pyrox.dev
1# Release 15.09 ("Dingo", 2015/09/30) {#sec-release-15.09}
2
3In addition to numerous new and upgraded packages, this release has the following highlights:
4
5- The [Haskell](http://haskell.org/) packages infrastructure has been re-designed from the ground up ("Haskell NG"). NixOS now distributes the latest version of every single package registered on [Hackage](http://hackage.haskell.org/) -- well in excess of 8,000 Haskell packages. Detailed instructions on how to use that infrastructure can be found in the [User's Guide to the Haskell Infrastructure](https://nixos.org/nixpkgs/manual/#users-guide-to-the-haskell-infrastructure). Users migrating from an earlier release may find helpful information below, in the list of backwards-incompatible changes. Furthermore, we distribute 51(!) additional Haskell package sets that provide every single [LTS Haskell](http://www.stackage.org/) release since version 0.0 as well as the most recent [Stackage Nightly](http://www.stackage.org/) snapshot. The announcement ["Full Stackage Support in Nixpkgs"](https://nixos.org/nix-dev/2015-September/018138.html) gives additional details.
6
7- Nix has been updated to version 1.10, which among other improvements enables cryptographic signatures on binary caches for improved security.
8
9- You can now keep your NixOS system up to date automatically by setting
10
11```nix
12{ system.autoUpgrade.enable = true; }
13```
14
15This will cause the system to periodically check for updates in your current channel and run `nixos-rebuild`.
16
17- This release is based on Glibc 2.21, GCC 4.9 and Linux 3.18.
18
19- GNOME has been upgraded to 3.16.
20
21- Xfce has been upgraded to 4.12.
22
23- KDE 5 has been upgraded to KDE Frameworks 5.10, Plasma 5.3.2 and Applications 15.04.3. KDE 4 has been updated to kdelibs-4.14.10.
24
25- E19 has been upgraded to 0.16.8.15.
26
27The following new services were added since the last release:
28
29- `services/mail/exim.nix`
30
31- `services/misc/apache-kafka.nix`
32
33- `services/misc/canto-daemon.nix`
34
35- `services/misc/confd.nix`
36
37- `services/misc/devmon.nix`
38
39- `services/misc/gitit.nix`
40
41- `services/misc/ihaskell.nix`
42
43- `services/misc/mbpfan.nix`
44
45- `services/misc/mediatomb.nix`
46
47- `services/misc/mwlib.nix`
48
49- `services/misc/parsoid.nix`
50
51- `services/misc/plex.nix`
52
53- `services/misc/ripple-rest.nix`
54
55- `services/misc/ripple-data-api.nix`
56
57- `services/misc/subsonic.nix`
58
59- `services/misc/sundtek.nix`
60
61- `services/monitoring/cadvisor.nix`
62
63- `services/monitoring/das_watchdog.nix`
64
65- `services/monitoring/grafana.nix`
66
67- `services/monitoring/riemann-tools.nix`
68
69- `services/monitoring/teamviewer.nix`
70
71- `services/network-filesystems/u9fs.nix`
72
73- `services/networking/aiccu.nix`
74
75- `services/networking/asterisk.nix`
76
77- `services/networking/bird.nix`
78
79- `services/networking/charybdis.nix`
80
81- `services/networking/docker-registry-server.nix`
82
83- `services/networking/fan.nix`
84
85- `services/networking/firefox/sync-server.nix`
86
87- `services/networking/gateone.nix`
88
89- `services/networking/heyefi.nix`
90
91- `services/networking/i2p.nix`
92
93- `services/networking/lambdabot.nix`
94
95- `services/networking/mstpd.nix`
96
97- `services/networking/nix-serve.nix`
98
99- `services/networking/nylon.nix`
100
101- `services/networking/racoon.nix`
102
103- `services/networking/skydns.nix`
104
105- `services/networking/shout.nix`
106
107- `services/networking/softether.nix`
108
109- `services/networking/sslh.nix`
110
111- `services/networking/tinc.nix`
112
113- `services/networking/tlsdated.nix`
114
115- `services/networking/tox-bootstrapd.nix`
116
117- `services/networking/tvheadend.nix`
118
119- `services/networking/zerotierone.nix`
120
121- `services/scheduling/marathon.nix`
122
123- `services/security/fprintd.nix`
124
125- `services/security/hologram.nix`
126
127- `services/security/munge.nix`
128
129- `services/system/cloud-init.nix`
130
131- `services/web-servers/shellinabox.nix`
132
133- `services/web-servers/uwsgi.nix`
134
135- `services/x11/unclutter.nix`
136
137- `services/x11/display-managers/sddm.nix`
138
139- `system/boot/coredump.nix`
140
141- `system/boot/loader/loader.nix`
142
143- `system/boot/loader/generic-extlinux-compatible`
144
145- `system/boot/networkd.nix`
146
147- `system/boot/resolved.nix`
148
149- `system/boot/timesyncd.nix`
150
151- `tasks/filesystems/exfat.nix`
152
153- `tasks/filesystems/ntfs.nix`
154
155- `tasks/filesystems/vboxsf.nix`
156
157- `virtualisation/virtualbox-host.nix`
158
159- `virtualisation/vmware-guest.nix`
160
161- `virtualisation/xen-dom0.nix`
162
163When upgrading from a previous release, please be aware of the following incompatible changes:
164
165- `sshd` no longer supports DSA and ECDSA host keys by default. If you have existing systems with such host keys and want to continue to use them, please set
166
167```nix
168{ system.stateVersion = "14.12"; }
169```
170
171The new option `system.stateVersion` ensures that certain configuration changes that could break existing systems (such as the `sshd` host key setting) will maintain compatibility with the specified NixOS release. NixOps sets the state version of existing deployments automatically.
