nixos: add release notes about users.users.name.group

Changed files
+46
nixos
doc
manual
from_md
release-notes
release-notes
+27
nixos/doc/manual/from_md/release-notes/rl-2111.section.xml
···
</listitem>
<listitem>
<para>
+
<link xlink:href="options.html#opt-users.users._name_.group">users.users.&lt;name&gt;.group</link>
+
no longer defaults to <literal>nogroup</literal>, which was
+
insecure. Out-of-tree modules are likely to require
+
adaptation: instead of
+
</para>
+
<programlisting language="bash">
+
{
+
users.users.foo = {
+
isSystemUser = true;
+
};
+
}
+
</programlisting>
+
<para>
+
also create a group for your user:
+
</para>
+
<programlisting language="bash">
+
{
+
users.users.foo = {
+
isSystemUser = true;
+
group = &quot;foo&quot;;
+
};
+
users.groups.foo = {};
+
}
+
</programlisting>
+
</listitem>
+
<listitem>
+
<para>
<literal>services.geoip-updater</literal> was broken and has
been replaced by
<link xlink:href="options.html#opt-services.geoipupdate.enable">services.geoipupdate</link>.
+19
nixos/doc/manual/release-notes/rl-2111.section.md
···
- The `erigon` ethereum node has moved it's database location in `2021-08-03`, users upgrading must manually move their chaindata (see [release notes](https://github.com/ledgerwatch/erigon/releases/tag/v2021.08.03)).
+
- [users.users.&lt;name&gt;.group](options.html#opt-users.users._name_.group) no longer defaults to `nogroup`, which was insecure. Out-of-tree modules are likely to require adaptation: instead of
+
```nix
+
{
+
users.users.foo = {
+
isSystemUser = true;
+
};
+
}
+
```
+
also create a group for your user:
+
```nix
+
{
+
users.users.foo = {
+
isSystemUser = true;
+
group = "foo";
+
};
+
users.groups.foo = {};
+
}
+
```
+
- `services.geoip-updater` was broken and has been replaced by [services.geoipupdate](options.html#opt-services.geoipupdate.enable).
- PHP 7.3 is no longer supported due to upstream not supporting this version for the entire lifecycle of the 21.11 release.