: python3Packages.pulsectl: 20.5.1 -> 21.3.4 * `b2681434`: todofi.sh: init at 1.0.0 (NixOS/nixpkgs#119334) * `96e4c599`: Merge pull request NixOS/nixpkgs#119401 from primeos/chromium * `13a24e04`: Merge pull request NixOS/nixpkgs#119478 from fabaff/bump-mcstatus * `14ec94a2`: chromiumBeta: 90.0.4430.70 -> 90.0.4430.72 * `6720b034`: chromium: 89.0.4389.128 -> 90.0.4430.72 * `2bf07e43`: Merge pull request NixOS/nixpkgs#119481 from fabaff/bump-pulsectl * `5931dfb4`: Merge pull request NixOS/nixpkgs#118937 from fabaff/systembridge * `85cf6bed`: Merge pull request NixOS/nixpkgs#119464 from r-ryantm/auto-update/alertmanager-irc-relay * `43842647`: fcft: 2.3.2 -> 2.3.3 * `715fc0d6`: fcft: add me to maintainers * `bb9d0c30`: Merge pull request NixOS/nixpkgs#119462 from r-ryantm/auto-update/MIDIVisualizer * `902bef49`: python3Packages.weasyprint: fix failing build * `a64b9f2b`: Merge pull request NixOS/nixpkgs#119270 from austinbutler/weasyprint-pango-fix * `2f6a9bb2`: nixos/programs/fish: add shellAbbrs config * `dcdf30a7`: htmldoc: 1.8.29 -> 1.9.11 (NixOS/nixpkgs#119226) * `9eee6b3d`: Merge pull request NixOS/nixpkgs#119494 from Ericson2314/libbsd-split-output * `c920f18e`: httpx: 1.0.4 -> 1.0.5 * `ca373323`: cosmopolitan: init at 0.3 * `c9064643`: bash-my-aws: add runtime dependencies * `a2650e12`: lib: Adjust NetBSD example systems * `fd75d3b7`: ocamlPackages.safepass: 3.0 → 3.1 * `706c39e5`: Merge pull request NixOS/nixpkgs#119511 from Ericson2314/netbsd-lib-example-better-name * `bdf2f668`: nimmm: 0.1.2 -> 0.2.0 * `73438d7c`: rippled: 1.6.0 -> 1.7.0 * `a97f6bbc`: Merge pull request NixOS/nixpkgs#119499 from r-ryantm/auto-update/httpx * `150ad4ec`: grit: 0.2.0 -> 0.3.0 * `13ff90fa`: fly: 7.1.0 -> 7.2.0 * `12ac4de4`: entt: 3.7.0 -> 3.7.1 * `818c982c`: carla: 2.2.0 -> 2.3.0 * `402e17ae`: lf: 21 -> 22 * `7bf3b1fe`: lf: Remove myself as maintainer * `f028bddd`: sayonara: 1.6.0-beta6 -> 1.6.0-beta7, add python & update script * `9c8cb618`: gh: 1.8.1 -> 1.9.0 * `1ea4855c`: Merge pull request NixOS/nixpkgs#119483 from primeos/chromium * `79e8069d`: librtlsdr: init at 0.8.0 * `4be05878`: rtl-sdr: minor build fixes * `22c7e4f3`: sdrangel: 6.4.0 -> 6.8.0 * `ea50a8c8`: netbsd.man: fix hash * `894b6069`: ocamlPackages.wayland: init at 0.2 * `781e69d1`: llvmPackages_12: reorganize files * `9767460d`: lib.systems.examples.amd64-netbsd: add warning * `62ec3db0`: stdenv/freebsd/cc: make overrideable fixing nixpkgs eval * `081b9423`: llvmPackages*: fix paths to libcxx-0001-musl-hacks.patch * `4461230c`: man-pages-posix: rename from posix_man_pages * `b4279a32`: man-pages-posix: 2013-a -> 2017-a * `e754546e`: zoxide: remove shell checkInputs * `f21304cf`: Merge pull request NixOS/nixpkgs#119519 from sternenseemann/posix-man-pages * `978fa19a`: Merge pull request NixOS/nixpkgs#119528 from sternenseemann/llvmPackages_12-reorganize-files * `652749c4`: Merge pull request NixOS/nixpkgs#119524 from alyssais/netbsd-man * `5268ee2e`: Merge pull request NixOS/nixpkgs#119518 from OPNA2608/update/sayonara-1.6.0-beta7/21.05
Previous conversation participants: @tashian @midchildan @aanderse
Motivation for this change
Create a declarative step-ca module instead of a more or less imperative one (which is likely hard to use and maintain using nix).
Things done
sandbox
innix.conf
on non-NixOS linux)nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
./result/bin/
)nix path-info -S
before and after)