# issues

state: closed
title: subsurface: rev update for 4.5.97
user_login: mguentner
html_url: https://github.com/NixOS/nixpkgs/pull/21772
updated_at: 2017-01-10 02:19:06
body:
  ###### Motivation for this change

  The build of subsurface fails in a non-deterministic way. The updated rev fixes that.

  Ref: https://hydra.nixos.org/build/46165175
  Ref: http://git.subsurface-divelog.org/index.cgi?p=subsurface.git;a=commit;h=72bcb6481f3b935444d7868a74599dda133f9b43

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: jid: 0.6.1 -> 0.7.1
user_login: yurrriq
html_url: https://github.com/NixOS/nixpkgs/pull/21773
updated_at: 2017-01-10 02:25:40
body:
  ###### Motivation for this change

  Update [jid](https://github.com/simeji/jid) from [`0.6.1`](https://github.com/simeji/jid/releases/tag/0.6.1) to [`0.7.1`](https://github.com/simeji/jid/releases/tag/0.7.1).

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS, or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file) on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: hub: 2.2.8 -> 2.2.9
user_login: yurrriq
html_url: https://github.com/NixOS/nixpkgs/pull/21774
updated_at: 2017-01-10 11:49:41
body:
  ###### Motivation for this change

  Update [hub](https://github.com/github/hub) from 2.2.8 to 2.2.9.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: erlangR19: 19.1.6 -> 19.2
user_login: yurrriq
html_url: https://github.com/NixOS/nixpkgs/pull/21775
updated_at: 2017-01-11 18:22:20
body:
  ###### Motivation for this change

  Update `erlangR19` from 19.1.6 to 19.2.

  N.B. I've added a `sw_vers` substitution for `darwin`.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: terragrunt: init at 0.8.0
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/21776
updated_at: 2017-01-10 14:14:22
body:
  ###### Motivation for this change

  It was missing!

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: compress-man-pages.sh broken by recent changes in 'master'
user_login: peti
html_url: https://github.com/NixOS/nixpkgs/issues/21777
updated_at: 2017-03-01 10:47:16
body:
  The following derivation used to work fine:

  ~~~
      ledgerEnv = self.stdenv.mkDerivation {
        name = "ledger-env-0";
        unpackPhase = ":";
        installPhase = ''
          mkdir -p $out/{bin,share}
          ln -sv ${self.ledger2}/bin/ledger $out/bin/ledger2
          ln -sv ${self.ledger3}/bin/ledger $out/bin/ledger3
          ln -sv ledger3 $out/bin/ledger
          ln -sv ${self.ledger3}/share/man $out/share/
        '';
      };
  ~~~

  But now it's broken in current Nixpkgs `master`, giving the following error message:

  ~~~~
  [...]
  '/nix/store/9mwh4azklkq62ss1rrpl0v0pv928q76f-ledger-env-0/share/man' -> '/nix/store/9szv7hrhplvw8b931bqv5fgpza91vcvb-ledger-3.1.1/share/man'
  post-installation fixup
  shrinking RPATHs of ELF executables and libraries in /nix/store/9mwh4azklkq62ss1rrpl0v0pv928q76f-ledger-env-0
  gzipping man pages in /nix/store/9mwh4azklkq62ss1rrpl0v0pv928q76f-ledger-env-0
  /nix/store/cc7k5l8k7q0lqsanciz3q4mili9bwxpy-compress-man-pages.sh: line 13: /nix/store/9mwh4azklkq62ss1rrpl0v0pv928q76f-ledger-env-0/share/man/man1/ledger.1.gz.gz: Permission denied
  rm: cannot remove '/nix/store/9mwh4azklkq62ss1rrpl0v0pv928q76f-ledger-env-0/share/man/man1/ledger.1.gz.gz': No such file or directory
  builder for ‘/nix/store/ayhif4mj1zmvx6hij1nc79baas791gji-ledger-env-0.drv’ failed with exit code 1
  error: build of ‘/nix/store/ayhif4mj1zmvx6hij1nc79baas791gji-ledger-env-0.drv’ failed
  ~~~~


state: closed
title: flashplayer: 24.0.0.186 -> 24.0.0.194
user_login: taku0
html_url: https://github.com/NixOS/nixpkgs/pull/21778
updated_at: 2017-01-10 14:41:27
body:
  ###### Motivation for this change

  The binary is updated but the release notes are not updated yet. We can merge this to the master but maybe we should wait for the release notes before backporting.

  http://www.adobe.com/software/flash/about/
  https://helpx.adobe.com/flash-player/release-note/fp_24_air_24_release_notes.html
  https://helpx.adobe.com/security/products/flash-player.html

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: libsecret: add dev output
user_login: rycee
html_url: https://github.com/NixOS/nixpkgs/pull/21779
updated_at: 2017-01-11 07:34:18
body:
  ###### Motivation for this change

  To reduce the closure size of the secret-tool binary. On my install the closure size reduces from 178 MiB to 38 MiB:

  ```
  rycee@beta:~/devel/nixpkgs$ du -hcs $(nix-store -qR result.single-output)
  22M	/nix/store/m71hw9kw0z74w93lq44l1xdcy2nq155f-glibc-2.24
  368K	/nix/store/171w2nhr1l1iqwm31vqx7qwj11y1cb27-libelf-0.8.13
  100K	/nix/store/h4xqrnm3w23ifwkm04jj72b5ik3mg1kl-attr-2.4.47
  140K	/nix/store/rnp2l7n2qbbaj5ybw7iywpr3ppyn4pqy-acl-2.2.52
  11M	/nix/store/1j0ykqz2q2r76nyl9gzsmcpii6plipld-coreutils-8.26
  1.3M	/nix/store/1xpviqpv0bdmgyjg67v11zqp25z33qmd-util-linux-2.28.1
  2.7M	/nix/store/gr8nfygbswfrxl4qhfs43fc6cry95wzj-glibc-2.24-bin
  5.6M	/nix/store/i70ls3v8q574gd4xadbb9mkcc7hcygdk-linux-headers-4.4.10
  3.2M	/nix/store/57ll6yym0wfrw1dnc4fb5p3q55113s0d-glibc-2.24-dev
  4.0K	/nix/store/44jdy5pkibwb4mzv8l5659is8pxk7paq-glibc-iconv-2.24
  48K	/nix/store/7a4mln4zcckyixqabih080d8szmdcc6v-libffi-3.2.1
  32K	/nix/store/5nj1kmwmbdjs4piwlazhx5qbw3j4h6ff-libffi-3.2.1-dev
  104K	/nix/store/dns4zbhnkkmgcfnsf2i35p731lrlfr5d-zlib-1.2.8
  500K	/nix/store/rcm2h5d9r1xyi2yhw5mf9hwk82hfkpxx-pcre-8.39
  12M	/nix/store/5p80wz7fzkgk7nsn5jfrk00bspm13v9x-glib-2.50.2
  11M	/nix/store/5pxhnfh9863j2fnx9fxnmdir9l77agv9-ncurses-6.0
  1.1M	/nix/store/611iiv3iglwfbcixfwhff3imr09z7dz0-sqlite-3.15.2
  47M	/nix/store/gb7sw3wq4q0l8jwkgb65k992g5dc1k38-perl-5.22.2
  112K	/nix/store/gsvbs5pda689w8f8kn7kwq9yiinrhcsc-zlib-1.2.8-dev
  1.2M	/nix/store/hgbbz9kv3m7583rmb339595xrvaiw8bg-bash-4.4-p5
  576K	/nix/store/93khdji42rmxwsf0wm1y1x1x9wq80vvv-gdbm-1.12
  3.4M	/nix/store/ccr0a19cahjqmp3373z7yypi88nbklkx-openssl-1.0.2j
  4.7M	/nix/store/hw3rgzn5zz7ins6j2fzsy2nkqw8ifydw-gcc-5.4.0-lib
  4.4M	/nix/store/phshdcpdzz9xcls9y3i5kp6g8cm5nkmq-db-5.3.28
  80K	/nix/store/w4rljvlvwvffvgdh2y957bl9yxjcyyhm-bzip2-1.0.6.0.1
  400K	/nix/store/ywj93src8m2adc44knp9bpml0j6c9nkj-readline-6.3p08
  42M	/nix/store/hx3x2h2d3ww5jghvik7wmxnwvl49v6ml-python-2.7.13
  3.4M	/nix/store/68gwi53qj9y6x9b022pnasq2q9j7810f-glib-2.50.2-dev
  584K	/nix/store/mrb281radx9vwxaij3lfcmhvl50875si-libgpg-error-1.24
  1.2M	/nix/store/k5qhg8hw2zsriii3xnsfscch10qsbhal-libgcrypt-1.7.5
  1.2M	/nix/store/q6r5lkqhpfrjxm6cwp4cb40q3aj5idis-libsecret-0.18.5
  178M	total

  rycee@beta:~/devel/nixpkgs$ du -hcs $(nix-store -qR result.multiple-output)
  22M	/nix/store/m71hw9kw0z74w93lq44l1xdcy2nq155f-glibc-2.24
  1.3M	/nix/store/1xpviqpv0bdmgyjg67v11zqp25z33qmd-util-linux-2.28.1
  48K	/nix/store/7a4mln4zcckyixqabih080d8szmdcc6v-libffi-3.2.1
  104K	/nix/store/dns4zbhnkkmgcfnsf2i35p731lrlfr5d-zlib-1.2.8
  500K	/nix/store/rcm2h5d9r1xyi2yhw5mf9hwk82hfkpxx-pcre-8.39
  12M	/nix/store/5p80wz7fzkgk7nsn5jfrk00bspm13v9x-glib-2.50.2
  584K	/nix/store/mrb281radx9vwxaij3lfcmhvl50875si-libgpg-error-1.24
  1.2M	/nix/store/k5qhg8hw2zsriii3xnsfscch10qsbhal-libgcrypt-1.7.5
  688K	/nix/store/qscqh451yvr4vham8zv3mgr4j2n0vidp-libsecret-0.18.5
  38M	total
  ```

  I have not been able to to a full nox-review since a fair amount of heavy packages are touched (my laptop wouldn't cope) but have successfully tried a few random packages.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: bluejeans browser plugin no longer seems to work (stable)
user_login: RonnyPfannschmidt
html_url: https://github.com/NixOS/nixpkgs/issues/21780
updated_at: 2017-01-10 15:30:37
body:
  ## Issue description

  after a system update i tried to use bluejeans from the browser,
  however the site no longer seems to work with the plugin

  ### Steps to reproduce
  * install firefox and bluejeans in the system
  * try to use it
  * rpm download starts instead of the session


  ## Technical details

  `16.09.1445.e9a8853 (Flounder)`

  * System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)
  * Nix version: (run `nix-env --version`)
  * Nixpkgs version: (run `nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion`)


state: closed
title: gnome-settings-daemon is not on the PATH
user_login: siddharthist
html_url: https://github.com/NixOS/nixpkgs/issues/21782
updated_at: 2017-02-14 18:03:27
body:
  ## Issue description
  I would like to use `gnome-setings-daemon` under i3. I have the full gnome environment installed, but when I run `gnome-settings-daemon`, I get a `command not found` error. Why is this binary not on the PATH? In other distributions it is on the non-standard path `/usr/libexec/gnome-settings-daemon`, might this have something to do with it?

  ### Steps to reproduce
  Install `gnome-settings-daemon` and try running it from a terminal. 

  ## Technical details

  * System: 17.03pre98383.7ee897a (Gorilla)


state: closed
title: New package: sbt-extras
user_login: chris-martin
html_url: https://github.com/NixOS/nixpkgs/issues/21783
updated_at: 2017-10-26 12:51:38
body:
  I'm told a lot of people favor Paul Phillips' SBT wrapper https://github.com/paulp/sbt-extras over vanilla SBT. We probably ought to have a package for it.


state: closed
title: purescript-0.10.5 needs newer bower-json
user_login: comonoid
html_url: https://github.com/NixOS/nixpkgs/issues/21784
updated_at: 2017-02-21 08:46:47
body:
  ## Issue description

  purescript-0.10.5 is now dependent on bower-json >=1.0.0.1 && <1.1.
  Would you please upgrade dependences?

  ### Steps to reproduce

  Just try to install purescript-0.10.5

  ## Technical details

  * System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)

  17.03pre98383.7ee897a (Gorilla)
  17.03pre98682.f673243 (Gorilla)

  * Nix version: (run `nix-env --version`)

  nix-env (Nix) 1.11.5

  * Nixpkgs version: (run `nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion`)

  "17.03pre98383.7ee897a"
  "17.03pre98682.f673243"


state: closed
title: clipster: use python3:
user_login: magnetophon
html_url: https://github.com/NixOS/nixpkgs/pull/21785
updated_at: 2017-01-10 20:58:42
body:
  ###### Motivation for this change

  to work around https://github.com/mrichar1/clipster/issues/32

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: youtube-dl: 2017.01.08 -> 2017.01.10
user_login: goetzst
html_url: https://github.com/NixOS/nixpkgs/pull/21786
updated_at: 2017-01-10 20:49:14
body:
  ###### Motivation for this change
  youtube-dl update:
  most notable changes:
  * youtube: fixed extraction

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: mpv: 0.22.0 -> 0.23.0
user_login: goetzst
html_url: https://github.com/NixOS/nixpkgs/pull/21789
updated_at: 2017-01-10 22:18:45
body:
  ###### Motivation for this change
  new mpv version; mpv now requires at least Ffmpeg-3.2.2. Added ffmpeg-3.2.2 to satisfy this requirement.

  for all changes see: [mpv-release-0.23.0](https://github.com/mpv-player/mpv/releases/tag/v0.23.0)

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Riemann executable doesn't work
user_login: chris-martin
html_url: https://github.com/NixOS/nixpkgs/issues/21790
updated_at: 2017-01-25 21:00:32
body:
  I think #20821 was closed prematurely; 7bcc6e9c45afd9a7f69caa2ad6e75fb0051eab41 added the riemann run script, but it seems to need a wrapper to provide `java`, among other things.

  ```
  $ nix-shell -p riemann --run riemann --pure
  /nix/store/2l3ickwgfp8521b5npkfq2468rd8f02z-riemann-0.2.9/bin/riemann: line 50: exec: java: not found
  $ nix-shell -p riemann -p jre --run riemann --pure
  Error: Could not find or load main class riemann.bin
  ```


state: closed
title: cairo related fixes
user_login: LnL7
html_url: https://github.com/NixOS/nixpkgs/pull/21791
updated_at: 2017-01-10 23:45:16
body:
  ###### Motivation for this change

  This fixes a bunch of issues caused by https://github.com/NixOS/nixpkgs/commit/ab0bb24973269a51aa0a58a1de4199d8b2eb04d8.
  It's not ideal, but I think this is reasonable since not everything seems to depend on the propagation of `ApplicationServices`.

  http://hydra.nixos.org/eval/1321372

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] macOS
     - [x] No Changes
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: zsh-autosuggestions: init at 0.3.3
user_login: yacinehmito
html_url: https://github.com/NixOS/nixpkgs/pull/21792
updated_at: 2017-01-11 13:28:41
body:
  ###### Motivation for this change

  PR #19179 added zsh-syntax-highlighting. I needed zsh-autosuggestions, which is a plugin often paired with it as they both provide a fish-like experience.

  ###### Things done

  Added the zsh-autosuggestions package.
  Added also a related `programs.zsh.enableAutosuggestions` option, as advised in #19179

  @loskutov, I left you as a maintainer given your work on packaging zsh-syntax-highlighting.
  Let me know if it's ok for you or if you want me to change that.

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: how should a persistent folder for a package be created?
user_login: nhooyr
html_url: https://github.com/NixOS/nixpkgs/issues/21793
updated_at: 2017-01-11 23:24:10
body:
  ## Issue description

  If I have a server (this server has a nix package) that allows users to upload files, where should I be storing these files? somewhere in /var/lib/myserver? and should the server be responsible for creating this folder or should the package create it?


state: closed
title: atlas: change platforms to unix
user_login: acowley
html_url: https://github.com/NixOS/nixpkgs/pull/21794
updated_at: 2017-01-11 02:04:59
body:
  The build succeeds on darwin and linux.

  ###### Motivation for this change


  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: geary: 0.11.2 -> 0.11.3
user_login: jonafato
html_url: https://github.com/NixOS/nixpkgs/pull/21795
updated_at: 2017-01-11 03:05:58
body:
  ###### Motivation for this change

  `0.11.3` is the most recent release of Geary.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: hplipWithPlugin: hp-setup and hp-plugin broken
user_login: listx
html_url: https://github.com/NixOS/nixpkgs/issues/21796
updated_at: 2018-03-14 01:48:45
body:
  ## Issue description

  Following https://nixos.org/wiki/Printers, I put 

      services.printing = {
        enable = true;
        drivers = [ pkgs.hplipWithPlugin ];
      };

  in my configuration.nix. (My printer is not supported by Gutenprint and I must use the proprietary plugin). After a `sudo nixos-rebuild switch`, I first did `hp-setup`, which gave me this:

  ```
   > hp-setup                 

  HP Linux Imaging and Printing System (ver. 3.16.5)
  Printer/Fax Setup Utility ver. 9.0

  Copyright (c) 2001-15 HP Development Company, LP
  This software comes with ABSOLUTELY NO WARRANTY.
  This is free software, and you are welcome to distribute it
  under certain conditions. See COPYING file for more details.

  Found device: hp:/net/HP_LaserJet_Pro_MFP_M125nw?ip=192.168.0.2

  HP Linux Imaging and Printing System (ver. 3.16.5)
  Plugin Download and Install Utility ver. 2.1

  Copyright (c) 2001-15 HP Development Company, LP
  This software comes with ABSOLUTELY NO WARRANTY.
  This is free software, and you are welcome to distribute it
  under certain conditions. See COPYING file for more details.


  HP Linux Imaging and Printing System (ver. 3.16.5)
  Plugin Download and Install Utility ver. 2.1

  Copyright (c) 2001-15 HP Development Company, LP
  This software comes with ABSOLUTELY NO WARRANTY.
  This is free software, and you are welcome to distribute it
  under certain conditions. See COPYING file for more details.

  Checking for network connection...                                                                                                                                                Downloading plug-in from: 
  sh: lsb_release: command not found
  warning:  distro is not found in AUTH_TYPES                                                                                                                                    Receiving digital keys: /home/l/.nix-profile/bin/gpg --homedir /home/l/.hplip/.gnupg --no-permission-warning --keyserver pgp.mit.edu --recv-keys 0x4ABA2F66DBD5A95894910E0673D770CDA59047B9                                                                                                                                                                             Creating directory plugin_tmp
  Verifying archive integrity... All good.
  Uncompressing HPLIP 3.16.5 Plugin Self Extracting Archive................................................
  /home/l/.hplip/hplip-3.16.5-plugin.run: ./hplip-plugin-install: /bin/bash: bad interpreter: No such file or directory
  error: Python gobject/dbus may be not installed                                                                                                                                   error: Plug-in install failed.

  Done.
  error:  The device you are trying to setup requires a binary plug-in. Some functionalities may not work as expected without plug-ins.  Please run 'hp-plugin' as normal user to install plug-ins.   Visit  http://hplipopensource.com  for more infomation. 

  Done.
  ```

  I then tried running just `hp-plugin`, which fails like this:

  ```
   > hp-plugin

  HP Linux Imaging and Printing System (ver. 3.16.5)
  Plugin Download and Install Utility ver. 2.1

  Copyright (c) 2001-15 HP Development Company, LP
  This software comes with ABSOLUTELY NO WARRANTY.
  This is free software, and you are welcome to distribute it
  under certain conditions. See COPYING file for more details.


  HP Linux Imaging and Printing System (ver. 3.16.5)
  Plugin Download and Install Utility ver. 2.1

  Copyright (c) 2001-15 HP Development Company, LP
  This software comes with ABSOLUTELY NO WARRANTY.
  This is free software, and you are welcome to distribute it
  under certain conditions. See COPYING file for more details.

  Checking for network connection...                                                                                                                                                Downloading plug-in from: 
  sh: lsb_release: command not found
  warning:  distro is not found in AUTH_TYPES                                                                                                                                    Receiving digital keys: /home/l/.nix-profile/bin/gpg --homedir /home/l/.hplip/.gnupg --no-permission-warning --keyserver pgp.mit.edu --recv-keys 0x4ABA2F66DBD5A95894910E0673D770CDA59047B9                                                                                                                                                                             Creating directory plugin_tmp
  Verifying archive integrity... All good.
  Uncompressing HPLIP 3.16.5 Plugin Self Extracting Archive................................................
  /home/l/.hplip/hplip-3.16.5-plugin.run: ./hplip-plugin-install: /bin/bash: bad interpreter: No such file or directory
  error: Python gobject/dbus may be not installed                                                                                                                                   error: Plug-in install failed.

  Done.
  ```

  ### Steps to reproduce

  Install the `hplipWithPlugin` package (either with `nix-env -iA` or by editing configuration.nix as described above).
  Run `hp-plugin`.

  ## Technical details

  * System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)

  16.09.1445.e9a8853 (Flounder)

  * Nix version: (run `nix-env --version`)

  nix-env (Nix) 1.11.4

  * Nixpkgs version: (run `nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion`)

  "16.09.1445.e9a8853"


state: closed
title: Broadcom based Bluetooth does not work on Dell XPS 15 9550
user_login: spy-tech
html_url: https://github.com/NixOS/nixpkgs/issues/21797
updated_at: 2017-05-04 21:33:06
body:
  ## Issue description
  The manual solution for Ubuntu here should be adapted and automated such that it runs out of the box: http://askubuntu.com/questions/632336/bluetooth-broadcom-43142-isnt-working-on-ubuntu

  ```
  # dmesg
  [  947.674489] Bluetooth: hci0: BCM: chip id 102
  [  947.690495] Bluetooth: hci0: BCM20703A1
  [  947.691487] Bluetooth: hci0: BCM (001.001.005) build 0000
  [  947.691533] bluetooth hci0: Direct firmware load for brcm/BCM-0a5c-6410.hcd failed with error -2
  [  947.691534] Bluetooth: hci0: BCM: Patch brcm/BCM-0a5c-6410.hcd not found
  ```


  ### Steps to reproduce
  See URL above

  ## Technical details
  16.09


state: closed
title: auctex: 11.89 -> 11.90
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/21798
updated_at: 2017-01-11 12:38:12
body:
  See http://lists.gnu.org/archive/html/info-gnu/2017-01/msg00003.html
  for release announcement

  ###### Motivation for this change


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: update rustBeta and rustNightly
user_login: exi
html_url: https://github.com/NixOS/nixpkgs/pull/21800
updated_at: 2017-01-11 10:50:42
body:
  ###### Motivation for this change
  rustBeta is out of date, cargo as well. Nightly fails to build currently.

  As the rust code has changed quite a lot recently, i needed to add more workaround to make it compile.
  Those should be merged up to rustc.nix once stable hits those issues.

  @Ericson2314 


state: closed
title: add alacritty
user_login: exi
html_url: https://github.com/NixOS/nixpkgs/pull/21801
updated_at: 2017-07-17 22:31:26
body:
  ###### Motivation for this change
  Add alacritty.

  This package will only build once https://github.com/NixOS/nixpkgs/pull/21800 is merged


state: closed
title: latex2html: init at 2016
user_login: yurrriq
html_url: https://github.com/NixOS/nixpkgs/pull/21802
updated_at: 2017-03-13 08:20:10
body:
  ###### Motivation for this change
   
  Add [latex2html](https://www.ctan.org/pkg/latex2html).

  ###### Things done

  - [ ] Tested using sandboxing ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS, or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file) on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Vulnerability Roundup 17
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/issues/21803
updated_at: 2017-01-18 12:27:26
body:
  Here are all the vulnerabilities from https://lwn.net/Vulnerabilities
  since our [last roundup](https://github.com/NixOS/nixpkgs/issues/21642).

  cc: @7c6f434c @FRidh @fpletz @vcunat.

  _Note:_ The list of people CC'd on this issue participated in the last
  roundup. If you participate on this roundup, I'll cc you on the next
  one. If you don't participate in the next one, you won't be CC'd on
  the one after that. If you would like to be CC'd on the next roundup,
  add a comment to the most recent vulnerability roundup.

  Permanent CC's: @joepie91, @phanimahesh, @the-kenny,
  @NixOS/security-notifications
  If you would like to be CC'd on _all_ roundups (or removed from the
  list), open a PR editing
  https://github.com/NixOS/security/blob/master/lwnvulns/src/bin/instructions.md.

  ## Notes on the list
  1. The reports have been roughly grouped by the package name. This
     isn't perfect, but is intended to help identify if a whole group
     of reports is resolved already.
  2. Some issues will be duplicated, because it affects multiple
     packages. For example, there are sometimes problems that impact
     thunderbird, and firefox. LWN might report in one vulnerability
     "thunderbird firefox". These names have been split to make sure
     both packages get addressed.
  3. By each issue is a link to code search for the package name, and
     a Github search by filename. These are to help, but may not return
     results when we do in fact package the software. If a search
     doesn't turn up, please try altering the search criteria or
     looking in nixpkgs manually before asserting we don't have it.
  4. This issue is created by https://github.com/NixOS/security

  # Instructions:

  1. Triage a report: If we don't have the software or our version isn't
     vulnerable, tick the box or add a comment with the report number,
     stating it isn't vulnerable.
  2. Fix the issue: If we do have the software and it is vulnerable,
     either leave a comment on this issue saying so, even open a pull
     request with the fix. If you open a PR, make sure to tag this
     issue so we can coordinate.
  3. When an entire section is completed, move the section to the
     "Triaged and Resolved Issues" `details` block below.



  ## Upon Completion ...
   - [x] Be sure graham applied the jasper patch
   - [x] Run the issue through `reformat` one last time
   - [x] Review commits since last roundup for backport candidates
   - [x] Send an update e-mail to nix-security-announce@googlegroups.com
   - [x] Update the database at https://github.com/NixOS/security

  Without further ado...

  ### Assorted (22 issues)
   - [x] [`#710900`](https://lwn.net/Vulnerabilities/710900/) ([search](http://search.nix.gsc.io/?q=kopete&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kopete+in%3Apath&type=Code))  kopete: encryption botch
   - [x] [`#711187`](https://lwn.net/Vulnerabilities/711187/) ([search](http://search.nix.gsc.io/?q=nvidia304&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nvidia304+in%3Apath&type=Code))  nvidia304, nvidia340: denial of service
   - [x] [`#710896`](https://lwn.net/Vulnerabilities/710896/) ([search](http://search.nix.gsc.io/?q=flac&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=flac+in%3Apath&type=Code))  flac: three vulnerabilities
   - [x] [`#711047`](https://lwn.net/Vulnerabilities/711047/) ([search](http://search.nix.gsc.io/?q=icoutils&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=icoutils+in%3Apath&type=Code))  icoutils: code execution
   - [x] [`#711186`](https://lwn.net/Vulnerabilities/711186/) ([search](http://search.nix.gsc.io/?q=libtiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtiff+in%3Apath&type=Code))  libtiff: XML External Entity (XXE) attacks
   - [x] [`#710627`](https://lwn.net/Vulnerabilities/710627/) ([search](http://search.nix.gsc.io/?q=libvncserver&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libvncserver+in%3Apath&type=Code))  libvncserver: two vulnerabilities
   - [x] [`#711187`](https://lwn.net/Vulnerabilities/711187/) ([search](http://search.nix.gsc.io/?q=nvidia340&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nvidia340+in%3Apath&type=Code))  nvidia304, nvidia340: denial of service
   - [x] [`#711050`](https://lwn.net/Vulnerabilities/711050/) ([search](http://search.nix.gsc.io/?q=sway&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=sway+in%3Apath&type=Code))  sway: unspecified
   - [x] [`#710628`](https://lwn.net/Vulnerabilities/710628/) ([search](http://search.nix.gsc.io/?q=borgbackup&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=borgbackup+in%3Apath&type=Code))  borgbackup: two vulnerabilities
   - [x] [`#709985`](https://lwn.net/Vulnerabilities/709985/) ([search](http://search.nix.gsc.io/?q=dovecot&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dovecot+in%3Apath&type=Code))  dovecot: denial of service
   - [x] [`#652799`](https://lwn.net/Vulnerabilities/652799/) ([search](http://search.nix.gsc.io/?q=hplip&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=hplip+in%3Apath&type=Code))  hplip: man-in-the-middle attack
   - [x] [`#711189`](https://lwn.net/Vulnerabilities/711189/) ([search](http://search.nix.gsc.io/?q=irssi&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=irssi+in%3Apath&type=Code))  irssi: multiple vulnerabilities
   - [x] [`#711059`](https://lwn.net/Vulnerabilities/711059/) ([search](http://search.nix.gsc.io/?q=jasper&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jasper+in%3Apath&type=Code))  jasper: three vulnerabilities
   - [x] [`#710626`](https://lwn.net/Vulnerabilities/710626/) ([search](http://search.nix.gsc.io/?q=pcsclite&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pcsclite+in%3Apath&type=Code))  pcsclite: privilege escalation
   - [x] [`#711049`](https://lwn.net/Vulnerabilities/711049/) ([search](http://search.nix.gsc.io/?q=php-swiftmailer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-swiftmailer+in%3Apath&type=Code))  php-swiftmailer: code execution
   - [x] [`#711051`](https://lwn.net/Vulnerabilities/711051/) ([search](http://search.nix.gsc.io/?q=php7&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php7+in%3Apath&type=Code))  php7: denial of service
   - [x] [`#710895`](https://lwn.net/Vulnerabilities/710895/) ([search](http://search.nix.gsc.io/?q=puppet-tripleo&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=puppet-tripleo+in%3Apath&type=Code))  puppet-tripleo: access restriction bypass
   - [x] [`#711055`](https://lwn.net/Vulnerabilities/711055/) ([search](http://search.nix.gsc.io/?q=syncthing&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=syncthing+in%3Apath&type=Code))  syncthing: two vulnerabilities
   - [x] [`#711055`](https://lwn.net/Vulnerabilities/711055/) ([search](http://search.nix.gsc.io/?q=syncthing-gtk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=syncthing-gtk+in%3Apath&type=Code))  syncthing: two vulnerabilities
   - [x] [`#710898`](https://lwn.net/Vulnerabilities/710898/) ([search](http://search.nix.gsc.io/?q=tinymce&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tinymce+in%3Apath&type=Code))  tinymce: cross-site scripting
   - [x] [`#711048`](https://lwn.net/Vulnerabilities/711048/) ([search](http://search.nix.gsc.io/?q=tomcat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tomcat+in%3Apath&type=Code))  tomcat: information disclosure
   - [x] [`#710899`](https://lwn.net/Vulnerabilities/710899/) ([search](http://search.nix.gsc.io/?q=unrtf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=unrtf+in%3Apath&type=Code))  unrtf: code execution
   - [ ] [`#710286`](https://lwn.net/Vulnerabilities/710286/) ([search](http://search.nix.gsc.io/?q=openjpeg2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openjpeg2+in%3Apath&type=Code))  openjpeg2: multiple vulnerabilities


state: closed
title: rust: make rust beta and nightly be build by hydra
user_login: exi
html_url: https://github.com/NixOS/nixpkgs/pull/21804
updated_at: 2017-01-12 12:33:26
body:
  ###### Motivation for this change
  Building rust nightly requires rustBeta.
  Both of which take 1.5 hours to compile.
  This includes them into hydra builds so we don't waste peoples time too much.


state: closed
title: ding: 1.8 -> 1.8.1
user_login: exi
html_url: https://github.com/NixOS/nixpkgs/pull/21805
updated_at: 2017-01-11 14:36:15
body:
  ###### Motivation for this change
  The actual tar did not change for some reason, but the version did
  change.
  Also make the install a bit more verbose.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: liberation-fonts: broken hinting in 2.00 ?
user_login: volth
html_url: https://github.com/NixOS/nixpkgs/issues/21806
updated_at: 2017-07-28 15:11:39
body:
  ## Issue description

  With antialiasing turned off liberation fonts 2.00.1 (default in nixos) look weird, some lines have double width:

  ![screenshot_2017-01-11_13-28-39](https://cloud.githubusercontent.com/assets/508305/21851795/919b607c-d808-11e6-9bc6-32d017bf3cb2.png)
  ![screenshot_2017-01-11_13-48-59](https://cloud.githubusercontent.com/assets/508305/21851798/92b34b82-d808-11e6-941e-0e4769679d79.png)
  ![screenshot_2017-01-11_13-49-14](https://cloud.githubusercontent.com/assets/508305/21851800/948cd798-d808-11e6-9658-bc92a98dffb0.png)

  liberation fonts 1.07.4 (default in Ubuntu, even in Ubuntu 17.04) do not have the problem

  ![screenshot_2017-01-11_13-50-30](https://cloud.githubusercontent.com/assets/508305/21851802/9645ae7a-d808-11e6-8a60-dfbd1881be75.png)
  ![screenshot_2017-01-11_13-51-11](https://cloud.githubusercontent.com/assets/508305/21851804/97abf238-d808-11e6-92cd-feec18b59ce0.png)
  ![screenshot_2017-01-11_13-51-35](https://cloud.githubusercontent.com/assets/508305/21851807/99116612-d808-11e6-8518-140fc224b2a6.png)

  Wasn't it too early to upgrade to 2.00 ?

