-
-
Notifications
You must be signed in to change notification settings - Fork 12.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RFC42 tracking issue #144575
Comments
I think some of the modules in the list are false positives, some already implement structural settings but provide |
With PR #139075 merged, we're going to have |
Logrotate can be checked as it was done in e92c053 |
NFS is in progress, #177601 |
Grafana is done. |
The big one is all the programs under the systemd project umbrella. It should be probably be done piecemeal but it requires a fair amount of work. |
…ore: At this point this is basically a full rewrite of this module, which is a breaking change and was necessary to properly expose the useful parts of hostapd's config. The notable changes are: - `hostapd` is now started with additional systemd sandbox/hardening options - A single-daemon can now manage multiple distinct interfaces, which is why all configuration had to be moved into `hostapd.interfaces` - By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are supported, too - Added passwordFile-like options for wpa and sae - Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration - Removes `with lib;` and thus makes this module conformant with [RFC42](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md), so it can be marked as done in NixOS#144575. - Related to NixOS#49171. Closes NixOS#24288.
At this point this is basically a full rewrite of this module, which is a breaking change and was necessary to properly expose the useful parts of hostapd's config. The notable changes are: - `hostapd` is now started with additional systemd sandbox/hardening options - A single-daemon can now manage multiple distinct interfaces, which is why all configuration had to be moved into `hostapd.interfaces` - By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are supported, too - Added passwordFile-like options for wpa and sae - Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration - Removes `with lib;` and thus makes this module conformant with [RFC42](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md), so it can be marked as done in NixOS#144575. - Related to NixOS#49171. Closes NixOS#24288.
At this point this is basically a full rewrite of this module, which is a breaking change and was necessary to properly expose the useful parts of hostapd's config. The notable changes are: - `hostapd` is now started with additional systemd sandbox/hardening options - A single-daemon can now manage multiple distinct interfaces, which is why all configuration had to be moved into `hostapd.interfaces` - By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are supported, too - Added passwordFile-like options for wpa and sae - Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration - Removes `with lib;` and thus makes this module conformant with [RFC42](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md), so it can be marked as done in NixOS#144575. - Related to NixOS#49171. Closes NixOS#24288.
At this point this is basically a full rewrite of this module, which is a breaking change and was necessary to properly expose the useful parts of hostapd's config. The notable changes are: - `hostapd` is now started with additional systemd sandbox/hardening options - A single-daemon can now manage multiple distinct interfaces, which is why all configuration had to be moved into `hostapd.interfaces` - By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are supported, too - Added passwordFile-like options for wpa and sae - Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration - Removes `with lib;` and thus makes this module conformant with [RFC42](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md), so it can be marked as done in NixOS#144575. - Related to NixOS#49171. Closes NixOS#24288.
At this point this is basically a full rewrite of this module, which is a breaking change and was necessary to properly expose the useful parts of hostapd's config. The notable changes are: - `hostapd` is now started with additional systemd sandbox/hardening options - A single-daemon can now manage multiple distinct interfaces, which is why all configuration had to be moved into `hostapd.interfaces` - By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are supported, too - Added passwordFile-like options for wpa and sae - Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration - Removes `with lib;` and thus makes this module conformant with [RFC42](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md), so it can be marked as done in NixOS#144575. - Related to NixOS#49171. Closes NixOS#24288.
At this point this is basically a full rewrite of this module, which is a breaking change and was necessary to properly expose the useful parts of hostapd's config. The notable changes are: - `hostapd` is now started with additional systemd sandbox/hardening options - A single-daemon can now manage multiple distinct interfaces, which is why all configuration had to be moved into `hostapd.interfaces` - By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are supported, too - Added passwordFile-like options for wpa and sae - Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration - Removes `with lib;` and thus makes this module conformant with [RFC42](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md), so it can be marked as done in NixOS#144575. - Related to NixOS#49171. Closes NixOS#24288.
At this point this is basically a full rewrite of this module, which is a breaking change and was necessary to properly expose the useful parts of hostapd's config. The notable changes are: - `hostapd` is now started with additional systemd sandbox/hardening options - A single-daemon can now manage multiple distinct interfaces, which is why all configuration had to be moved into `hostapd.interfaces` - By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are supported, too - Added passwordFile-like options for wpa and sae - Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration - Removes `with lib;` and thus makes this module conformant with [RFC42](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md), so it can be marked as done in NixOS#144575. - Related to NixOS#49171. Closes NixOS#24288.
At this point this is basically a full rewrite of this module, which is a breaking change and was necessary to properly expose the useful parts of hostapd's config. The notable changes are: - `hostapd` is now started with additional systemd sandbox/hardening options - A single-daemon can now manage multiple distinct interfaces, which is why all configuration had to be moved into `hostapd.interfaces` - By default WPA3-SAE will be used, but WPA2 and WPA3-SAE-TRANSITION are supported, too - Added passwordFile-like options for wpa and sae - Add new relevant options for MAC ACL, WiFi5, WiFi6 and WiFi7 configuration - Removes `with lib;` and thus makes this module conformant with [RFC42](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md), so it can be marked as done in NixOS#144575. - Related to NixOS#49171. Closes NixOS#24288.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
Now that #253428 got merged, the "programs/tsm-client.nix" checkbox may be ticked. |
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... See NixOS#144575. Closes NixOS#243068. Co-authored-by: h7x4 <h7x4@nani.wtf>
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
This replaces the krb5 module's options with RFC 42-style krb5.settings option*, while greatly simplifying the code and fixing a few bugs, namely: - NixOS#243068 krb5: Configuration silently gets ignored when set by multiple modules - not being able to use mkIf etc. inside subattributes of krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ... * leaving an escape hatch in form of krb5.extraConfig in case extra syntax is needed (e.g. `include' directives) See NixOS#144575. Closes NixOS#243068.
RFC42 is the future, let's migrate to it
List generated with
grep -rn "extraConfig\|extraOptions" nixos/modules | grep "=" | sed -r "s|(.*.nix):.+|\1|g" | sed "s|nixos/modules/|- [ ] |g" | grep -v pl | grep -v xml | uniq
The text was updated successfully, but these errors were encountered: