| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
Co-authored-by: Michael Hoang <Enzime@users.noreply.github.com>
|
|
|
|
|
|
fix broken NIX_PATH if paths contain spaces
|
|
Remove suggestion to set `nix.useDaemon` as it came without an
explanation of how the `nix-daemon` would be unmanaged and would most
likely lead to most users running an old version of Nix as the daemon.
|
|
|
|
Co-Authored-By: Michael Hoang <enzime@users.noreply.github.com>
|
|
|
|
|
|
This is hopefully largely cosmetic, but should increase user
confidence in the safety and effectiveness of the migration, and the
Determinate Systems and Lix installer commands will also update the
`/nix/receipt.json` files to match the changes made. They cannot
properly handle the format of each other’s receipts, so we need to
detect which was used.
|
|
|
|
Checking for the Sequoia stuff won’t work properly if a system is
still in this old state. Best to be loud about it to deal with any
straggler systems that haven’t yet dealt with this issue.
|
|
|
|
|
|
|
|
ssh: use symlinks for `authorizedKeys` options
|
|
|
|
As explained in the changelog and activation check, the previous
implementation had a nasty security bug that made removing a user’s
authorized keys effectively a no‐op.
|
|
|
|
|
|
|
|
|
|
This process was automated by [my fork of `nix-doc-munge`]; thanks
to @pennae for writing this tool! It automatically checks that the
resulting documentation doesn't change, although my fork loosens
this a little to ignore some irrelevant whitespace and typographical
differences.
As of this commit there is no DocBook remaining in the options
documentation.
You can play along at home if you want to reproduce this commit:
$ NIX_PATH=nixpkgs=flake:nixpkgs/c1bca7fe84c646cfd4ebf3482c0e6317a0b13f22 \
nix shell nixpkgs#coreutils \
-c find . -name '*.nix' \
-exec nix run github:emilazy/nix-doc-munge/0a7190f600027bf7baf6cb7139e4d69ac2f51062 \
{} +
[my fork of `nix-doc-munge`]: https://github.com/emilazy/nix-doc-munge
|
|
This allows systems with auto-allocate-uids enabled to work (by
disabling this check).
|
|
|
|
|
|
Also add `config.ids` like in NixOS.
|
|
|
|
|
|
According to some investigation creating "role" accounts avoids
migration problems when upgrading to certain macOS versions, so create
the build users to match that definition and remove the old ones if
present.
Role accounts require name starting with _ and UID in 200-400 range
|
|
The flages of apfs.util changed in 11.0 so try both cases.
Fixes #249
|
|
|
|
Since macOS 10.15 Catalina / can't be changed directly anymore.
Fixes #166
|
|
This case will cause problems when existing files in /etc are replaced
instead of skipped with a warning, potentially breaking the nix install
in the process.
|
|
The nix.useDaemon option enables using a multi-user install without
managing the nix installation with nix-darwin. The following checks
apply to both cases.
|
|
|
|
Introduced in 28710738a3ca7c9a16d63b89c904588d030edf01, the check should
_only_ run if the user is not configured not the other way around.
|
|
|
|
Don't fail if the user is configured properly.
|
|
All the checks are now aggregated in system.checks.text making it easy
to allow certain checks to be disabled as well as disabling them
alltogether if desired. eg.
# Disable all checks.
system.checks.text = mkForce "";
Fixes #117
|
|
This hopefully avoids problems for people that try to enable the service
with a single-user install.
Fixes #118
|
|
This reverts commit 95fb1cb2aa1781b239db074dcc9b15089b55e118, 1324ccf2c1fe10fd277dabefa3c8e5631e216d41 and e5c988edf1df3412ca5b3c4704dca666614f9250.
|
|
|
|
|
|
Now that environment.darwinConfig exists it's a better choice otherwise
multiple NIX_PATH entries need to be added.
|
|
|
|
|