  ### Steps to reproduce

  1. turn antialiasing off in desktop manager setting
  2. ```pango-view   --font='Liberation Serif 12' --markup   --text 'abcdefghijklmnopqrstuvwxuzABCDEFGHIJKLMNOPQRSTUVWXUZ'```
  3. ```pango-view   --font='Liberation Sans 12' --markup   --text 'abcdefghijklmnopqrstuvwxuzABCDEFGHIJKLMNOPQRSTUVWXUZ'```
  4. ```pango-view   --font='Liberation Mono 12' --markup   --text 'abcdefghijklmnopqrstuvwxuzABCDEFGHIJKLMNOPQRSTUVWXUZ'```


  ## Technical details

  * System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)
  17.03.git.d2d7740 (Gorilla)
  * Nix version: (run `nix-env --version`)
  nix-env (Nix) 1.11.5  
  * Nixpkgs version: (run `nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion`)
  "17.03.git.d2d7740f1bM"


state: closed
title: sway: 0.9 -> 0.11
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/21808
updated_at: 2017-02-21 23:26:30
body:
  ###### Motivation for this change

  Requires cap_sys_ptrace in the latest release which requires https://github.com/NixOS/nixpkgs/pull/16654 to be merged. 

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: sbot: init at 9d686ee70c6b2073da626fa08e38a8e988b5c5b4
user_login: matthiasbeyer
html_url: https://github.com/NixOS/nixpkgs/pull/21809
updated_at: 2019-02-27 15:44:12
body:
  ###### Motivation for this change

  Package `sbot`

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  I need help here. That's actually the first application from the node-js ecosystem I'm trying to package.


state: closed
title: flashplayer: 24.0.0.186 -> 24.0.0.194
user_login: volth
html_url: https://github.com/NixOS/nixpkgs/pull/21810
updated_at: 2017-07-28 15:12:02
body:
  ###### Motivation for this change

  https://github.com/NixOS/nixpkgs/commit/ce11097b712c9415952a5bd6fce6184c7b923c20 missed one file  with old vulnerable flash version


state: closed
title: terraform: 0.8.2 -> 0.8.4
user_login: elasticdog
html_url: https://github.com/NixOS/nixpkgs/pull/21812
updated_at: 2017-01-12 06:29:18
body:
  ###### Motivation for this change

  Bump to the latest upstream release version.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [x] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: cjdns module doesnt support multiple networks
user_login: tohl
html_url: https://github.com/NixOS/nixpkgs/issues/21813
updated_at: 2017-01-26 00:16:16
body:
  ## Issue description

  At the moment, there can be one cjdns network only.  It would be nice, if one could configure many independent cjdns networks.

  Now:
  ```
  services.cjdns = {
     enable = true;
     ...
  }
  ```
  Multiple networks:
  ```
  services.cjdns.networks = {
     home = {
        enable = true;
        ...
     };
     hyperboria = {
        enable = true;
        ...
     };
     test = {
        enable = true;
        ...
     };
  }
  ````


state: closed
title: Fix zshrc ordering
user_login: yacinehmito
html_url: https://github.com/NixOS/nixpkgs/pull/21814
updated_at: 2017-01-12 00:01:07
body:
  Options in `programs.zsh` as set before loading the configuration, as opposed to after.

  ###### Motivation for this change

  I've just been bitten by this. I was attempting to load some completion script in `interactiveShellInit` but it silently failed because completion was being activated *after*.
  I believe my change to be more sensible ; NixOS does his magic, and then it's up to the user to add his stuff if he wished to.

  ###### Things done

  See diff.

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: irony-server: init at 'same-version-as-irony-of-chosen-elpa`
user_login: deepfire
html_url: https://github.com/NixOS/nixpkgs/pull/21815
updated_at: 2017-01-21 00:55:23
body:
  ###### Motivation for this change
  Add the `irony-server` package, piggybacking on the autogenerated `irony` package from emacsPackagesNg.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: linux: Remove 4.8
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/21816
updated_at: 2017-01-24 08:47:53
body:
  ###### Motivation for this change
  The 4.8.x kernel series has been EOL'd, we should get rid of it before we close in on the next release.


state: closed
title: atom: 1.12.9 -> 1.13.0
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/21817
updated_at: 2017-01-12 01:21:27
body:
  ###### Motivation for this change
  Update

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: isabelle: 2016 -> 2016-1
user_login: AtnNn
html_url: https://github.com/NixOS/nixpkgs/pull/21819
updated_at: 2017-01-13 20:58:58
body:
  Update to newest version and fix #17659

  - [x] Tested using sandboxing
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: nix-shell --pure: non-POSIX locales do not work (by default)
user_login: trofi
html_url: https://github.com/NixOS/nixpkgs/issues/21820
updated_at: 2019-03-30 21:42:10
body:
  ## TL;DR: glibcLocales seems to be required for many packages on nix to make localisation work at all

  How to add them the nix way?

  ## Issue description

  Many nixpkgs lack glibcLocales dependency and as a result are subtly broken
  in non-POSIX locale support. It looks like NixOS itself somehow avoids it but
  not in sandbox (and not in nix on other OSes).

  ### Steps to reproduce

  I am happy user of ru_RU locale. Let's see how it should work first (nixos):

  ```
  # good
  $ LANG=ru_RU.UTF-8 date
  Чт янв 12 01:28:17 +03 2017
  ```

  Now how to break it in sandbox:

  ```
  # bad
  [sf@nixos:~]$ nix-shell --pure -p coreutils
  [nix-shell:~]$ LANG=ru_RU.UTF-8 date
  Thu Jan 12 01:31:22 +03 2017
  ```

  And fix back:

  ```
  # good again
  [sf@nixos:~]$ nix-shell --pure -p coreutils -p glibcLocales
  [nix-shell:~]$ LANG=ru_RU.UTF-8 date
  Чт янв 12 01:32:11 +03 2017
  ```

  The problem happens in other packages and tools: glibc, mc
  ```
  # glibc's own 'locale -a' binary does not see any locales except C and POSIX onless glibcLocales is loaded.
  [sf@nixos:~]$ nix-shell --pure -p glibc --command 'locale -a | wc -l'
  2
  ```

  Similar problem happens in nix installed on Gentoo where I did not find away
  to teach 'date' how russian locale at all:

  ```
  sf@siarheit-glaptop ~/git/nixpkgs $ LANG=ru_RU.UTF-8 date
  Thu Jan 12 01:37:32 +03 2017
  ```

  Nothing helps. Most desperate attempt was:
  ```
  $ nix-env -iA nixpkgs.coreutils nixpkgs.glibcLocales

  replacing old ‘coreutils-8.26’
  installing ‘coreutils-8.26’
  installing ‘glibc-locales-2.24’
  building path(s) ‘/nix/store/83c0mlhpml6jbwhbllx85m6lys773y15-user-environment’
  created 898 symlinks in user environment
  sf@siarheit-glaptop ~/git/nixpkgs $ LANG=ru_RU.UTF-8 date
  Thu Jan 12 01:44:04 +03 2017
  ```

  I roughly understand why it does not work. My real question is: how to make most tools to see locales?
  AFAIU the proper way is to add (optional?) glibcLocales dependency into all the packages:
  glibc (for locale), coreutils (for date), mc (for charset collation so editor would be able to work with non-ascii).

  ## Technical details

  * System: NixOS or Gentoo + nixpkgs 
  * Nix version: nix-env (Nix) 1.11.5
  * Nixpkgs version: "17.03pre98686.f88e2fb"

  Thanks!


state: closed
title: tdesktop: 0.10.19 -> 1.0.0
user_login: loskutov
html_url: https://github.com/NixOS/nixpkgs/pull/21821
updated_at: 2017-01-12 12:28:39
body:
  ###### Motivation for this change
  Update tdesktop to the stable 1.0.0 version

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: coq_HEAD: Update to the latest commit
user_login: rht
html_url: https://github.com/NixOS/nixpkgs/pull/21822
updated_at: 2017-04-30 10:49:21
body:
  ###### Motivation for this change
  Testing an automatically generated nix file update, through https://github.com/rht/nixpkg-git-fetch-head/blob/master/nixpkg-git-fetch-head.sh.
  With tiny modification (e.g. replace the ls-remote HEAD tag with release tags), this could be used for other packages that mainly use `fetchgit`.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [x] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: dropbox: 16.4.30 -> 17.4.33
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/21824
updated_at: 2017-01-12 12:30:12
body:
  ###### Motivation for this change

  Dropbox on NixOS is a royal pain in the rear due to:

  1. Forced upgrades where anything but the latest version will simply stop working
  2. No changelog when new versions are released

  This user hostile approach by Dropbox means that dropbox stops working on NixOS from the time a new version is released and until the nixpkgs repository is updated.

  There are several free and open source self-hosted alternatives to the Dropbox service. Please consider using one (or more) of these instead:

   - [Librevault](https://librevault.com)
   - [Nextcloud](https://nextcloud.com)
   - [ownCloud](https://owncloud.org)
   - [Syncthing](https://syncthing.net)

  Note: This is not in any way an endorsement of any of the projects mentioned above.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: dropbox: 16.4.30 -> 17.4.33
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/21825
updated_at: 2017-01-12 12:29:41
body:
  ###### Motivation for this change

  Dropbox on NixOS is a royal pain in the rear due to:

  1. Forced upgrades where anything but the latest version will simply stop working
  2. No changelog when new versions are released

  This user hostile approach by Dropbox means that dropbox stops working on NixOS from the time a new version is released and until the nixpkgs repository is updated.

  There are several free and open source self-hosted alternatives to the Dropbox service. Please consider using one (or more) of these instead:

   - [Librevault](https://librevault.com)
   - [Nextcloud](https://nextcloud.com)
   - [ownCloud](https://owncloud.org)
   - [Syncthing](https://syncthing.net)

  Note: This is not in any way an endorsement of any of the projects mentioned above.


  ###### Things done

  Only tested on ```nixos-unstable```.

  ---


state: closed
title: udev service: verify that hwdb is generated without errors
user_login: abbradar
html_url: https://github.com/NixOS/nixpkgs/pull/21828
updated_at: 2017-01-15 16:53:54
body:
  ###### Motivation for this change

  Catch errors in hwdb generation.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: [wip] Add pyobjc to nixpkgs
user_login: matthewbauer
html_url: https://github.com/NixOS/nixpkgs/pull/21829
updated_at: 2017-05-16 18:07:08
body:
  ###### Motivation for this change

  This adds the "pyobjc" python module to nixpkgs. It is only available for OS X, however. Some of the frameworks failed with 10.9 SDK, so they have been disabled.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: GRUB install failure on recent master
user_login: deepfire
html_url: https://github.com/NixOS/nixpkgs/issues/21830
updated_at: 2017-01-26 23:05:25
body:
  ## Issue description
  A `nixos-rebuild switch` ends with the following:
  ```
  building path(s) ‘/nix/store/1vwmbbk863daaph4s3j3yi0mappxk19k-nixos-system-andromedae-17.03.git
  .6e2d15c’
  updating GRUB 2 menu...
  installing the GRUB 2 boot loader on /dev/sda...
  Installing for i386-pc platform.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x14866f0] dtree
   [0x14867d0] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x1486930] dtree
   [0x148bd50] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x1486930] dtree
   [0x148bd50] dtree
  Internal error: Unreleased memory pool(s) found.
  You have a memory leak (not released memory pool):
   [0x1486930] dtree
   [0x148bd50] dtree
  Internal error: Unreleased memory pool(s) found.
  /nix/store/1wgbs2w2qq4zr7rl57lll605lj35wshm-grub-2.x-2015-11-16/sbin/grub-install: error: attempt to install to encrypted disk without cryptodisk enabled. Set `GRUB_ENABLE_CRYPTODISK=y' in file `/nix/store/1wgbs2w2qq4zr7rl57lll605lj35wshm-grub-2.x-2015-11-16/etc/default/grub'.
  /nix/store/n6f6r34ni21zyj4xddw72bci4klk81j8-install-grub.pl: installation of GRUB on /dev/sda failed
  warning: error(s) occurred while switching to the new configuration
  ```
  ### Steps to reproduce
  1. nixpkgs commit `4488203d0c01671ef2b73e858c316865953bb3c0`
  2. nixos-rebuild switch

  ## Technical details

  * System: NixOS: 17.03.git.4488203
  * Nix version:nix-env (Nix) 1.11.4
  * Nixpkgs version: 17.03.git.4488203d0c


state: closed
title: Update python channels
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/21831
updated_at: 2017-01-13 10:44:05
body:
  ###### Motivation for this change


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: systemd-boot module does not allow custom configuration
user_login: lheckemann
html_url: https://github.com/NixOS/nixpkgs/issues/21832
updated_at: 2017-01-22 00:33:52
body:
  (as far as I can tell) it is not possible to set options like `editor` which is fairly important from a security perspective. I intend to have a go at fixing this myself (if it isn't already fixed in master) later so this is mostly a note to myself and pointing the issue out.

  On version 16.09.1389.d7a3160


state: closed
title: Chromium WideVine plugin fails to fetch Chrome Dependency
user_login: ixxie
html_url: https://github.com/NixOS/nixpkgs/issues/21833
updated_at: 2017-07-28 14:59:32
body:
  ## Issue description

  Rebuilding chromium with the WideVine plugin fails to build due to missing chrome dependency:
                                                            
      curl: (22) The requested URL returned error: 404
      error: cannot download google-chrome-stable_54.0.2840.90-1_amd64.deb from any mirror 

  ### Steps to reproduce

  `nixos-rebuild` this:

      { config, pkgs, ... }: 
      
      {
          system.stateVersion = "16.09";
          environment.systemPackages = [ pkgs.chromium ];
          nixpkgs.config.chromium.enableWideVine = true;
      }


state: closed
title: attribute 'xorgserver' missing
user_login: lukego
html_url: https://github.com/NixOS/nixpkgs/issues/21834
updated_at: 2017-04-01 14:38:16
body:
  ## Issue description

  I am attempting to run a [NixOS desktop in the cloud](http://nixer.ghost.io/nixos-in-the-cloud/) but I hit an unexpected error.

  My config is:

  ```
        imports = [ <nixpkgs/nixos/modules/services/x11/terminal-server.nix> ];
        services.xserver.desktopManager.xfce.enable = true;
        services.xserver.desktopManager.default = "xfce";
  ```

  but I hit this error:

  ```
  while evaluating the option `systemd.services.terminal-server@.path':
  while evaluating ‘apply’ at /nix/store/q52dh3bxr8f93s39ayp8876if3dqwqvk-nixos-16.03.1346.2946482/nixos/nixpkgs/nixos/modules/system/boot/systemd-unit-options.nix:196:15, called from /nix/store/q52dh3bxr8f93s39ayp8876if3dqwqvk-nixos-16.03.1346.2946482/nixos/nixpkgs/lib/modules.nix:282:11:
  while evaluating ‘makeSearchPath’ at /nix/store/q52dh3bxr8f93s39ayp8876if3dqwqvk-nixos-16.03.1346.2946482/nixos/nixpkgs/lib/strings.nix:47:28, called from /nix/store/q52dh3bxr8f93s39ayp8876if3dqwqvk-nixos-16.03.1346.2946482/nixos/nixpkgs/nixos/modules/system/boot/systemd-unit-options.nix:196:22:
  while evaluating anonymous function at /nix/store/q52dh3bxr8f93s39ayp8876if3dqwqvk-nixos-16.03.1346.2946482/nixos/nixpkgs/lib/strings.nix:48:32, called from undefined position:
  attribute ‘xorgserver’ missing, at /nix/store/q52dh3bxr8f93s39ayp8876if3dqwqvk-nixos-16.03.1346.2946482/nixos/nixpkgs/nixos/modules/services/x11/terminal-server.nix:44:13
  error: unable to build all machine configurations
  ```

  ## Technical details

  Here are the details of the target system. However, I am getting the error in nixops on a different host.

  * System: 16.03.1346.2946482 (Emu)
  * Nix version: nix-env (Nix) 1.11.4
  * Nixpkgs version: "16.03.1346.2946482"

  Please let me know if I am supplying the wrong information for a multihost nixops deployment!


state: closed
title: miredo: do not run miredo-checkconf
user_login: volth
html_url: https://github.com/NixOS/nixpkgs/pull/21835
updated_at: 2017-01-12 23:25:30
body:
  ###### Motivation for this change

  Network is down when ```nixos-rebuild``` restarts ```miredo``` service.
  It results in ```miredo-checkconf``` failure.
  The failure to restart ```miredo``` aborts ```nixos-rebuild```.

  ```
  Jan 12 14:10:59 nixos miredo-checkconf[13432]: Invalid host name “teredo.remlab.net” at line 2: Temporary failure in name resolution
  Jan 12 14:10:59 nixos miredo-checkconf[13432]: Server address not specified
  Jan 12 14:10:59 nixos miredo-checkconf[13432]: Fatal configuration error
  ```


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ckb: init at 0.2.6
user_login: kierdavis
html_url: https://github.com/NixOS/nixpkgs/pull/21836
updated_at: 2017-01-13 20:44:22
body:
  ckb is a driver for Corsair keyboards/mice. It also contains a graphical tool for configuring their LED backlight settings.

  The driver is implemented as a userland daemon. A NixOS module is included that runs this as a systemd service.

  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: python docs: add an example for a virtualenv and pip through nix-shell
user_login: Azulinho
html_url: https://github.com/NixOS/nixpkgs/pull/21837
updated_at: 2017-09-21 04:05:44
body:
  ###### Motivation for this change

  To address:
  https://github.com/NixOS/nixpkgs/issues/66

  And to document what actually worked for me while dealing with different python projects that required a virtualenv and compilation of external dependencies.


  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: scala: fix versions and $PATH
user_login: volth
html_url: https://github.com/NixOS/nixpkgs/pull/21838
updated_at: 2017-01-12 18:43:15
body:
  ###### Motivation for this change

  1. ```pkgs.scala_2_11``` pointed to scala 2.12
  2. scala 2.11 was not in nixpkgs at all. there were 2.9, 2.10, 2.12
  3. bash scripts (such as ```scalac```) rely on ```coreutils```, ```gnugrep``` and environment variable ```JAVA_HOME``` 
  4. minor version updated from 2.10.5 to 2.10.6 in 2.10 branch 

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: i3blocks: search for config in correct system directory
user_login: kierdavis
html_url: https://github.com/NixOS/nixpkgs/pull/21839
updated_at: 2017-01-13 15:58:28
body:
  The `SYSCONFDIR` variable used in the Makefile servers two purposes:

  1) During buildPhase, it is hardcoded into the executable as one of
     the locations that will be searched for the `i3blocks.conf` config
     file. We want this set to `/etc`, so that `/etc/i3blocks.conf`
     will be automatically loaded if it exists, as specified in the
     manpage.

  2) During installPhase, it specifies the location that the sample
     `i3blocks.conf` should be installed to. We want this to be `$out/etc`.

  Case 2 was already handled correctly, but case 1 was not. This resulted
  in i3blocks instead searching for `i3blocks.conf` in the default value of
  `SYSCONFDIR`, which is `/usr/local/etc`, a directory which generally does
  not exist on NixOS. This commit remedies this problem by setting
  `SYSCONFDIR=/etc` during buildPhase.

  A minor stylistic fix (correcting a usage of `makeFlags` to `buildFlags`) has also been applied in this commit.

  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Improve documentation on how to generate NixOS ISO
user_login: ck3d
html_url: https://github.com/NixOS/nixpkgs/issues/21840
updated_at: 2017-12-23 14:44:25
body:
  ## Issue description
  Following steps in [NixOS Manual chapter 31.](http://nixos.org/nixos/manual/index.html#sec-building-cd) failes.

  ### Steps to reproduce
  #### Approach setting NIXOS_CONFIG in read-only nixos/
  ```
  $ export NIXOS_CONFIG=/etc/nixos/configuration.nix
  $ cd ~/.nix-defexpr/channels_root/nixos/nixos
  $ nix-build -A config.system.build.isoImage -I nixos-config=modules/installer/cd-dvd/installation-cd-minimal.nix
  error: attribute ‘isoImage’ in selection path ‘config.system.build.isoImage’ not found
  ```
  Analysis: nixos/default.nix includes via ./lib/from-env.nix NIXOS_CONFIG and not nixos-config.

  #### Approach without NIXOS_CONFIG in read-only nixos/

  ```
  $ cd ~/.nix-defexpr/channels_root/nixos/nixos
  $ nix-build -A config.system.build.isoImage -I nixos-config=modules/installer/cd-dvd/installation-cd-minimal.nix
  ...
  error: creating a garbage collector root (/nix/store/933gjnzyi22z4l0qbsnhvm7r7136g144-nixos-17.03pre98682.f673243/nixos/nixos/result) in the Nix store is forbidden (are you running nix-build inside the store?)
  ```
  It seems, that write access is needed in current working directory.

  #### Approach without NIXOS_CONFIG in writeable nixos/
  ```
  $ git clone --branch nixos-unstable https://github.com/NixOS/nixpkgs-channels.git nixpkgs
  $ cd nixpkgs/nixos
  $ nix-build -A config.system.build.isoImage -I nixos-config=modules/installer/cd-dvd/installation-cd-minimal.nix
  ...
  Making image hybrid...
  /nix/store/askpf8v8gmy14cwqayn0yx0h88zl8cyz-nixos-17.03.git.f673243-x86_64-linux.iso
  ```
  It created an image, but without my custom configuration.nix.

  ## Technical details

  * System: 17.03pre98682.f673243 (Gorilla)
  * Nix version: 1.11.5
  * Nixpkgs version: 17.03pre98682.f673243


state: closed
title: xournal: Support gtk with quartz or x11 backend
user_login: johbo
html_url: https://github.com/NixOS/nixpkgs/pull/21842
updated_at: 2017-01-13 10:38:57
body:
  ###### Motivation for this change

  Allows to use gtk2 with either quartz or x11 backend to build xournal on darwin.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: nix: Revert "nix: 1.11.4 -> 1.11.5"
user_login: Baughn
html_url: https://github.com/NixOS/nixpkgs/pull/21843
updated_at: 2017-01-12 23:12:26
body:
  ###### Motivation for this change

  There is a critical bug in 1.11.5, namely
  https://github.com/NixOS/nix/issues/1186; it breaks many uses of nix-shell.

  This reverts commit 0108c31e22ea9500c8f81da436e8756cefec83ed.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Do not trim trailing whitespace in patch files
user_login: johbo
html_url: https://github.com/NixOS/nixpkgs/pull/21844
updated_at: 2017-01-12 23:28:34
body:
  ###### Motivation for this change

  The automatic removal of trailing whitespace can cause trouble when working on a patch file. It can lead to hunks not being applied anymore.

  This change switches it off for files ending in `.diff` and `.patch`.


state: closed
title: Allow platform compatibility to be queried on packages
user_login: 3noch
html_url: https://github.com/NixOS/nixpkgs/issues/21845
updated_at: 2018-01-14 21:19:57
body:
  @cleverca22 pointed out:

  ```
  nix-repl> (import <nixpkgs> { system = "x86_64-darwin"; }).acl.meta
  error: Package ‘acl-2.2.52’ in ‘/nix/store/jk5dvrv6w9bcgh88g0x7clk19df3q28f-nixos-17.03pre96925.1c50bdd/nixos/pkgs/development/libraries/acl/default.nix:29’ is not supported on ‘x86_64-darwin’, refusing to evaluate.
  ```

  This is unfortunate because it would be extremely handy to have a function that, given a package, could tell me if it is compatible with a system (most often, my current system). With such a function we could safely make certain features/dependencies optional without having to manually duplicate platform compatibility information with the likes of `isDarwin`, `isLinux`, etc.


state: closed
title: nim: include all supporting tools
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/21846
updated_at: 2017-03-01 03:08:09
body:
  This PR makes a few changes to how things are done:

  a) build and install "koch" - the nim make-type tool
  b) use "koch" to bootstrap nim
  c) build additional supporting tools such as nimble, nimgrep and nimsuggest
  d) nim can use other c compilers than gcc, so instead of forcing gcc we use the one from stdenv
  e) run the full test suite

  We do not need the "nimble" package any longer as it is part of nim

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: yuicompressor: add bin wrapper for jar
user_login: league
html_url: https://github.com/NixOS/nixpkgs/pull/21848
updated_at: 2017-03-04 03:50:57
body:
  yuicompressor is a JavaScript and CSS minifier, distributed as a jar
  file. This change uses `makeWrapper` to create a corresponding bin
  script, adding `jre` as a dependency.

  ###### Motivation for this change

  I want to be able to call yuicompressor easily from a Makefile.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: rr: 4.3.0 -> 4.4.0
user_login: aneeshusa
html_url: https://github.com/NixOS/nixpkgs/pull/21849
updated_at: 2017-01-13 10:28:41
body:
  ###### Motivation for this change

  [New release](https://github.com/mozilla/rr/releases/tag/4.4.0) came out in October 2016.

  ###### Things done

  - [ ] Tested using sandboxing ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS, or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file) on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  cc maintainers @nbp @thoughtpolice 


state: closed
title: nixos/prometheus: add configText option for alertmanager
user_login: bjornfor
html_url: https://github.com/NixOS/nixpkgs/pull/21850
updated_at: 2017-01-14 14:41:25
body:
  ###### Motivation for this change

  The reason being less mental overhead when reading upstream
  documentation. Examples can be pasted right into the configuration
  instead of translating to Nix attrset first.


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: gnome-tweak-tool-3.22 does not start; confused dependencies.
user_login: dbeecham
html_url: https://github.com/NixOS/nixpkgs/issues/21851
updated_at: 2017-08-24 09:27:30
body:
  ## Issue description
  > gnome-tweak-tool
  Traceback (most recent call last):
    File "/nix/store/7a9v4hcky68cq3v02hd4fgyi66pyjlfd-gnome-tweak-tool-3.22.0/bin/.gnome-tweak-tool-wrapped", line 26, in <module>
      import gtweak
  ImportError: No module named 'gtweak'

  The gnome-tweak-tool script has this line:
  PYTHONPATH=/nix/store/7a9v4hcky68cq3v02hd4fgyi66pyjlfd-gnome-tweak-tool-3.22.0/lib/**python2.7**/site-packages:<other python 3 packages>
  and then it executes `.gnome-tweak-tool.wrapped` which uses python 3.
  The library 'gtweak' is in gnome-tweak-tool/lib/python3.5/site-packages.

  Not sure what is happening here; I think all of the paths should be python2? If I change gnome-tweak-tool/default.nix to use python3, the library loads, but crashes since the code is indeed not python3 (incorrect print statement). I see no python3 reference that I could change.

  The same issue exists in the latest git of nixpkgs (using nix-build $NIXPKGS -A gnome3.gnome-tweak-tool).

  ### Steps to reproduce
  I guess just install gnome-tweak-tool-3.22.0.

  ## Technical details

  * System: 
  Running nixos on nixos-unstable;
  > nixos-version
  17.03pre98682.f673243 (Gorilla)

  * Nix version: (run `nix-env --version`)
  > nix-env --version
  nix-env (Nix) 1.11.5

  * Nixpkgs version:
  > nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion
  "17.03pre98682.f673243"


state: closed
title: syncthing: remove runtime dependency on go
user_login: lheckemann
html_url: https://github.com/NixOS/nixpkgs/pull/21852
updated_at: 2017-03-06 17:25:21
body:
  The hack used here is shamelessly stolen from buildGoPackage. If it is
  going to be applied to more expressions, it may make sense to factor it
  out so it can be shared.

  ###### Motivation for this change
  #21397 

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: systemd-boot: allow setting editor security option
user_login: lheckemann
html_url: https://github.com/NixOS/nixpkgs/pull/21853
updated_at: 2017-04-16 10:00:55
body:
  ###### Motivation for this change
  Security. Currently anyone can easily gain root access on an unencrypted, powered off machine using systemd-boot from NixOS.
  See also #21832 

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  Note that I have NOT tested this yet!


state: closed
title: tensorflow: add 0.12.0
user_login: grwlf
html_url: https://github.com/NixOS/nixpkgs/pull/21854
updated_at: 2017-02-27 10:56:37
body:
  ###### Motivation for this change
  Bring popular machine learning framework up to date. Make it compatible with Python3 packages.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ed: 1.13 -> 1.14.1
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/21855
updated_at: 2017-01-15 17:46:06
body:
  This PR is against the `staging` branch.

  See http://lists.gnu.org/archive/html/info-gnu/2017-01/msg00004.html
  for full release announcement.

  ###### Motivation for this change


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Spotify: 1.0.45 -> 1.0.47
user_login: thall
html_url: https://github.com/NixOS/nixpkgs/pull/21856
updated_at: 2017-01-13 16:40:21
body:
  ###### Motivation for this change
   The resource for version 1.0.45 is deleted, resulting in build failure.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: i3blocks: specify supported platforms
user_login: ghost
html_url: https://github.com/NixOS/nixpkgs/pull/21858
updated_at: 2017-01-13 22:48:31
body:
  ###### Motivation for this change
  Not all platforms are support as discussed in #21839.

  Don't have Nix atm., but figured I would send the PR, as this would at least hinder install on non--known-supported platforms.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: GDM doesn't unlock the GNOME keyring
user_login: e-user
html_url: https://github.com/NixOS/nixpkgs/issues/21859
updated_at: 2019-04-14 13:52:18
body:
  ## Issue description

  GDM's PAM modules are currently built so that the password stack of the keyring PAM module get loaded *before* a password input module is loaded, which results in the keyring never being unlocked automatically.

  ### Steps to reproduce

  1. Log in with GDM
  2. Try to use an application that has its password stored in GNOME keyring
  3. It will ask you for the unlock password

  ## Technical details

  * System: 16.09.git.fd1dbe5 (Flounder)
  * Nix version: nix-env (Nix) 1.11.4
  * Nixpkgs version: 16.09.1465.fd1dbe5


state: closed
title: nixos/gdm: use provided PAM login configuration wherever possible
user_login: e-user
html_url: https://github.com/NixOS/nixpkgs/pull/21860
updated_at: 2019-05-13 11:53:31
body:
  Fixes #20608, fixes #21859

  ###### Motivation for this change

  GDM's PAM modules in NixOS are a mess. `pam.d/gdm` is never used (`gdm-password` is used for logging in) and instead of re-using what's provided by `pam.nix`, there are half-broken custom modules written bei `gdm.nix.`
  These changes substack/include the existing `login` PAM module akin to Fedora and fix two other issues mentioned above. Without this patch, SSSD authentication will also not work because only `pam_unix.so` is loaded.

  This probably needs more thorough testing, any help appreciated.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: firewall: Improve the comments (documentation)
user_login: primeos
html_url: https://github.com/NixOS/nixpkgs/pull/21862
updated_at: 2017-01-18 16:25:35
body:
  ###### Motivation for this change

  Mainly some improvements to the comments, refactoring of the "documentation" and minor fixes (code and typos):

  Optional: Some questions about the file formatting:
  - Are there some official conventions we use for nixpkgs?
  - This file uses two spaces between sentences. Why? (GNU/Emacs/19th Century (American) typist/typewriter convention)
  - This file seems to wrap lines at about 72 characters (instead of e.g. 80) - is that correct?.

  I'll make an issue (see #21974) to collect all my technical and controversial changes before opening PRs for them.


state: closed
title: google-talk-plugin: 5.41.0.0 -> 5.41.3.0
user_login: rycee
html_url: https://github.com/NixOS/nixpkgs/pull/21863
updated_at: 2017-01-14 00:16:09
body:
  ###### Motivation for this change

  To bump to the latest version.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: dovecot: Fix sieve scripts
user_login: pjones
html_url: https://github.com/NixOS/nixpkgs/pull/21864
updated_at: 2017-01-16 11:42:17
body:
  ###### Motivation for this change

  Make sure that the output of the sieve compiler produces files that
  have a newer time stamp than the source sieve script.  Otherwise you
  get errors in the logs about Dovecot not being able to compile do to a
  permission issue.

  This change is running in production via NixOps.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).



  ---


state: closed
title: solc: 0.4.6 -> 0.4.8
user_login: dbrock
html_url: https://github.com/NixOS/nixpkgs/pull/21865
updated_at: 2017-03-11 15:38:13
body:
  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: rmilter: Fix a couple of bugs
user_login: pjones
html_url: https://github.com/NixOS/nixpkgs/pull/21866
updated_at: 2017-03-20 19:50:56
body:
  ###### Motivation for this change

    * The module uses `stringSplit` but it should be `splitString`

    * `rmilter` doesn't actually support binding to multiple sockets.
      Therefore, bind to the last one specified if `socketActivation` is
      `false`.

