Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP: Support nixpkgs unstable #344

Closed
wants to merge 8 commits into from

Conversation

erikarvstedt
Copy link
Collaborator

@erikarvstedt erikarvstedt commented Mar 22, 2021

This PR adds support for nixpkgs unstable.

The following lower-priority features haven't yet been fixed and are disabled:

  • services.clightning.plugins.prometheus (build failure)
  • services.liquidd (build failure)
  • services.joinmarket-ob-watcher (service failure)
  • nix-bitcoin.netns-isolation (service failure)

@erikarvstedt erikarvstedt marked this pull request as draft March 22, 2021 12:42
@erikarvstedt erikarvstedt force-pushed the nixos-unstable branch 2 times, most recently from 5c34791 to 6b46692 Compare March 22, 2021 14:17
@nixbitcoin
Copy link
Member

nixbitcoin commented Mar 22, 2021

We should not delete security.nix. The dbus firewall is an essential mitigation for #213

@erikarvstedt
Copy link
Collaborator Author

Because hidepid has been removed in NixOS, the systemctl status info is now always available via /proc. So there's no further use in restricting systemctl status.

@erikarvstedt
Copy link
Collaborator Author

The underlying reason for the removal is related to systemd.
But it seems there are some efforts in systemd to bring it back.

@prusnak
Copy link
Contributor

prusnak commented Jul 12, 2021

This PR should be broken into smaller self-contained PRs, otherwise it will be left here open forever.

@jonasnick
Copy link
Member

@prusnak Erik mentioned to me that he'd continue working on this PR some time in the coming weeks.

@erikarvstedt
Copy link
Collaborator Author

Superseded by #374.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants