···215- `services.zfs.zed.enableMail` now uses the global `sendmail` wrapper defined by an email module
216 (such as msmtp or Postfix). It no longer requires using a special ZFS build with email support.
21700218- The `krb5` module has been rewritten and moved to `security.krb5`, moving all options but `security.krb5.enable` and `security.krb5.package` into `security.krb5.settings`.
219220- Gitea 1.21 upgrade has several breaking changes, including:
···215- `services.zfs.zed.enableMail` now uses the global `sendmail` wrapper defined by an email module
216 (such as msmtp or Postfix). It no longer requires using a special ZFS build with email support.
217218+- `nextcloud-setup.service` no longer changes the group of each file & directory inside `/var/lib/nextcloud/{config,data,store-apps}` if one of these directories has the wrong owner group. This was part of transitioning the group used for `/var/lib/nextcloud`, but isn't necessary anymore.
219+220- The `krb5` module has been rewritten and moved to `security.krb5`, moving all options but `security.krb5.enable` and `security.krb5.package` into `security.krb5.settings`.
221222- Gitea 1.21 upgrade has several breaking changes, including:
···153 type = types.attrs;
154 description = lib.mdDoc ''
155 Modify the systemd service. Can be used to, e.g., adjust the sandboxing options.
0156 '';
157 example = {
158 ProtectHome = false;
···153 type = types.attrs;
154 description = lib.mdDoc ''
155 Modify the systemd service. Can be used to, e.g., adjust the sandboxing options.
156+ See {manpage}`systemd.exec(5)` for more options.
157 '';
158 example = {
159 ProtectHome = false;
···95 '';
96 };
9798+ services.resolved.dnsovertls = mkOption {
99+ default = "false";
100+ example = "true";
101+ type = types.enum [ "true" "opportunistic" "false" ];
102+ description = lib.mdDoc ''
103+ If set to
104+ - `"true"`:
105+ all DNS lookups will be encrypted. This requires
106+ that the DNS server supports DNS-over-TLS and
107+ has a valid certificate. If the hostname was specified
108+ via the `address#hostname` format in {option}`services.resolved.domains`
109+ then the specified hostname is used to validate its certificate.
110+ - `"opportunistic"`:
111+ all DNS lookups will attempt to be encrypted, but will fallback
112+ to unecrypted requests if the server does not support DNS-over-TLS.
113+ Note that this mode does allow for a malicious party to conduct a
114+ downgrade attack by immitating the DNS server and pretending to not
115+ support encryption.
116+ - `"false"`:
117+ all DNS lookups are done unencrypted.
118+ '';
119+ };
120+121 services.resolved.extraConfig = mkOption {
122 default = "";
123 type = types.lines;
···164 "Domains=${concatStringsSep " " cfg.domains}"}
165 LLMNR=${cfg.llmnr}
166 DNSSEC=${cfg.dnssec}
167+ DNSOverTLS=${cfg.dnsovertls}
168 ${config.services.resolved.extraConfig}
169 '';
170
···2425let
26 pname = "windmill";
27- version = "1.219.1";
2829 src = fetchFromGitHub {
30 owner = "windmill-labs";
31 repo = "windmill";
32 rev = "v${version}";
33- hash = "sha256-HGZuIun9PWi3Fv/kX95k4xnXu1L604teWUKXzjVXKF0=";
34 };
3536 pythonEnv = python3.withPackages (ps: [ ps.pip-tools ]);
···4243 sourceRoot = "${src.name}/frontend";
4445- npmDepsHash = "sha256-1uya/4FjMHTDW/KX1YinhTT/Mb7bJ9XVTWc6cU0oqJ8=";
4647 # without these you get a
48 # FATAL ERROR: Ineffective mark-compacts near heap limit Allocation failed - JavaScript heap out of memory
···2425let
26 pname = "windmill";
27+ version = "1.246.15";
2829 src = fetchFromGitHub {
30 owner = "windmill-labs";
31 repo = "windmill";
32 rev = "v${version}";
33+ hash = "sha256-5KDSCag70ww1mYvfKf3rg2RTi80rEWZnMTXB+/6VsNM=";
34 };
3536 pythonEnv = python3.withPackages (ps: [ ps.pip-tools ]);
···4243 sourceRoot = "${src.name}/frontend";
4445+ npmDepsHash = "sha256-PdRNjUQdr1NgTO5UaWfH8rJeiFB/VJ6sJkwhpmPo/1A=";
4647 # without these you get a
48 # FATAL ERROR: Ineffective mark-compacts near heap limit Allocation failed - JavaScript heap out of memory
+5-5
pkgs/data/fonts/inconsolata/default.nix
···23stdenv.mkDerivation {
4 pname = "inconsolata";
5- version = "unstable-2021-01-19";
67 src = fetchFromGitHub {
8 owner = "google";
9 repo = "fonts";
10- rev = "f113126dc4b9b1473d9354a86129c9d7b837aa1a";
11- sha256 = "0safw5prpa63mqcyfw3gr3a535w4c9hg5ayw5pkppiwil7n3pyxs";
12 };
1314 installPhase = ''
15- install -m644 --target $out/share/fonts/truetype/inconsolata -D $src/ofl/inconsolata/*.ttf
16 '';
1718 meta = with lib; {
19 homepage = "https://www.levien.com/type/myfonts/inconsolata.html";
20 description = "A monospace font for both screen and print";
21- maintainers = with maintainers; [ mikoim raskin ];
22 license = licenses.ofl;
23 platforms = platforms.all;
24 };
···23stdenv.mkDerivation {
4 pname = "inconsolata";
5+ version = "3.001";
67 src = fetchFromGitHub {
8 owner = "google";
9 repo = "fonts";
10+ rev = "0f203e3740b5eb77e0b179dff1e5869482676782";
11+ sha256 = "sha256-Q8eUJ0mkoB245Ifz5ulxx61x4+AqKhG0uqhWF2nSLpw=";
12 };
1314 installPhase = ''
15+ install -m644 --target $out/share/fonts/truetype/inconsolata -D $src/ofl/inconsolata/static/*.ttf
16 '';
1718 meta = with lib; {
19 homepage = "https://www.levien.com/type/myfonts/inconsolata.html";
20 description = "A monospace font for both screen and print";
21+ maintainers = with maintainers; [ appsforartists mikoim raskin ];
22 license = licenses.ofl;
23 platforms = platforms.all;
24 };
+4-1
pkgs/development/compilers/fpc/default.nix
···36 substituteInPlace fpcsrc/compiler/systems/t_linux.pas --subst-var-by syslibpath "${glibc}/lib"
37 # Replace the `codesign --remove-signature` command with a custom script, since `codesign` is not available
38 # in nixpkgs
0039 substituteInPlace fpcsrc/compiler/Makefile \
40 --replace \
41 "\$(CODESIGN) --remove-signature" \
42 "${./remove-signature.sh}" \
43- --replace "ifneq (\$(CODESIGN),)" "ifeq (\$(OS_TARGET), darwin)"
044 '';
4546 NIX_LDFLAGS = lib.optionalString
···36 substituteInPlace fpcsrc/compiler/systems/t_linux.pas --subst-var-by syslibpath "${glibc}/lib"
37 # Replace the `codesign --remove-signature` command with a custom script, since `codesign` is not available
38 # in nixpkgs
39+ # Remove the -no_uuid strip flag which does not work on llvm-strip, only
40+ # Apple strip.