172
173- `cron` is no longer enabled by default, unless you have a non-empty `services.cron.systemCronJobs`. To force `cron` to be enabled, set `services.cron.enable = true`.
174
175- Nix now requires binary caches to be cryptographically signed. If you have unsigned binary caches that you want to continue to use, you should set `nix.requireSignedBinaryCaches = false`.
176
177- Steam now doesn't need root rights to work. Instead of using `*-steam-chrootenv`, you should now just run `steam`. `steamChrootEnv` package was renamed to `steam`, and old `steam` package -- to `steamOriginal`.
178
179- CMPlayer has been renamed to bomi upstream. Package `cmplayer` was accordingly renamed to `bomi`
180
181- Atom Shell has been renamed to Electron upstream. Package `atom-shell` was accordingly renamed to `electron`
182
183- Elm is not released on Hackage anymore. You should now use `elmPackages.elm` which contains the latest Elm platform.
184
185- The CUPS printing service has been updated to version `2.0.2`. Furthermore its systemd service has been renamed to `cups.service`.
186
187 Local printers are no longer shared or advertised by default. This behavior can be changed by enabling `services.printing.defaultShared` or `services.printing.browsing` respectively.
188
189- The VirtualBox host and guest options have been named more consistently. They can now found in `virtualisation.virtualbox.host.*` instead of `services.virtualboxHost.*` and `virtualisation.virtualbox.guest.*` instead of `services.virtualboxGuest.*`.
190
191 Also, there now is support for the `vboxsf` file system using the `fileSystems` configuration attribute. An example of how this can be used in a configuration:
192
193```nix
194{
195 fileSystems."/shiny" = {
196 device = "myshinysharedfolder";
197 fsType = "vboxsf";
198 };
199}
200```
201
202- "`nix-env -qa`" no longer discovers Haskell packages by name. The only packages visible in the global scope are `ghc`, `cabal-install`, and `stack`, but all other packages are hidden. The reason for this inconvenience is the sheer size of the Haskell package set. Name-based lookups are expensive, and most `nix-env -qa` operations would become much slower if we'd add the entire Hackage database into the top level attribute set. Instead, the list of Haskell packages can be displayed by running:
203
204```ShellSession
205nix-env -f "<nixpkgs>" -qaP -A haskellPackages
206```
207
208Executable programs written in Haskell can be installed with:
209
210```ShellSession
211nix-env -f "<nixpkgs>" -iA haskellPackages.pandoc
212```
213
214Installing Haskell _libraries_ this way, however, is no longer supported. See the next item for more details.
215
216- Previous versions of NixOS came with a feature called `ghc-wrapper`, a small script that allowed GHC to transparently pick up on libraries installed in the user's profile. This feature has been deprecated; `ghc-wrapper` was removed from the distribution. The proper way to register Haskell libraries with the compiler now is the `haskellPackages.ghcWithPackages` function. The [User's Guide to the Haskell Infrastructure](https://nixos.org/nixpkgs/manual/#users-guide-to-the-haskell-infrastructure) provides more information about this subject.
