pyrox.dev
1# Release 18.03 ("Impala", 2018/04/04) {#sec-release-18.03}
2
3## Highlights {#sec-release-18.03-highlights}
4
5In addition to numerous new and upgraded packages, this release has the following highlights:
6
7- End of support is planned for end of October 2018, handing over to 18.09.
8
9- Platform support: x86_64-linux and x86_64-darwin since release time (the latter isn\'t NixOS, really). Binaries for aarch64-linux are available, but no channel exists yet, as it\'s waiting for some test fixes, etc.
10
11- Nix now defaults to 2.0; see its [release notes](https://nixos.org/nix/manual/#ssec-relnotes-2.0).
12
13- Core version changes: linux: 4.9 -\> 4.14, glibc: 2.25 -\> 2.26, gcc: 6 -\> 7, systemd: 234 -\> 237.
14
15- Desktop version changes: gnome: 3.24 -\> 3.26, (KDE) plasma-desktop: 5.10 -\> 5.12.
16
17- MariaDB 10.2, updated from 10.1, is now the default MySQL implementation. While upgrading a few changes have been made to the infrastructure involved:
18
19 - `libmysql` has been deprecated, please use `mysql.connector-c` instead, a compatibility passthru has been added to the MySQL packages.
20
21 - The `mysql57` package has a new `static` output containing the static libraries including `libmysqld.a`
22
23- PHP now defaults to PHP 7.2, updated from 7.1.
24
25## New Services {#sec-release-18.03-new-services}
26
27The following new services were added since the last release:
28
29- `./config/krb5/default.nix`
30
31- `./hardware/digitalbitbox.nix`
32
33- `./misc/label.nix`
34
35- `./programs/ccache.nix`
36
37- `./programs/criu.nix`
38
39- `./programs/digitalbitbox/default.nix`
40
41- `./programs/less.nix`
42
43- `./programs/npm.nix`
44
45- `./programs/plotinus.nix`
46
47- `./programs/rootston.nix`
48
49- `./programs/systemtap.nix`
50
51- `./programs/sway.nix`
52
53- `./programs/udevil.nix`
54
55- `./programs/way-cooler.nix`
56
57- `./programs/yabar.nix`
58
59- `./programs/zsh/zsh-autoenv.nix`
60
61- `./services/backup/borgbackup.nix`
62
63- `./services/backup/crashplan-small-business.nix`
64
65- `./services/desktops/dleyna-renderer.nix`
66
67- `./services/desktops/dleyna-server.nix`
68
69- `./services/desktops/pipewire.nix`
70
71- `./services/desktops/gnome3/chrome-gnome-shell.nix`
72
73- `./services/desktops/gnome3/tracker-miners.nix`
74
75- `./services/hardware/fwupd.nix`
76
77- `./services/hardware/interception-tools.nix`
78
79- `./services/hardware/u2f.nix`
80
81- `./services/hardware/usbmuxd.nix`
82
83- `./services/mail/clamsmtp.nix`
84
85- `./services/mail/dkimproxy-out.nix`
86
87- `./services/mail/pfix-srsd.nix`
88
89- `./services/misc/gitea.nix`
90
91- `./services/misc/home-assistant.nix`
92
93- `./services/misc/ihaskell.nix`
94
95- `./services/misc/logkeys.nix`
96
97- `./services/misc/novacomd.nix`
98
99- `./services/misc/osrm.nix`
100
101- `./services/misc/plexpy.nix`
102
103- `./services/misc/pykms.nix`
104
105- `./services/misc/tzupdate.nix`
106
107- `./services/monitoring/fusion-inventory.nix`
108
109- `./services/monitoring/prometheus/exporters.nix`
110
111- `./services/network-filesystems/beegfs.nix`
112
113- `./services/network-filesystems/davfs2.nix`
114
115- `./services/network-filesystems/openafs/client.nix`
116
117- `./services/network-filesystems/openafs/server.nix`
118
119- `./services/network-filesystems/ceph.nix`
120
121- `./services/networking/aria2.nix`
122
123- `./services/networking/monero.nix`
124
125- `./services/networking/nghttpx/default.nix`
126
127- `./services/networking/nixops-dns.nix`
128
129- `./services/networking/rxe.nix`
130
131- `./services/networking/stunnel.nix`
132
133- `./services/web-apps/matomo.nix`
134
135- `./services/web-apps/restya-board.nix`
136
137- `./services/web-servers/mighttpd2.nix`
138
139- `./services/x11/fractalart.nix`
140
141- `./system/boot/binfmt.nix`
142
143- `./system/boot/grow-partition.nix`
144
145- `./tasks/filesystems/ecryptfs.nix`
146
147- `./virtualisation/hyperv-guest.nix`
148
149## Backward Incompatibilities {#sec-release-18.03-incompatibilities}
150
151When upgrading from a previous release, please be aware of the following incompatible changes:
152
153- `sound.enable` now defaults to false.