41 substituteInPlace fpcsrc/compiler/Makefile \
42 --replace \
43 "\$(CODESIGN) --remove-signature" \
44 "${./remove-signature.sh}" \
45+ --replace "ifneq (\$(CODESIGN),)" "ifeq (\$(OS_TARGET), darwin)" \
46+ --replace "-no_uuid" ""
47 '';
4849 NIX_LDFLAGS = lib.optionalString
···126 # "All of the code in the compiler-rt project is dual licensed under the MIT
127 # license and the UIUC License (a BSD-like license)":
128 license = with lib.licenses; [ mit ncsa ];
129- broken = stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64;
000130 };
131}
···126 # "All of the code in the compiler-rt project is dual licensed under the MIT
127 # license and the UIUC License (a BSD-like license)":
128 license = with lib.licenses; [ mit ncsa ];
129+ broken = stdenv.hostPlatform.system == "aarch64-darwin"
130+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
131+ # https://reviews.llvm.org/D43106#1019077
132+ || (stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang);
133 };
134}
···124 # "All of the code in the compiler-rt project is dual licensed under the MIT
125 # license and the UIUC License (a BSD-like license)":
126 license = with lib.licenses; [ mit ncsa ];
000127 };
128}
···124 # "All of the code in the compiler-rt project is dual licensed under the MIT
125 # license and the UIUC License (a BSD-like license)":
126 license = with lib.licenses; [ mit ncsa ];
127+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
128+ # https://reviews.llvm.org/D43106#1019077
129+ broken = stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang;
130 };
131}
···131 # "All of the code in the compiler-rt project is dual licensed under the MIT
132 # license and the UIUC License (a BSD-like license)":
133 license = with lib.licenses; [ mit ncsa ];
000134 };
135}
···131 # "All of the code in the compiler-rt project is dual licensed under the MIT
132 # license and the UIUC License (a BSD-like license)":
133 license = with lib.licenses; [ mit ncsa ];
134+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
135+ # https://reviews.llvm.org/D43106#1019077
136+ broken = stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang;
137 };
138}
···139 # "All of the code in the compiler-rt project is dual licensed under the MIT
140 # license and the UIUC License (a BSD-like license)":
141 license = with lib.licenses; [ mit ncsa ];
000142 };
143}
···139 # "All of the code in the compiler-rt project is dual licensed under the MIT
140 # license and the UIUC License (a BSD-like license)":
141 license = with lib.licenses; [ mit ncsa ];
142+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
143+ # https://reviews.llvm.org/D43106#1019077
144+ broken = stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang;
145 };
146}
···138 # "All of the code in the compiler-rt project is dual licensed under the MIT
139 # license and the UIUC License (a BSD-like license)":
140 license = with lib.licenses; [ mit ncsa ];
000141 };
142}
···138 # "All of the code in the compiler-rt project is dual licensed under the MIT
139 # license and the UIUC License (a BSD-like license)":
140 license = with lib.licenses; [ mit ncsa ];
141+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
142+ # https://reviews.llvm.org/D43106#1019077
143+ broken = stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang;
144 };
145}
···152 # "All of the code in the compiler-rt project is dual licensed under the MIT
153 # license and the UIUC License (a BSD-like license)":
154 license = with lib.licenses; [ mit ncsa ];
000155 };
156}
···152 # "All of the code in the compiler-rt project is dual licensed under the MIT
153 # license and the UIUC License (a BSD-like license)":
154 license = with lib.licenses; [ mit ncsa ];
155+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
156+ # https://reviews.llvm.org/D43106#1019077
157+ broken = stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang;
158 };
159}
···152 # "All of the code in the compiler-rt project is dual licensed under the MIT
153 # license and the UIUC License (a BSD-like license)":
154 license = with lib.licenses; [ mit ncsa ];
000155 };
156}
···152 # "All of the code in the compiler-rt project is dual licensed under the MIT
153 # license and the UIUC License (a BSD-like license)":
154 license = with lib.licenses; [ mit ncsa ];
155+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
156+ # https://reviews.llvm.org/D43106#1019077
157+ broken = stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang;
158 };
159}
···115 # "All of the code in the compiler-rt project is dual licensed under the MIT
116 # license and the UIUC License (a BSD-like license)":
117 license = with lib.licenses; [ mit ncsa ];
118- broken = stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64;
000119 };
120}
···115 # "All of the code in the compiler-rt project is dual licensed under the MIT
116 # license and the UIUC License (a BSD-like license)":
117 license = with lib.licenses; [ mit ncsa ];
118+ broken = stdenv.hostPlatform.system == "aarch64-darwin"
119+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
120+ # https://reviews.llvm.org/D43106#1019077
121+ || (stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang);
122 };
123}
···152 # "All of the code in the compiler-rt project is dual licensed under the MIT
153 # license and the UIUC License (a BSD-like license)":
154 license = with lib.licenses; [ mit ncsa ];
000155 };
156}
···152 # "All of the code in the compiler-rt project is dual licensed under the MIT
153 # license and the UIUC License (a BSD-like license)":
154 license = with lib.licenses; [ mit ncsa ];
155+ # compiler-rt requires a Clang stdenv on 32-bit RISC-V:
156+ # https://reviews.llvm.org/D43106#1019077
157+ broken = stdenv.hostPlatform.isRiscV32 && !stdenv.cc.isClang;
158 };
159}
···43 ];
4445 # it would use the erroneous tag v0.47
46- passthru.skipBulkUpdate = false;
4748 meta = with lib; {
49 description = "An unofficial Dynalite DyNET interface creating devices";
···43 ];
4445 # it would use the erroneous tag v0.47
46+ passthru.skipBulkUpdate = true;
4748 meta = with lib; {
49 description = "An unofficial Dynalite DyNET interface creating devices";
···88, withAnalyze ? true
89, withApparmor ? true
90, withAudit ? true
91-, withBootloader ? withEfi && !stdenv.hostPlatform.isMusl # compiles systemd-boot, assumes EFI is available.