217
218- All Haskell builds that have been generated with version 1.x of the `cabal2nix` utility are now invalid and need to be re-generated with a current version of `cabal2nix` to function. The most recent version of this tool can be installed by running `nix-env -i cabal2nix`.
219
220- The `haskellPackages` set in Nixpkgs used to have a function attribute called `extension` that users could override in their `~/.nixpkgs/config.nix` files to configure additional attributes, etc. That function still exists, but it's now called `overrides`.
221
222- The OpenBLAS library has been updated to version `0.2.14`. Support for the `x86_64-darwin` platform was added. Dynamic architecture detection was enabled; OpenBLAS now selects microarchitecture-optimized routines at runtime, so optimal performance is achieved without the need to rebuild OpenBLAS locally. OpenBLAS has replaced ATLAS in most packages which use an optimized BLAS or LAPACK implementation.
223
224- The `phpfpm` is now using the default PHP version (`pkgs.php`) instead of PHP 5.4 (`pkgs.php54`).
225
226- The `locate` service no longer indexes the Nix store by default, preventing packages with potentially numerous versions from cluttering the output. Indexing the store can be activated by setting `services.locate.includeStore = true`.
227
228- The Nix expression search path (`NIX_PATH`) no longer contains `/etc/nixos/nixpkgs` by default. You can override `NIX_PATH` by setting `nix.nixPath`.
229
230- Python 2.6 has been marked as broken (as it no longer receives security updates from upstream).
231
232- Any use of module arguments such as `pkgs` to access library functions, or to define `imports` attributes will now lead to an infinite loop at the time of the evaluation.
233
234 In case of an infinite loop, use the `--show-trace` command line argument and read the line just above the error message.
235
236 ```ShellSession
237 $ nixos-rebuild build --show-trace
238 …
239 while evaluating the module argument `pkgs' in "/etc/nixos/my-module.nix":
240 infinite recursion encountered
241 ```
242
243 Any use of `pkgs.lib`, should be replaced by `lib`, after adding it as argument of the module. The following module
244
245 ```nix
246 { config, pkgs, ... }:
247
248 with pkgs.lib;
249
250 {
251 options = {
252 foo = mkOption {
253 # …
254 };
255 };
256 config = mkIf config.foo {
257 # …
258 };
259 }
260 ```
261
262 should be modified to look like:
263
264 ```nix
265 {
266 config,
267 pkgs,
268 lib,
269 ...
270 }:
271
272 with lib;
273
274 {
275 options = {
276 foo = mkOption {
277 # option declaration
278 };
279 };
280 config = mkIf config.foo {
281 # option definition
282 };
283 }
284 ```
285
286 When `pkgs` is used to download other projects to import their modules, and only in such cases, it should be replaced by `(import <nixpkgs> {})`. The following module
287
288 ```nix
289 { config, pkgs, ... }:
290
291 let
292 myProject = pkgs.fetchurl {
293 src = url;
294 sha256 = hash;
295 };
296
297 in
298 {
299 imports = [ "${myProject}/module.nix" ];
300 }
301 ```
302
303 should be modified to look like:
304
305 ```nix
306 { config, pkgs, ... }:
307
308 let
309 myProject = (import <nixpkgs> { }).fetchurl {
310 src = url;
311 sha256 = hash;
312 };
313
314 in
315 {
316 imports = [ "${myProject}/module.nix" ];
317 }
318 ```
319
320Other notable improvements:
321
322- The nixos and nixpkgs channels were unified, so one _can_ use `nix-env -iA nixos.bash` instead of `nix-env -iA nixos.pkgs.bash`. See [the commit](https://github.com/NixOS/nixpkgs/commit/2cd7c1f198) for details.
323
324- Users running an SSH server who worry about the quality of their `/etc/ssh/moduli` file with respect to the [vulnerabilities discovered in the Diffie-Hellman key exchange](https://stribika.github.io/2015/01/04/secure-secure-shell.html) can now replace OpenSSH's default version with one they generated themselves using the new `services.openssh.moduliFile` option.
325
326- A newly packaged TeX Live 2015 is provided in `pkgs.texlive`, split into 6500 nix packages. For basic user documentation see [the source](https://github.com/NixOS/nixpkgs/blob/release-15.09/pkgs/tools/typesetting/tex/texlive/default.nix#L1). Beware of [an issue](https://github.com/NixOS/nixpkgs/issues/9757) when installing a too large package set. The plan is to deprecate and maybe delete the original TeX packages until the next release.
327
328- `buildEnv.env` on all Python interpreters is now available for nix-shell interoperability.