  I also believe there is a bug in this module related to systemd
  `ListenStream`.  If `socketActivation` is true, Postfix gets
  connection timeouts trying to connect to one of the `ListenStream`
  inet addresses.  I don't know enough about `ListenStream` passing
  connections on to `fd:3` to understand what's going on.

  These changes are in production (with `socketActivation = false`) via NixOps.



  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: kubernetes-helm: 2.1.2 -> 2.1.3
user_login: rlupton20
html_url: https://github.com/NixOS/nixpkgs/pull/21867
updated_at: 2017-01-14 00:15:16
body:
  ###### Motivation for this change

  Update.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: selenium-server-standalone: restore htmlunit-driver support
user_login: hsenag
html_url: https://github.com/NixOS/nixpkgs/pull/21868
updated_at: 2017-01-16 09:37:30
body:
  It was moved to a separate project between versions 2.45 and 2.53:
  https://github.com/SeleniumHQ/selenium/commit/2d3150b

  ###### Motivation for this change

  This restores the previous behaviour of selenium-server-standalone, namely having the HtmlUnit driver available. They've been split into separate projects upstream, but it still makes sense for end users to have the whole package. selenium-server-standalone already depended on chromedriver in a similar way.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [X] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: gdm: init at 1.4
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/21870
updated_at: 2017-01-14 21:56:44
body:
  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: manul: init at 2016-09-30
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/21871
updated_at: 2017-01-14 21:57:31
body:
  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux

  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: strongswan: enable charon-systemd
user_login: basvandijk
html_url: https://github.com/NixOS/nixpkgs/pull/21872
updated_at: 2017-06-13 06:47:03
body:
  I have trouble getting my StrongSwan VPN to start reliably. My issue is described in detail on the StrongSwan mailing list:

  https://lists.strongswan.org/pipermail/users/2017-January/010359.html

  The proposed solution is to switch from the `charon` daemon and the `ipsec` tool to `charon-systemd` and the `swanctl` tool. This patch adds support for `charon-systemd` and makes sure that `swanctl` reads its configuration files from `/etc/swanctl` instead of from `$out/etc/swanctl` which is in the unmodifiable nix store. 

  I hope to add a subsequent patch with a corresponding NixOS module.

  Also see: https://wiki.strongswan.org/projects/strongswan/wiki/Charon-systemd

  It would be really ideal if this and the last two commits on `strongswan/default.nix` ( namely: https://github.com/NixOS/nixpkgs/commit/c38b4da9946b32267301ccf352731ed2d80cc2f6 and https://github.com/NixOS/nixpkgs/commit/9c61571f1a4119689d001bf1902869ca12f1c0b3) could be merged in `release-16.09`. 


state: closed
title: GHC as a test case for complications with cross-compiling
user_login: shlevy
html_url: https://github.com/NixOS/nixpkgs/issues/21874
updated_at: 2018-01-22 20:31:20
body:
  Since #21268 (or something like it) will hopefully be merged soon, I want to outline the ways in which GHC, as an example, violates the strict staging that PR wants.

  First, the GHC build includes support libraries for the target system. In principle, this could be kept with the desired staging with multiple outputs, and including the target libs in the next stage, but it will likely be complicated to do. This issue exists for gcc which has libstdc++, and llvm as it currently exists with compiler-rt etc. build at the same time as the compiler.

  Second, and harder to disentangle without upstream support for separating, the GHC build includes *binaries* intended to run on the target platform (in particular, `iserv`, whose whole purpose is to be able to run target code during compile time). Putting these in separate outputs won't be enough: They will also depend on target libs as inputs (e.g. `libiconv` in the `iserv` case).

  In principle, both of these could (and probably should) be separated out into different builds from the core compiler itself. But I write this up as a guide to keep in mind until upstreams are as principled as we are :smile: 

  cc @Ericson2314 


state: closed
title: Allow specifying interface for default gateway
user_login: abbradar
html_url: https://github.com/NixOS/nixpkgs/pull/21875
updated_at: 2017-05-24 10:46:28
body:
  ###### Motivation for this change

  This is needed for particular network configurations. For example, Hetzner provides me with /64 IPv6 network, but requires to set default gateway `fe80::1`. This won't work if I just set the address because Linux wouldn't know where should it send packets. Specifying the interface explicitly fixes that.

  To accomplish this, I turned `networking.defaultGateway{,6}` into a submodule with options `address` and `gateway`. To hold backwards compatibility I introduce new type `coercedTo coercedType coerceFunc finalType`. It allows one to specify either something of `finalType` (merged as is), or `coercedType` (would be converted to `finalType` during merge using `coerceFunc`). For example, option:

  ```
  foo = mkOption {
    type =
      let mySubmodule = {...}: {
        config = {
          value = mkOption {
            type = types.lines;
          };
        };
      };
      in types.coercedTo types.str (x: { value = x; }) (types.submodule mySubmodule);
  };
  ```

  `configuration-1.nix`:

  ```
  {
    foo = "value-1";
  }
  ```

  `configuration-2.nix`:

  ```
  {
    foo.value = "value2";
  }
  ```

  We'd get resulting `foo.value` containing both `"value1"` and `"value2"`.

  cc @nbp as the module system author -- this was my first encounter with it and I'm unsure if I've defined `coercedTo` correctly.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: caddy: add package config option
user_login: sheenobu
html_url: https://github.com/NixOS/nixpkgs/pull/21877
updated_at: 2017-01-14 08:28:35
body:
  ###### Motivation for this change

  Allow overriding the caddy service package. Allows users use more recent or custom builds of caddy with the service.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: haskellPackages.lentil: override dep versions
user_login: rvl
html_url: https://github.com/NixOS/nixpkgs/pull/21878
updated_at: 2017-01-15 20:05:01
body:
  ###### Motivation for this change

  Getting [lentil](http://www.ariis.it/static/articles/lentil/page.html) to build.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [X] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: Coq: minor refactoring
user_login: vbgl
html_url: https://github.com/NixOS/nixpkgs/pull/21879
updated_at: 2017-10-02 04:36:35
body:
  ###### Motivation for this change

  Remove some duplication and ease future maintenance.

  ###### Things done

  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  `nox-review` says: “Nothing changed”.

  If someone has a better way to compute `coq-version`, please share it!


state: closed
title: services: ipfs: add emptyRepo option, refactor
user_login: mguentner
html_url: https://github.com/NixOS/nixpkgs/pull/21880
updated_at: 2017-01-15 17:16:00
body:
  ###### Motivation for this change

  This should fixes some issues since all configs are set using `--local` which does not use the daemon.
  This PR also adds an option to init the repo without creating a sample folder that contains a README and a bunch of other demo files.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: DHCPv6 improvements
user_login: abbradar
html_url: https://github.com/NixOS/nixpkgs/pull/21882
updated_at: 2017-01-15 16:53:34
body:
  ###### Motivation for this change

  1. Allow one to simultaneously have two instances of `dhcpd` running for DHCPv4 and DHCPv6 respectively, with separate configuration;
  2. (controversial, needs review from someone who understands risks of IPv6 better!) Allow DHCPv6 client incoming traffic in the firewall by default (without this DHCPv6 client won't work);
  3. Test radvd+dhcpd6 as part of our networking tests. Client discovers a router, gets an address from the pool and pings itself and the server;
  4. Update radvd to the latest version.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Darwin gtk quartz follow up
user_login: johbo
html_url: https://github.com/NixOS/nixpkgs/pull/21883
updated_at: 2017-01-14 22:53:56
body:
  ###### Motivation for this change

  Adjusting packages which  expect the x11 backend for gdk/gtk.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: rustc: disable parallel building
user_login: LnL7
html_url: https://github.com/NixOS/nixpkgs/pull/21884
updated_at: 2017-01-14 18:37:48
body:
  ###### Motivation for this change

  See discussion at https://github.com/NixOS/nixpkgs/pull/21742.



  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: makemkv: 1.9.10 -> 1.10.4
user_login: LutzCle
html_url: https://github.com/NixOS/nixpkgs/pull/21885
updated_at: 2017-01-14 17:33:37
body:
  ###### Motivation for this change

  Version 1.9.10 is not available for download anymore at makemkv.com.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: youtube-dl: 2017-01-10 -> 2017-01-14
user_login: goetzst
html_url: https://github.com/NixOS/nixpkgs/pull/21886
updated_at: 2017-01-14 18:31:27
body:
  ###### Motivation for this change
  youtube-dl update

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: gzip: `xz.bin` should be native input---accidentally worked because `bin`
user_login: Ericson2314
html_url: https://github.com/NixOS/nixpkgs/pull/21887
updated_at: 2017-01-14 18:21:48
body:
  Otherwise http://hydra.nixos.org/build/46501984/nixlog/2

  ###### Motivation for this change


  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Make services.xserver.xkbDir conflict free when overriden.
user_login: nbp
html_url: https://github.com/NixOS/nixpkgs/pull/21888
updated_at: 2017-02-01 22:04:51
body:
  ###### Motivation for this change

  I was looking into adding extra symbol maps to the xkb directory, and wanted to override the `services.xserver.xkbDir` option.  Unfortunately, the `enlightment`, `kde4` and `kde5` desktop manager are also defining `environment.etc.*.target = "X11/xkb"`.

  Lists are not modular, which implies that one cannot prevent the error to happen unless the exact same source is used, which implies to override `xkbeyboard_config` to make it work.

  ###### Things done

  - Built on platform(s)
     - [x] NixOS


state: closed
title: util-linux: 2.28.1 -> 2.29
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/21889
updated_at: 2017-01-15 08:16:13
body:
  ###### Motivation for this change
  Update

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  I believe this to be relevant to `stdenv`, so I am sending this PR against `staging`.


state: closed
title: boinc service: optionally use a FHS environment
user_login: kierdavis
html_url: https://github.com/NixOS/nixpkgs/pull/21890
updated_at: 2017-11-24 13:49:35
body:
  This ensures that the BOINC project applications (immutable blobs) can
  find the libraries they need to run, since many contain hardcoded paths.

  Additionally, an option to install Virtualbox into the environment
  and an option to install NVIDIA OpenCL/CUDA libraries into the
  environment were added. Other OpenCL libraries could probably be
  added similarly, but I don't have the hardware to test it on.

  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: top-level: Add more options to release-cross.nix, normalize param com…
user_login: Ericson2314
html_url: https://github.com/NixOS/nixpkgs/pull/21891
updated_at: 2017-01-14 19:28:53
body:
  …ments

  ###### Motivation for this change


  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: yarn: init at 0.18.1
user_login: offlinehacker
html_url: https://github.com/NixOS/nixpkgs/pull/21892
updated_at: 2017-01-14 22:55:10
body:
  ###### Motivation for this change

  Currently yarn is packaged as npm package, but i don't want to use npm, no really. So i packaged it as standalone package, from builds that yarn already provides. This allows to install with any npm residuals, amen.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: h2: init at 1.4.193
user_login: 2chilled
html_url: https://github.com/NixOS/nixpkgs/pull/21893
updated_at: 2017-01-15 13:01:08
body:
  ###### Motivation for this change
  h2 is a often used database for jvm development

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: pangomm: Add ApplicationServices on darwin
user_login: johbo
html_url: https://github.com/NixOS/nixpkgs/pull/21894
updated_at: 2017-01-14 22:56:25
body:
  ###### Motivation for this change

  Noticed that ApplicationServices is missing for pangomm, http://hydra.nixos.org/build/46397710

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: xcbuild: 0ab861ab -> 0.1.1
user_login: matthewbauer
html_url: https://github.com/NixOS/nixpkgs/pull/21895
updated_at: 2017-01-19 22:30:17
body:
  ###### Motivation for this change

  These changes fix an issue with building under i686-linux (http://hydra.nixos.org/job/nixpkgs/trunk/xcbuild.i686-linux). I've also added a wrapper for xcode-select so that it detects the pure SDK instead of looking in /Applications/Xcode.app.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: capstone: fix pkgconfig file generation
user_login: joepie91
html_url: https://github.com/NixOS/nixpkgs/pull/21897
updated_at: 2017-01-14 23:45:53
body:
  ###### Motivation for this change

  The generation of pkgconfig `.pc` files is currently broken, because `pkgconfig` isn't being passed to the expression as a dependency. This leads to failures when attempting to build other software that relies on capstone through pkgconfig (eg. `edb`).

  This PR fixes that by adding `pkgconfig` as a dependency. The buildscript picks it up automatically and correctly generates a `.pc` file (which is correctly picked up by other expressions).

  Note that while I've tested this patch locally, I've tested it differently (namely, by copying the expression to a custom repository and modifying it). I see no reason why it wouldn't work as submitted in this PR, but figured I'd make note of this anyway.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: DarwinTools: init at 1
user_login: matthewbauer
html_url: https://github.com/NixOS/nixpkgs/pull/21898
updated_at: 2017-01-15 09:14:13
body:
  ###### Motivation for this change

  This derivation provides binaries for sw_vers and startupfiletool. This is useful because some configure scripts expect sw_vers to be in $PATH to determine the OS X version. DarwinTools should be usable as a native build input in these cases.

  see https://github.com/NixOS/nixpkgs/search?q=sw_vers

  NOTE: while this should go in apple-source-releases, it doesn't look like this is listed for any specific macOS or Developer Tools release, so I can't use the usual "applePackage" functions.
  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: tryton: init 4.2.1
user_login: johbo
html_url: https://github.com/NixOS/nixpkgs/pull/21899
updated_at: 2017-01-15 07:50:44
body:
  ###### Motivation for this change

  Add a new package Tryton to make the client of the Tryton application platform available via Nix.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: haskell: add servant sphinx docs to build
user_login: Profpatsch
html_url: https://github.com/NixOS/nixpkgs/pull/21900
updated_at: 2017-01-16 09:56:17
body:
  Servant builds its user docs from the `doc/` folder with sphinx. This commit adds them to the package.


state: closed
title: terragrunt: 0.8.0 -> 0.9.1
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/21901
updated_at: 2017-01-15 08:13:10
body:
  ###### Motivation for this change

  Update.

  ###### Things done

  - [X ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: terragrunt: fix typo
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/21902
updated_at: 2017-01-15 13:04:11
body:
  In my earlier PR #21901, I had pushed the wrong local branch without a '$'.

  Apologies @Mic92 - please apply.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: git-crecord: init at 20161216.0
user_login: matthiasbeyer
html_url: https://github.com/NixOS/nixpkgs/pull/21903
updated_at: 2017-01-15 13:38:16
body:
  ###### Motivation for this change

  Would like to test this package and maybe use it myself.

  I need help though, as I cannot get the `docutils` into scope while building...

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: vimPlugins: add typescript-vim, tsuquyomi
user_login: instantepiphany
html_url: https://github.com/NixOS/nixpkgs/pull/21904
updated_at: 2017-09-02 11:13:40
body:
  ###### Motivation for this change
  Improving typescript development in neo/vim.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: /bin/sh -> ${stdenv.shell}
user_login: rht
html_url: https://github.com/NixOS/nixpkgs/pull/21905
updated_at: 2017-04-30 15:04:03
body:
  ###### Motivation for this change

  Use `${stdenv.shell}` in `pkgs/build-support` and `pkgs/servers`.

  Address a subset of https://github.com/NixOS/nixpkgs/issues/183, #1424.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: fetchBower: fold arg in all-packages into the nix file
user_login: rht
html_url: https://github.com/NixOS/nixpkgs/pull/21906
updated_at: 2019-01-10 00:16:36
body:
  ###### Motivation for this change

  Would this be better?
  If such, I'm thinking of doing the same to the rest of the packages, so that `all-packages.nix` (or a major subset of it) can be automatically-generated through a fs walk.
  The PR is made minimal in order to avoid merge conflicts w/ other existing PRs and occasional rebase (which has staled some feats e.g. attempt at deterministic build #2281).

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: datagrip: 2016.3 -> 2016.3.2
user_login: loskutov
html_url: https://github.com/NixOS/nixpkgs/pull/21908
updated_at: 2017-01-16 09:44:20
body:
  ###### Motivation for this change
  subj

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: rtags: 2.3 -> 2.8
user_login: periklis
html_url: https://github.com/NixOS/nixpkgs/pull/21909
updated_at: 2018-07-25 09:22:39
body:
  ###### Motivation for this change
   
  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: vim plugins: added vim-speeddating
user_login: mguentner
html_url: https://github.com/NixOS/nixpkgs/pull/21910
updated_at: 2017-01-15 19:27:17
body:
  ###### Motivation for this change

  vim-orgmode likes this

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: nano: add nix syntax hightlight, nano module: provide default
user_login: gnidorah
html_url: https://github.com/NixOS/nixpkgs/pull/21912
updated_at: 2017-01-18 11:05:31
body:
  cc @seitz 

  ###### Motivation for this change
   
  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Use case for wine64 vs winewow?
user_login: pikajude
html_url: https://github.com/NixOS/nixpkgs/issues/21913
updated_at: 2017-11-13 09:32:29
body:
  I spent fruitless hours this morning trying to install Steam in my NixOS using wine64 before eventually realizing that I needed to install winewow instead. During the course of my debugging, irc.freenode.net #winehq told me that pure wine64 is not a supported configuration and should not be expected to work.

  Is there a use case for pure 64-bit wine over winewow? Should both be packaged in nixpkgs?


state: closed
title: linux_4_9: enable support for amdgpu on older chipsets
user_login: ttuegel
html_url: https://github.com/NixOS/nixpkgs/pull/21914
updated_at: 2017-01-15 22:46:23
body:
  Linux 4.9 includes experimental amdgpu support for AMD Southern Islands
  chipsets. (By default, only Sea Islands and newer chipsets are supported.)
  Southern Islands chips will still use radeon by default, but daring users may
  set `services.xserver.videoDrivers = [ "amdgpu" ];` to try the experimental
  driver.

  ###### Motivation for this change

  The amdgpu-based driver is awesome!

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
   - ~[ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`~
    (This does not really apply.)
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
    (I am using the driver right now.)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Somewhat saner cross-compiling through bootstrapping
user_login: Ericson2314
html_url: https://github.com/NixOS/nixpkgs/pull/21915
updated_at: 2017-01-24 18:01:11
body:
  ###### Motivation for this change
   
  Baby step towards https://github.com/NixOS/nixpkgs/pull/21268. It's not all the niceness, but it breaks (almost) no hashes of the things we test.

  Evaluating `release-cross.nix` (which evals nixpkgs over and over again) now takes about 25% longer (me counting in my head). But splicing is only done when cross, so most users will be unaffected. In any event, it should be possible to eventually remove the expensive recursive splicing for cheap flat splicing.

  I think other than doc, I've gotten everything relevant from the original PR taken care of.

  N.B the first commit message has a bunch of info relevant for the whole PR, more or less.

  TODO:
   - [ ] Add manual section. Most of what follows  

  ###### Things done

  http://hydra.nixos.org/jobset/nixpkgs/sonarpulse-cross-tepid, c.f. http://hydra.nixos.org/jobset/nixpkgs/sonarpulse-cross-compare

  CC @shlevy 


state: closed
title: haskell: add doc outputs to with-packages-wrapper.nix
user_login: Profpatsch
html_url: https://github.com/NixOS/nixpkgs/pull/21916
updated_at: 2017-01-16 09:58:07
body:
  We want to have all doc outputs as well (also e.g. ghc documentation).
  Adds a bit of documentation to the postInstall script.


state: closed
title: stumpwm: 0.9.9 -> 1.0.0
user_login: fstamour
html_url: https://github.com/NixOS/nixpkgs/pull/21917
updated_at: 2017-01-16 09:45:33
body:
  ###### Motivation for this change

  New version

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  I am using it right now.


state: closed
title: kdeWrapper: Fix XDG_DATA_DIRS/XDG_CONFIG_DIRS mixup.
user_login: solson
html_url: https://github.com/NixOS/nixpkgs/pull/21918
updated_at: 2017-01-16 10:19:21
body:
  `share` directories go with `XDG_DATA_DIRS`, and `etc/xdg` directories go with `XDG_CONFIG_DIRS`. These were accidentally reversed.

  See [this KDE wiki page](https://userbase.kde.org/KDE_System_Administration/Environment_Variables#freedesktop.org_Compliance) for example.

  ###### Motivation for this change

  This solves my problem with Spectacle not having any items in the `Export Image... > More Online Services` menu, such as the Imgur uploader. I had previously mentioned this [here](https://github.com/NixOS/nixpkgs/issues/9680#issuecomment-253714454) but I don't think there's a dedicated issue.

  I figured out that the plugin loader relied on a `kservices5` directory and by `strace`ing Spectacle, I noticed that it was looking in the `kdeWrapper` "env" package for `etc/xdg/kservices5` but I knew the real path was `share/kservices5`, and then the accidental reversal became clear.

  Since the problem was actually in `kdeWrapper`, this has a good chance of fixing issues in other KDE5 packages that I'm not aware of.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: syncthing: 0.14.18 -> 0.14.19
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/21919
updated_at: 2017-01-20 04:02:03
body:
  ###### Motivation for this change

  Upstream recommended upgrade.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: Proper way of creating a hook for network devices?
user_login: mikael-andersson
html_url: https://github.com/NixOS/nixpkgs/issues/21920
updated_at: 2017-07-22 21:40:56
body:
  ## Issue description

  What is the proper way in  NixOS to create a hook for network devices or more specifically for my builtin WWAN modem?

  Background:
  I do not want SpiderOak to sync when I am using my mobile broadband. Since SpiderOak does not have a way of pausing or halting the sync via CLI, at least what I am aware of, I simply want to kill SpiderOak when the modem gets connected and start SpiderOak when the modem gets disconnected. This way I ensure syncing with WiFi only.

  ### Steps to reproduce
  N/A


  ## Technical details

  Hardware: Lenovo X1 Carbon

  * System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)
  16.09.1445.e9a8853 (Flounder)

  * Nix version: (run `nix-env --version`)
  nix-env (Nix) 1.11.4

  * Nixpkgs version: (run `nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion`)
  "16.09.1445.e9a8853"


state: closed
title: vscode: 1.8.0 -> 1.8.1
user_login: jansuchomel
html_url: https://github.com/NixOS/nixpkgs/pull/21921
updated_at: 2017-01-16 09:45:10
body:
  ###### Motivation for this change
  New version. I've also updated the .desktop file generation, because there shouldn't be new lines in the Comment section.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: [WIP] rust: add update script
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/21922
updated_at: 2018-09-06 08:47:19
body:
  Policy question: How frequent do we want to update rustNightly?
   
  ## Things done

  - script to automatically provide checksums for stable, beta, nightly (only `depsSha256` needs to be updated manually)
  - rust is always build by the same upstream pre-compiled rust version
  - unify code for bootstraping + add platforms for all channels
  - fix rustc sandbox builds (cargo no longer download the registry)

  ## TODO
  - [  ] integrate update script into general update script infrastructure
  - [  ] automate update of `depsSha256`

  ###### Motivation for this change



  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: gnupg: unknown trust model 'tofu+pgp'
user_login: rqcy
html_url: https://github.com/NixOS/nixpkgs/issues/21923
updated_at: 2017-01-16 14:08:09
body:
  ## Issue description

  GPG does not recognize option:

      trust-model tofu+pgp

  in gpg.conf.


  ### Steps to reproduce

  place "trust-model tofu+pgp" in ~/.gnupg/gpg.conf

  and try to use gpg, e.g., gpg2 -d asdf.gpg


  ## Technical details

  * System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)

  nixos-version
  16.09.1465.fd1dbe5 (Flounder)

  * Nix version: (run `nix-env --version`)


  nix-env --version
  nix-env (Nix) 1.11.4

  * gnupg version

  gpg2 --version
  gpg (GnuPG) 2.1.15
  libgcrypt 1.7.3
  Copyright (C) 2016 Free Software Foundation, Inc.
  License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>
  This is free software: you are free to change and redistribute it.
  There is NO WARRANTY, to the extent permitted by law.

  Home: /root/.gnupg
  Supported algorithms:
  Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
  Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
          CAMELLIA128, CAMELLIA192, CAMELLIA256
  Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
  Compression: Uncompressed, ZIP, ZLIB, BZIP2


state: closed
title: Backport: gnupg: build with sqlite to enable TOFU
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/21924
updated_at: 2017-06-07 13:53:05
body:
  See https://lists.gnupg.org/pipermail/gnupg-users/2015-October/054608.html.

  (cherry-picked from 3c104ca71c37b664b4bb62d32c6ffa398e716b18)

  fixes #21923

  ###### Motivation for this change


  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: keybase login doesn't work
user_login: lheckemann
html_url: https://github.com/NixOS/nixpkgs/issues/21925
updated_at: 2017-01-16 12:24:15
body:
  ## Issue description
  ```
  $ keybase login
  <type details>
  ERROR no auth system available; consider upgrading your client if it's old (error 100)
  ```

  ## Technical details

  * System: 16.09.1465.fd1dbe5 (Flounder)
  * Nix version: nix-env (Nix) 1.11.4
  * Nixpkgs version: 16.09.1465.fd1dbe5

  This is fixed in the latest version of keybase; cherry-picking 711a42e03aa44439142bb820319c0d61a6faa7ae onto my copy of nixpkgs and updating keybase fixed the issue for me.


state: closed
title: minio 20160821 -> 20161213
user_login: dbalan
html_url: https://github.com/NixOS/nixpkgs/pull/21926
updated_at: 2017-01-16 12:30:13
body:
  ###### Motivation for this change
  Update to latest release.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [x] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: quodlibet: Could not create default GStreamer pipeline
user_login: deepfire
html_url: https://github.com/NixOS/nixpkgs/issues/21927
updated_at: 2017-01-24 12:50:19
body:
  ## Issue description
  Attempting to play any music file brings up an error popup:
  ```
  Output Error

  GStreamer output pipeline could not be initialized. The pipeline might be invalid, or the device may be in use. Check the player preferences.
  ```
  quodlibet stderr:
  ```
  deepfire@andromedae:~/Music$ quodlibet
  ** Message: pygobject_register_sinkfunc is deprecated (GstObject)
  W: Could not import python-gpod, iPod support disabled.
  W: Couldn't connect to a device backend.
  W: No device backend, Media Devices browser disabled.
  W: Could not import python-feedparser. Audio Feeds browser disabled.
  0:00:00.476201940  2002      0x2190190 ERROR           GST_PIPELINE ./grammar.y:661:priv_gst_parse_yyparse: no element "autoaudiosink"
  0:00:00.476234362  2002      0x2190190 ERROR           GST_PIPELINE ./grammar.y:929:priv_gst_parse_launch: Unrecoverable syntax error while parsing pipeline autoaudiosink
  W: Invalid GStreamer output pipeline, trying default.
  0:00:00.476314911  2002      0x2190190 ERROR           GST_PIPELINE ./grammar.y:661:priv_gst_parse_yyparse: no element "autoaudiosink"
  0:00:00.476325363  2002      0x2190190 ERROR           GST_PIPELINE ./grammar.y:929:priv_gst_parse_launch: Unrecoverable syntax error while parsing pipeline autoaudiosink
  W: Could not create default GStreamer pipeline.
  ```

  Removal of `~/.quodlibet`, `~/.gstreamer-*` doesn't help.

  ### Steps to reproduce
  1. `nix-env -i quodlibet`
  2. initiate playback of any audio file.

  ## Technical details

  * System: 17.03.git.4488203 (Gorilla)
  * Nix version: nix-env (Nix) 1.11.4
  * Nixpkgs version: "17.03.git.4488203d0c"


state: closed
title: createHome attempts to create home directories before local filesystems are mounted
user_login: ToxicFrog
html_url: https://github.com/NixOS/nixpkgs/issues/21928
updated_at: 2017-01-21 07:35:25
body:
  If a user has `createHome = true` set -- which is the default for normal users and some services, like gitolite -- whatever process tries to create missing home directories runs after `/` is mounted but *before* `local-fs.target` is reached. This seems to work ok if all mounts are explicit in `hardware-configuration.nix` (although I haven't tested this thoroughly), but breaks if, e.g., you have ZFS datasets that are mounted by the `zfs-mount` unit as part of reaching `local-fs.target`; either services like `gitolite-init.service` fail because the home directory they expected to exist hasn't been properly created, or `zfs-mount.service` fails because a bunch of home directories have been created in what it expected to be empty mountpoints.

  On my system `local-fs.target` is reached relatively late (it has a bunch of disks to spin up and zpools to import), so anything that needs local filesystems mounted but doesn't explicitly place itself after `local-fs.target` tends to go wrong.

  This seems like it should be an easy fix (make whatever service creates the home directories `after = ["local-fs.target"]`), but I can't figure out which service does the deed.

  ## Technical details

  * System: NixOS 16.09
  * Nix version: 1.11.4
  * Nixpkgs version: 16.09.1465.fd1dbe5


state: closed
title: `zfs-mount.service` doesn't have the correct dependencies
user_login: ToxicFrog
html_url: https://github.com/NixOS/nixpkgs/issues/21929
updated_at: 2017-03-17 17:16:36
body:
  [zfs-mount.service](https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/tasks/filesystems/zfs.nix#L340) doesn't have any ordering information except for `after = systemd-modules-load.service`. This means it's entirely possible for the system to reach `local-fs.target` while most of its filesystems are still unmounted.

  This is easy to work around; just add to configuration.nix:

      systemd.services.zfs-mount.wantedBy = ["local-fs.target"];
      systemd.services.zfs-mount.requires = ["zfs-import.target"];

  but this should probably be part of `filesystems/zfs.nix`.

  ## Technical details

  * System: NixOS 16.09
  * Nix version: 1.11.4
  * Nixpkgs version: 16.09.1465.fd1dbe5


state: closed
title: pam: Support Google Authenticator for OTPs
user_login: Baughn
html_url: https://github.com/NixOS/nixpkgs/pull/21930
updated_at: 2019-05-31 13:44:00
body:
  ###### Motivation for this change
   
  Google Authenticator is a a common OTP generator. We had the package, but no real way of using it.

  It's low-security by itself, generating 6-digit OTPs, so I did the common thing and configured it as a required but not sufficient source of authentication.

  SSH public-key authentication bypasses this whole system, which is usually what you want.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: nginx: added serverName option for virtualHosts
user_login: bobvanderlinden
html_url: https://github.com/NixOS/nixpkgs/pull/21931
updated_at: 2017-01-25 13:55:57
body:
  ###### Motivation for this change
   
  This allows overriding the `server_name` attribute of virtual
  hosts. By doing so it is possible to have multiple virtualHost
  definitions that share the same `server_name`. This is useful in
  particular when you need a HTTP as well as a HTTPS virtualhost: same
  server_name, different port.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Tested using: https://gist.github.com/bobvanderlinden/939cd64a8290a7388cce2cf4303b0995


state: closed
title: [don't merge] qt55.qtbase: fix patch sha with fetchpatch instead of fetchurl
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/21932
updated_at: 2017-01-19 21:56:09
body:
  ###### Motivation for this change
  this patch seemed to change sha, so change to fetchpatch which should have a more stable patch.


  Please don't merge yet.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ddclient: Don't include blank server= lines.
user_login: Baughn
html_url: https://github.com/NixOS/nixpkgs/pull/21933
updated_at: 2017-01-17 01:15:52
body:
  ###### Motivation for this change
   
  Dyndns assert-fails on startup if a blank server= line is included in the configuration. However, not setting server is valid; it defaults to members.dyndns.org internally.

  I meant to push this commit to https://github.com/NixOS/nixpkgs/pull/21417, but github isn't agreeing...

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: rubocop: init at 0.47.0
user_login: leemachin
html_url: https://github.com/NixOS/nixpkgs/pull/21934
updated_at: 2017-01-17 09:55:24
body:
  ###### Motivation for this change
   
  To add the rubocop linter as a global package (for support with text editors that don't know how to use bundler or docker or nix-shell)

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: physlock doesn't automatically lock, because it lost the -u option
user_login: magnetophon
html_url: https://github.com/NixOS/nixpkgs/issues/21935
updated_at: 2017-03-15 10:47:37
body:
  ## Issue description

  physlock used to have an option to specify the user that is allowed to unlock, but lost that option now.
  I did a PR to upgrade physlock (for other reasons), but I failed to update [physlock.nix](https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/security/physlock.nix#L108).