154
155- Dollar signs in options under `services.postfix` are passed verbatim to Postfix, which will interpret them as the beginning of a parameter expression. This was already true for string-valued options in the previous release, but not for list-valued options. If you need to pass literal dollar signs through Postfix, double them.
156
157- The `postage` package (for web-based PostgreSQL administration) has been renamed to `pgmanage`. The corresponding module has also been renamed. To migrate please rename all `services.postage` options to `services.pgmanage`.
158
159- Package attributes starting with a digit have been prefixed with an underscore sign. This is to avoid quoting in the configuration and other issues with command-line tools like `nix-env`. The change affects the following packages:
160
161 - `2048-in-terminal` → `_2048-in-terminal`
162
163 - `90secondportraits` → `_90secondportraits`
164
165 - `2bwm` → `_2bwm`
166
167 - `389-ds-base` → `_389-ds-base`
168
169- **The OpenSSH service no longer enables support for DSA keys by default, which could cause a system lock out. Update your keys or, unfavorably, re-enable DSA support manually.**
170
171 DSA support was [deprecated in OpenSSH 7.0](https://www.openssh.com/legacy.html), due to it being too weak. To re-enable support, add `PubkeyAcceptedKeyTypes +ssh-dss` to the end of your `services.openssh.extraConfig`.
172
173 After updating the keys to be stronger, anyone still on a pre-17.03 version is safe to jump to 17.03, as vetted [here](https://search.nix.gsc.io/?q=stateVersion).
174
175- The `openssh` package now includes Kerberos support by default; the `openssh_with_kerberos` package is now a deprecated alias. If you do not want Kerberos support, you can do `openssh.override { withKerberos = false; }`. Note, this also applies to the `openssh_hpn` package.
176
177- `cc-wrapper` has been split in two; there is now also a `bintools-wrapper`. The most commonly used files in `nix-support` are now split between the two wrappers. Some commonly used ones, like `nix-support/dynamic-linker`, are duplicated for backwards compatability, even though they rightly belong only in `bintools-wrapper`. Other more obscure ones are just moved.
178
179- The propagation logic has been changed. The new logic, along with new types of dependencies that go with, is thoroughly documented in the \"Specifying dependencies\" section of the \"Standard Environment\" chapter of the nixpkgs manual. The old logic isn\'t but is easy to describe: dependencies were propagated as the same type of dependency no matter what. In practice, that means that many `propagatedNativeBuildInputs` should instead be `propagatedBuildInputs`. Thankfully, that was and is the least used type of dependency. Also, it means that some `propagatedBuildInputs` should instead be `depsTargetTargetPropagated`. Other types dependencies should be unaffected.
180
181- `lib.addPassthru drv passthru` is removed. Use `lib.extendDerivation true passthru drv` instead.
182
183- The `memcached` service no longer accept dynamic socket paths via `services.memcached.socket`. Unix sockets can be still enabled by `services.memcached.enableUnixSocket` and will be accessible at `/run/memcached/memcached.sock`.
184
185- The `hardware.amdHybridGraphics.disable` option was removed for lack of a maintainer. If you still need this module, you may wish to include a copy of it from an older version of nixos in your imports.
186
187- The merging of config options for `services.postfix.config` was buggy. Previously, if other options in the Postfix module like `services.postfix.useSrs` were set and the user set config options that were also set by such options, the resulting config wouldn\'t include all options that were needed. They are now merged correctly. If config options need to be overridden, `lib.mkForce` or `lib.mkOverride` can be used.
188
189- The following changes apply if the `stateVersion` is changed to 18.03 or higher. For `stateVersion = "17.09"` or lower the old behavior is preserved.
190
191 - `matrix-synapse` uses postgresql by default instead of sqlite. Migration instructions can be found [ here ](https://github.com/matrix-org/synapse/blob/master/docs/postgres.rst#porting-from-sqlite).
192
193- The `jid` package has been removed, due to maintenance overhead of a go package having non-versioned dependencies.
194
195- When using `services.xserver.libinput` (enabled by default in GNOME), it now handles all input devices, not just touchpads. As a result, you might need to re-evaluate any custom Xorg configuration. In particular, `Option "XkbRules" "base"` may result in broken keyboard layout.
196
197- The `attic` package was removed. A maintained fork called [Borg](https://www.borgbackup.org/) should be used instead. Migration instructions can be found [here](http://borgbackup.readthedocs.io/en/stable/usage/upgrade.html#attic-and-borg-0-xx-to-borg-1-x).
198
199- The Piwik analytics software was renamed to Matomo:
200
201 - The package `pkgs.piwik` was renamed to `pkgs.matomo`.
202
203 - The service `services.piwik` was renamed to `services.matomo`.
