maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(nixpkgs): Bump channels to 2021-05-25

Browse source 
* users/grfn/system/home/yeren: remove obsolete awscli2 overrides

* ops: make new isSystemUser || isNormalUser assertion happy

* users/grfn/system/system/mugwump: make buildkite agents system users

* users/tazjin/nixos/camden: set isSystemUser = true for git

* users/tazjin/emacs: Remove missing & broken packages

* third_party/openldap: remove, as the argon2 module is now enabled upstream

* third_party/gerrit_plugins: Pinned new unstable hashes

* third_party/nix, third_party/grpc: Disabled CI as these are broken

* third_party/overlays/emacs: Bumped version to stay in sync with channel

* third_party/buzz: Update LIBCLANG_PATH to reference libclang.lib,
  since libclang's default output no longer contains libclang.so

* users/grfn/system/home: Install julia-stable instead of julia (which
  aliases to julia-lts), as the latter depends on an insecure version of
  libgit

Change-Id: Iff33b0ecb0ef07a82d1de35e23c40d2f4bf0f8ed
Reviewed-on: https://cl.tvl.fyi/c/depot/+/3001
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
Reviewed-by: grfn <grfn@gws.fyi>
This commit is contained in:
Vincent Ambo 2021-04-13 12:21:42 +02:00 • committed by tazjin
parent fb36bc321b
commit 65be8f20e0
20 changed files with 44 additions and 75 deletions
Download patch file Download diff file Expand all files Collapse all files

2
ops/modules/clbot.nix
View file

@ -66,7 +66,7 @@ in {
users.clbot = {
group = "clbot";
isNormalUser = false;
isSystemUser = true;
};
};

2
ops/modules/quassel.nix
View file

@ -66,7 +66,7 @@ in {
users = {
users.quassel = {
isNormalUser = false;
isSystemUser = true;
group = "quassel";
};

1
ops/modules/tvl-buildkite.nix
View file

@ -39,6 +39,7 @@ in {
users = builtins.listToAttrs (map (n: rec {
name = "buildkite-agent-whitby-${toString n}";
value = {
isSystemUser = true;
group = lib.mkForce "buildkite-agents";
extraGroups = [ name ];
};

13
ops/modules/tvl-slapd/default.nix
View file

@ -27,17 +27,6 @@ let
inherit (depot.ops) users;
in {
# Use our patched OpenLDAP derivation which enables stronger password hashing.
#
# Unfortunately the module for OpenLDAP has no package option, so we
# need to override it system-wide. Be aware that this triggers a
# *large* number of rebuilds of packages such as GPG and Python.
nixpkgs.overlays = [
(_: _: {
inherit (depot.third_party) openldap;
})
];
services.openldap = {
enable = true;
@ -58,7 +47,7 @@ in {
};
"cn=schema".includes =
map (schema: "${depot.third_party.openldap}/etc/schema/${schema}.ldif")
map (schema: "${pkgs.openldap}/etc/schema/${schema}.ldif")
[ "core" "cosine" "inetorgperson" "nis" ];
};

5
ops/modules/tvl-sso/default.nix
View file

@ -18,7 +18,10 @@ in {
Restart = "always";
};
};
users.users.apereo-cas = {};
users.users.apereo-cas = {
isSystemUser = true;
group = "apereo-cas";
};
users.groups.apereo-cas = {};
};
}