  I think it's just a matter of getting rid of the ``-u userName``, but I'm not sure, so I'm not doing a PR (yet).


state: closed
title: rustc darwin broken on hydra
user_login: acowley
html_url: https://github.com/NixOS/nixpkgs/issues/21936
updated_at: 2017-01-17 16:42:42
body:
  ## Issue description
  rustc fails tests on hydra


  ### Steps to reproduce
  The [Hydra build log](http://hydra.nixos.org/build/46497859/nixlog/2)


  ## Technical details

  * System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)
  * Nix version: (run `nix-env --version`)
  * Nixpkgs version: (run `nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion`)


state: closed
title: bitlbee: 3.4.2 -> 3.5
user_login: pSub
html_url: https://github.com/NixOS/nixpkgs/pull/21937
updated_at: 2017-01-17 13:54:08
body:
  ###### Motivation for this change
  Update to latest version containing a bunch of fixes and new features. I've also moved compile-time dependencies into nativeBuildInputs. 
   
  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: haskell-packages: fix purescript_0_10_5 deps
user_login: acowley
html_url: https://github.com/NixOS/nixpkgs/pull/21938
updated_at: 2017-01-20 22:00:21
body:
  purescript-0.10.5 requires bower-json >= 1.0.0.1 && < 1.1, which is
  available as bower-json_1_0_0_1. 

  ###### Motivation for this change


  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: spotify: 1.0.45.186.g3b5036d6-95 -> 1.0.47.13.gd8e05b1f-47
user_login: carlsverre
html_url: https://github.com/NixOS/nixpkgs/pull/21939
updated_at: 2017-01-18 18:27:35
body:
  ###### Motivation for this change
  Current version is missing in the Spotify deb repo.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: gperf: 3.0.4 -> 3.1
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/21940
updated_at: 2017-01-19 08:12:07
body:
  This PR is against `staging`.

  See https://lists.gnu.org/archive/html/info-gnu/2017-01/msg00005.html
  for full release announcement.

  ###### Motivation for this change


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: monero: 0.9.4 -> 0.10.1
user_login: womfoo
html_url: https://github.com/NixOS/nixpkgs/pull/21941
updated_at: 2017-04-30 11:44:51
body:
  ###### Motivation for this change
   
  there was a recent hard-fork in monero and 0.9.4 can no longer sync the new chain properly. will need to backport this to stable.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: monero: 0.9.4 -> 0.10.1 (release-16.09)
user_login: womfoo
html_url: https://github.com/NixOS/nixpkgs/pull/21942
updated_at: 2017-04-30 11:44:49
body:
  ###### Motivation for this change

  backport #21941

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: [WIP, don't merge] make-disk-image: change to be less VM-centric
user_login: copumpkin
html_url: https://github.com/NixOS/nixpkgs/pull/21943
updated_at: 2017-04-17 03:15:55
body:
  This changes much of the make-disk-image.nix logic (and thus most NixOS image building) to use LKL to set up the target directory structure rather than a Linux VM. The only work we still do in a VM is less IO-heavy stuff that while still time-consuming, is less of the overall load. The goal is to kill more of that stuff, but that will require deeper changes to NixOS activation scripts and switch-to-configuration.pl, and I don't want to bite off too much at once.

  On my test EC2 instance, the old image building code took about 25 minutes (see #20471), and this takes a little less than a minute. I've been testing it as follows:

  ```shell
  time nix-build nixos/ --no-out-link -A config.system.build.amazonImage --arg configuration "{ imports = [ ./nixos/maintainers/scripts/ec2/amazon-image.nix ]; ec2.hvm = true; }"
  ```

  Things I'm unsure about and would appreciate comments on:

  1. Whether this actually produces an image that doesn't have subtle issues. I'm not so much concerned about the filesystem (since I'm using the Linux filesystem drivers) but I did hack up nixos-install.sh and might have missed something.
  2. Whether I can kill the last two uses of the VM
  3. Whether the `fakechroot` + `nix-env` is actually necessary. If I'm just doing `--set` with no previous generations, is `nix-env` doing anything beyond making two symlinks? Not doing it myself future-proofs this code a bit if the link scheme changes someday, but that also seems unlikely.

  Things I still need to do before I take the WIP marker off:

  1. More testing
  2. Add back support for `qcow2`, which I'd probably do as a post-VM conversion with `qemu-img` now that I touch image files directly and LKL doesn't understand anything but a flat image
  3. Possibly refactor the `nixos-install.sh` logic to share the core bits and pieces with this work, so we don't risk getting out of sync. I'd however rather do that as a follow-up PR to keep moving parts to a minimum.


state: closed
title: Mono needs mprotect disabled when pax is enabled
user_login: Nekroze
html_url: https://github.com/NixOS/nixpkgs/issues/21944
updated_at: 2017-01-17 23:49:22
body:
  ## Issue description
  When `security.grsecurity.enable = true` mono has segfaults.

  ### Steps to reproduce
  ```
  {
  security.grsecurity.enable = true;
  services.sonarr.enable = true;
  }
  ```

  Deploy/rebuild, sonarr works, then reboot to enable grsec/pax kernel and sonarr will not start.

  ## Technical details

  * System: NixOS: `16.09pre-git (Flounder)`
  * Nix version: `1.11.6`
  * Nixpkgs version: `16.09pre-git`


state: closed
title: yarn: 0.18.1 -> 0.19.1
user_login: ben-z
html_url: https://github.com/NixOS/nixpkgs/pull/21945
updated_at: 2017-01-17 09:56:51
body:
  ###### Motivation for this change

  [Yarn](https://github.com/yarnpkg/yarn) released [v0.19.1](https://github.com/yarnpkg/yarn/releases/tag/v0.19.1) a few hours ago.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Suggestion: expose man pages of temporarily installed (nix-shell) packages
user_login: olejorgenb
html_url: https://github.com/NixOS/nixpkgs/issues/21946
updated_at: 2017-01-17 12:21:11
body:
  ## Issue description

  I sometimes use `nix-shell` to test out a package. This way my profile isn't cluttered. Today I noticed that man pages of such packages isn't available. 

  nix-shell is also used to setup development environments. Surly it's desirable to have access to the dependencies' man pages there?

  It seems like it wouldn't be to hard to build `MANPATH` in `./pkgs/stdenv/generic/setup.sh` similarly to `PATH`. Is it a reason we don't want to do that?

  Parent-ish issue: #11499

  **Example**

      $ nix-shell -p rofi
      $ man rofi
      No manual entry for rofi
      $ exit
      $ nix-env -iA nixos.rofi
      $ man rofi
      <man page shown>

  ## Technical details

  * System: NixOS: 16.09.1389.d7a3160 (Flounder)
  * Nix version: nix-env (Nix) 1.11.4
  * Nixpkgs version: "16.09.1465.fd1dbe5"


state: closed
title: system-config-printer missing cairo
user_login: jbgi
html_url: https://github.com/NixOS/nixpkgs/issues/21947
updated_at: 2017-01-22 00:31:05
body:
  ## Issue description
  `system-config-printer` fails to start with error:
  ```
  Traceback (most recent call last):
    File "/nix/store/84iqcxj7ayxqr6jgcbppl9n2i43g5c0f-system-config-printer-1.5.7/share/system-config-printer/system-config-printer.py", line 91, in <module>
      import printerproperties
    File "/nix/store/84iqcxj7ayxqr6jgcbppl9n2i43g5c0f-system-config-printer-1.5.7/share/system-config-printer/printerproperties.py", line 42, in <module>
      import gtkinklevel
    File "/nix/store/84iqcxj7ayxqr6jgcbppl9n2i43g5c0f-system-config-printer-1.5.7/share/system-config-printer/gtkinklevel.py", line 23, in <module>
      import cairo
  ImportError: No module named 'cairo'
  ```

  ## Technical details

  * System: NixOS: `17.03pre98682.f673243 (Gorilla)`
  * Nix version: `1.11.5`


state: closed
title: cloc: 1.70 -> 1.72
user_login: rycee
html_url: https://github.com/NixOS/nixpkgs/pull/21948
updated_at: 2017-01-17 09:40:52
body:
  ###### Motivation for this change

  To bump version.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: fping: enable IPv6 (provides fping6 binary)
user_login: fadenb
html_url: https://github.com/NixOS/nixpkgs/pull/21950
updated_at: 2017-01-17 10:54:03
body:
  ###### Motivation for this change
  In order to allow my smokeping to monitor IPv6 hosts I require fping6.
  This change builds `fping` as well as `fping6` binaries so nothing should break.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: packet: init at 20161215-2b8f07a
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/21951
updated_at: 2017-01-19 21:17:32
body:
  ###### Motivation for this change

  I'm using Packet.net for certain server uses lately, and they have a pretty nice API / CLI.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: R's Sweave.sty not accessible to texlive
user_login: Hodapp87
html_url: https://github.com/NixOS/nixpkgs/issues/21952
updated_at: 2019-02-17 18:24:35
body:
  ## Issue description

  The R package in nixpkgs produces the directory `lib/R/share/texmf/tex/latex/` which has files like `Sweave.sty`. These files (to my knowledge) serve only to allow LaTeX to use the `.tex` files which Sweave produces - but texlive can't exactly find them.

  I would solve this myself but I don't yet know Nix well enough. If anyone could point to any packages that solve a similar problem, that would help.

  ### Steps to reproduce

  Install `R` and `texlive.combined.scheme-full` (other texlive packages may work similarly). Save the below as `example.Rnw`:

  ```latex
  \documentclass{article}
  \begin{document}
  <<>>=
  print("foo")
  @ 
  \end{document}
  ```

  Then run:

      R CMD Sweave example.Rnw
      latex example.tex

  latex will halt with:

      ! LaTeX Error: File `Sweave.sty' not found.

  This has a somewhat kludgey workaround in the form of instead running something like:

      TEXINPUTS=".:/nix/store/i8cbhc7q0l1lkq3ynzxx0q5dh4s3dmd1-R-3.2.3/lib/R/share/texmf/tex/latex:" latex example.tex

  ## Technical details

  * System: 16.09.1324.1dd0fb6 (Flounder)
  * Nix version: nix-env (Nix) 1.11.4
  * Nixpkgs version: "16.09.1324.1dd0fb6"


state: closed
user_login: steveeJ
html_url: https://github.com/NixOS/nixpkgs/issues/21953
updated_at: 2019-05-08 07:40:24
title:
  xf86-video-intel: release is very old and possibly incompatible with current kernel; consider building from git?

body:
  ## Issue description
  On the currently available kernels (4.4.43 and 4.9.4) my X is broken, probably due to what's behind this kernel warning:

  ```
  Jan 17 17:49:03 steveej-laptop kernel: ------------[ cut here ]------------
  Jan 17 17:49:03 steveej-laptop kernel: WARNING: CPU: 1 PID: 35 at /tmp/nix-build-linux-4.4.43.drv-0/linux-4.4.43/drivers/gpu/drm/i915/intel_pm.c:3603 skl_update_other_pipe_wm+0x1ba/0x1c0 [i915]()
  Jan 17 17:49:03 steveej-laptop kernel: WARN_ON(!wm_changed)
  Jan 17 17:49:03 steveej-laptop kernel: Modules linked in: nls_iso8859_1 nls_cp437 vfat fat btusb btrtl btbcm btintel bluetooth snd_usb_audio cdc_ether usbnet r8152 efi_pstore snd_usbmidi_lib pstore mousedev mii snd_rawmidi joydev snd_seq
  Jan 17 17:49:03 steveej-laptop kernel:  snd_timer agpgart arc4 shpchp nvram rfkill i2c_algo_bit fb_sys_fops ecb snd wmi syscopyarea ppp_mppe sysfillrect ppp_generic soundcore sysimgblt slhc led_class battery ac i2c_core thermal loop tpm_
  Jan 17 17:49:03 steveej-laptop kernel: CPU: 1 PID: 35 Comm: kworker/1:1 Tainted: G           O    4.4.43 #1-NixOS
  Jan 17 17:49:03 steveej-laptop kernel: Hardware name: LENOVO 20ETCTO1WW/20ETCTO1WW, BIOS R00ET47W (1.22 ) 09/18/2016
  Jan 17 17:49:03 steveej-laptop kernel: Workqueue: events output_poll_execute [drm_kms_helper]
  Jan 17 17:49:03 steveej-laptop kernel:  0000000000000000 ffff88042f51f7a8 ffffffff812d2053 ffff88042f51f7f0
  Jan 17 17:49:03 steveej-laptop kernel:  ffffffffc0954d90 ffff88042f51f7e0 ffffffff810720c2 ffff8800b14fc000
  Jan 17 17:49:03 steveej-laptop kernel:  ffff88042f51f90c ffff8800b14fb000 0000000000000000 ffff88042f51f878
  Jan 17 17:49:03 steveej-laptop kernel: Call Trace:
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff812d2053>] dump_stack+0x63/0x90
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff810720c2>] warn_slowpath_common+0x82/0xc0
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff8107214c>] warn_slowpath_fmt+0x4c/0x50
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc0891b5a>] skl_update_other_pipe_wm+0x1ba/0x1c0 [i915]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc0891d92>] skl_update_wm+0x232/0x720 [i915]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc091fb2b>] ? intel_dp_aux_transfer+0xdb/0x1e0 [i915]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc08962be>] intel_update_watermarks+0x1e/0x30 [i915]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc08fd7d0>] haswell_crtc_enable+0x370/0x860 [i915]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc09062ca>] ? intel_frontbuffer_flush+0x6a/0x80 [i915]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc08f9484>] intel_atomic_commit+0x474/0x13c0 [i915]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc06ccebe>] ? drm_atomic_check_only+0x18e/0x590 [drm]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc06ccc67>] ? drm_atomic_add_affected_connectors+0x27/0xf0 [drm]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc06cd2f7>] drm_atomic_commit+0x37/0x60 [drm]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc0701f8f>] restore_fbdev_mode+0x22f/0x260 [drm_kms_helper]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc0704133>] drm_fb_helper_restore_fbdev_mode_unlocked+0x33/0x80 [drm_kms_helper]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc07041ad>] drm_fb_helper_set_par+0x2d/0x50 [drm_kms_helper]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc07040b2>] drm_fb_helper_hotplug_event+0xd2/0x120 [drm_kms_helper]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc09107de>] intel_fbdev_output_poll_changed+0x1e/0x30 [i915]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc06f75e7>] drm_kms_helper_hotplug_event+0x27/0x30 [drm_kms_helper]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffffc06f77e7>] output_poll_execute+0x197/0x1e0 [drm_kms_helper]
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff81089115>] process_one_work+0x165/0x480
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff8108966f>] worker_thread+0x23f/0x4c0
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff81509dc1>] ? __schedule+0x2f1/0x960
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff81089430>] ? process_one_work+0x480/0x480
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff81089430>] ? process_one_work+0x480/0x480
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff8108f449>] kthread+0xc9/0xe0
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff8108f380>] ? kthread_create_on_node+0x180/0x180
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff8150e4bf>] ret_from_fork+0x3f/0x70
  Jan 17 17:49:03 steveej-laptop kernel:  [<ffffffff8108f380>] ? kthread_create_on_node+0x180/0x180
  Jan 17 17:49:03 steveej-laptop kernel: ---[ end trace f1ae7ac5e0f72a8e ]---
  ```

  I have a local profile that I built on 2016-12-12 which works and uses kernel 4.8.12. I don't like depending on this old build though, which every NixOS user should understand.

  It would be good to have the most recent xf86-video-intel driver available instead of using the release which is 2 years old. I've seen that files in `pkgs/servers/x11/xorg/...` are partially generated and therefore not straight-forward to change.

  ### Steps to reproduce
  Run latest unstable on a laptop that uses the i915 driver.

  ## Technical details
  * System: nixos-17.03pre99010.e9109b1
  * Nix version: 1.11.4
  * Nixpkgs version: nixos-unstable-small e9109b1b979d8ce9385431b38d0f2eda693cbaf3

  ```
  $ lspci | grep VGA
  00:02.0 VGA compatible controller: Intel Corporation HD Graphics 520 (rev 07)
  ```

  ---
  Actions:
  - [x] Test modesetting instead of intel driver
      It works. The behavior with external screens is different. In order to get the screens connected to the docking station (lenovo pro dock) I had to adjust the BIOS video settings and set the initial screen to "display on dock".
  - [ ] Document to choose modesetting over intel
  - [ ] Update intel driver to use git 


state: closed
title: nixos-rebuild switch produces warnings about systemd-udev-settle service
user_login: bennofs
html_url: https://github.com/NixOS/nixpkgs/issues/21954
updated_at: 2019-01-08 12:05:26
body:
  ## Issue description

  When running `nixos-rebuild switch`, sometimes `systemd-udev-settle` fails to start with an error message:

  ```
  $ systemctl status systemd-udev-settle
  ● systemd-udev-settle.service - udev Wait for Complete Device Initialization
     Loaded: loaded (/nix/store/qzvya9kh5wh3bkcryd3g14xax48i1klc-systemd-231/example/systemd/system/systemd-udev-settle.s
     Active: failed (Result: exit-code) since Tue 2017-01-17 17:35:55 CET; 53min ago
       Docs: man:udev(7)
             man:systemd-udevd.service(8)
    Process: 3392 ExecStart=/nix/store/qzvya9kh5wh3bkcryd3g14xax48i1klc-systemd-231/bin/udevadm settle (code=exited, stat
   Main PID: 3392 (code=exited, status=1/FAILURE)

  Jan 17 17:33:54 c-cube systemd[1]: Starting udev Wait for Complete Device Initialization...
  Jan 17 17:35:55 c-cube systemd[1]: systemd-udev-settle.service: Main process exited, code=exited, status=1/FAILURE
  Jan 17 17:35:55 c-cube systemd[1]: Failed to start udev Wait for Complete Device Initialization.
  Jan 17 17:35:55 c-cube systemd[1]: systemd-udev-settle.service: Unit entered failed state.
  Jan 17 17:35:55 c-cube systemd[1]: systemd-udev-settle.service: Failed with result 'exit-code'.
  ```

  ### Steps to reproduce

  Run `nixos-rebuild switch`

  ## Technical details

  * System: NixOS: `17.03.git.f673243aff (Gorilla)`
  * Nix version: `nix-env (Nix) 1.11.5`
  * Nixpkgs version: `17.03.git.f673243aff`


state: closed
title: Hard-coded /usr/share in canon-cups-ufr2-2.90
user_login: league
html_url: https://github.com/NixOS/nixpkgs/issues/21955
updated_at: 2018-02-25 05:20:43
body:
  ## Issue description

  I'm trying to set up a Canon printer, and I got this error from CUPS (the job was marked as completed although no printout was produced):

  ```
  completed at
  Tue Jan 17 12:09:14 2017 
  "src = bidiCommon.c, line = 1085, err = 0¥nI/O warning :
  failed to load external entity "/usr/share/cnpkbidi/cnpkbidi_info_003.xml""
  ```

  Of course that `/usr/share/` will cause a problem with Nix. [The derivation](https://github.com/NixOS/nixpkgs/blob/master/pkgs/misc/cups/drivers/canon/default.nix) goes to some trouble to patch up the paths, but I guess it missed this one. I'm not sure I follow the sequence of binaries that are involved.

  ### Steps to reproduce

  My `configuration.nix`:

  ```
    services.printing.enable = true;
    services.printing.drivers = [pkgs.canon-cups-ufr2];
  ```

  Then through the `localhost:631` interface I set up a printer at `https://$IP/` and set its PPD to "Canon iR-ADV 4225/4235 UFR II ver.2.9" (`share/cups/model/CNCUPSIRADV4235ZK.ppd`) and tried to send a test page.

  ## Technical details

  * System: nixos 16.09.1465.fd1dbe5 (Flounder)
  * Nix version: nix-env (Nix) 1.11.4
  * Nixpkgs version: "16.09.1465.fd1dbe5"

  One other thing I tried is using `strings` to find which executable files in the nix store path hard-code `/usr/share/cnpkbidi`, and it's `lib32/libcanonufr2.so.1.0.0`.

  Incidentally, there are also some PPDs that hard-code `/usr/share/ufr2filter`, but not the ones for my printer.


state: closed
title: oh-my-zsh: add share dir to pathsToLink
user_login: kjanosz
html_url: https://github.com/NixOS/nixpkgs/pull/21957
updated_at: 2017-01-17 23:04:58
body:
  ###### Motivation for this change
  Some window/desktop managers do not add `share` directory or do it selectively.
  Without it `oh-my-zsh` is not linked to `/run/current-system/sw/share`, which then makes it harder to set `$ZSH` variable in `.zshrc`

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: slim changes session type to "xterm" after an failed login attempt
user_login: kierdavis
html_url: https://github.com/NixOS/nixpkgs/issues/21958
updated_at: 2019-04-14 00:01:59
body:
  ## Issue description

  When logging in with slim, if I entered my password correctly the first time, i3 is started as expected. If not, xterm appears to be started instead.

  After doing some research I came across #4300, where it almost seems like the *opposite* problem is occurring (the user's desired display/window manager only starts if the password was entered incorrectly at least one).

  I then tried again and I was indeed able to see that the session type that slim will use after login changed from the default and desired "none + i3" to be completely blank. Pressing F1 at this point allowed me to cycle it through "xterm", "xterm + i3" and back to "none + i3". (On a somewhat unrelated note, I would probably have noticed this earlier if the default styling for this text wasn't "white on almost-white").

  ### Steps to reproduce

  1. Set up a VM as follows:

  ```bash
  git clone https://github.com/NixOS/nixpkgs
  cat >configuration.nix <<EOF
  {
    users.mutableUsers = false;
    users.users.root.password = "root";
    users.users.test.password = "test";
    users.users.test.isNormalUser = true;
    services.xserver.enable = true;
    services.xserver.windowManager.i3.enable = true;
  }
  EOF
  nixos-rebuild build-vm -I nixpkgs=./nixpkgs -I nixos-config=./configuration.nix
  result/bin/run-nixos-vm
  ```

  2. Log in to VM as user "test", password "test". The i3 window manager starts up.
  3. Close and restart the VM.
  4. Log in using any credentials other than test/test or root/root. The login attempt will be denied by slim. The session type changes from "none + i3" to "".
  5. Log in as user "test", password "test". User is logged in and xterm is started.

  ## Technical details

  * System: NixOS 17.03.git.3ab26fd (Gorilla) [nixpkgs master, as of time of writing]
  * Nix version: 1.11.6
  * Nixpkgs version: 17.03.git.3ab26fdb70 [master, as of time of writing]


state: closed
title: oh-my-zsh: 2016-12-16 -> 2017-01-15
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/21960
updated_at: 2017-01-17 22:57:26
body:
  ###### Motivation for this change
  Update, fix of #21957

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ckb: add to module list
user_login: kierdavis
html_url: https://github.com/NixOS/nixpkgs/pull/21961
updated_at: 2017-11-24 13:49:32
body:
  Not the first time I've forgotten to do this.

  ###### Motivation for this change


  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: bundleEnv: Used gemdir for most applications now
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/21962
updated_at: 2017-01-19 10:45:01
body:
  ###### Motivation for this change

  I replaced in every healthy package `gemfile`, `lockfile`, `gemset` with `gemdir`.
  @zimbatm

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Ruby source checksum mismatch on OS X
user_login: duane
html_url: https://github.com/NixOS/nixpkgs/issues/21963
updated_at: 2017-01-23 19:09:32
body:
  ## Issue description

  Cannot install ruby 2_2_5


  ### Steps to reproduce
      nix-env -i ruby-2.2.5 
      ...
      building path(s) ‘/nix/store/mkd1xgqvrjmc1xmx9jcmbwdr5028h70y-CF-osx-10.9.5’
      cannot build derivation ‘/nix/store/c4wb04p6bbsbm8bhhmajvkb10k2qk70n-eap8021x-osx-10.11.6.drv’: 1 dependencies couldn't be built
      cannot build derivation ‘/nix/store/jasgqiasg77xxzmhl2g1kxphxpgfbj6m-configd-osx-10.8.5.drv’: 1 dependencies couldn't be built
      cannot build derivation ‘/nix/store/k7mqqnbf75r90azml1a5hqlcwdnwi288-python-boot-2.7.12.drv’: 1 dependencies couldn't be built
      cannot build derivation ‘/nix/store/kjvblcfrbi82mh27nrjc8863fan16h93-llvm-3.7.1.drv’: 1 dependencies couldn't be built
      cannot build derivation ‘/nix/store/cnk34na38g7r74lgbbnk1qm30vdik6mp-stdenv-darwin.drv’: 1 dependencies couldn't be built
      killing process 72876
      cannot build derivation ‘/nix/store/xh33z7b3dkw5gsq3x5j9jjd3y03s12di-stdenv-darwin.drv’: 1 dependencies couldn't be built
      cannot build derivation ‘/nix/store/da4iwi8s3p9ahq445jgkb7gzl7pfsg8x-ruby-2.2.5.drv’: 1 dependencies couldn't be built
      error: build of ‘/nix/store/da4iwi8s3p9ahq445jgkb7gzl7pfsg8x-ruby-2.2.5.drv’ failed

  I'm guessing either a) the hash is just flat out wrong or b) apple updated their source without updating the version. Either way, it leaves me unable to use nix to build any software on my computer.

  ## Technical details

  * System: mac os 10.12.2
  * Nix version: nix-env (Nix) 1.11.6
  * Nixpkgs version: 2723b3b0dac5fdd0f01dd6fd3a8920e5ec2ce6ae


state: closed
title: pythonPackages.neovim: 0.1.12 -> 0.1.13
user_login: jbaum98
html_url: https://github.com/NixOS/nixpkgs/pull/21964
updated_at: 2017-01-18 07:30:16
body:
  ###### Motivation for this change

  Update python `neovim` package from 0.1.12 to 0.1.13

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: styx: 0.4.0 -> 0.5.0
user_login: ericsagnes
html_url: https://github.com/NixOS/nixpkgs/pull/21965
updated_at: 2017-02-26 08:30:14
body:
  ###### Motivation for this change

  Update styx and themes to the latest version.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: WIP: Add frakti to run kubernetes pods in KVM
user_login: moretea
html_url: https://github.com/NixOS/nixpkgs/pull/21966
updated_at: 2018-02-03 22:07:04
body:
  ###### Motivation for this change
  `Frakti` uses `hyperd` to start the different containers that live in one pod in a KVM vm.
  This offers better isolation.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  - [x] package frakti
  - [x] package hyperd
  - [ ] make hyperd service work
    - [ ] make `mkfs.ext4` available in path to the daemon.
    - [ ] write nixos test for hyperd
  - [ ] make frakti service work
  - [ ] write nixos test for frakti


state: closed
title: Vulnerability Roundup 18
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/issues/21967
updated_at: 2017-01-21 13:17:44
body:
  Here are all the vulnerabilities from https://lwn.net/Vulnerabilities
  since our [last roundup](https://github.com/NixOS/nixpkgs/issues/21803).

  cc: @fpletz @FRidh @Mic92 @7c6f434c @LnL7 @bachp .

  _Note:_ The list of people CC'd on this issue participated in the last
  roundup. If you participate on this roundup, I'll cc you on the next
  one. If you don't participate in the next one, you won't be CC'd on
  the one after that. If you would like to be CC'd on the next roundup,
  add a comment to the most recent vulnerability roundup.

  Permanent CC's: @joepie91, @phanimahesh, @the-kenny,
  @NixOS/security-notifications
  If you would like to be CC'd on _all_ roundups (or removed from the
  list), open a PR editing
  https://github.com/NixOS/security/blob/master/lwnvulns/src/bin/instructions.md.

  ## Notes on the list
  1. The reports have been roughly grouped by the package name. This
     isn't perfect, but is intended to help identify if a whole group
     of reports is resolved already.
  2. Some issues will be duplicated, because it affects multiple
     packages. For example, there are sometimes problems that impact
     thunderbird, and firefox. LWN might report in one vulnerability
     "thunderbird firefox". These names have been split to make sure
     both packages get addressed.
  3. By each issue is a link to code search for the package name, and
     a Github search by filename. These are to help, but may not return
     results when we do in fact package the software. If a search
     doesn't turn up, please try altering the search criteria or
     looking in nixpkgs manually before asserting we don't have it.
  4. This issue is created by https://github.com/NixOS/security

  # Instructions:

  1. Triage a report: If we don't have the software or our version isn't
     vulnerable, tick the box or add a comment with the report number,
     stating it isn't vulnerable.
  2. Fix the issue: If we do have the software and it is vulnerable,
     either leave a comment on this issue saying so, even open a pull
     request with the fix. If you open a PR, make sure to tag this
     issue so we can coordinate.
  3. When an entire section is completed, move the section to the
     "Triaged and Resolved Issues" `details` block below.



  ## Upon Completion ...

   - [x] Run the issue through `reformat` one last time
   - [ ] Review commits since last roundup for backport candidates
   - [ ] Send an update e-mail to nix-security-announce@googlegroups.com
   - [x] Update the database at https://github.com/NixOS/security

  Without further ado...

