···2526- The `services.polipo` module has been removed as `polipo` is unmaintained and archived upstream.
270028- `renovate` was updated to v40. See the [upstream release notes](https://github.com/renovatebot/renovate/releases/tag/40.0.0) for breaking changes.
2930## Other Notable Changes {#sec-release-25.11-notable-changes}
···2526- The `services.polipo` module has been removed as `polipo` is unmaintained and archived upstream.
2728+- The Pocket ID module ([`services.pocket-id`][#opt-services.pocket-id.enable]) and package (`pocket-id`) has been updated to 1.0.0. Some environment variables have been changed or removed, see the [migration guide](https://pocket-id.org/docs/setup/migrate-to-v1/).
29+30- `renovate` was updated to v40. See the [upstream release notes](https://github.com/renovatebot/renovate/releases/tag/40.0.0) for breaking changes.
3132## Other Notable Changes {#sec-release-25.11-notable-changes}
···167 changelog = "https://www.mozilla.org/en-US/firefox/${version}/releasenotes/";
168 description = "Mozilla Firefox, free web browser (binary package)";
169 homepage = "https://www.mozilla.org/firefox/";
170+ license = {
171+ shortName = "firefox";
172+ fullName = "Firefox Terms of Use";
173+ url = "https://www.mozilla.org/about/legal/terms/firefox/";
174+ # "You Are Responsible for the Consequences of Your Use of Firefox"
175+ # (despite the heading, not an indemnity clause) states the following:
176+ #
177+ # > You agree that you will not use Firefox to infringe anyone’s rights
178+ # > or violate any applicable laws or regulations.
179+ # >
180+ # > You will not do anything that interferes with or disrupts Mozilla’s
181+ # > services or products (or the servers and networks which are connected
182+ # > to Mozilla’s services).
183+ #
184+ # This conflicts with FSF freedom 0: "The freedom to run the program as
185+ # you wish, for any purpose". (Why should Mozilla be involved in
186+ # instances where you break your local laws just because you happen to
187+ # use Firefox whilst doing it?)
188+ free = false;
189+ redistributable = true; # since MPL-2.0 still applies
190+ };
191 sourceProvenance = with sourceTypes; [ binaryNativeCode ];
192 platforms = builtins.attrNames mozillaPlatforms;
193 hydraPlatforms = [ ];
···1+# Using an external Containerd
2+3+K3s ships with its own containerd binary, however, sometimes it's necessary to use an external
4+containerd. This can be done in a few lines of configuration.
5+6+## Configure Containerd
7+8+```nix
9+virtualisation.containerd = {
10+ enable = true;
11+ settings.plugins."io.containerd.grpc.v1.cri".cni = {
12+ bin_dir = "/var/lib/rancher/k3s/data/current/bin";
13+ conf_dir = "/var/lib/rancher/k3s/agent/etc/cni/net.d";
14+ };
15+ # Optionally, configure containerd to use the k3s pause image
16+ settings.plugins."io.containerd.grpc.v1.cri" = {
17+ sandbox_image = "docker.io/rancher/mirrored-pause:3.6";
18+ };
19+};
20+```
21+22+## Configure k3s
23+24+```nix
25+services.k3s = {
26+ enable = true;
27+ extraFlags = [ "--container-runtime-endpoint unix:///run/containerd/containerd.sock" ];
28+};
29+```
30+31+## Importing Container Images
32+33+K3s provides the `services.k3s.images` option to import container images at startup. This option
34+does **not** work with an external containerd, but you can import the images via
35+`ctr -n=k8s.io image import /var/lib/rancher/k3s/agent/images/*`. Note that you need to set the
36+`k8s.io` namespace to make the images available to the cluster.