···15181518 <listitem>
15191519 <para>
15201520 The
15211521+ <link xlink:href="options.html#opt-services.smokeping.host">services.smokeping.host</link>
15221522+ option was added and defaulted to
15231523+ <literal>localhost</literal>. Before,
15241524+ <literal>smokeping</literal> listened to all interfaces by
15251525+ default. NixOS defaults generally aim to provide
15261526+ non-Internet-exposed defaults for databases and internal
15271527+ monitoring tools, see e.g.
15281528+ <link xlink:href="https://github.com/NixOS/nixpkgs/issues/100192">#100192</link>.
15291529+ Further, the systemd service for <literal>smokeping</literal>
15301530+ got reworked defaults for increased operational stability, see
15311531+ <link xlink:href="https://github.com/NixOS/nixpkgs/pull/144127">PR
15321532+ #144127</link> for details.
15331533+ </para>
15341534+ </listitem>
15351535+ <listitem>
15361536+ <para>
15371537+ The
15211538 <link xlink:href="options.html#opt-services.syncoid.enable">services.syncoid.enable</link>
15221539 module now properly drops ZFS permissions after usage. Before
15231540 it delegated permissions to whole pools instead of datasets
+2
nixos/doc/manual/release-notes/rl-2111.section.md
···445445446446- The [networking.wireless.iwd](options.html#opt-networking.wireless.iwd.enable) module has a new [networking.wireless.iwd.settings](options.html#opt-networking.wireless.iwd.settings) option.
447447448448+- The [services.smokeping.host](options.html#opt-services.smokeping.host) option was added and defaulted to `localhost`. Before, `smokeping` listened to all interfaces by default. NixOS defaults generally aim to provide non-Internet-exposed defaults for databases and internal monitoring tools, see e.g. [#100192](https://github.com/NixOS/nixpkgs/issues/100192). Further, the systemd service for `smokeping` got reworked defaults for increased operational stability, see [PR #144127](https://github.com/NixOS/nixpkgs/pull/144127) for details.
449449+448450- The [services.syncoid.enable](options.html#opt-services.syncoid.enable) module now properly drops ZFS permissions after usage. Before it delegated permissions to whole pools instead of datasets and didn't clean up after execution. You can manually look this up for your pools by running `zfs allow your-pool-name` and use `zfs unallow syncoid your-pool-name` to clean this up.
449451450452- Zfs: `latestCompatibleLinuxPackages` is now exported on the zfs package. One can use `boot.kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;` to always track the latest compatible kernel with a given version of zfs.
···11+{ lib, stdenv, fetchurl, dpkg, autoPatchelfHook, makeWrapper, electron
22+, alsa-lib, glibc, gtk3, libxshmfence, mesa, nss }:
33+44+stdenv.mkDerivation rec {
55+ pname = "threema-desktop";
66+ version = "1.0.3";
77+88+ src = fetchurl {
99+ # As Threema only offers a Latest Release url, the plan is to upload each
1010+ # new release url to web.archive.org until their Github releases page gets populated.