  ### Assorted (32 issues)
   - [x] [`#711581`](https://lwn.net/Vulnerabilities/711581/) ([search](http://search.nix.gsc.io/?q=ark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ark+in%3Apath&type=Code))  ark: code execution
   - [x] [`#711782`](https://lwn.net/Vulnerabilities/711782/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: multiple vulnerabilities
   - [x] [`#645632`](https://lwn.net/Vulnerabilities/645632/) ([search](http://search.nix.gsc.io/?q=fuse&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=fuse+in%3Apath&type=Code))  fuse: privilege escalation
   - [x] [`#711858`](https://lwn.net/Vulnerabilities/711858/) ([search](http://search.nix.gsc.io/?q=icinga&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=icinga+in%3Apath&type=Code))  icinga: cross-site scripting
   - [x] [`#711775`](https://lwn.net/Vulnerabilities/711775/) ([search](http://search.nix.gsc.io/?q=icoutils&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=icoutils+in%3Apath&type=Code))  icoutils: three vulnerabilities
   - [x] [`#711459`](https://lwn.net/Vulnerabilities/711459/) ([search](http://search.nix.gsc.io/?q=python-pysaml2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-pysaml2+in%3Apath&type=Code))  python-psaml2: XML external entity attacks
   - [x] [`#711583`](https://lwn.net/Vulnerabilities/711583/) ([search](http://search.nix.gsc.io/?q=rabbitmq-server&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rabbitmq-server+in%3Apath&type=Code))  rabbitmq-server: authentication bypass
   - [x] [`#711774`](https://lwn.net/Vulnerabilities/711774/) ([search](http://search.nix.gsc.io/?q=wordpress&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wordpress+in%3Apath&type=Code))  wordpress: multiple vulnerabilities
   - [x] [`#711780`](https://lwn.net/Vulnerabilities/711780/) ([search](http://search.nix.gsc.io/?q=apache&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=apache+in%3Apath&type=Code))  apache: denial of service
   - [x] [`#711463`](https://lwn.net/Vulnerabilities/711463/) ([search](http://search.nix.gsc.io/?q=bind&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bind+in%3Apath&type=Code))  bind: denial of service
   - [x] [`#711457`](https://lwn.net/Vulnerabilities/711457/) ([search](http://search.nix.gsc.io/?q=bind9&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bind9+in%3Apath&type=Code))  bind: three denial of service flaws
   - [x] [`#652803`](https://lwn.net/Vulnerabilities/652803/) ([search](http://search.nix.gsc.io/?q=freeradius&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=freeradius+in%3Apath&type=Code))  freeradius: insufficient certificate verification
   - [x] [`#710286`](https://lwn.net/Vulnerabilities/710286/) ([search](http://search.nix.gsc.io/?q=openjpeg2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openjpeg2+in%3Apath&type=Code))  openjpeg2: multiple vulnerabilities
   - [x] [`#711464`](https://lwn.net/Vulnerabilities/711464/) ([search](http://search.nix.gsc.io/?q=gnutls&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gnutls+in%3Apath&type=Code))  gnutls: multiple vulnerabilities
   - [x] [`#711458`](https://lwn.net/Vulnerabilities/711458/) ([search](http://search.nix.gsc.io/?q=ikiwiki&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ikiwiki+in%3Apath&type=Code))  ikiwiki: three vulnerabilities
   - [x] [`#711329`](https://lwn.net/Vulnerabilities/711329/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
   - [x] [`#711777`](https://lwn.net/Vulnerabilities/711777/) ([search](http://search.nix.gsc.io/?q=libtiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtiff+in%3Apath&type=Code))  tiff: three vulnerabilities
   - [x] [`#598449`](https://lwn.net/Vulnerabilities/598449/) ([search](http://search.nix.gsc.io/?q=miniupnpc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=miniupnpc+in%3Apath&type=Code))  miniupnpc: denial of service
   - [x] [`#711779`](https://lwn.net/Vulnerabilities/711779/) ([search](http://search.nix.gsc.io/?q=onionshare&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=onionshare+in%3Apath&type=Code))  onionshare: file injection
   - [x] [`#711776`](https://lwn.net/Vulnerabilities/711776/) ([search](http://search.nix.gsc.io/?q=pdns&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pdns+in%3Apath&type=Code))  pdns: multiple vulnerabilities
   - [x] [`#711461`](https://lwn.net/Vulnerabilities/711461/) ([search](http://search.nix.gsc.io/?q=qpid-java&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qpid-java+in%3Apath&type=Code))  qpid-java: information disclosure
   - [x] [`#711462`](https://lwn.net/Vulnerabilities/711462/) ([search](http://search.nix.gsc.io/?q=springframework-security&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=springframework-security+in%3Apath&type=Code))  springframework-security: security constraint bypass
   - [x] [`#711330`](https://lwn.net/Vulnerabilities/711330/) ([search](http://search.nix.gsc.io/?q=webkit2gtk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkit2gtk+in%3Apath&type=Code))  webkit2gtk: multiple vulnerabilities
   - [x] [`#711856`](https://lwn.net/Vulnerabilities/711856/) ([search](http://search.nix.gsc.io/?q=SimGear&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=SimGear+in%3Apath&type=Code))  SimGear: file overwrites
   - [x] [`#711582`](https://lwn.net/Vulnerabilities/711582/) ([search](http://search.nix.gsc.io/?q=docker&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=docker+in%3Apath&type=Code))  docker: privilege escalation
   - [x] [`#711781`](https://lwn.net/Vulnerabilities/711781/) ([search](http://search.nix.gsc.io/?q=irssi&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=irssi+in%3Apath&type=Code))  irssi: out of bounds read
   - [x] [`#711586`](https://lwn.net/Vulnerabilities/711586/) ([search](http://search.nix.gsc.io/?q=libgit2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libgit2+in%3Apath&type=Code))  libgit2: multiple vulnerabilities
   - [x] [`#711778`](https://lwn.net/Vulnerabilities/711778/) ([search](http://search.nix.gsc.io/?q=libx11&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libx11+in%3Apath&type=Code))  libx11: denial of service
   - [x] [`#711324`](https://lwn.net/Vulnerabilities/711324/) ([search](http://search.nix.gsc.io/?q=phpBB&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=phpBB+in%3Apath&type=Code))  phpBB: two vulnerabilities
   - [x] [`#711325`](https://lwn.net/Vulnerabilities/711325/) ([search](http://search.nix.gsc.io/?q=phpmyadmin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=phpmyadmin+in%3Apath&type=Code))  phpmyadmin: two vulnerabilities
   - [x] [`#657322`](https://lwn.net/Vulnerabilities/657322/) ([search](http://search.nix.gsc.io/?q=vzctl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vzctl+in%3Apath&type=Code))  vzctl: insecure ploop-based containers
   - [x] [`#711587`](https://lwn.net/Vulnerabilities/711587/) ([search](http://search.nix.gsc.io/?q=webmin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webmin+in%3Apath&type=Code))  webmin: largely unspecified

  ### pgbouncer (2 issues)
   - [x] [`#711323`](https://lwn.net/Vulnerabilities/711323/) ([search](http://search.nix.gsc.io/?q=pgbouncer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pgbouncer+in%3Apath&type=Code))  pgbouncer: authentication bypass
   - [x] [`#645925`](https://lwn.net/Vulnerabilities/645925/) ([search](http://search.nix.gsc.io/?q=pgbouncer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pgbouncer+in%3Apath&type=Code))  pgbouncer: denial of service


state: closed
title: oraclejdk: 8u111, 8u112 -> 8u121 [Critical security fix]
user_login: taku0
html_url: https://github.com/NixOS/nixpkgs/pull/21968
updated_at: 2017-01-18 12:37:39
body:
  ###### Motivation for this change

  - Critical security fix
  - Other updates

  http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixJAVA
  http://www.oracle.com/technetwork/java/javase/8u121-relnotes-3315208.html

  Note that PSU (8u122) is not released. It is identical to CPU version.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: munin: 2.0.25 -> 2.0.29
user_login: jpierre03
html_url: https://github.com/NixOS/nixpkgs/pull/21969
updated_at: 2017-01-18 13:57:40
body:
  ###### Motivation for this change

  Package upgrade

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: rrdtool: 1.5.5 -> 1.5.6
user_login: jpierre03
html_url: https://github.com/NixOS/nixpkgs/pull/21970
updated_at: 2017-01-21 23:13:45
body:
  ###### Motivation for this change

  Minor package upgrade.
  Whereas a new branch was released (1.6.x), this upgrade only contains bugfixes.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS - unstable
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: release.nix: Only build bootstrap tools when their system is supported
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/21971
updated_at: 2017-01-22 23:08:22
body:
  …is supported

  ###### Motivation for this change

  Otherwise, hydra will try and build and never be able to.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: pythonPackages.channels: 1.0.1 -> 1.0.2
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/21972
updated_at: 2017-01-18 16:07:47
body:
  ###### Motivation for this change


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: hy: init at 0.11.1
user_login: nixy
html_url: https://github.com/NixOS/nixpkgs/pull/21973
updated_at: 2017-01-19 09:32:10
body:
  This is the hy language, a dialect of lisp designed to be closely
  intergrated with python.

  ###### Motivation for this change
  I wanted to add the interpreter for Hy to nixpkgs. Seems like a cool project.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: Firewall improvements/suggestions/discussion
user_login: primeos
html_url: https://github.com/NixOS/nixpkgs/issues/21974
updated_at: 2018-11-04 03:04:13
body:
  Hey, I'd like to get some feedback on the following suggestions - thanks :)

  # Suggestion: Use allowPing for both IPv4 and IPv6

  ```
  networking.firewall.allowPing = mkOption {
    type = types.bool;
    default = true;
    description =
      ''
        Whether to respond to incoming ICMPv4 echo requests
        ("pings").  ICMPv6 pings are always allowed because the
        larger address space of IPv6 makes network scanning much
        less effective.
      '';
  };
  ```

  Even without considering the scanning I would suggest we use this option for
  IPv6 as well or rename it to something like
  `networking.firewall.allowIPv4Ping`.

  Regarding the scanning of the larger address space of IPv6: This isn't
  necessarily true since one can do way better than just brute-forcing a /64
  subnet (e.g. via DNS, patterns in the interface identifiers). Some references:
  - http://www.internetsociety.org/deploy360/blog/2015/02/ipv6-security-myth-4-ipv6-networks-are-too-big-to-scan/
  - https://tools.ietf.org/html/rfc7707#section-6
  - https://media.ccc.de/v/33c3-8061-you_can_-j_reject_but_you_can_not_hide_global_scanning_of_the_ipv6_internet

  # Suggestion: Use -w (wait for the xtables lock) everywhere

  ```
  helpers =
    ''
      # Helper command to manipulate both the IPv4 and IPv6 tables.
      ip46tables() {
        iptables -w "$@"
        ${optionalString config.networking.enableIPv6 ''
          ip6tables -w "$@"
        ''}
      }
    '';
  ```

  This covers most of the commands but there are `iptables` and `ip6tables`
  commands in the module where that `-w` option is missing. And users probably
  won't use that option as well (`additionalCommands`).

  Not using that option could cause some problems (race conditions):
  - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816087

  # Suggestion: Properly reset the firewall

  ```
  # Flush the old firewall rules.  !!! Ideally, updating the
  # firewall would be atomic.  Apparently that's possible
  # with iptables-restore.
  ip46tables -D INPUT -j nixos-fw 2> /dev/null || true
  for chain in nixos-fw nixos-fw-accept nixos-fw-log-refuse nixos-fw-refuse; do
    ip46tables -F "$chain" 2> /dev/null || true
    ip46tables -X "$chain" 2> /dev/null || true
  done
  ```

  This method keeps quite some state (e.g. policies, additional chains/tables)
  which shouldn't be the case imho (this is a functional OS at least :).

  Imho we should completely reset the firewall (also in the `firewall-stop`
  script and deprecate `extraStopCommands`). This could be done atomically with
  `iptables-restore` which could help us improving `firewall-reload` as well.

  Currently `firewall-reload` uses an additional chain to drop all traffic while
  reloading, but if the `firewall-start` script fails `firewall-stop` will be
  called which by default results in accepting all traffic.

  We could probably improve that situation by executing `iptables-save` before
  calling the `firewall-start` script and restoring the firewall to the previous
  state if the `firewall-start` script fails.

  After that we could try to make the whole operation atomic (there are other
  issues on this).

  # ~~Issue/Inconsistency: Connection tracking helpers~~ (edit by @globin: FIXED in #22034 )

  ```
  networking.firewall.connectionTrackingModules = mkOption {
    type = types.listOf types.str;
    default = [ "ftp" ];
    example = [ "ftp" "irc" "sane" "sip" "tftp" "amanda" "h323" "netbios_sn" "pptp" "snmp" ];
    description =
      ''
        List of connection-tracking helpers that are auto-loaded.
        The complete list of possible values is given in the example.

        As helpers can pose as a security risk, it is advised to
        set this to an empty list and disable the setting
        networking.firewall.autoLoadConntrackHelpers

        Loading of helpers is recommended to be done through the new
        CT target. More info:
        https://home.regit.org/netfilter-en/secure-use-of-helpers/
      '';
  };

  networking.firewall.autoLoadConntrackHelpers = mkOption {
    type = types.bool;
    default = true;
    description =
      ''
        Whether to auto-load connection-tracking helpers.
        See the description at networking.firewall.connectionTrackingModules

        (needs kernel 3.5+)
      '';
  };
  ```

  The description states that these helpers can pose a security risk and should
  therefore not be used.

  However the default value of `networking.firewall.connectionTrackingModules` is
  `[ "ftp" ]` and `networking.firewall.autoLoadConntrackHelpers` is enabled by
  default.

  Do we need the `ftp` connection tracking helper for anything? If not I suggest
  we use the following defaults:

  ```
  networking.firewall.connectionTrackingModules = [ ];
  networking.firewall.autoLoadConntrackHelpers = !kernelCanDisableHelpers;
  ```

  Setting `networking.firewall.autoLoadConntrackHelpers = false` would be even
  better imho but it seems like that could lead to some problems:

  ```
  { assertion = cfg.autoLoadConntrackHelpers || kernelCanDisableHelpers;
    message = "This kernel does not support disabling conntrack helpers"; }
  ```


state: closed
title: Update python celery
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/21975
updated_at: 2017-01-19 09:34:34
body:
  ###### Motivation for this change

  This PR updates [celery](http://www.celeryproject.org/) to its upstream version. I’ve had to pin old versions of both celery and some of its dependencies to our current version since some other packages (including some core open stack packages) depends on them.

  In the current PR, the up to date derivations are not defined in term of overrides of the old one, but I can change this if it is preferred.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Why is there both an `intel-gpu-tools` and an `xorg.intelgputools`?
user_login: glaebhoerl
html_url: https://github.com/NixOS/nixpkgs/issues/21976
updated_at: 2017-01-19 08:45:22
body:
  ## Issue description

  Both of these exist in master:

  https://github.com/NixOS/nixpkgs/blob/master/pkgs/servers/x11/xorg/default.nix#L605
  https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/tools/misc/intel-gpu-tools/default.nix

  Is there a reason for it? As far as I can tell they seem to be the same software.


state: closed
title: kde5: fix error message in "Add Printer" dialog
user_login: bjornfor
html_url: https://github.com/NixOS/nixpkgs/pull/21977
updated_at: 2017-01-19 01:06:17
body:
  ###### Motivation for this change
  By adding missing 'system-config-printer' dbus service, we fix the following error in "Add Printer" dialog:

  Failed to group devices: 'The name org.fedoraproject.Config.Printing was not provided by any .service files'

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: youtube-dl: 2017.01.14 -> 2017.01.18
user_login: goetzst
html_url: https://github.com/NixOS/nixpkgs/pull/21978
updated_at: 2017-01-19 08:30:07
body:
  ###### Motivation for this change
  youtube-dl update
  most notable changes:
  * Apply custom config to final composite configuration
  * Improved protocol auto determining

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: remove xorg.intelgputools in favor of intel-gpu-tools
user_login: pSub
html_url: https://github.com/NixOS/nixpkgs/pull/21979
updated_at: 2017-01-19 10:05:11
body:
  ###### Motivation for this change
  There is no reason in having both and the latter is a
  separate derivation and thus easier to maintain.

  Closes #21976 

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: nodePackages: Add js-beautify
user_login: jbaum98
html_url: https://github.com/NixOS/nixpkgs/pull/21980
updated_at: 2017-07-24 01:38:07
body:
  ###### Motivation for this change

  Add [js-beautify](https://github.com/beautify-web/js-beautify) to `nodePackages`

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: python27Packages.influxdb: 0.1.12 -> 4.0.0
user_login: erictapen
html_url: https://github.com/NixOS/nixpkgs/pull/21981
updated_at: 2017-01-29 23:23:52
body:
  ###### Motivation for this change
  Updated, as the old package is not compatible with current InfluxDB versions.

  ###### Things done
  Updated package version and changed buildInputs as following:
  * requests -> requests2 as it is newer
  * added dateutil as it is needed
  * added tytz as it is needed
  * added six as it is needed


  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Add yubioath-desktop application and required pyscard module to suppo…
user_login: ronmeredith
html_url: https://github.com/NixOS/nixpkgs/pull/21982
updated_at: 2017-01-19 03:16:51
body:
  …rt it

  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Add yubioath-desktop application and required pyscard module
user_login: jonmeredith
html_url: https://github.com/NixOS/nixpkgs/pull/21983
updated_at: 2017-01-19 09:35:53
body:
  ###### Motivation for this change

  Adds support for the YubiKey OTP desktop app. Yubikeys are hardware authentication tokens you can use for 2FA.  There's already some support in Nix.

  The derivation should build without a Yubikey, you just won't be able to use it.

  With YubiKey inserted.
  ```
  jon@jdmt460s> ./result/bin/yubioath                             ~/nixos/nixpkgs
  GitHub:ronmeredith      xxxxxx
  ```

  And without

  ```
  jon@jdmt460s> ./result/bin/yubioath                             ~/nixos/nixpkgs
  Usage: yubioath show [OPTIONS] [QUERY]...

  Error: No YubiKey found!
  ```

  (apologies for the first pull request on this - it came from the wrong account so I close it)

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ccacheWrapper broken
user_login: arch1tect0r
html_url: https://github.com/NixOS/nixpkgs/issues/21984
updated_at: 2018-01-22 12:43:59
body:
  ## Issue description
  In channel nixpkgs-unstable ccacheWrapper is broken. I use it succesfully until this pull request https://github.com/NixOS/nixpkgs/pull/21415  was aceepted 

  ### Steps to reproduce
  ```
  nixpkgs.config = {
    replaceStdenv = { pkgs }: trace "Enabling CCACHE" pkgs.ccacheStdenv;

    packageOverrides = pkgs: rec {
      ccacheWrapper = pkgs.lib.overrideDerivation (pkgs.ccacheWrapper.override {
          extraConfig = ''export CCACHE_COMPRESS=1 CCACHE_BASEDIR=/tmp CCACHE_DIR=/build/.ccache CCACHE_UMASK=002 CCACHE_MAXSIZE=5G'';
          }) (p: {
      });
  };
  ```

  After that try to build pkgs.cpio with ccache or any other package.

  ## Technical details
  It's looks like override mechanism was broken. When I try to build cpio with dry-run option I get this log 
  ```
  trace: Enabling CCACHE
  these derivations will be built:
    /nix/store/3k02sr9jmrflm8y5py9ccbil7hhv195v-cpio-2.12.drv
  these paths will be fetched (0.00 MiB download, 196.52 MiB unpacked):
    /nix/store/34vcv9j3w7d7niwand7dl8axy7c65zfr-ccache-links
    /nix/store/3al38ybllhnlckcjv1p35lm8cq0rhz55-coreutils-8.26
    /nix/store/49hz360b2i923wg8dcccwlbqc8yv4yii-glibc-2.24-dev
    /nix/store/4qkwbyayzvlsmwzj0y6mfw8awjf5fbd0-binutils-2.27
    /nix/store/63bjxmzwyqxikc537h5a915nhkbwi2qs-xz-5.2.2-bin
    /nix/store/7cfyhcd43xv8qz4x4lshz1llmbji3d35-patchelf-0.9
    /nix/store/7fka3pzc9jy29yxqdwr5g6bsg7s9hscx-ccache-3.2.5
    /nix/store/7szd9c3c688bf11hdzk6ml8lfnwr47r2-findutils-4.6.0
    /nix/store/94fbfg42f3sinwk17xfz2jjzg5v677vq-paxctl-0.9
    /nix/store/a3khm6g2lqp13a08r7y064dl5ysyrx08-gawk-4.1.3
    /nix/store/ap833cngp04ks5jnk11643ra899hrzpr-gzip-1.8
    /nix/store/bxy81zk2qix008a5hrkg6srvkbb2b7y4-stdenv
    /nix/store/cg0gxn11n6sadfrw3p7l8rh053gn3f0z-bash-4.4-p5
    /nix/store/gdw5qz99ihbv3l3nc91jdynfm3va46qq-zlib-1.2.10
    /nix/store/gq48z8ywqabwpf96k497chw52f5ypbs3-patch-2.7.5
    /nix/store/hq2xb24mnwczmf6qsxn9cvvi3n95cnw3-gnugrep-2.27
    /nix/store/hs8iwavmxmczvyxhjzwqdal4r8m7fxki-acl-2.2.52
    /nix/store/jar52969wyf10sh2wj62ipfjiw7xaq2j-gcc-5.4.0-lib
    /nix/store/jkas4im9rr89n86h8p4sh3p6j3zdapcr-glibc-2.24-bin
    /nix/store/jm6y7lwqhvxxg594ywi4ks7m3znfa4qi-gnumake-4.2.1
    /nix/store/jzrvam7wnb9rh3xb4c0napfwwggqyy3d-linux-headers-4.4.10
    /nix/store/kk71vkqipf30qc165718jmp0s8cggn2y-glibc-2.24
    /nix/store/lbpsvbylaki21vq14ncjvzzq8gln497v-xz-5.2.2
    /nix/store/m08mp1p349yq21ziii7a4il7knsahbzk-diffutils-3.5
    /nix/store/m3fmn3y2g95dnpirwg5zsbj08k3aw6xc-gnutar-1.29
    /nix/store/mvdbnyv9di3kkgp691rj98fyh24vk9lc-cpio-2.12.tar.bz2
    /nix/store/mzq2vxaa21hl0i3q8c8pk51ss9ix6dl7-ed-1.13
    /nix/store/ncqx1bmw4a6bpczyr08fz48467b2i7qw-CVE-2015-1197-cpio-2.12.patch
    /nix/store/nfkp1py9r5wdgpwy8wcivdhx6m06k9jy-attr-2.4.47
    /nix/store/py72h78ry1a6593dzv5qx75kaqrpnkgq-ccache-links-wrapper
    /nix/store/r9naizgz7w8wwsb64j2ir0fp4qqhlgc6-bzip2-1.0.6.0.1
    /nix/store/rmrkgnkdghahq7kjr1p1isv3d88npkb7-gnused-4.3
    /nix/store/yai0jb6s2myp7n5iziqa2nfwrvnbxi3c-gcc-5.4.0
    /nix/store/yn142bzjxlngbvikkw5qgwzpy1ynbikj-bzip2-1.0.6.0.1-bin
    /nix/store/zwsnrscqhqsghz3jzrhbbrjx6v8hxmmm-pcre-8.39
  ```

  Inside scripts of ccache-links that wraps compiler should be environment params that was overrided by packageOverrides and replaceStdenv. But ccache-links only fetch from cache and they don't contains override option extraConfig.

  ```
  cat /nix/store/34vcv9j3w7d7niwand7dl8axy7c65zfr-ccache-links/bin/gcc

  #!/bin/sh

  exec /nix/store/7fka3pzc9jy29yxqdwr5g6bsg7s9hscx-ccache-3.2.5/bin/ccache /nix/store/yai0jb6s2myp7n5iziqa2nfwrvnbxi3c-gcc-5.4.0/bin/gcc "$@"
  ```

  * System: Ubuntu 16.04.1 LTS
  * Nix version: 1.11.4(not depend, upper version has the same problem)
  * Nixpkgs version: upstream from nixpkgs-unstable


state: closed
title: styx-themes.agency: fix version typo
user_login: ericsagnes
html_url: https://github.com/NixOS/nixpkgs/pull/21985
updated_at: 2017-01-19 08:45:22
body:
  ###### Motivation for this change

  Fixing version name typo.

  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: screen: 4.4.0 -> 4.5.0
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/21986
updated_at: 2017-01-19 08:42:28
body:
  See http://lists.gnu.org/archive/html/info-gnu/2017-01/msg00007.html
  for release announcement.

  ###### Motivation for this change


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: libkrb5: fix issue #16161.
user_login: ivan-tkatchev
html_url: https://github.com/NixOS/nixpkgs/pull/21987
updated_at: 2017-01-20 09:29:51
body:
  ###### Motivation for this change

  See issue #16161.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: RaspberryPi boot loader: fix booting Raspberry Pi 3
user_login: wizeman
html_url: https://github.com/NixOS/nixpkgs/pull/21988
updated_at: 2017-02-12 00:48:58
body:
  ###### Motivation for this change

  This PR makes the Raspberry Pi boot loader boot the Raspberry Pi 3 correctly (apart from not generating/overwriting `/boot/config.txt`, like it would be necessary for the other Raspberry Pi models).

  In addition to what was already being done for the other Raspberry Pi models, this basically just copies the .DTB files of the default installed kernel to `/boot`, and deletes any old .DTB files that could have been lying around in that directory.

  I have also fixed a bug where all `/boot/old/xx-initrd` files (where `xx` is a small number between 1 and the number of system profile generations) were getting accidentally deleted after having been created.

  Note that this PR does not copy old .DTB files to `/boot/old`, especially because maintaining the same deduplicating scheme seems like it would greatly complicate the code (but perhaps I am mistaken). However, there's nothing in this PR that would prevent that from being done in the future.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: scotch package broken when installing on Debian
user_login: mdaiter
html_url: https://github.com/NixOS/nixpkgs/issues/21989
updated_at: 2017-01-25 13:51:01
body:
  ## Issue description
  When attempting to install the `scotch` package on Ubuntu, the `make` command fails with the following error:

  `
  ../../lib/libscotch.a(parser_ll.o): In function `scotchyylex':
  parser_ll.c:(.text+0xe87): undefined reference to `scotchyywrap'
  collect2: error: ld returned 1 exit status
  make[2]: *** [Makefile:50: amk_grf] Error 1
  make[2]: Leaving directory '/tmp/nix-build-scotch-6.0.4.drv-0/scotch_6.0.4/src/scotch'
  make[1]: *** [Makefile:59: scotch] Error 2
  make[1]: Leaving directory '/tmp/nix-build-scotch-6.0.4.drv-0/scotch_6.0.4/src/scotch'
  make: *** [Makefile:94: scotch] Error 2
  builder for ‘/nix/store/jdjr5x3sgjj9ca3whgcg6k2fbqqajkb8-scotch-6.0.4.drv’ failed with exit code 2
  error: build of ‘/nix/store/jdjr5x3sgjj9ca3whgcg6k2fbqqajkb8-scotch-6.0.4.drv’ failed
  `


  ### Steps to reproduce
  1. Fresh-install a Nix package manager onto a Debian (Ubuntu) 14.04 system.
  2. Update channel.
  3. Attempt install.


  ## Technical details

  * System: 
  No LSB modules are available.
  Distributor ID:	Ubuntu
  Description:	Ubuntu 14.04.5 LTS
  Release:	14.04
  Codename:	trusty
  * Nix version: nix-env (Nix) 1.11.6
  * Nixpkgs version: error: file ‘nixpkgs’ was not found in the Nix search path (add it using $NIX_PATH or -I)


state: closed
title: utillinux: undo seccomp sandbox and improve purity
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/21990
updated_at: 2017-01-22 13:15:02
body:
  ###### Motivation for this change

   the patch for CVE-2016-2779 was reverted by upstream and was not adopted
   by any other downstream distributions. Upstream waits for a better fix
   in the kernel: https://www.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28-ReleaseNotes

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ipfs: Set IPFS_PATH globally when daemon is enabled
user_login: Baughn
html_url: https://github.com/NixOS/nixpkgs/pull/21992
updated_at: 2017-06-15 14:28:31
body:
  ###### Motivation for this change

  There's little point to running a system-wide daemon which can't be accessed.

  Setting IPFS_PATH allows users other than `ipfs` to use the ipfs commands.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: haskellPackages.gi-pangocairo fails to build
user_login: deepfire
html_url: https://github.com/NixOS/nixpkgs/issues/21993
updated_at: 2017-02-24 15:01:10
body:
  ## Issue description
  `gi-pango` is essentially unavailable, since the most common case is for it to be used with cairo via pangocairo.

  ```
  deepfire@andromedae:~/src$ nix-shell -p haskellPackages.gi-pangocairo
  these derivations will be built:
    /nix/store/m7pdfp6vfgmh418gkk6i6wzpw4j8bs1x-gi-pangocairo-1.0.11.drv
  building path(s) ‘/nix/store/jiszf5159x9gxvc4mam7dyv8kxc081fl-gi-pangocairo-1.0.11’
  setupCompilerEnvironmentPhase
  Build with /nix/store/6nawh234zi6hbwyj8r83c0myz2sk2scm-ghc-8.0.1.
  unpacking sources
  unpacking source archive /nix/store/sgd10ifvvc7wkzjy1a1ni714rsyixrnq-gi-pangocairo-1.0.11.tar.gz
  source root is gi-pangocairo-1.0.11
  setting SOURCE_DATE_EPOCH to timestamp 1482837289 of file gi-pangocairo-1.0.11/stack.yaml
  patching sources
  compileBuildDriverPhase
  setupCompileFlags: -package-db=/tmp/nix-build-gi-pangocairo-1.0.11.drv-0/package.conf.d -j1 -threaded -L/nix/store/a438r7c5w8dr118sfl2wpd9r8rfvjr6b-cairo-1.14.8/lib -L/nix/store/xp725ljpfh2x5
  xci19x994p67kdrmpcv-glib-2.50.2/lib -lcairo-gobject -lcairo -lgobject-2.0 -lglib-2.0
  [1 of 1] Compiling Main             ( Setup.hs, /tmp/nix-build-gi-pangocairo-1.0.11.drv-0/Main.o )
  Linking Setup ...
  configuring
  configureFlags: --verbose --prefix=/nix/store/jiszf5159x9gxvc4mam7dyv8kxc081fl-gi-pangocairo-1.0.11 --libdir=$prefix/lib/$compiler --libsubdir=$pkgid --with-gcc=gcc --package-db=/tmp/nix-build-gi-pangocairo-1.0.11.drv-0/package.conf.d --ghc-option=-optl=-Wl,-rpath=/nix/store/jiszf5159x9gxvc4mam7dyv8kxc081fl-gi-pangocairo-1.0.11/lib/ghc-8.0.1/gi-pangocairo-1.0.11 --enable-split-objs --disable-library-profiling --disable-profiling --enable-shared --enable-library-vanilla --enable-executable-dynamic --enable-tests --extra-include-dirs=/nix/store/67lnryknlfir3sq9g2mar335i9ammr5m-cairo-1.14.8-dev/include --extra-lib-dirs=/nix/store/67lnryknlfir3sq9g2mar335i9ammr5m-cairo-1.14.8-dev/lib --extra-include-dirs=/nix/store/gmwzdyxng38dhlh5g18b62y0dr40va18-libXext-1.3.3-dev/include --extra-lib-dirs=/nix/store/gmwzdyxng38dhlh5g18b62y0dr40va18-libXext-1.3.3-dev/lib --extra-include-dirs=/nix/store/8778qz0hf3jsvgwiiwldvxjinysv9yc4-xproto-7.0.31/include --extra-lib-dirs=/nix/store/8778qz0hf3jsvgwiiwldvxjinysv9yc4-xproto-7.0.31/lib --extra-include-dirs=/nix/store/zi9cd9lss0yfwxix2mqfcfppfjsgr98c-libXau-1.0.8-dev/include --extra-lib-dirs=/nix/store/zi9cd9lss0yfwxix2mqfcfppfjsgr98c-libXau-1.0.8-dev/lib --extra-lib-dirs=/nix/store/h7mlw56yl03lqbwkpi6jnpvn88r0qk21-libXau-1.0.8/lib --extra-include-dirs=/nix/store/hfiixc5291wj8rqwbsl1b7p4q0q73412-xextproto-7.3.0/include --extra-lib-dirs=/nix/store/hfiixc5291wj8rqwbsl1b7p4q0q73412-xextproto-7.3.0/lib --extra-lib-dirs=/nix/store/sfh7by3lmb032lp7yi600l3ja9gkb249-libXext-1.3.3/lib --extra-include-dirs=/nix/store/l89708h8xkc4mic303pwpkfgj8ym61zd-fontconfig-2.12.1-dev/include --extra-lib-dirs=/nix/store/l89708h8xkc4mic303pwpkfgj8ym61zd-fontconfig-2.12.1-dev/lib --extra-include-dirs=/nix/store/f03di2jyh25m7zxqivdq2rb1vg222l7v-freetype-2.6.5-dev/include --extra-lib-dirs=/nix/store/f03di2jyh25m7zxqivdq2rb1vg222l7v-freetype-2.6.5-dev/lib --extra-include-dirs=/nix/store/w95hz9gg3wnxq20xsjb5dwwh72nixsps-zlib-1.2.10-dev/include --extra-lib-dirs=/nix/store/w95hz9gg3wnxq20xsjb5dwwh72nixsps-zlib-1.2.10-dev/lib --extra-lib-dirs=/nix/store/gdw5qz99ihbv3l3nc91jdynfm3va46qq-zlib-1.2.10/lib --extra-include-dirs=/nix/store/9nykrlfv2fmx2sqli3g035slk9l7afdc-bzip2-1.0.6.0.1-dev/include --extra-lib-dirs=/nix/store/9nykrlfv2fmx2sqli3g035slk9l7afdc-bzip2-1.0.6.0.1-dev/lib --extra-lib-dirs=/nix/store/r9naizgz7w8wwsb64j2ir0fp4qqhlgc6-bzip2-1.0.6.0.1/lib --extra-include-dirs=/nix/store/k26lisf1hj24i2ahq4nv0riib4jm435r-libpng-apng-1.6.28-dev/include --extra-lib-dirs=/nix/store/k26lisf1hj24i2ahq4nv0riib4jm435r-libpng-apng-1.6.28-dev/lib --extra-lib-dirs=/nix/store/781s9dc59hf16279503nbx55wwjz9v65-libpng-apng-1.6.28/lib --extra-lib-dirs=/nix/store/08a1n3w2jyf0hrzrq5ssxhig5m156yif-freetype-2.6.5/lib --extra-lib-dirs=/nix/store/lgd612f6bwciqrcyfa0vrb3hmrnqjp7f-fontconfig-2.12.1-lib/lib --extra-include-dirs=/nix/store/nifzz8js2kp1kfvhvrzcjszbqh7g7ywd-expat-2.2.0-dev/include --extra-lib-dirs=/nix/store/nifzz8js2kp1kfvhvrzcjszbqh7g7ywd-expat-2.2.0-dev/lib --extra-lib-dirs=/nix/store/lac506c49ld1vcpzk6amqq1ypglcbcxy-expat-2.2.0/lib --extra-include-dirs=/nix/store/8xmm24c7wy56l9idhgz2k207pbnk1y6l-pixman-0.34.0/include --extra-lib-dirs=/nix/store/8xmm24c7wy56l9idhgz2k207pbnk1y6l-pixman-0.34.0/lib --extra-include-dirs=/nix/store/8l3dxbyrlsmxlcmfvd826wfls52r67sz-libXrender-0.9.10-dev/include --extra-lib-dirs=/nix/store/8l3dxbyrlsmxlcmfvd826wfls52r67sz-libXrender-0.9.10-dev/lib --extra-include-dirs=/nix/store/5hb0iwn4jzsqzmn8mv4y2hpm3v0afv8j-renderproto-0.11.1/include --extra-lib-dirs=/nix/store/5hb0iwn4jzsqzmn8mv4y2hpm3v0afv8j-renderproto-0.11.1/lib --extra-include-dirs=/nix/store/bgsx9jfqr9cma8i3qdm5smw64f4d3yj8-libX11-1.6.4-dev/include --extra-lib-dirs=/nix/store/bgsx9jfqr9cma8i3qdm5smw64f4d3yj8-libX11-1.6.4-dev/lib --extra-include-dirs=/nix/store/kh59mjag1mrbzc3mxg796xvh69mz015z-libxcb-1.12-dev/include --extra-lib-dirs=/nix/store/kh59mjag1mrbzc3mxg796xvh69mz015z-libxcb-1.12-dev/lib --extra-lib-dirs=/nix/store/h95kpf63pjk92jsni4p1wncfpfapd53f-libxcb-1.12/lib --extra-include-dirs=/nix/store/16dv748c79fw7h5g9hcmfr6689fws49y-kbproto-1.0.7/include --extra-lib-dirs=/nix/store/16dv748c79fw7h5g9hcmfr6689fws49y-kbproto-1.0.7/lib --extra-lib-dirs=/nix/store/221q2bqr497mbx6wllg7j7x48iq6xgif-libX11-1.6.4/lib --extra-lib-dirs=/nix/store/1gvfkkqjmid7958y5gfx8l0c8z4inxcl-libXrender-0.9.10/lib --extra-include-dirs=/nix/store/vwgfnmbw13nsj5dn1j4k4216629g4g9k-xcb-util-0.4.0-dev/include --extra-lib-dirs=/nix/store/vwgfnmbw13nsj5dn1j4k4216629g4g9k-xcb-util-0.4.0-dev/lib --extra-lib-dirs=/nix/store/6f9ixnf41mp3kii14a9f0x47fpw54vbj-xcb-util-0.4.0/lib --extra-include-dirs=/nix/store/4q23rjic0p32lmg7h4g2v1hkmr7mbbpm-glib-2.50.2-dev/include --extra-lib-dirs=/nix/store/4q23rjic0p32lmg7h4g2v1hkmr7mbbpm-glib-2.50.2-dev/lib --extra-include-dirs=/nix/store/p8vkwcn816zgk130ihdvlv11l9pm7gh9-libffi-3.2.1-dev/include --extra-lib-dirs=/nix/store/p8vkwcn816zgk130ihdvlv11l9pm7gh9-libffi-3.2.1-dev/lib --extra-lib-dirs=/nix/store/lf4crikwjgafbwr441qxjkmw4qgkg9vn-libffi-3.2.1/lib --extra-include-dirs=/nix/store/iyvj5p6xq12f5b24cjiqi4pphsvna0cc-glibc-iconv-2.24/include --extra-lib-dirs=/nix/store/xp725ljpfh2x5xci19x994p67kdrmpcv-glib-2.50.2/lib --extra-include-dirs=/nix/store/xnvw5i2hisp7vd3zbir2s5ixzshqyhcq-mesa-noglu-13.0.3-dev/include --extra-lib-dirs=/nix/store/xnvw5i2hisp7vd3zbir2s5ixzshqyhcq-mesa-noglu-13.0.3-dev/lib --extra-include-dirs=/nix/store/qykaky31ncaxk272qmybjzy96x2cga07-libXdamage-1.1.4-dev/include --extra-lib-dirs=/nix/store/qykaky31ncaxk272qmybjzy96x2cga07-libXdamage-1.1.4-dev/lib --extra-include-dirs=/nix/store/wk4agav574jnpvgi8fbknbvmrgvs0637-damageproto-1.2.1/include --extra-lib-dirs=/nix/store/wk4agav574jnpvgi8fbknbvmrgvs0637-damageproto-1.2.1/lib --extra-include-dirs=/nix/store/xkz4rpi8rvkgrn6y1ws1iswigmx3mmvb-libXfixes-5.0.2-dev/include --extra-lib-dirs=/nix/store/xkz4rpi8rvkgrn6y1ws1iswigmx3mmvb-libXfixes-5.0.2-dev/lib --extra-include-dirs=/nix/store/nd87gqp8w34kjz81fs2zq2din88ivn7x-fixesproto-5.0/include --extra-lib-dirs=/nix/store/nd87gqp8w34kjz81fs2zq2din88ivn7x-fixesproto-5.0/lib --extra-lib-dirs=/nix/store/gf9v9s9wrh5rchhrdjcan0k2cvsbvj8y-libXfixes-5.0.2/lib --extra-lib-dirs=/nix/store/7km4n144dfsnzglkamd1kbhxbi2np8v2-libXdamage-1.1.4/lib --extra-include-dirs=/nix/store/x4pv226jafsc6hpb372ihxc3nq01pwk3-libXxf86vm-1.1.4-dev/include --extra-lib-dirs=/nix/store/x4pv226jafsc6hpb372ihxc3nq01pwk3-libXxf86vm-1.1.4-dev/lib --extra-include-dirs=/nix/store/z38rp2klqikyfk0b0hlacwzvsbnpwwg6-xf86vidmodeproto-2.3.1/include --extra-lib-dirs=/nix/store/z38rp2klqikyfk0b0hlacwzvsbnpwwg6-xf86vidmodeproto-2.3.1/lib --extra-lib-dirs=/nix/store/s3s809vq68vz1vlixrn7blhyz4p02pjk-libXxf86vm-1.1.4/lib --extra-include-dirs=/nix/store/351vfyyg0jfvfm8gvra5xrcppln8bmbr-libdrm-2.4.74-dev/include --extra-lib-dirs=/nix/store/351vfyyg0jfvfm8gvra5xrcppln8bmbr-libdrm-2.4.74-dev/lib --extra-lib-dirs=/nix/store/j7xwl14cwrapvpa2lbd0vjk2llviva7w-libdrm-2.4.74/lib --extra-lib-dirs=/nix/store/s53c2gdckv1wdinkwddggn3syyq3jim2-mesa-noglu-13.0.3/lib --extra-lib-dirs=/nix/store/a438r7c5w8dr118sfl2wpd9r8rfvjr6b-cairo-1.14.8/lib --extra-include-dirs=/nix/store/b7mwz2r6zyx94r6grbv7r12v2jn11faq-gobject-introspection-1.50.0-dev/include --extra-lib-dirs=/nix/store/b7mwz2r6zyx94r6grbv7r12v2jn11faq-gobject-introspection-1.50.0-dev/lib --extra-lib-dirs=/nix/store/m2fqz2jr5qa26hb2c6xflsdd4rzzdd9d-gobject-introspection-1.50.0/lib --extra-include-dirs=/nix/store/6xnq3g9mgqqrksp0484sg6w7xpkcgxdc-pango-1.40.3-dev/include --extra-lib-dirs=/nix/store/6xnq3g9mgqqrksp0484sg6w7xpkcgxdc-pango-1.40.3-dev/lib --extra-include-dirs=/nix/store/a51ckjcs6yf2wq31hzxxvwmnm4z20l51-harfbuzz-1.4.1-dev/include --extra-lib-dirs=/nix/store/a51ckjcs6yf2wq31hzxxvwmnm4z20l51-harfbuzz-1.4.1-dev/lib --extra-include-dirs=/nix/store/8pi4vrmv7w9mc5z5lxji4s2p0qw7ja2q-graphite2-1.3.6/include --extra-lib-dirs=/nix/store/8pi4vrmv7w9mc5z5lxji4s2p0qw7ja2q-graphite2-1.3.6/lib --extra-lib-dirs=/nix/store/5l2sadw53a5qyrs45xppi350ylm2f97n-harfbuzz-1.4.1/lib --extra-include-dirs=/nix/store/v4jbg0qds7g64h38binjzzbg0hmbff29-libXft-2.3.2-dev/include --extra-lib-dirs=/nix/store/v4jbg0qds7g64h38binjzzbg0hmbff29-libXft-2.3.2-dev/lib --extra-lib-dirs=/nix/store/jr9cxzd7vfxqafzbwka8zb8lg9k4qy65-libXft-2.3.2/lib --extra-lib-dirs=/nix/store/2y1zhn3p36c98a32vmd8i2qjdk4qlkyk-pango-1.40.3/lib
  Configuring gi-pangocairo-1.0.11...
  Setup: Encountered missing dependencies:
  haskell-gi >=0.20 && <1, haskell-gi-base >=0.20 && <1
  builder for ‘/nix/store/m7pdfp6vfgmh418gkk6i6wzpw4j8bs1x-gi-pangocairo-1.0.11.drv’ failed with exit code 1
  error: build of ‘/nix/store/m7pdfp6vfgmh418gkk6i6wzpw4j8bs1x-gi-pangocairo-1.0.11.drv’ failed
  /home/deepfire/.nix-profile/bin/nix-shell: failed to build all dependencies
  ```