204
205 - The data directory `/var/lib/piwik` was renamed to `/var/lib/matomo`. All files will be moved automatically on first startup, but you might need to adjust your backup scripts.
206
207 - The default `serverName` for the nginx configuration changed from `piwik.${config.networking.hostName}` to `matomo.${config.networking.hostName}.${config.networking.domain}` if `config.networking.domain` is set, `matomo.${config.networking.hostName}` if it is not set. If you change your `serverName`, remember you\'ll need to update the `trustedHosts[]` array in `/var/lib/matomo/config/config.ini.php` as well.
208
209 - The `piwik` user was renamed to `matomo`. The service will adjust ownership automatically for files in the data directory. If you use unix socket authentication, remember to give the new `matomo` user access to the database and to change the `username` to `matomo` in the `[database]` section of `/var/lib/matomo/config/config.ini.php`.
210
211 - If you named your database \`piwik\`, you might want to rename it to \`matomo\` to keep things clean, but this is neither enforced nor required.
212
213- `nodejs-4_x` is end-of-life. `nodejs-4_x`, `nodejs-slim-4_x` and `nodePackages_4_x` are removed.
214
215- The `pump.io` NixOS module was removed. It is now maintained as an [external module](https://github.com/rvl/pump.io-nixos).
216
217- The Prosody XMPP server has received a major update. The following modules were renamed:
218
219 - `services.prosody.modules.httpserver` is now `services.prosody.modules.http_files`
220
221 - `services.prosody.modules.console` is now `services.prosody.modules.admin_telnet`
222
223 Many new modules are now core modules, most notably `services.prosody.modules.carbons` and `services.prosody.modules.mam`.
224
225 The better-performing `libevent` backend is now enabled by default.
226
227 `withCommunityModules` now passes through the modules to `services.prosody.extraModules`. Use `withOnlyInstalledCommunityModules` for modules that should not be enabled directly, e.g `lib_ldap`.
228
229- All prometheus exporter modules are now defined as submodules. The exporters are configured using `services.prometheus.exporters`.
230
231## Other Notable Changes {#sec-release-18.03-notable-changes}
232
233- ZNC option `services.znc.mutable` now defaults to `true`. That means that old configuration is not overwritten by default when update to the znc options are made.
234
235- The option `networking.wireless.networks.<name>.auth` has been added for wireless networks with WPA-Enterprise authentication. There is also a new `extraConfig` option to directly configure `wpa_supplicant` and `hidden` to connect to hidden networks.
236
237- In the module `networking.interfaces.<name>` the following options have been removed:
238
239 - `ipAddress`
240
241 - `ipv6Address`
242
243 - `prefixLength`
244
245 - `ipv6PrefixLength`
246
247 - `subnetMask`
248
249 To assign static addresses to an interface the options `ipv4.addresses` and `ipv6.addresses` should be used instead. The options `ip4` and `ip6` have been renamed to `ipv4.addresses` `ipv6.addresses` respectively. The new options `ipv4.routes` and `ipv6.routes` have been added to set up static routing.
250
251- The option `services.logstash.listenAddress` is now `127.0.0.1` by default. Previously the default behaviour was to listen on all interfaces.
252
253- `services.btrfs.autoScrub` has been added, to periodically check btrfs filesystems for data corruption. If there\'s a correct copy available, it will automatically repair corrupted blocks.
254
255- `displayManager.lightdm.greeters.gtk.clock-format.` has been added, the clock format string (as expected by strftime, e.g. `%H:%M`) to use with the lightdm gtk greeter panel.
256
257 If set to null the default clock format is used.
258
259- `displayManager.lightdm.greeters.gtk.indicators` has been added, a list of allowed indicator modules to use with the lightdm gtk greeter panel.
260
261 Built-in indicators include `~a11y`, `~language`, `~session`, `~power`, `~clock`, `~host`, `~spacer`. Unity indicators can be represented by short name (e.g. `sound`, `power`), service file name, or absolute path.
262
263 If set to `null` the default indicators are used.
264
265 In order to have the previous default configuration add
266
267 ```nix
268 {
269 services.xserver.displayManager.lightdm.greeters.gtk.indicators = [
270 "~host" "~spacer"
271 "~clock" "~spacer"
272 "~session"
273 "~language"
274 "~a11y"
275 "~power"
276 ];
277 }
278 ```
279
280 to your `configuration.nix`.
281
282- The NixOS test driver supports user services declared by `systemd.user.services`. The methods `waitForUnit`, `getUnitInfo`, `startJob` and `stopJob` provide an optional `$user` argument for that purpose.
283
284- Enabling bash completion on NixOS, `programs.bash.enableCompletion`, will now also enable completion for the Nix command line tools by installing the [nix-bash-completions](https://github.com/hedning/nix-bash-completions) package.