000092, withCompression ? true # adds bzip2, lz4, xz and zstd
93, withCoredump ? true
94, withCryptsetup ? true
···108 && !stdenv.hostPlatform.isMips64 # see https://github.com/NixOS/nixpkgs/pull/194149#issuecomment-1266642211
109 # can't find gnu/stubs-32.h
110 && (stdenv.hostPlatform.isPower64 -> stdenv.hostPlatform.isBigEndian)
00111 # buildPackages.targetPackages.llvmPackages is the same as llvmPackages,
112 # but we do it this way to avoid taking llvmPackages as an input, and
113 # risking making it too easy to ignore the above comment about llvmPackages.
···88, withAnalyze ? true
89, withApparmor ? true
90, withAudit ? true
91+ # compiles systemd-boot, assumes EFI is available.
92+, withBootloader ? withEfi
93+ && !stdenv.hostPlatform.isMusl
94+ # "Unknown 64-bit data model"
95+ && !stdenv.hostPlatform.isRiscV32
96, withCompression ? true # adds bzip2, lz4, xz and zstd
97, withCoredump ? true
98, withCryptsetup ? true
···112 && !stdenv.hostPlatform.isMips64 # see https://github.com/NixOS/nixpkgs/pull/194149#issuecomment-1266642211
113 # can't find gnu/stubs-32.h
114 && (stdenv.hostPlatform.isPower64 -> stdenv.hostPlatform.isBigEndian)
115+ # https://reviews.llvm.org/D43106#1019077
116+ && (stdenv.hostPlatform.isRiscV32 -> stdenv.cc.isClang)
117 # buildPackages.targetPackages.llvmPackages is the same as llvmPackages,
118 # but we do it this way to avoid taking llvmPackages as an input, and
119 # risking making it too easy to ignore the above comment about llvmPackages.
···219 # oggvideotools is broken on Darwin, please put it back when it will be fixed?
220 ++ lib.optionals stdenv.isLinux [ oggvideotools ]
221 # This doesn't work on aarch64-darwin
222- ++ lib.optionals (stdenv.hostPlatform != "aarch64-darwin") [ gnumeric ]
223 ));
224225 nativeCheckInputs = with python3.pkgs; [
···248 "test_non_unicode_filename"
249 "test_listing"
250 "test_symlink_root"
000000000251 ];
252253 disabledTestPaths = [
···219 # oggvideotools is broken on Darwin, please put it back when it will be fixed?
220 ++ lib.optionals stdenv.isLinux [ oggvideotools ]
221 # This doesn't work on aarch64-darwin
222+ ++ lib.optionals (stdenv.hostPlatform.system != "aarch64-darwin") [ gnumeric ]
223 ));
224225 nativeCheckInputs = with python3.pkgs; [
···248 "test_non_unicode_filename"
249 "test_listing"
250 "test_symlink_root"
251+252+ # Appears to be a sandbox related issue
253+ "test_trim_stderr_in_command"
254+ # Seems to be a bug caused by having different versions of rdata than
255+ # expected. Will file upstream.
256+ "test_item_rdb"
257+ # Caused by getting an otool command instead of llvm-objdump. Could be Nix
258+ # setup, could be upstream bug. Will file upstream.
259+ "test_libmix_differences"
260 ];
261262 disabledTestPaths = [