  ### Steps to reproduce
  ..as shown above.


  ## Technical details

  * System: 17.03.git.4a662e5 (Gorilla)
  * Nix version: nix-env (Nix) 1.11.6
  * Nixpkgs version: "17.03.git.4a662e5206"


state: closed
title: impure path when trying to build opencv with cuda
user_login: jascase901
html_url: https://github.com/NixOS/nixpkgs/issues/21994
updated_at: 2017-05-16 18:57:20
body:
  ## Issue description
  running nix-shell . with default.nix that sets enableCuda to true causes opencv to fail building with
   
  impure path `/lib64/libz.so' used in link
  collect2: error: ld returned 1 exit status


  ### Steps to reproduce
  nix-shell .

  ##### Default.nix:
  ```
  let
    pkgs = import <nixpkgs> {};
    stdenv = pkgs.stdenv;
    cuda-opencv3 = pkgs.opencv3.override{
  enableCuda = true;
  };
  in rec {
    examplecuda = stdenv.mkDerivation rec {
      name = "example-cuda";
      src = ./.;
      buildInputs = [pkgs.cmake cuda-opencv3 pkgs.cudatoolkit pkgs.linuxPackages.nvidia_x11 pkgs.makeWrapper ];

      preBuild = ''
        export CUDA_PATH="${pkgs.cudatoolkit}"
      '';

      installPhase = ''
        mkdir -p "$out/bin"
        cp -r ./bin/*/*/release/* "$out/bin"

        for file in `ls $out/bin`; do
        	  echo "$file";
  	  wrapProgram "$out/bin/$file" \
  	              --prefix LD_LIBRARY_PATH ":" "${pkgs.linuxPackages.nvidia_x11}/lib"
        done
      '';


    };
  }
  ```

  ## Technical details

  * System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)
  Centos 7
  3.10.0-327.22.2.el7.x86_64

  * Nix version: (run `nix-env --version`)
  nix-env (Nix) 1.11.4

  * Nixpkgs version: (run `nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion`)
  17.03pre97542.c1ecf36


state: closed
title: Fix OpenCL support
user_login: abbradar
html_url: https://github.com/NixOS/nixpkgs/pull/21995
updated_at: 2017-01-20 09:09:17
body:
  ###### Motivation for this change

  This makes OpenCL work properly on NixOS. `ocl-icd` now searches for .icd vendor files in `/run/opengl-drivers{,32}/etc/OpenCL/vendors`. This means that you can add OpenCL drivers to `hardware.opengl.extraPackages{,32}` and have them available.

  Also moved Nvidia .icd file to the right place.

  This was tested with Beignet and `opencl-info` (both architectures); seem to work fine.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  cc @kierdavis 


state: closed
title: Newsbeuter: fix darwin build and podbeuter download
user_login: nicknovitski
html_url: https://github.com/NixOS/nixpkgs/pull/21996
updated_at: 2017-01-20 09:33:36
body:
  ###### Motivation for this change

  I've been installing newsbeuter with homebrew, but I noticed that whenever I tried to download anything in podbeuter, it would segfault.  That got me off my butt to get the whole thing working via nix instead.

  I'm willing to add myself as a maintainer.

  ###### Things done

  - ~~[ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)~~
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - ~~[ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`~~
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: blockdiag: use version as part of name
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/21997
updated_at: 2017-03-01 03:06:48
body:
  ###### Motivation for this change

  All the other "diags" have the version as part of the name, so I had to run ```blockdiag --version``` to find out which version I had.

  Probably the world's smallest PR ever submitted....

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: DNS related changes
user_login: rnhmjoj
html_url: https://github.com/NixOS/nixpkgs/pull/21999
updated_at: 2017-02-15 14:29:04
body:
  ###### Motivation for this change
  I decided to migrate my homeserver to NixOS and found a few things still missing from nixpkgs.
  This PR mainly focuses on the DNS stack, changes are:

   1.  DNSChain: fixed the broken node package and improved the service
   2. PDNS Recursor: added a package and a nixos module
   3. Namecoind: modified the server so that it can run even with the default config
   4. DNScrypt: added a nixos module for the wrapper server and updated the proxy package

  ###### Things done

  - [x] Tested using sandboxing (I tested individually each commits in a VM and the whole changes in a real machine)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  I think it should be possible to pull these commits separately if you think it's too much for a single PR.


state: closed
title: swig: fix problem similar to #16161.
user_login: ivan-tkatchev
html_url: https://github.com/NixOS/nixpkgs/pull/22000
updated_at: 2017-01-20 11:01:03
body:
  ###### Motivation for this change

  See issue #16161, where building libkrb5 fails on Debian machines when sandboxing isn't used.

  The same problem happens when building swig.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Qemu CVEs
user_login: nlewo
html_url: https://github.com/NixOS/nixpkgs/pull/22001
updated_at: 2017-01-20 11:28:15
body:
  ###### Motivation for this change

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: swig: fix problem similar to #16161.
user_login: ivan-tkatchev
html_url: https://github.com/NixOS/nixpkgs/pull/22002
updated_at: 2017-01-20 12:06:03
body:
  ###### Motivation for this change

  Update to pull request #22000; sorry, it seems like both swig 2 and 3 suffer from the same problem.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: pythonPackages.matplotlib: 1.5.3 -> 2.0.0
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/22003
updated_at: 2017-01-30 17:19:17
body:
  ###### Motivation for this change

  All the derivations that fails to pass `nox-review` also fails to build before this update:

  * `python35Packages.Pweave`
  * `python35Packages.joblib`
  * `python35Packages.librosa`
  * `python35Packages.oger`

  cc @FRidh 

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: dovecot-pigeonhole: crash in sieve plugin when trying to execute a program
user_login: tg-x
html_url: https://github.com/NixOS/nixpkgs/issues/22004
updated_at: 2017-01-21 22:05:09
body:
  ## Issue description

  The dovecot sieve plugin crashes when trying to execute a program via the `execute` command in a sieve script.
  This is after upgrading dovecot 2.2.27 from 2.2.25 and dovecot-pigeonhole from 0.4.3 to 0.4.10

  dovecot.log:
  ```
  lda(mail): Error: program `/home/mail/bin/notify.sh' terminated abnormally, signal 11
  ```

  dmesg:
  ```
  dovecot-lda[7814] general protection ip:7f72b8c99286 sp:7ffdeccca478 error:0 in libc-2.24.so[7f72b8c19000+195000]
  ```

  ### Steps to reproduce

  notify.sh:
  ```
  #!/bin/sh

  echo "$1"
  ```

  .dovecot.sieve:
  ```
  execute "notify.sh" [ "hello" ];
  ```

  make it crash:
  ```
  $ cat mail | dovecot-lda
  ```

  ### Core dump

  ```
  Core was generated by `/nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/bin/../libexec/dovecot/dovecot-lda'.
  Program terminated with signal SIGSEGV, Segmentation fault.
  #0  strlen () at ../sysdeps/x86_64/strlen.S:106
  106     ../sysdeps/x86_64/strlen.S: No such file or directory.
  (gdb) bt
  #0  strlen () at ../sysdeps/x86_64/strlen.S:106
  #1  0x00007ff0ac692233 in _IO_vfprintf_internal (s=s@entry=0x7fff5768b640, format=<optimized out>, format@entry=0x2236918 "chroot(%s) failed: Bad address", 
      ap=ap@entry=0x7fff5768b8a0) at vfprintf.c:1637
  #2  0x00007ff0ac73f0c6 in ___vsnprintf_chk (s=0x2236832 "chroot(", maxlen=<optimized out>, flags=1, slen=<optimized out>, 
      format=0x2236918 "chroot(%s) failed: Bad address", args=0x7fff5768b8a0) at vsnprintf_chk.c:63
  #3  0x00007ff0acaa650c in str_vprintfa () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot.so.0
  #4  0x00007ff0aca7c937 in default_handler () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot.so.0
  #5  0x00007ff0aca7ccad in default_fatal_handler () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot.so.0
  #6  0x00007ff0aca13666 in i_fatal () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot.so.0
  #7  0x00007ff0acaa2152 in restrict_access () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot.so.0
  #8  0x00007ff0aca746ed in program_client_local_connect () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot.so.0
  #9  0x00007ff0aca739f2 in program_client_run_async () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot.so.0
  #10 0x00007ff0aca73b71 in program_client_run () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot.so.0
  #11 0x00007ff0abb79093 in cmd_execute_operation_execute ()
     from /nix/store/xs5v1m9abs519cvbjl6wh5rj861lyh4d-dovecot-pigeonhole-0.4.10/lib/dovecot/sieve/lib90_sieve_extprograms_plugin.so
  #12 0x00007ff0abdb94cc in sieve_interpreter_continue ()
     from /nix/store/xs5v1m9abs519cvbjl6wh5rj861lyh4d-dovecot-pigeonhole-0.4.10/lib/dovecot-2.2-pigeonhole/libdovecot-sieve.so.0
  #13 0x00007ff0abdb96eb in sieve_interpreter_run ()
     from /nix/store/xs5v1m9abs519cvbjl6wh5rj861lyh4d-dovecot-pigeonhole-0.4.10/lib/dovecot-2.2-pigeonhole/libdovecot-sieve.so.0
  #14 0x00007ff0abdcc950 in sieve_run ()
     from /nix/store/xs5v1m9abs519cvbjl6wh5rj861lyh4d-dovecot-pigeonhole-0.4.10/lib/dovecot-2.2-pigeonhole/libdovecot-sieve.so.0
  #15 0x00007ff0abdcd4b7 in sieve_execute ()
     from /nix/store/xs5v1m9abs519cvbjl6wh5rj861lyh4d-dovecot-pigeonhole-0.4.10/lib/dovecot-2.2-pigeonhole/libdovecot-sieve.so.0
  #16 0x00007ff0ac02fca8 in lda_sieve_deliver_mail () from /run/current-system/sw/lib/dovecot/lib90_sieve_plugin.so
  #17 0x00007ff0ad049b59 in mail_deliver () from /nix/store/wd2aqi3hf5s1pghsw9p3kk2yk602j468-dovecot-2.2.27/lib/dovecot/libdovecot-lda.so.0
  #18 0x00000000004028e6 in main ()
  ```

  ## Technical details

  * System: 16.09.git.6b28bd0 (Flounder)
  * Nix version: nix-env (Nix) 1.11.6
  * Nixpkgs version: 16.09.1512.6b28bd0
  * Kernel version: 4.8.17


state: open
title: nixos-rebuild overwrites existing files in /etc
user_login: bennofs
html_url: https://github.com/NixOS/nixpkgs/issues/22005
updated_at: 2017-01-23 23:49:30
body:
  As it is implemented currently, nixos-rebuild will overwrite existing files in /etc. Wouldn't it be better if instead of overwriting them, it printed a warning? 


state: closed
title: facter: 3.4.1 -> 3.5.1 and related deps
user_login: womfoo
html_url: https://github.com/NixOS/nixpkgs/pull/22006
updated_at: 2017-04-30 11:44:48
body:
  ###### Motivation for this change

  bump facter to latest upstream

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: ark: add security patch for CVE-2017-5330
user_login: bachp
html_url: https://github.com/NixOS/nixpkgs/pull/22007
updated_at: 2019-04-17 01:45:36
body:
  ###### Motivation for this change

  Fixes CVE-2017-5330 as mentioned in #21967

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Haskell: tasty-ant-xml is broken with ghc7103
user_login: woehr
html_url: https://github.com/NixOS/nixpkgs/issues/22008
updated_at: 2017-01-31 20:11:16
body:
  ## Issue description

  When trying to build tasty-ant-xml, the following error is reported.

  ```
  Configuring tasty-ant-xml-1.0.4...
  Setup: At least the following dependencies are missing:
  directory >=1.2.6.2, filepath >=1.4.1.0
  builder for ‘/nix/store/9c37m8ffxmplxgg2in95gcwli758vs1z-tasty-ant-xml-1.0.4.drv’ failed with exit code 1
  ```

  ### Steps to reproduce

  ```
  nix-env -i -A haskell.packages.ghc7103.tasty-ant-xml -f <nixpkgs>
  ```

  ## Technical details

  * System: Arch Linux (`uname -r` -> 4.8.13-1-ARCH)
  * Nix version: nix-env (Nix) 1.11.6
  * Nixpkgs version: "17.03pre-git" (commit 305e3e27b6a5346d24fd8cdbf71667245707bbb0)


state: closed
title: vmTools: add Ubuntu 16.10 and Debian 9pre
user_login: AtnNn
html_url: https://github.com/NixOS/nixpkgs/pull/22009
updated_at: 2018-10-13 22:10:14
body:
  The newest version of these distros was missing.

  I had to make the dependency resolution a little smarter to support stretch.

  - [x] Tested using sandboxing
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change
  - [ ] Tested execution of all binary files
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: haskellPackages.tinc: 20161102 -> 20161119
user_login: robbinch
html_url: https://github.com/NixOS/nixpkgs/pull/22010
updated_at: 2017-01-21 17:45:10
body:
  ###### Motivation for this change
  Version upgrade. Documentation for actualizing a Cabal install plan with Nix can be found at https://github.com/sol/tinc/blob/nixpkgs/NIX.md.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Fix syncthing-gtk hard coded paths
user_login: thanegill
html_url: https://github.com/NixOS/nixpkgs/pull/22012
updated_at: 2017-01-24 17:42:41
body:
  ###### Motivation for this change
  syncthing-gtk.desktop link is broken.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: supertuxkart: 0.9 -> 0.9.2
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/22013
updated_at: 2017-03-01 03:13:27
body:
  ###### Motivation for this change

  Also known as the "get ready for babysitting the nieces" release.

  There were a number of obsolete dependencies, so I stripped out the unnecessary ones.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: Raspberry Pi 3 Support
user_login: fdietze
html_url: https://github.com/NixOS/nixpkgs/issues/22014
updated_at: 2019-07-19 15:58:00
body:
  So far, I was unable to install nix on rpi3. What I tried:

  * Flash Armv7 image to sdcard and boot Pi. Kernel does not boot, missing dtb files. So I copied bcm2710-rpi-3-b.dtb and bcm2837-rpi-3-b.dtb from the official raspberry image on the sdcard.
  * It boots but has a black screen.
  * I copied my public key into /root/.ssh/authorized_keys, bootet pi and blindly typed `systemctl start sshd`. It worked! Now I had ssh access to my pi.
  * I changed my configuration.nix to:
  ```
  { config, pkgs, lib, ... }:
   {
     # NixOS wants to enable GRUB by default
     boot.loader.grub.enable = false;
     # Enables the generation of /boot/extlinux/extlinux.conf
     boot.loader.generic-extlinux-compatible.enable = true;
   
     boot.kernelPackages = pkgs.linuxPackages_rpi;
   
     # Manual doesn't currently evaluate on ARM
     services.nixosManual.enable = false;
   
     nix.binaryCaches = lib.mkForce [ "http://nixos-arm.dezgeg.me/channel" ];
     nix.binaryCachePublicKeys = [ "nixos-arm.dezgeg.me-1:xBaUKS3n17BZPKeyxL4JfbTqECsT+ysbDJz29kLFRW0=%" ];
   
     # File systems configuration for using the installer's partition layout
     fileSystems = {
       "/boot" = {
         device = "/dev/disk/by-label/NIXOS_BOOT";
         fsType = "vfat";
       };
       "/" = {
         device = "/dev/disk/by-label/NIXOS_SD";
         fsType = "ext4";
       };
     };


     environment.systemPackages = [ pkgs.vim ];
     services.openssh.enable = true;
     users.extraUsers.root.openssh.authorizedKeys.keys =
  	   [ "ssh-rsa  xxxxxxxxxxxxx" ];
   }
  ```
  Then:
  ```
  nixos-rebuild switch --fast --option binary-caches http://nixos-arm.dezgeg.me/channel --option binary-cache-public-keys nixos-arm.dezgeg.me-1:xBaUKS3n17BZPKeyxL4JfbTqECsT+ysbDJz29kLFRW0=%
  ```

  After success, the newly installed rpi-kernel does not boot. Any Ideas?


state: closed
title: buildPythonPackage: accept developmentPrefix and send `pip` output to stderr
user_login: timbertson
html_url: https://github.com/NixOS/nixpkgs/pull/22015
updated_at: 2017-01-24 10:15:41
body:
  ###### Motivation for this change

  This changes 2 small parts about `buildPythonPackage`. I'm happy to split them into two PRs if you prefer, but I figured I'd combine them since they require a rebuild of all python packages.

  1) send `pip install` output to `stderr`. The nix integration in direnv (https://direnv.net/, from @zimbatm) relies on `nix-shell --run CMD` producing _only_ the output from `CMD` on stdout (it dumps the environment from inside nix-shell and recreates it in your current shell). The python shellHook logs the following `pip` boilerplate to stdout, which breaks this functionality:

  ```
  Obtaining file:///home/tim/dev/python/test
  Installing collected packages: test
    Running setup.py develop for test
  Successfully installed test
  ```

  This is clearly output that belongs on `stderr`, so I've added a `>&2` redirect in the shell hook.

  2) allow passing `developmentPrefix` to `buildPythonPackage`. This is used only in the shellHook, and allows a specific path to be used for development installation, rather than creating a tempfile each time. This keeps the $PATH reproducible, which is important if you store it somewhere to be reused at a later time (since nix-shell can take a while on complex inputs, I cache the results used by `direnv` to set my environment). The default behaviour is unchanged.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: w3m: fix package name
user_login: rasendubi
html_url: https://github.com/NixOS/nixpkgs/pull/22016
updated_at: 2017-01-21 18:22:10
body:
  ```
  nix-repl> builtins.parseDrvName "w3m-v0.5.3+git20161120"
  { name = "w3m-v0.5.3+git20161120"; version = ""; }

  nix-repl> builtins.parseDrvName "w3m-0.5.3+git20161120"
  { name = "w3m"; version = "0.5.3+git20161120"; }
  ```

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Revert "nmap: use python infra's .withPackages"
user_login: bjornfor
html_url: https://github.com/NixOS/nixpkgs/pull/22017
updated_at: 2017-02-01 19:39:35
body:
  ###### Motivation for this change

  This reverts commit 278d3050ae85e959e4c6485b5ad43bbba96eb829 because it
  breaks zenmap:

  ```
  $ zenmap
  Could not import the zenmapGUI.App module: 'No module named
  zenmapGUI.App'.
  I checked in these directories:
      /nix/store/2hiz11plgjdrk2mziwc2jcxqalqh9hii-nmap-graphical-7.12/bin
      /home/bfo/forks/nixpkgs
      /nix/store/0l4lriqf07qah8c0kh9kcyc8l5iyij16-python-2.7.12/lib/python27.zip
      /nix/store/0l4lriqf07qah8c0kh9kcyc8l5iyij16-python-2.7.12/lib/python2.7
      /nix/store/0l4lriqf07qah8c0kh9kcyc8l5iyij16-python-2.7.12/lib/python2.7/plat-linux2
      /nix/store/0l4lriqf07qah8c0kh9kcyc8l5iyij16-python-2.7.12/lib/python2.7/lib-tk
      /nix/store/0l4lriqf07qah8c0kh9kcyc8l5iyij16-python-2.7.12/lib/python2.7/lib-old
      /nix/store/0l4lriqf07qah8c0kh9kcyc8l5iyij16-python-2.7.12/lib/python2.7/lib-dynload
      /nix/store/0l4lriqf07qah8c0kh9kcyc8l5iyij16-python-2.7.12/lib/python2.7/site-packages
  If you installed Zenmap in another directory, you may have to add the
  modules directory to the PYTHONPATH environment variable.
  ```

  (And I'm not motivated enough to forward-fixing it, so just revert.)

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: vim plugins: add gruvbox
user_login: schneefux
html_url: https://github.com/NixOS/nixpkgs/pull/22018
updated_at: 2017-01-21 15:12:23
body:
  ###### Motivation for this change
  added gruvbox color scheme

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: ZfsUnstable: 0.7.0-rc2 -> 0.7.0-rc3
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/22020
updated_at: 2017-01-21 23:02:35
body:
  ###### Motivation for this change

  As the default LTS kernel now requires zfsUnstable should we enable it by default? @fpletz 

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: buildRustPackage: use frozen cargo fetches
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/22021
updated_at: 2018-09-06 08:47:18
body:
  cargo will not try to download anything from the web but will instead
  return a clean error message stating which dependency is not up to date.

  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ocamlPackages.apron: init at 20160125
user_login: vbgl
html_url: https://github.com/NixOS/nixpkgs/pull/22023
updated_at: 2017-10-02 04:37:06
body:
  ###### Motivation for this change

  APRON is an OCaml library that is dedicated to the static analysis of the numerical variables of a program by Abstract Interpretation. It is in particular used in the Frama-C static analyzer.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: nextcloud: 11.0.0 -> 11.0.1
user_login: schneefux
html_url: https://github.com/NixOS/nixpkgs/pull/22024
updated_at: 2017-01-21 22:26:22
body:
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: Update django guardian
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/22025
updated_at: 2017-01-25 08:05:51
body:
  ###### Motivation for this change


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Termite broken
user_login: asymmetric
html_url: https://github.com/NixOS/nixpkgs/issues/22026
updated_at: 2017-01-28 00:09:31
body:
  ## Issue description

  The package `termite` has been [marked as broken](https://github.com/NixOS/nixpkgs/commit/189f64d8e7f6a5213ba639bd48638f1db057eaa9). Trying to install results in the following error:

  ```
  vteseq.cc:3419:42: error: call of overloaded 'vteseq_n_lookup(const char*&, int&)' is ambiguous
     seqhandler = vteseq_n_lookup (name, len);
  ```

  Why was the package marked as broken? Is there a way to help fix it?

  ### Steps to reproduce

  `nix-env -Paq nixpkgs.termite`

  ## Technical details

  * System:
  ```
  LSB Version:    core-9.20160110ubuntu5-amd64:core-9.20160110ubuntu5-noarch:printing-9.20160110ubuntu5-amd64:printing-9.20160110ubuntu5-noarch:security-9.20160110ubuntu5-amd64:security-9.20160110ubuntu5-noarch
  Distributor ID: Ubuntu
  Description:    Ubuntu 16.10
  Release:        16.10
  Codename:       yakkety
  ```
  * Nix version: `nix-env (Nix) 1.11.4`
  * Nixpkgs version: `"17.03pre99246.dc64133"`


state: closed
title: go: fix tests on darwin
user_login: LnL7
html_url: https://github.com/NixOS/nixpkgs/pull/22027
updated_at: 2017-01-23 23:27:45
body:
  ###### Motivation for this change

  This should fix go_bootstrap and go_1_6 on darwin

  ###### Things done

  - [x] Tested using sandboxing / without xcode
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] macOS
     - [x] No changes for other platforms
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Tahoe-LAFS version bump
user_login: MostAwesomeDude
html_url: https://github.com/NixOS/nixpkgs/pull/22028
updated_at: 2017-01-24 17:49:01
body:
  ###### Motivation for this change

  Tahoe-LAFS 1.12 came out.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  I've tested the new "Magic Folder" functionality on two NixOS clients. I've also deployed the server to a live grid, and it is working great.


state: closed
title: paratype-pt-sane: s/sane/sans/
user_login: Minoru
html_url: https://github.com/NixOS/nixpkgs/pull/22029
updated_at: 2017-01-22 17:26:04
body:
  ###### Motivation for this change

  The typo in the name of the package makes it much harder to find.

  ###### Things done

  Is there more extensive documentation on these checks? The info available in this list and in the Nix manual wasn't sufficient for me to perform them. A lot of PRs get merged without any of these boxes checked, though, so I won't explain the troubles I run into unless someone wants me to.

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Updated versions of various Jetbrains applications, including PHPStor…
user_login: joncojonathan
html_url: https://github.com/NixOS/nixpkgs/pull/22030
updated_at: 2017-01-26 12:41:47
body:
  Update versions for some Jetbrains products, including PHPStorm, IntelliJ and PyCharm (non-exhaustive list).

  ###### Motivation for this change
  Version of PHPStorm and IntelliJ I installed was out of date - contributing a correction.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
     - Tested pycharm-community, phpstorm and idea-community
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: 'nixos-rebuild (switch|boot)' doesn't name or date boot entries, or let you do so manually
user_login: ToxicFrog
html_url: https://github.com/NixOS/nixpkgs/issues/22031
updated_at: 2017-07-25 19:10:39
body:
  When running `nixos-rebuild boot` or `nixos-rebuild switch`, it emits a new entry in the boot menu for the built configuration, but this entry is merely labeled "NixOS Generation #", with the # an incrementing integer. This means that when testing a number of configurations, it's very easy to end up with dozens of bootloader entries and no good way to tell which is which. At minimum, appending the date and time at which each one was built would be useful; what would be even better would be a way to append a name to a generation, either at build time or post hoc (e.g. `nixos-rename-generation "Known Good"`).