1111+ url = "https://web.archive.org/web/20211027194646/https://releases.threema.ch/web-electron/v1/release/Threema-Latest.deb";
1212+ sha256 = "sha256-qiFv52nnyfHxCWTePmyxW/MgzFy3EUxmW6n+UIkw7tk=";
1313+ };
1414+1515+ nativeBuildInputs = [
1616+ dpkg
1717+ autoPatchelfHook
1818+ makeWrapper
1919+ ];
2020+2121+ buildInputs = [ alsa-lib glibc gtk3 libxshmfence mesa nss ];
2222+2323+ dontBuild = true;
2424+ dontConfigure = true;
2525+2626+ unpackPhase = ''
2727+ # Can't unpack with the common dpkg-deb -x method
2828+ dpkg --fsys-tarfile $src | tar --extract
2929+ '';
3030+3131+ installPhase = ''
3232+ runHook preInstall
3333+3434+ # This will cause confusion, not needed
3535+ rm -r usr/bin
3636+ mv usr $out
3737+3838+ runHook postInstall
3939+ '';
4040+4141+ postFixup = ''
4242+ mv $out/share/applications/threema.desktop $out/share/applications/threema-desktop.desktop
4343+ makeWrapper ${electron}/bin/electron $out/bin/threema \
4444+ --add-flags $out/lib/threema/resources/app.asar
4545+ '';
4646+4747+ meta = with lib; {
4848+ description = "Desktop client for Threema, a privacy-focused end-to-end encrypted mobile messenger";
4949+ homepage = "https://threema.ch";
5050+ license = licenses.agpl3Only;
5151+ maintainers = with maintainers; [ wolfangaukang ];
5252+ platforms = [ "x86_64-linux" ];
5353+ };
5454+}
+3-3
pkgs/applications/science/logic/lean/default.nix
···2233stdenv.mkDerivation rec {
44 pname = "lean";
55- version = "3.33.0";
55+ version = "3.35.0";
6677 src = fetchFromGitHub {
88 owner = "leanprover-community";
···1111 # from. this is then used to check whether an olean file should be
1212 # rebuilt. don't use a tag as rev because this will get replaced into
1313 # src/githash.h.in in preConfigure.
1414- rev = "a0fb1e8c7ac81dfd2e80ad0de08f4e57ee853d82";
1515- sha256 = "03xz3c3dzjhvjzpa8811cgzzqzw8fpajmspykavmb259i391w0y7";
1414+ rev = "a68d251bfc57341d8f1f6d8c6e548a0b08ff3b92";
1515+ sha256 = "0f91kvd4z7rsjyagfx56y1vxmf4wjds7bnz6yh3sd4xx770z58d4";
1616 };
17171818 nativeBuildInputs = [ cmake ];
+1-1
pkgs/applications/science/logic/why3/default.nix
···2323 # S-expression output for why3pp
2424 ppx_deriving ppx_sexp_conv
2525 # Coq Support
2626- coqPackages.coq coqPackages.flocq ocamlPackages.camlp5
2626+ coqPackages.coq coqPackages.flocq
2727 ];
28282929 propagatedBuildInputs = with ocamlPackages; [ camlzip num re sexplib ];
···2121 patchPhase = ''
2222 # Needed since the tests expect that HISTCONTROL is set.
2323 sed -i '/setup()/a HISTCONTROL=""' test/bash-preexec.bats
2424+2525+ # Skip tests failing with Bats 1.5.0.
2626+ # See https://github.com/rcaloras/bash-preexec/issues/121
2727+ sed -i '/^@test.*IFS/,/^}/d' test/bash-preexec.bats
2428 '';
25292630 checkPhase = ''
+4-5
pkgs/development/libraries/grpc/default.nix
···5757 "-DgRPC_ABSL_PROVIDER=package"
5858 "-DBUILD_SHARED_LIBS=ON"
5959 "-DCMAKE_SKIP_BUILD_RPATH=OFF"
6060+ ] ++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform) [
6161+ "-D_gRPC_PROTOBUF_PROTOC_EXECUTABLE=${buildPackages.protobuf}/bin/protoc"
6262+ ] ++ lib.optionals ((stdenv.hostPlatform.useLLVM or false) && lib.versionOlder stdenv.cc.cc.version "11.0") [
6063 # Needs to be compiled with -std=c++11 for clang < 11. Interestingly this is
6164 # only an issue with the useLLVM stdenv, not the darwin stdenv…
6265 # https://github.com/grpc/grpc/issues/26473#issuecomment-860885484
6363- (if (stdenv.hostPlatform.useLLVM or false) && lib.versionOlder stdenv.cc.cc.version "11.0"
6464- then "-DCMAKE_CXX_STANDARD=11"
6565- else "-DCMAKE_CXX_STANDARD=17")
6666- ] ++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform) [
6767- "-D_gRPC_PROTOBUF_PROTOC_EXECUTABLE=${buildPackages.protobuf}/bin/protoc"
6666+ "-DCMAKE_CXX_STANDARD=11"
6867 ];
69687069 # CMake creates a build directory by default, this conflicts with the