  * System: 16.09.1512.6b28bd0 (Flounder)
  * Nix version: nix-env (Nix) 1.11.6
  * Nixpkgs version: 16.09.1512.6b28bd0


state: closed
title: Factorio update
user_login: bflyblue
html_url: https://github.com/NixOS/nixpkgs/pull/22032
updated_at: 2017-01-25 20:39:39
body:
  ###### Motivation for this change

  A new version of Factorio was released on 24 Nov 2016.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: qgis: 2.16.2 -> 2.18.3
user_login: jpierre03
html_url: https://github.com/NixOS/nixpkgs/pull/22033
updated_at: 2017-01-23 10:13:17
body:
  ###### Motivation for this change

  Upgrade QGis package with new release http://qgis.org/en/site/forusers/visualchangelog218/index.html

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Disable conntrack helper autoloading by default
user_login: fpletz
html_url: https://github.com/NixOS/nixpkgs/pull/22034
updated_at: 2017-01-26 00:19:07
body:
  ###### Motivation for this change

  Connection tracking helper autoloading was disabled by default in the Linux kernel since 4.7 and poses a security risk if not configured properly. This PR syncs this default setting with NixOS.

  https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=486dcf43da7815baa615822f3e46883ccca5400f

  This broke our NAT tests because they were testing active FTP and thus relying on the ftp connection tracking helper. ~This test was removed.~ We have a new test for conntrack helpers.

  Additionally, as all our Linux kernels support connection tracking helper autoloading, this feature was removed from our kernel expressions.

  cc #21974


state: closed
title: neofetch: init at 2.0.2
user_login: alibabzo
html_url: https://github.com/NixOS/nixpkgs/pull/22036
updated_at: 2017-01-22 20:52:06
body:
  ###### Motivation for this change
  Neofetch is a useful system utility [which is in many distro repositories][1]. It's not yet in nixpkgs.

  [1]: https://github.com/dylanaraps/neofetch/wiki/Installation#osdistro-packages
  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: hubicfuse: 2.1.0 -> 3.0.0
user_login: jpierre03
html_url: https://github.com/NixOS/nixpkgs/pull/22037
updated_at: 2017-01-24 22:08:07
body:
  ###### Motivation for this change

  Package upgrade.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: flannel service: fix enable expression
user_login: rycee
html_url: https://github.com/NixOS/nixpkgs/pull/22038
updated_at: 2017-01-22 21:09:18
body:
  Need to surround the equality check in parentheses, otherwise the expression is interpreted as

  ```
  services.etcd.enable = (mkDefault cfg.etcd.endpoints) == ["http://127.0.0.1:2379"];
  ```

  which gets very confused.


state: closed
title: msgpack-tools: init at 0.6
user_login: alibabzo
html_url: https://github.com/NixOS/nixpkgs/pull/22039
updated_at: 2017-01-22 21:38:26
body:
  ###### Motivation for this change
  msgpack-tools is a set of 2 useful utilities for converting between MessagePack and JSON format. It's useful both for debugging and for scripts that need to send MessagePack data.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: zulu: init at 8.19.0.1
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/22040
updated_at: 2017-01-25 12:31:30
body:
  ###### Motivation for this change
  Add a certified OpenJDK build.
  Azul Zulu is a popular alternative.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  I added Darwin and tested it as much as I could but I cannot run it without an actual macOS.


state: closed
title: DNSChain: fix broken package and improve service
user_login: rnhmjoj
html_url: https://github.com/NixOS/nixpkgs/pull/22041
updated_at: 2017-06-03 10:01:34
body:
  ###### Motivation for this change
  See #21999 

  ###### Things done

  - [x] Tested using sandboxing
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change
  - [x] Tested execution of all binary files
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: dnscrypt-wrapper: add service
user_login: rnhmjoj
html_url: https://github.com/NixOS/nixpkgs/pull/22043
updated_at: 2017-02-15 14:34:47
body:
  ###### Motivation for this change
  See #21999 

  ###### Things done

  - [x] Tested using sandboxing
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change (none)
  - [x] Tested execution of all binary files (none)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: namecoind: refactor nixos module
user_login: rnhmjoj
html_url: https://github.com/NixOS/nixpkgs/pull/22044
updated_at: 2017-09-12 22:57:31
body:
  ###### Motivation for this change
  See #21999 

  needs #22041 to be merged first.

  ###### Things done

  - [x] Tested using sandboxing
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change (none)
  - [x] Tested execution of all binary files (none)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: PowerDNS Recursor: add package and service
user_login: rnhmjoj
html_url: https://github.com/NixOS/nixpkgs/pull/22045
updated_at: 2017-02-15 14:36:29
body:
  ###### Motivation for this change
  See #21999 

  ###### Things done

  - [x] Tested using sandboxing
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change (none)
  - [x] Tested execution of all binary files
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: NagiosPlugins: 2.1.4 -> 2.2.0, add SSL
user_login: DerTim1
html_url: https://github.com/NixOS/nixpkgs/pull/22046
updated_at: 2017-01-24 01:14:32
body:
  ###### Motivation for this change
  - Update Nagios-Plugins to newest version
  - Add openssl to buildinputs to configure with ssl-support (e. g. to use nagios-command check_imap with **--ssl** option). 

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of some binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ihaskell fails to build
user_login: vaibhavsagar
html_url: https://github.com/NixOS/nixpkgs/issues/22047
updated_at: 2019-01-28 22:58:27
body:
  ## Issue description

  IHaskell is not GHC 8 compatible, and so it doesn't build on 16.09 onwards. Instead I get this error:

  ```
  Setup: Encountered missing dependencies:
  base >=4.6 && <4.9, ghc >=7.6 && <7.11
  builder for ‘/nix/store/9bbjk1lknn94y4b7wf9wd9pfgfcfms37-ghc-parser-0.1.8.0.drv’ failed with exit code 1
  cannot build derivation ‘/nix/store/ybqc2p7qk1p2i8ka889xh5ksid1xv0kn-ghc-8.0.1-with-packages.drv’: 1 dependencies couldn't be built
  cannot build derivation ‘/nix/store/6mg7sz0sl6ki7r877g3agc3slqwmnlsf-ihaskell-0.8.4.0.drv’: 1 dependencies couldn't be built
  building path(s) ‘/nix/store/qjcg07sw2hammhy3jxkarif5i0jszpgk-ipykernel-4.3.1.tar.gz’
  cannot build derivation ‘/nix/store/5z2rsbvisv77hqz7rmxlhg1m7kfj7c7y-ihaskell-with-packages.drv’: 1 dependencies couldn't be built
  error: build of ‘/nix/store/5z2rsbvisv77hqz7rmxlhg1m7kfj7c7y-ihaskell-with-packages.drv’ failed
  ```


  ### Steps to reproduce

  ```bash
  nix-build '<nixpkgs>' -A ihaskell
  ```


  ## Technical details

  * System: 16.09.1512.6b28bd0 (Flounder)
  * Nix version: nix-env (Nix) 1.11.6
  * Nixpkgs version: 16.09.1512.6b28bd0


state: closed
title: Fixing the wrong Git Commit hash in docker version
user_login: vdemeester
html_url: https://github.com/NixOS/nixpkgs/pull/22048
updated_at: 2017-01-23 10:18:31
body:
  `DOCKER_GITCOMMIT` needs to match the tagged commit used to build the
  binary. The current commit refers to 1.12.1 and wasn't update each
  time we updated the package. Using a variable near the version and
  adding a comment so we don't forget to update next time.

  Signed-off-by: Vincent Demeester <vincent@sbr.pm>

  ###### Motivation for this change

  The current output of `docker version` is incoherent (tag is 1.13.0 but the commit refers to 1.12.1). My bad for not seeing this when updating the package 😅 🐻.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: scotch: specify flex version
user_login: mdaiter
html_url: https://github.com/NixOS/nixpkgs/pull/22049
updated_at: 2017-01-23 11:58:10
body:
  ###### Motivation for this change
  For the scotch package, the `flex` version must be specified in order to ensure proper compilation.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: mongodb: 3.2.9 -> 3.4.1
user_login: Avaq
html_url: https://github.com/NixOS/nixpkgs/pull/22050
updated_at: 2017-11-02 18:13:35
body:
  ###### Motivation for this change

  The desire to use MondoDB's [`$replaceRoot`](https://docs.mongodb.com/manual/reference/operator/aggregation/replaceRoot/) aggregation operator.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: crystal: 0.20.4 -> 0.20.5
user_login: sifmelcara
html_url: https://github.com/NixOS/nixpkgs/pull/22051
updated_at: 2017-01-23 18:12:14
body:
  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: haskell: separate "essential" overrides from version overrides
user_login: bennofs
html_url: https://github.com/NixOS/nixpkgs/issues/22052
updated_at: 2017-07-23 22:47:26
body:
  ### Problem

  When defining your own package sets as an alternative to `hackage-packages.nix`, it would be nice to re-use `configuration-common.nix` for this package set. However, this is currently difficult due to `configuration-common.nix` also containing overrides of versions of specific packages or changing build flags and so on.

  ### Solution

  I would like to propose that `configuration-common.nix` should only contain overrides of one of the follow kinds:

  * Nix-specific configure flags that are needed to find native library dependencies in the nix store
  * Disabling test suites that rely on functionality not available in the nix sandbox (network, ...)
  * Something else that is essential for *every* package set that I forgot here?

  I suggest to move the remaining overrides to `configuration-hackage.nix`. What do you think?

  /cc @peti


state: closed
title: viber: 6.0.1.5 -> 6.5.5.1481
user_login: binarin
html_url: https://github.com/NixOS/nixpkgs/pull/22053
updated_at: 2017-01-23 15:42:12
body:
  ###### Motivation for this change

  Upstream package updated, hash has changed.
  Tray bug was fixed and I've removed workaround info.
  Properly handles multi-display configurations with different DPI.


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: trezord: init at 1.2.0
user_login: canndrew
html_url: https://github.com/NixOS/nixpkgs/pull/22054
updated_at: 2017-02-08 16:18:23
body:
  ###### Motivation for this change

  I want to use my trezor with NixOS.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: terragrunt: 0.9.1 -> 0.9.3
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/22055
updated_at: 2017-01-23 14:46:41
body:
  ###### Motivation for this change

  We need at least 0.9.2 as that fixes a super annoying ```--terragrunt-working-dir``` bug.

  ###### Things done

  - [X] Tested using sandboxing ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS, or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ansible2: 2.2.0.0 -> 2.2.1.0
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/22056
updated_at: 2017-01-27 09:18:37
body:
  ###### Motivation for this change

  2.2.1.0 (as well as 2.1.4) fix a fairly nasty CVE: https://lwn.net/Articles/711357/

  We do a few more things at the same time:

  a) ansible is an application, not a package, so move it out of python-packages.nix
  b) version 2.1 is an upstream supported version, so add that too
  c) create a generic builder for versions 1.9, 2.1 and 2.2
  d) fix ```kargo``` that depends on ```python2Packages.ansible2``` now that it has been moved out of ```pythonPackages```.

  This PR covers both security fixes, new branch of code (2.1.x) as well as refactoring of the builder (less code, yeay!!) which may be OK for unstable but not necessarily ```16.09```.

  Should we mark ansible 1 as broken as no fix has been released?

  @grahamc, how would like me to proceed?

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: top-level: add asOf helper
user_login: copumpkin
html_url: https://github.com/NixOS/nixpkgs/pull/22058
updated_at: 2017-01-26 20:18:53
body:
  I discussed this on IRC a while back. It's currently using import-from-derivation which isn't ideal, but works fine in practice, and allows us to request specific versions of nixpkgs. I often use something like this inside local default.nix to guarantee that multiple developers are using the exact same versions of dependencies and to get fine-grained control over when we upgrade them. As I mention in the comment, `fetchTarball` would have nicer behavior here, but at least for my uses, I need to lock down the sha256, so I figured I'd stick with this until a new version of Nix that supports a locked-down `fetchTarball` is released.

  I'd probably mandate that this not be used anywhere inside nixpkgs, but it can be really nice when depending on nixpkgs from external projects.

  I wasn't sure which parameters to pass through (the `inherit system config platform;` thing I have right now). Just naming all the parameters we pass into top-level.nix and passing them in doesn't work, probably due to the factoring out of the fixed points and impurities that @Ericson2314's been doing recently. Open to suggestions on how to do that better.

  cc @edolstra @shlevy @domenkozar


state: closed
title: fetchbower: fix SSL support
user_login: edofic
html_url: https://github.com/NixOS/nixpkgs/pull/22059
updated_at: 2017-01-23 21:27:58
body:
  ###### Motivation for this change
  `fetchbower` is does'nt handle SSL origins properly. This fixes #18454 

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  I tested this on a few bower packages and I successfully fetches them. 


state: open
title: No in-build execution for CMake managed builds
user_login: ck3d
html_url: https://github.com/NixOS/nixpkgs/issues/22060
updated_at: 2017-02-15 05:07:27
body:
  ## Issue description
  I try to migrate a library written in C++ build via CMake to Nix. The test executables also written in C++ are part of this project. CMake allows in-build execution (and therefor in-build testing), because it sets the RPATH for the build executable.

  Nixpkgs skips adding this RPATH by setting [CMAKE_SKIP_BUILD_RPATH`](https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/tools/build-managers/cmake/setup-hook.sh#L52). This behavior breaks the possibility to test the library or call built executables during build.

  ### Workarounds
  * Expand LD_LIBRARY_PATH; Following command gives an overview how many derivations tackle this issue.
  `.../nixpkgs $ git grep -E "LD_LIBRARY_PATH.*pwd"`
  * Install before checking/install project before checking/testing


  ## Proposal
  The canonical behavior of CMake should be preserved and CMAKE_SKIP_BUILD_RPATH should not be set.

  What do you think about this issue?


state: closed
title: python-protobuf: enable python3 and enable py3 tests
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/22061
updated_at: 2017-06-07 13:53:23
body:
  - moved expression out of python-packages
  - no significant changes how package is built except the supported
    python versions


  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: services/printing/cupsd.nix is broken: fails to wire in (correctly installed) ghostscript
user_login: deepfire
html_url: https://github.com/NixOS/nixpkgs/issues/22062
updated_at: 2017-01-23 17:01:43
body:
  ## Issue description

  ```
  Jan 23 18:39:29 andromedae cupsd[26324]: 3 filters for job:
  Jan 23 18:39:29 andromedae cupsd[26324]: pdftopdf (application/pdf to application/vnd.cups-pdf,
   cost 66)
  Jan 23 18:39:29 andromedae cupsd[26324]: gstoraster (application/vnd.cups-pdf to application/vn
  d.cups-raster, cost 99)
  Jan 23 18:39:29 andromedae cupsd[26324]: hpcups (application/vnd.cups-raster to printer/SD, cos
  t 0)
  ...
  Jan 23 18:39:30 andromedae cupsd[26324]: PID 26822 (/nix/store/93wbhp1pz4x7pfli3rnkijnyagdpdccg
  -cups-progs/lib/cups/filter/pdftopdf) exited with no errors.
  ...
  Jan 23 18:39:30 andromedae cupsd[26324]: Ghostscript command line: gs -dQUIET -dPARANOIDSAFER -
  dNOPAUSE -dBATCH -dNOINTERPOLATE -dNOMEDIAATTRS -sstdout=%stderr -sOutputFile=%stdout -sDEVICE=
  cups -sMediaType=Plain -sOutputType=0 -r600x600 -dMediaPosition=7 -dDEVICEWIDTHPOINTS=595 -dDEV
  ICEHEIGHTPOINTS=841 -dcupsBitsPerColor=1 -dcupsColorOrder=0 -dcupsColorSpace=3 -dcupsRowCount=1
   -dcupsRowStep=2 -dcupsInteger0=26 -scupsPageSizeName=A4 -I/nix/store/nwdrn3sidwqzbdxzm3kgp4djc
  dqc0l7g-cups-2.1.4/share/cups/fonts -c \'<</.HWMargins[18.000000 14.000000 18.000000 14.000000]
   /Margins[0 0]>>setpagedevice\' -f -_
  ...
  Jan 23 18:39:30 andromedae cupsd[26324]: envp[32]=\"PATH=/nix/store/3al38ybllhnlckcjv1p35lm8cq0
  rhz55-coreutils-8.26/bin:/nix/store/rmrkgnkdghahq7kjr1p1isv3d88npkb7-gnused-4.3/bin:/nix/store/
  459ss5fhrbz8299h90pdpqpnb03v4y01-bc-1.06/bin:/nix/store/a3khm6g2lqp13a08r7y064dl5ysyrx08-gawk-4
  .1.3/bin:/nix/store/hq2xb24mnwczmf6qsxn9cvvi3n95cnw3-gnugrep-2.27/bin:/nix/store/gi2qk4pimynjhv
  pjqa8fh2wi28fffk6g-which-2.21/bin:/nix/store/wbmc1rslpm6dvja8nihhw3khkc5yrci3-cups-progs/lib/cu
  ps/filter:/nix/store/wbmc1rslpm6dvja8nihhw3khkc5yrci3-cups-progs/bin\"
  Jan 23 18:39:30 andromedae cupsd[26324]: envp[33]=\"AUTH_INFO_REQUIRED=username,password\"
  Jan 23 18:39:30 andromedae cupsd[26324]: envp[34]=\"PRINTER_STATE_REASONS=none\"
  Jan 23 18:39:30 andromedae cupsd[26324]: gs: No such file or directory
  Jan 23 18:39:30 andromedae cupsd[26324]: PID 26823 (/nix/store/93wbhp1pz4x7pfli3rnkijnyagdpdccg
  -cups-progs/lib/cups/filter/gstoraster) stopped with status 1.
  ```


  ### Steps to reproduce
  In `/etc/configuration.nix`:
  ```
    services.printing = {
      enable = true;
      drivers = [ pkgs.hplip ];
    };
  ```

  ## Technical details

  * System: 17.03.git.4a662e5 (Gorilla)
  * Nix version: nix-env (Nix) 1.11.6
  * Nixpkgs version: "17.03.git.4a662e5206"


state: open
user_login: deepfire
html_url: https://github.com/NixOS/nixpkgs/issues/22063
updated_at: 2017-01-23 23:48:26
title:
  should `nixos-rebuild switch` warn instead of silently failing to replace regular files with a symlink?

body:
  https://github.com/NixOS/nixpkgs/issues/22062 was caused by `nixos-rebuild switch` silently failing to update `/etc/cups/cupsd.conf`, which (for a trivial, boring reason) was a regular file on my system (as opposed to a Nix-controlled symlink to `/nix/store`), and which, to my demise, I failed to notice.

  Such _silent divergences_ from a declaratively stated configuration should be proclaimed, instead of ignored in silence.

  There's also an accompanying issue to this (silent overwrites of regular files in `/etc/` by generated symlinks): https://github.com/NixOS/nixpkgs/issues/22005

  Therefore, it appears as if there's not even a coherent policy on what happens -- sometimes the regular file silently wins, sometimes it's silently overwritten.

  It seems like some design work is due on the combined issue..


state: open
title: Cannot Browse Network Shares in Thunar
user_login: benrob0329
html_url: https://github.com/NixOS/nixpkgs/issues/22064
updated_at: 2018-02-07 15:12:41
body:
  ## Issue description
  I have samba, gvfs, fuse, and fusesmb enabled/loaded/installed. However, Thunar does not show anything on the network.


  ### Steps to reproduce
  Go into Thunar, click network. Mouse busy (background) cursor will appear, but nothing will happen.


  ## Technical details

  * System: NixOS: 16.09
  * Nix version: 1.11.6
  * Nixpkgs version: 16.09.1512.6b28bd0


state: closed
title: journalbeat service: init at 5.1.2
user_login: mbrgm
html_url: https://github.com/NixOS/nixpkgs/pull/22066
updated_at: 2017-01-24 17:56:49
body:
  Journalbeat is a log shipper from systemd/journald to
  Logstash/Elasticsearch. I added a package as well as a NixOS service
  module for it.

  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: Develop a universal web service definition
user_login: mbrgm
html_url: https://github.com/NixOS/nixpkgs/issues/22067
updated_at: 2017-06-03 08:11:14
body:
  NixOS needs a universal, webserver-agnostic webservice definition. Currently, most webservices are implemented as subservices for Apache httpd, but users should be free to choose the webserver they want to use. The wish for this definition was already mentioned in several issues, but afaik (please correct me if I'm wrong) not worked on in a coordinated way. To start, let's try to compile a list of actionable steps. Please feel free to contribute to this issue, add ToDo's to the list, offer your opinion on several topics or explain how you would propose to solve this problem.

  ## ToDo

  - [ ] Compile an overview of the status quo
    - [ ] Reference existing related issues
    - [ ] Create a list of existing httpd subservices
    - [ ] Create a list of other webservices, which are not implemented httpd subservices
  - [ ] Develop a concept for a universal web service definition
    - [ ] Collect what should be included, what should be left out
    - [ ] Discuss how a web service definition could be implemented (regular `services.<name>`, in the style of httpd subservices or something different...)
    - [ ] Define the interface for a web service definition
    - [ ] Implement the interface
  - [ ] Test the new web service definition
    - [ ] Investigate the current implementation of web services testing
    - [ ] Implement testing for the web service definition (test per webserver?)
  - [ ] Move existing webservices to new web service definition
    - [ ] Create new web service definition for existing httpd subservices
    - [ ] Create web service definition for web services, which are not implemented as a httpd subservice
    - [ ] Deprecate old httpd subservices?
    - [ ] Deprecate old non-httpd web services?

  ## Related issues
  - #6960 mentions having worked on a system, which is more intuitive than the current subservices system
  - #18977 proposes the definition of webservices as a regular NixOS service with individual webserver configs being an attribute of that service.
  - #19703 wants to implement a NextCloud subservice for lighttpd; the need for a universal web service definition was also mentioned


state: closed
title: gitlab-runner: 1.9.0 -> 1.10.0
user_login: bachp
html_url: https://github.com/NixOS/nixpkgs/pull/22068
updated_at: 2017-01-23 21:54:33
body:
  ###### Motivation for this change

  Update to latest version 1.10.0

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: vagrant: FIX #21365 add libxml2 and libxslt paths
user_login: kamilchm
html_url: https://github.com/NixOS/nixpkgs/pull/22069
updated_at: 2017-01-26 20:30:23
body:
  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  CC: @michalrus 


state: closed
title: khd: init at v1.1.4
user_login: LnL7
html_url: https://github.com/NixOS/nixpkgs/pull/22070
updated_at: 2017-01-24 17:58:50
body:
  ###### Motivation for this change

  A simple modal hototkey daemon for OSX

  ###### Things done

  - [x] Tested without xcode
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] macOS
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: kwm: init at 4.0.4
user_login: LnL7
html_url: https://github.com/NixOS/nixpkgs/pull/22072
updated_at: 2017-01-24 18:00:28
body:
  ###### Motivation for this change

  Tiling window manager with focus follows mouse for OSX.

  ###### Things done

  - [x] Tested without xcode
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] macOS
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: opencv-3.1: get ippicv from the nix store
user_login: basvandijk
html_url: https://github.com/NixOS/nixpkgs/pull/22074
updated_at: 2017-01-23 21:27:17
body:
  If ippicv can't be found in the directory `3rdparty/ippicv/downloads/${platform}-${md5}` it [will be downloaded](https://github.com/opencv/opencv/blob/3.1.0/3rdparty/ippicv/downloader.cmake#L62) instead. Commit 7fedbe7 accidentally swapped the md5 with the sha256 causing ippicv to be downloaded each time opencv gets build. This patch fixes that.


state: closed
title: aria2: 1.29.0 -> 1.31.0
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/22075
updated_at: 2017-01-23 23:09:26
body:
  ###### Motivation for this change

  Update `aria2` to version 1.31.0.

  [Changes](https://github.com/aria2/aria2/releases/tag/release-1.31.0)

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: Install ssh permitroot
user_login: bachp
html_url: https://github.com/NixOS/nixpkgs/pull/22076
updated_at: 2017-01-26 00:13:08
body:
  ###### Motivation for this change

  To make it easier to do an installation from a remote machine root login should be permitted on an installation CD.

  For a discussion see: #20718

  ###### Things done

  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested execution of iso (usually in `./result/iso/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: netdata: 1.4.0 -> 1.5.0
user_login: cransom
html_url: https://github.com/NixOS/nixpkgs/pull/22078
updated_at: 2017-01-23 22:49:25
body:
  ###### Motivation for this change
  Updating to the newest netdata to pick up some new features.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: opencv-3.1: make ippicv download URL consistent
user_login: basvandijk
html_url: https://github.com/NixOS/nixpkgs/pull/22079
updated_at: 2017-01-23 22:13:16
body:
  @bjornfor thanks for the quick merge of https://github.com/NixOS/nixpkgs/pull/22074. Could you also please merge the following patch which makes the ippicv download URL consistent with the URL defined in:

    https://github.com/opencv/opencv/blob/3.1.0/3rdparty/ippicv/downloader.cmake


state: closed
title: exercism: Broaden platforms to include darwin, etc
user_login: benley
html_url: https://github.com/NixOS/nixpkgs/pull/22080
updated_at: 2017-03-06 06:53:34
body:
  ###### Motivation for this change

  wanna use exercism on my mac

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [x] macOS
     - [x] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: groonga: 6.1.1 -> 6.1.5
user_login: ericsagnes
html_url: https://github.com/NixOS/nixpkgs/pull/22081
updated_at: 2017-01-24 10:28:10
body:
  ###### Motivation for this change

  Update groonga to latest version.
  Feature small aesthetic cleanup.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: Protect users when disabling users.mutableUsers
user_login: 3noch
html_url: https://github.com/NixOS/nixpkgs/issues/22082
updated_at: 2018-10-15 06:35:49
body:
  I stumbled upon the reality that turning off `users.mutableUsers` will only use passwords as they are defined in `users.users.<user>.password*` fields. If passwords are not set, then the user is not given a password and cannot login via password. Unfortunately in my case I did this and lost access to my computer. I had to use a bootable drive to add an SSH key to the root user so I could regain access. (Thanks @cleverca22!)

  Two things could have helped in this case:

    1. The docs in the *manual* do not mention how passwords are handled when `users.mutableUsers = false`. I made the mistake in believing that passwords would remain mutable, which I think is not too idiotic a conclusion because of how the manual is worded.
    2. We could add an assert that when `mutableUsers = false`, each normal user *must* have either a password or an SSH key. If neither is given, then it truly makes little sense to have the user at all, or at least have them be a normal user.

  @grahamc


state: closed
title: pasystray: 0.5.2 -> 0.6.0
user_login: kamilchm
html_url: https://github.com/NixOS/nixpkgs/pull/22083
updated_at: 2017-01-24 18:03:40
body:
  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ansible2: 2.2.0.0 -> 2.2.1.0
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/22085
updated_at: 2017-01-24 18:06:12
body:
  ###### Motivation for this change

  Fixes a nasty vulnerability.

  Further to #22056

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Cc @grahamc @globin 


state: closed
title: buildPythonPackage: send pip output to stderr
user_login: timbertson
html_url: https://github.com/NixOS/nixpkgs/pull/22086
updated_at: 2017-01-24 21:03:50
body:
  ###### Motivation for this change

  As explained in https://github.com/NixOS/nixpkgs/pull/22015, having `nix-shell` output go to `stdout` breaks tools which expect `nix-shell --run CMD` to just have the output from `CMD`. Plus, the output from `pip` doesn't look like it would ever belong on `stdout` anyway.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: smokeping: setuid for fping6
user_login: fadenb
html_url: https://github.com/NixOS/nixpkgs/pull/22087
updated_at: 2017-01-24 11:40:23
body:
  ###### Motivation for this change
  The new fping6 binary (#21950) needs to be setuid same as fping binary to be used by smokeping.

  ###### Things done
  - [x] Used this change for a week on our smokeping instance
  - [x] Tested execution of all binary files
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: haskellPackages.doctest-discover: fix
user_login: roberth
html_url: https://github.com/NixOS/nixpkgs/pull/22088
updated_at: 2017-06-27 15:08:24
body:
  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: quodlibet: rename to quodlibet, quodlibet-without-gst-plugins
user_login: deepfire
html_url: https://github.com/NixOS/nixpkgs/pull/22089
updated_at: 2017-01-25 20:33:56
body:
  ###### Motivation for this change

  The gst-plugin-less version is barely useful out of the box, so it is
  the one that should be relegated to a less prominent spot in the namespace.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: hexchat: 2.12.3 -> 2.12.4
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/22090
updated_at: 2017-01-24 18:06:58
body:
  ###### Motivation for this change

  There is a new release of `hexchat`.

  [**ChangeLog**](https://hexchat.readthedocs.io/en/latest/changelog.html)
  2.12.4 (2016-12-10)

  - fix issue with timers causing ping timeouts
  - fix building against OpenSSL 1.1
  - fix /exec output printing invalid utf8
  - replace doat plugin with an internal command
  - change how tab colors interact with plugins

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: firefox: 50.1.0 -> 51.0, firefox-esr: 45.6.0esr -> 45.7.0esr
user_login: taku0
html_url: https://github.com/NixOS/nixpkgs/pull/22092
updated_at: 2017-01-24 13:50:16
body:
  ###### Motivation for this change

  DO NOT MERGE THIS UNTIL `nss` IS UPDATED.

  The release notes have not been updated yet.
   
  https://www.mozilla.org/en-US/firefox/51.0/releasenotes/

  This release requires `nss >= 3.28.1`. @edolstra, could you update the `nss` package?

  See also #22093.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: firefox-bin: 50.1.0 -> 51.0
user_login: taku0
html_url: https://github.com/NixOS/nixpkgs/pull/22093
updated_at: 2017-01-24 14:17:55
body:
  ###### Motivation for this change

  The release notes have not been updated yet.

  https://www.mozilla.org/en-US/firefox/51.0/releasenotes/

  See also #22092.

  The binary version seems to be working with NSS 3.27.2.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: cbatticon: 1.6.4 -> 1.6.5
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/22094
updated_at: 2017-01-24 18:08:46
body:
  ###### Motivation for this change

  [ChangeLog](https://github.com/valr/cbatticon/blob/master/Changelog)


  2016-12-27  Valère Monseur  <valere.monseur@ymail.com>

   * Release 1.6.5
   * Fix #30 : notification spam when there are multiple batteries
   * Fix #33 : added a man page
   * Fix #34 : added Japanese translation

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: munin: 2.0.29 -> 2.0.30
user_login: jpierre03
html_url: https://github.com/NixOS/nixpkgs/pull/22095
updated_at: 2017-01-24 18:09:13
body:
  ###### Motivation for this change

  Munin http://munin-monitoring.org/ fixed some bugs and released a new stable version .

  ###### Things done

  - Built on platform(s)
     - [x] NixOS
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: [RFC] Add lifecycle stages to nixpkgs
user_login: moretea
html_url: https://github.com/NixOS/nixpkgs/pull/22096
updated_at: 2017-03-07 13:26:46
body:
  This morning, we chatted a bit in the IRC channel about how we could inform users that the channel that they are using is out of date. @grahamc offered to maintain 16.09 one more month after 17.03 is released, to provide some time for people to upgrade to the new stable release, before it becomes unsupported.

  ### Adding lifecycles to nixpkgs
  The idea is that a `nix-channel` evolves over time:
  ```
  unstable --> stable --> deprecated --> unsupported
  ```
  It is branched of master, undergoes stabilization after which it will be maintained until `$NEXT_RELEASE_DATE`. Then it becomes deprecated for one month (whilst we still maintain it). After  `$NEXT_RELEASE_DATE + 1 month` it will be unsupported.

  Once a channel becomes `deprecated`, users should be shown a warning telling them to upgrade, and inform them when the channel will become unsupported.

  Once a channel is unsupported, evaluation should be prevented by an `builtins.abort`. The abort message should include pointers on how to get the latest version of that release working.

  ---

  I understand that aborting is quite a heavy tool to use. I'm open to alternative suggestions. My main problem with `builtins.trace` is that it's quite hard to discover when you go for a cup of coffee and don't bother to scroll back up to the nix evaluation part.


state: closed
title: gnupg21: 2.1.17 -> 2.1.18
user_login: lsix
html_url: https://github.com/NixOS/nixpkgs/pull/22097
updated_at: 2017-01-24 18:09:46
body:
  See http://lists.gnu.org/archive/html/info-gnu/2017-01/msg00013.html
  for release announcement.

  ###### Motivation for this change


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: swift: init at 3.1
user_login: dtzWill
html_url: https://github.com/NixOS/nixpkgs/pull/22098
updated_at: 2017-03-29 01:39:54
body:
  Also add dependency 'libblocksruntime'.

  #11463

  ###### Motivation for this change


  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Review/testing/feedback requested!

  Short-term TODO:

  * [ ] Check what value is appropriate for 'license'
  * [ ] Is it okay to put a copy of `build-presets.ini` in the tree?
  * [x] Revisit packaging 3.0.2 (or a different release)
  * [x] Fix use of paxctl on machines without grsecurity enabled

  Things to pay attention to, and other thoughts:
  Misc notes:

  * Does not build nicely on Linux (non-NixOS) without sandbox, but I don't think that's a serious problem.
  * `swiftc`, `swift-pm`, and the swift REPL seem to work in my limited testing.
  * Tests are not executed, might be nice to fix and enable as many of these as possible.
  * A number of problems occur due to swift projects wanting everything to be prefixed with "/usr", to the point that this is hard-coded in a number of places.  I patch around the ones that broke functionality I tested but there's probably more.
  * Normally we use a cc-wrapper to fixup clang invocations but here I kludge them directly into the compiler O:).  This is done so the just-built clang can be used to build the rest of the code while still being able to find the paths to their build dependencies.  Even if this is okay, maybe the installed clang should be unmangled and wrapped with cc-wrapper?


state: open
title: trustedGrub build broken
user_login: yorickvP
html_url: https://github.com/NixOS/nixpkgs/issues/22099
updated_at: 2017-12-23 22:03:45
body:
  ## Issue description

  TrustedGrub fails to build.
  ```
  make[2]: *** [Makefile:7543: libgrubmods_a-grub_script.yy.o] Error 1
  ```
  ### Steps to reproduce
  ```
  nix-build '<nixpkgs>' -A trustedGrub
  ```
  ## Technical details

  * System: 17.03pre98682.f673243 (Gorilla)
  * Nix version: 1.11.4
  * Nixpkgs version: 17.03pre98682.f673243


state: closed
title: Apache Kafka module has awkward default configuration for brokerId
user_login: copumpkin
html_url: https://github.com/NixOS/nixpkgs/issues/22100
updated_at: 2017-01-25 03:17:04
body:
  [The default configuration](https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/misc/apache-kafka.nix) makes `brokerId` default to 0, which means you can only run one node with the default and then it'll complain that the broker with that ID is already registered. -1 seems like a better default, since that tells Kafka to pick a broker ID automatically.

  cc @ragnard @shlevy 


state: closed
title: Bye bye MD5
user_login: zimbatm
html_url: https://github.com/NixOS/nixpkgs/pull/22101
updated_at: 2017-01-25 08:07:49
body:
  ###### Motivation for this change

  This PR removes all remaining usage of MD5 as a source hash.

  I'm being a bit drastic in some cases

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Allow "meta" and "src" to evaluate in broken derivations
user_login: matthewbauer
html_url: https://github.com/NixOS/nixpkgs/issues/22102
updated_at: 2018-01-14 20:48:48
body:
  ## Issue description

  Occasionally we want to access attributes on derivations without actually building them. For instance, a Darwin-only derivation may want to share the same "src" attribute with a Linux-only derivation. Or we may want to determine what systems the platform builds on (see #21845).

  This may not be very easy to implement. Assertions abort evaluation, so perhaps we need something, else like a setup hook error?


state: closed
title: apache-kafka service: change default brokerId to -1
user_login: copumpkin
html_url: https://github.com/NixOS/nixpkgs/pull/22103
updated_at: 2017-01-25 03:17:04
body:
  A default of 0 means that if you deploy two NixOS boxes with the default configuration, the second will fail because the brokerId was already in use. Using -1 instead tells it to pick one automatically at first start.

  Fixes #22100 

  cc @ragnard @shlevy


state: closed
title: diagrams: Fix the 1.4.* versions of the ecosystem
user_login: aherrmann
html_url: https://github.com/NixOS/nixpkgs/pull/22104
updated_at: 2017-01-24 21:40:15
body:
  The affected packages now depend on:

     diagrams-core ==1.4.*
     diagrams-lib ==1.4.*
     optparse-applicative ==0.13.*


  CC: @peti

  ###### Motivation for this change

  Fix `diagrams_1_4` and `diagrams-pgf`

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: Generalize EC2 metadata gathering in NixOS
user_login: copumpkin
html_url: https://github.com/NixOS/nixpkgs/issues/22105
updated_at: 2017-01-26 17:23:31
body:
  Google Cloud supports something similar, as does packet.net. We could allow them all to configure themselves automatically at startup if we didn't hardcode the 169.254.169.254 URL and instead made it configurable.

  cc @rbvermaa @grahamc @edolstra 


state: closed
title: drake: init at 0.9.2.0.3.1
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/22106
updated_at: 2017-01-24 21:33:21
body:
  ###### Motivation for this change

  [Drake](https://rubygems.org/gems/drake/) is an auto-parallelizing branch of Rake, a Make-like program implemented in Ruby.

  It is needed to build MKVToolNix, which as of v9.8.0 does not bundle it anymore. See the pull request https://github.com/NixOS/nixpkgs/pull/22111.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: Somewhat saner cross-compiling through bootstrapping
user_login: Ericson2314
html_url: https://github.com/NixOS/nixpkgs/pull/22107
updated_at: 2017-01-24 20:09:57
body:
  #21915 got closed by mistake due to a force push. @shlevy I wrote docs so this should be ready to go unless we want someone to review the docs.

  The docs have some explicit "to be written" sections. I consider that fine, and the docs rightfully WIP, because some stuff will change with future PRs and there is little point writing it just to rewrite it.


state: closed
title: youtube-dl: 2017.01.22 -> 2017.01.24
user_login: goetzst
html_url: https://github.com/NixOS/nixpkgs/pull/22109
updated_at: 2017-01-24 21:36:07
body:
  ###### Motivation for this change
  youtube-dl update, most notable changes:
  * youtube: Fix nonexistent and private playlist detection

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: pydub: 0.16.7
user_login: shdpl
html_url: https://github.com/NixOS/nixpkgs/pull/22110
updated_at: 2017-01-24 21:36:38
body:
  ###### Motivation for this change
  New package

  ###### Things done
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  ---


state: closed
title: mkvtoolnix: 9.6.0 -> 9.8.0
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/22111
updated_at: 2017-01-24 21:34:17
body:
  ###### Motivation for this change

  - Update [MKVToolNix](https://mkvtoolnix.download/) to v9.8.0.
  - Add a build dependency on drake, because it is not bundled with MKVToolNix anymore since v9.8.0.
  - CURL is no longer used by MKVToolNix so the corresponding configure option is not valid anymore.
  - Changes: https://mkvtoolnix.download/doc/NEWS.md

  ###### New build dependency

  From now on MKVToolNix needs an external version of the drake package, which is added to the repository in pull request https://github.com/NixOS/nixpkgs/pull/22106.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: syncthing: create dataDir on PreStart
user_login: shdpl
html_url: https://github.com/NixOS/nixpkgs/pull/22112
updated_at: 2017-01-24 21:29:02
body:
  ###### Motivation for this change
  Syncthing service fails on new deployment as configured directory had to be manually created


state: closed
title: jwm: 1563 -> 1575
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/22113
updated_at: 2017-01-24 23:24:05
body:
  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: OCaml 4.04
user_login: vbgl
html_url: https://github.com/NixOS/nixpkgs/pull/22114
updated_at: 2019-05-22 09:49:53
body:
  ###### Motivation for this change

  Following upstream (4.05 is already on its way).

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [x] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Many OCaml libraries do not build with 4.04. They don’t build with 4.03 neither, for most of them (the main cause being `sexplib` only available for 4.02). Notable exception is `ppx_tools`, for which there is no release compatible with 4.04.


state: closed
title: terminology: 0.9.1 -> 1.0.0
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/22115
updated_at: 2017-01-25 02:02:13
body:
  ###### Motivation for this change

  Update terminology to version 1.0.0.

  This release introduces the following [changes](https://sourceforge.net/p/enlightenment/mailman/message/35603767/):

   - Bold/Italic support (on by default)
   - Add keybinding shift+home to go to the top of the backlog
   - Add keybinding shift+end to reset scroll
   - Add keybinding shift+left/right to switch between tabs
   - Add keybinding ctrl+alt+t to change terminal's title
   - Add ability to copy links on right-click menu
   - Font size can be changed by escape sequence
   - Rewrite link detection to be more efficient
   - Sanitize SHELL environment variable when using it
   - Fixes on selections
   - Many other fixes

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: cmus: fix darwin
user_login: LnL7
html_url: https://github.com/NixOS/nixpkgs/pull/22116
updated_at: 2017-02-20 21:13:53
body:
  ###### Motivation for this change

  Fixes cmus for darwin based on the changes from #14204

  ###### Things done

  - [x] Tested using sandboxing / without xcode
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] macOS
     - [x] No Changes
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Aarch64 (ARM64) support
user_login: dezgeg
html_url: https://github.com/NixOS/nixpkgs/pull/22117
updated_at: 2017-09-07 15:39:48
body:
  This series adds support for the Aarch64 architecture, which is the 64-bit variant of ARM. I have tested this on a HiKey, Raspberry Pi 3 and some Cavium ThunderX server hardware. For RPi3, an expression for building an SD card image using U-Boot is provided (which should work out-of-the-box). For the rest, UEFI + GRUB is used, which still needs some more work to make GRUB work properly in a serial-only environment.

  Most of the changes are quite straightforward except for one change to stdenv. This is needed because a lot of packages using tarballs containing autotools-generated stuff are built with obsolete versions of autotools and don't recognize aarch64. Fortunately, this is easy to work around by looking for files named `config.sub` and `config.guess` and replacing them with new versions. I have added a stdenv hook for that (`updateAutotoolsGnuConfigScriptsHook`), only enabled for aarch64. The current way of enabling that is slightly ugly, any suggestions on doing that in a cleaner way are welcome.

  Thanks to @edef1c for testing and some of the patches here, and @grahamc for providing me access for the Cavium ThunderX box.


state: closed
title: ghc-8.0.2: remove unused fetchFilteredPatch function
user_login: basvandijk
html_url: https://github.com/NixOS/nixpkgs/pull/22118
updated_at: 2017-01-25 05:39:28
body:
  Hi @peti, the `fetchFilteredPatch` function is only used in `ghc/8.0.1.nix` so we can remove it from `ghc/8.0.2.nix`.


state: closed
title: caddy: 0.9.2 -> 0.9.5
user_login: rnhmjoj
html_url: https://github.com/NixOS/nixpkgs/pull/22119
updated_at: 2017-09-12 22:57:43
body:
  ###### Things done

  - [x] Tested using sandboxing
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change
  - [x] Tested execution of all binary files
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: thunderbird + enigmail fails decrypt/encrypt/sign message
user_login: unode
html_url: https://github.com/NixOS/nixpkgs/issues/22120
updated_at: 2017-03-26 11:57:21
body:
  ## Issue description
  When trying to sign, encrypt or decrypt a message with a gnupg key that is not open in the active gpg agent, thunderbird/enigmail displays a pop-up with an error stating that it failed to encrypt/decrypt the message.

  ### Steps to reproduce
  * Flush your keychain/gpg-agent to ensure all keys are unloaded/removed.
  * Run thunderbird. 
  * Install the enigmail addon and configure it to use a private key
  * Restart thunderbird
  * In enigmail's settings, ensure it locates the gpg2 binary correctly
  * Create a new private key if necessary
  * Start a new message, select to sign and encrypted message.
  * Send the message to yourself. (this should fail or prompt for a password before sending)

  In the last step I don't see a password prompt and I see the pop-up error almost immediately.

  ### Notes
  I'm currently not sure if the issue is caused by gpg2 failing to display a password prompt (failing to start pinentry-gtk or anything gui?) or some other reason.
  * Using `gpg2` directly from the terminal shows a graphical (GUI) pinentry.
  * I don't have any explicit pinentry binary on my `gpg-agent.conf` or `gpg.conf`.

  ## Technical details

  * System: (NixOS: 16.09.1512.6b28bd0 (Flounder))
  * Nix version: (1.11.6)


state: closed
title: ghc: support building with integer-simple
user_login: basvandijk
html_url: https://github.com/NixOS/nixpkgs/pull/22121
updated_at: 2017-02-04 20:07:50
body:
  If the flag `enableIntegerSimple` is true GHC will be build with the GPL-free but slower `integer-simple` library instead of the faster but GPLed `integer-gmp` library.


state: closed
title: dropbox: 17.4.33 -> 18.4.32
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/22122
updated_at: 2017-01-25 01:00:00
body:
  ###### Motivation for this change

  Dropbox on NixOS is a royal pain in the rear due to:

  1. Forced upgrades where anything but the latest version will simply stop working
  2. No changelog when new versions are released

  This user hostile approach by Dropbox means that dropbox stops working on NixOS from the time a new version is released and until the nixpkgs repository is updated.

  There are several free and open source self-hosted alternatives to the Dropbox service. Please consider using one (or more) of these instead:

   - [Librevault](https://librevault.com)
   - [Nextcloud](https://nextcloud.com)
   - [ownCloud](https://owncloud.org)
   - [Syncthing](https://syncthing.net)

  Note: This is not in any way an endorsement of any of the projects mentioned above.


  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: dropbox: 17.4.33 -> 18.4.32
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/22123
updated_at: 2017-01-25 01:00:27
body:
  ###### Motivation for this change

  Dropbox on NixOS is a royal pain in the rear due to:

  1. Forced upgrades where anything but the latest version will simply stop working
  2. No changelog when new versions are released

  This user hostile approach by Dropbox means that dropbox stops working on NixOS from the time a new version is released and until the nixpkgs repository is updated.

  There are several free and open source self-hosted alternatives to the Dropbox service. Please consider using one (or more) of these instead:

   - [Librevault](https://librevault.com)
   - [Nextcloud](https://nextcloud.com)
   - [ownCloud](https://owncloud.org)
   - [Syncthing](https://syncthing.net)

  Note: This is not in any way an endorsement of any of the projects mentioned above.

  Tested and used as daily-driver on ```unstable```.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: frab: init at 2016-12-28 & module
user_login: fpletz
html_url: https://github.com/NixOS/nixpkgs/pull/22124
updated_at: 2017-01-27 16:15:06
body:
  ###### Motivation for this change

  [frab](https://github.com/frab/frab) is a cool conference planning tool (with cfp, session submissions, scheduling, voting, etc.) used and developed for chaos events like the C3 (successor of pentabarf). It might come in handy soon.

  It's a pretty standard rails application (with all its nicely hardcoded paths). I've used some ideas from the gitlab module.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: lumina: 1.1.0-p1 -> 1.2.0-p1
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/22125
updated_at: 2017-01-25 10:29:26
body:
  ###### Motivation for this change

  Update the lumina desktop environment to version 1.2.0.

  [Changes](https://lumina-desktop.org/version-1-2-0-released/).

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: postgis: 2.2.1 -> 2.3.1
user_login: thpham
html_url: https://github.com/NixOS/nixpkgs/pull/22126
updated_at: 2017-01-25 18:31:31
body:
  ###### Motivation for this change

  update Postgis to the lastest version

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Bundler installs gems using the wrong ruby
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/issues/22127
updated_at: 2017-01-27 11:41:28
body:
  ## Issue description

  Bundler installs gems into the wrong directory as it uses the ruby on which it depends and ignores what you have chosen

  Cc: @zimbatm @cstrahan 

  ### Steps to reproduce

  1. Install ruby_2_4 into the system environment
  2. Create a test directory ```mktemp -d``` and put the following files in:

  Gemfile:
  ```ruby
  source 'https://rubygems.org'
  gem 'rake'
  ```
  .envrc:
  ```sh
  use nix -p bundler
  layout ruby
  ```
  3. Now ```direnv allow``` and ```bundle install --path $GEM_HOME```.

  The problem is, that bundler has a dependency on ruby 2.3.3 (as of today) and so will install the gem into ```.direnv/ruby/ruby/2.3.3``` and not ```.direnv/ruby/ruby/2.4.0``` which means that trying to run ```rake -T```, you will get an error like "Your bundle is locked to rake (12.0.0), but that version could not be found..."

  Running ```bundle exec rake -T``` works, because ruby 2.3.3 is used.

  ## Technical details

  * NixOS: 17.03.git.c33f79c16aM (Gorilla)
  * Nix: nix-env (Nix) 1.11.5
  * nixpkgs: 17.03.git.c33f79c16aM


state: closed
title: Vulnerability Roundup 19
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/issues/22128
updated_at: 2017-01-27 02:25:53
body:
  Here are all the vulnerabilities from https://lwn.net/Vulnerabilities
  since our [last roundup](https://github.com/NixOS/nixpkgs/issues/21967).

  cc: @vcunat @the-kenny @7c6f434c @globin @bachp @nlewo @fpletz @NeQuissimus. (nice goup!)

  _Note:_ The list of people CC'd on this issue participated in the last
  roundup. If you participate on this roundup, I'll cc you on the next
  one. If you don't participate in the next one, you won't be CC'd on
  the one after that. If you would like to be CC'd on the next roundup,
  add a comment to the most recent vulnerability roundup.

  Permanent CC's: @joepie91, @phanimahesh, @the-kenny,
  @NixOS/security-notifications
  If you would like to be CC'd on _all_ roundups (or removed from the
  list), open a PR editing
  https://github.com/NixOS/security/blob/master/lwnvulns/src/bin/instructions.md.

  ## Notes on the list
  1. The reports have been roughly grouped by the package name. This
     isn't perfect, but is intended to help identify if a whole group
     of reports is resolved already.
  2. Some issues will be duplicated, because it affects multiple
     packages. For example, there are sometimes problems that impact
     thunderbird, and firefox. LWN might report in one vulnerability
     "thunderbird firefox". These names have been split to make sure
     both packages get addressed.
  3. By each issue is a link to code search for the package name, and
     a Github search by filename. These are to help, but may not return
     results when we do in fact package the software. If a search
     doesn't turn up, please try altering the search criteria or
     looking in nixpkgs manually before asserting we don't have it.
  4. This issue is created by https://github.com/NixOS/security

  # Instructions:

  1. Triage a report: If we don't have the software or our version isn't
     vulnerable, tick the box or add a comment with the report number,
     stating it isn't vulnerable.
  2. Fix the issue: If we do have the software and it is vulnerable,
     either leave a comment on this issue saying so, even open a pull
     request with the fix. If you open a PR, make sure to tag this
     issue so we can coordinate.
  3. When an entire section is completed, move the section to the
     "Triaged and Resolved Issues" `details` block below.



  ## Upon Completion ...

   - [x] Run the issue through `reformat` one last time
   - [ ] Review commits since last roundup for backport candidates
   - [ ] Send an update e-mail to nix-security-announce@googlegroups.com
   - [x] Update the database at https://github.com/NixOS/security

  Without further ado...

  ### Assorted (28 issues)
   - [x] [`#712299`](https://lwn.net/Vulnerabilities/712299/) ([search](http://search.nix.gsc.io/?q=ed&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ed+in%3Apath&type=Code))  ed: denial of service
   - [x] [`#712364`](https://lwn.net/Vulnerabilities/712364/) ([search](http://search.nix.gsc.io/?q=gd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gd+in%3Apath&type=Code))  gd: two denial of service flaws
   - [x] [`#712065`](https://lwn.net/Vulnerabilities/712065/) ([search](http://search.nix.gsc.io/?q=libav&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libav+in%3Apath&type=Code))  libav: multiple vulnerabilities
   - [x] [`#640613`](https://lwn.net/Vulnerabilities/640613/) ([search](http://search.nix.gsc.io/?q=ppp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ppp+in%3Apath&type=Code))  ppp: denial of service
   - [x] [`#662269`](https://lwn.net/Vulnerabilities/662269/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  squid: nonce replay vulnerability
   - [x] [`#711945`](https://lwn.net/Vulnerabilities/711945/) ([search](http://search.nix.gsc.io/?q=webkit2gtk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkit2gtk+in%3Apath&type=Code))  webkit2gtk: multiple vulnerabilities
   - [x] [`#712297`](https://lwn.net/Vulnerabilities/712297/) ([search](http://search.nix.gsc.io/?q=groovy&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=groovy+in%3Apath&type=Code))  groovy: code execution
   - [x] [`#712057`](https://lwn.net/Vulnerabilities/712057/) ([search](http://search.nix.gsc.io/?q=java-1.6.0-sun&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.6.0-sun+in%3Apath&type=Code))  java: multiple vulnerabilities
   - [x] [`#712058`](https://lwn.net/Vulnerabilities/712058/) ([search](http://search.nix.gsc.io/?q=java-1.7.0-oracle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.7.0-oracle+in%3Apath&type=Code))  java: multiple vulnerabilities
   - [x] [`#712059`](https://lwn.net/Vulnerabilities/712059/) ([search](http://search.nix.gsc.io/?q=java-1.8.0-oracle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.8.0-oracle+in%3Apath&type=Code))  java: two unspecified vulnerabilities
   - [x] [`#712369`](https://lwn.net/Vulnerabilities/712369/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: privilege escalation
   - [x] [`#712067`](https://lwn.net/Vulnerabilities/712067/) ([search](http://search.nix.gsc.io/?q=mariadb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mariadb+in%3Apath&type=Code))  mariadb: multiple unspecified vulnerabilities
   - [x] [`#712068`](https://lwn.net/Vulnerabilities/712068/) ([search](http://search.nix.gsc.io/?q=mysql-5.5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.5+in%3Apath&type=Code))  mysql: multiple vulnerabilities
   - [x] [`#712068`](https://lwn.net/Vulnerabilities/712068/) ([search](http://search.nix.gsc.io/?q=mysql-5.7&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.7+in%3Apath&type=Code))  mysql: multiple vulnerabilities
   - [x] [`#642649`](https://lwn.net/Vulnerabilities/642649/) ([search](http://search.nix.gsc.io/?q=DirectFB&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=DirectFB+in%3Apath&type=Code))  DirectFB: two vulnerabilities
   - [x] [`#480386`](https://lwn.net/Vulnerabilities/480386/) ([search](http://search.nix.gsc.io/?q=cvs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cvs+in%3Apath&type=Code))  cvs: remote code execution
   - [x] [`#644511`](https://lwn.net/Vulnerabilities/644511/) ([search](http://search.nix.gsc.io/?q=dcraw&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dcraw+in%3Apath&type=Code))  dcraw: denial of service
   - [x] [`#712370`](https://lwn.net/Vulnerabilities/712370/) ([search](http://search.nix.gsc.io/?q=firejail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firejail+in%3Apath&type=Code))  firejail: three vulnerabilities
   - [x] [`#712359`](https://lwn.net/Vulnerabilities/712359/) ([search](http://search.nix.gsc.io/?q=hesiod&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=hesiod+in%3Apath&type=Code))  hesiod: two vulnerabilities
   - [x] [`#712300`](https://lwn.net/Vulnerabilities/712300/) ([search](http://search.nix.gsc.io/?q=libnl3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libnl3+in%3Apath&type=Code))  libnl3: privilege escalation
   - [x] [`#712363`](https://lwn.net/Vulnerabilities/712363/) ([search](http://search.nix.gsc.io/?q=libtiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtiff+in%3Apath&type=Code))  tiff: code execution
   - [x] [`#610398`](https://lwn.net/Vulnerabilities/610398/) ([search](http://search.nix.gsc.io/?q=lua&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lua+in%3Apath&type=Code))  lua: code execution
   - [x] [`#712060`](https://lwn.net/Vulnerabilities/712060/) ([search](http://search.nix.gsc.io/?q=mapserver&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mapserver+in%3Apath&type=Code))  mapserver: code execution
   - [x] [`#712298`](https://lwn.net/Vulnerabilities/712298/) ([search](http://search.nix.gsc.io/?q=opus&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=opus+in%3Apath&type=Code))  opus: code execution
   - [x] [`#712155`](https://lwn.net/Vulnerabilities/712155/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: code execution
   - [x] [`#711946`](https://lwn.net/Vulnerabilities/711946/) ([search](http://search.nix.gsc.io/?q=php-PHPMailer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-PHPMailer+in%3Apath&type=Code))  php-PHPMailer: information disclosure
   - [x] [`#712371`](https://lwn.net/Vulnerabilities/712371/) ([search](http://search.nix.gsc.io/?q=t1lib&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=t1lib+in%3Apath&type=Code))  t1lib: code execution
   - [x] [`#712304`](https://lwn.net/Vulnerabilities/712304/) ([search](http://search.nix.gsc.io/?q=xtrabackup&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xtrabackup+in%3Apath&type=Code))  xtrabackup: information disclosure

  ### qemu (2 issues)
   - [x] [`#712302`](https://lwn.net/Vulnerabilities/712302/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: denial of service
   - [x] [`#712301`](https://lwn.net/Vulnerabilities/712301/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: denial of service


state: closed
title: WIP: Roundup #19
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/22131
updated_at: 2017-01-26 02:27:09
body:
  See https://github.com/NixOS/nixpkgs/issues/22128
  And: https://prs.nix.gsc.io/jobset/nixos/pr-22131


state: closed
title: mkpasswd: make the package high priority
user_login: wizeman
html_url: https://github.com/NixOS/nixpkgs/pull/22132
updated_at: 2017-01-25 14:19:27
body:
  ###### Motivation for this change

  Currently, if you have both the `mkpasswd` and the `expect` packages installed,
  the `mkpasswd` binaries from both packages will conflict and the one from the `expect`
  package can take precedence. This will result in the NixOS documentation instructions
  for generating a hashed password to put into `configuration.nix` not working, for no
  apparent reason.

  Since usually, if someone installs the `mkpasswd` package it's because they are
  specifically interested in its `mkpasswd` binary, then we should make the `mkpasswd`
  package high priority so that it always take precedence.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: qemu: 2.7 -> 2.8, drop 2.7
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/22134
updated_at: 2017-01-27 02:28:37
body:
  cc https://github.com/NixOS/nixpkgs/issues/22128 it _seems_ everything passes nicely with 2.8: https://prs.nix.gsc.io/eval/527?compare=master#tabs-now-succeed cc @fpletz @edolstra @globin 


state: closed
title: riemann: 0.2.9 -> 0.2.12
user_login: pradeepchhetri
html_url: https://github.com/NixOS/nixpkgs/pull/22135
updated_at: 2017-01-25 17:35:18
body:
  ###### Motivation for this change


  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [x] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: syncthing: 0.14.19 -> 0.14.21
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/22136
updated_at: 2017-01-25 19:27:23
body:
  ###### Motivation for this change

  Recommended upgrade. Daily driver here.

  ###### Things done

  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: WIP: Add support for building Swift packages with deps
user_login: dtzWill
html_url: https://github.com/NixOS/nixpkgs/pull/22138
updated_at: 2017-02-14 15:24:18
body:
  ###### Motivation for this change

  This makes it easy to write Nix expressions for Swift packages.

  Introduces new fetcher (based on the rust fetcher, thank you!) that grabs the package's dependencies
  and constructs a build environment with reproducible contents.

  The example Swift project is added to demonstrate/test this functionality.

  Requires Swift (#22098), which this builds on top of.

  ###### Things done

  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  * swift-package-manager puts dependencies in directories suffixed with an unstable hash, which [upstream acknowledges as a not ideal](https://github.com/apple/swift-package-manager/blob/7f151e10d66acc069f2e24c86d696cfc1f107ec2/Sources/SourceControl/Repository.swift#L28) and is likely easy to fix moving forward.
  * This relies on some implementation details of the swift build layout, which AFAIK may change although I don't suspect it happens often.  Perhaps we could/should work with upstream to add some functionality to `swift-package-manager` to facilitate this process? It'd be a much better place for manipulating package information and the on-disk build environment.


state: closed
title: Python: setuptools no longer vendors its dependencies
user_login: FRidh
html_url: https://github.com/NixOS/nixpkgs/issues/22139
updated_at: 2017-06-05 13:41:33
body:
  ## Issue description

  From version 34 on setuptools no longer vendors its dependencies.
  https://github.com/pypa/setuptools/blob/master/CHANGES.rst#v3400

  This affects how we currently bootstrap setuptools. The recommended method is to install the setuptools wheel and the wheels of all its dependencies. Because all these dependencies end up in the 'global scope' during installation, I foresee issues when users would like to install other versions of the dependencies.

  The only solution I see is to always build packages that are dependencies of setuptools from wheels, and never from the source archives.


state: open
title: nix-shell with `jre` pulls `jdk`
user_login: copumpkin
html_url: https://github.com/NixOS/nixpkgs/issues/22140
updated_at: 2019-05-27 19:27:08
body:
  That means that your closure when depending on e.g., `openjdk` is actually _smaller_ than when you depend on `jre`, despite the latter ostensibly being a trimmed-down version of the former.


state: closed
title: minetest 0.4.14 -> 0.4.15
user_login: benrob0329
html_url: https://github.com/NixOS/nixpkgs/pull/22141
updated_at: 2017-01-25 22:05:03
body:
  ###### Motivation for this change
  Outdated version of Minetest.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [X] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: asterisk: 13.6.0 -> 13.13.1
user_login: yorickvP
html_url: https://github.com/NixOS/nixpkgs/pull/22142
updated_at: 2017-01-26 23:40:07
body:
  ###### Motivation for this change

  asterisk was marked broken in 655017d. This version is the latest release on the same LTS branch and does not have that CVE.

  (cc: @grahamc)

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [ ] Linux
  - [x] Tested execution of all binary files (usually in `./result/bin/`) (some of them depend on asterisk being in the $PATH)
  - [x] Tested usage on my server. It didn't get worse than it was before.
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Haskell: fix amazonka package suite dependencies
user_login: k0001
html_url: https://github.com/NixOS/nixpkgs/issues/22143
updated_at: 2018-10-12 11:17:16
body:
  ## Issue description

  The many `amazonka*_1_4_5` packages depend on `amazonka*` 1.4.3 packages, but they should be depending on other `amazonka*_1_4_5` packages instead. The "amazonka package suite", if you will, is versioned as a whole, and it's expected that versions `1.4.5.*` of the `amazonka-*` packages are used everywhere when using the "amazonka package suite 1.4.5".

  We currently have this in `hackage-packages.nix`, for example:

  ```nix
    "amazonka-autoscaling_1_4_5" = callPackage
      ({ amazonka-core, amazonka-test, ...  # some other unrelated dependencies
       }:
       mkDerivation { ...
  ```

  Yet, the `amazonka-core` and `amazonka-test` in in that very same package set refer to version `1.4.3` of these packages, not `1.4.5` as expected. So, cabal dependency resolution fails. Ideally, we should have this instead:


  ```nix
    "amazonka-autoscaling_1_4_5" = callPackage
      ({ amazonka-core_1_4_5, amazonka-test_1_4_5, ...  # some other unrelated dependencies
       }:
       mkDerivation { ...
  ```

  My question is: Where and how to fix this so that the fix is preserved across future automatically generated `hackage-package.nix`? 


state: closed
title: nm-applet/network manager no longer show correct icon or list of wifi connections
user_login: andrewrk
html_url: https://github.com/NixOS/nixpkgs/issues/22144
updated_at: 2018-11-22 05:31:56
body:
  ## Issue description

  It used to be that nm-applet would work entirely as expected; show the WiFi icon when connected, and show a list of WiFi options when clicked.

  Now the nm-applet icon shows an "unconnected" icon even though I am connected to a working WiFi connection, and there is no list of WiFi options to connect to. When I travel to a location for which my computer does not have the WiFi information saved, I am unable to connect.

  ![screenshot_2017-01-25_15-03-12](https://cloud.githubusercontent.com/assets/106511/22307170/09a5cd2a-e310-11e6-95f0-674a1d2c67c0.png)

  In the above image, my internet connection is working fine and information displayed is incorrect. There should also be about 20 WiFi options listed (including the currently connected one), but none are.

  ## Technical details

  * System: 17.03pre98682.f673243 (Gorilla)
  * Nix version: nix-env (Nix) 1.11.5

  Here is my network-related nix config:

  ```
    networking = {
      hostName = "xps";
      networkmanager.enable = true;
      enableB43Firmware = true;
    };

    environment.systemPackages = with pkgs; [
      networkmanagerapplet
    ];

    users.extraUsers.andy = {
      isNormalUser = true;
      description = "Andrew Kelley";
      extraGroups = [ "wheel"  "networkmanager" "video" "power" "vboxusers" "audio" ];
      uid = 1000;
    };
    services.xserver = {
      enable = true;
      desktopManager.xfce.enable = true;
    };

  ```


state: closed
title: gbsplay: init at version 2016-12-17
user_login: dasuxullebt
html_url: https://github.com/NixOS/nixpkgs/pull/22146
updated_at: 2017-02-05 19:01:48
body:
  ###### Motivation for this change
  I wanted to add a gbsplay package

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [X] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Nikola CMS: init at 7.8.3
user_login: leenaars
html_url: https://github.com/NixOS/nixpkgs/pull/22147
updated_at: 2017-10-11 12:17:54
body:
  ###### Motivation for this change

  Nikola is quite a popular and advanced python-based CMS, similar to Lektor.
  It required a lot of updates to dependencies, and some new python dependencies, all of which are included.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [x] NixOS
     - [ ] macOS
     - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Add EUPL v1.1 license
user_login: oleks
html_url: https://github.com/NixOS/nixpkgs/pull/22148
updated_at: 2017-01-25 22:10:56
body:
  ###### Motivation for this change
  Add EUPL v1.1 license.

  ###### Things done

  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
     - [ ] NixOS
     - [ ] macOS
     - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


