···

       
24
       
 
       


     

       
25
       
 
       
- OpenSSH has been updated from 9.9p2 to 10.0p2, dropping support for DSA keys and adding a new `ssh-auth` binary to handle user authentication in a different address space from unauthenticated sessions. Additionally, we now enable a configure option by default that attempts to lock sshd into RAM to prevent it from being swapped out, which may improve performance if the system is under memory pressure. See the [full changelog](https://www.openwall.com/lists/oss-security/2025/04/09/1) for more details.

     

       
26
       
 
       


     

       
27
       
-
       
- GNOME has been updated to version 48. Refer to the [GNOME release notes](https://release.gnome.org/48/) for more details.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
28
       
 
       


     

       
29
       
 
       
- The `intel` video driver for X.org (from the xf86-video-intel package) which was previously removed because it was non-functional has been fixed and the driver has been re-introduced.

     

       
30
       
 
       


     

···

       
24
       
 
       


     

       
25
       
 
       
- OpenSSH has been updated from 9.9p2 to 10.0p2, dropping support for DSA keys and adding a new `ssh-auth` binary to handle user authentication in a different address space from unauthenticated sessions. Additionally, we now enable a configure option by default that attempts to lock sshd into RAM to prevent it from being swapped out, which may improve performance if the system is under memory pressure. See the [full changelog](https://www.openwall.com/lists/oss-security/2025/04/09/1) for more details.

     

       
26
       
 
       


     

       
27
       
+
       
- GNOME has been updated to version 48.

     

       
28
       
+
       


     

       
29
       
+
       
  - `decibels` music player is now installed by default. You can disable it using [](#opt-environment.gnome.excludePackages).

     

       
30
       
+
       
  - `gnome-shell-extensions` extension collection (which included GNOME Classic extensions, Apps Menu, and User Themes, among others) are no longer installed by default. You can install them again with [](#opt-services.xserver.desktopManager.gnome.sessionPath).

     

       
31
       
+
       
  - Option [](#opt-services.gnome.core-developer-tools.enable) now also installs `sysprof` and `d-spy`.

     

       
32
       
+
       


     

       
33
       
+
       
  Refer to the [GNOME release notes](https://release.gnome.org/48/) for more details.

     

       
34
       
 
       


     

       
35
       
 
       
- The `intel` video driver for X.org (from the xf86-video-intel package) which was previously removed because it was non-functional has been fixed and the driver has been re-introduced.

     

       
36
       
 
       


     

···

       
325
       
 
       
    })

     

       
326
       
 
       


     

       
327
       
 
       
    (lib.mkIf serviceCfg.core-shell.enable {

     

       
328
       
-
       
      services.xserver.desktopManager.gnome.sessionPath =

     

       
329
       
-
       
        let

     

       
330
       
-
       
          mandatoryPackages = [

     

       
331
       
-
       
            pkgs.gnome-shell

     

       
332
       
-
       
          ];

     

       
333
       
-
       
          optionalPackages = [

     

       
334
       
-
       
            pkgs.gnome-shell-extensions

     

       
335
       
-
       
          ];

     

       
336
       
-
       
        in

     

       
337
       
-
       
        mandatoryPackages

     

       
338
       
-
       
        ++ utils.removePackagesByName optionalPackages config.environment.gnome.excludePackages;

     

       
339
       
 
       


     

       
340
       
 
       
      services.colord.enable = mkDefault true;

     

       
341
       
 
       
      services.gnome.glib-networking.enable = true;

     
···

       
386
       
 
       
        source-sans

     

       
387
       
 
       
      ];

     

       
388
       
 
       


     

       
389
       
-
       
      # Adapt from https://gitlab.gnome.org/GNOME/gnome-build-meta/blob/gnome-3-38/elements/core/meta-gnome-core-shell.bst

     

       
390
       
 
       
      environment.systemPackages =

     

       
391
       
 
       
        let

     

       
392
       
 
       
          mandatoryPackages = [

     
···

       
399
       
 
       
            pkgs.gnome-bluetooth

     

       
400
       
 
       
            pkgs.gnome-color-manager

     

       
401
       
 
       
            pkgs.gnome-control-center

     

       
402
       
-
       
            pkgs.gnome-shell-extensions

     

       
403
       
 
       
            pkgs.gnome-tour # GNOME Shell detects the .desktop file on first log-in.

     

       
404
       
 
       
            pkgs.gnome-user-docs

     

       
405
       
 
       
            pkgs.glib # for gsettings program

     
···

       
413
       
 
       
        ++ utils.removePackagesByName optionalPackages config.environment.gnome.excludePackages;

     

       
414
       
 
       
    })

     

       
415
       
 
       


     

       
416
       
-
       
    # Adapt from https://gitlab.gnome.org/GNOME/gnome-build-meta/-/blob/gnome-45/elements/core/meta-gnome-core-utilities.bst

     

       
417
       
 
       
    (lib.mkIf serviceCfg.core-utilities.enable {

     

       
418
       
 
       
      environment.systemPackages = utils.removePackagesByName (

     

       
419
       
 
       
        [

     

       
420
       
 
       
          pkgs.baobab

     

       
0
       
 
       

     

       
421
       
 
       
          pkgs.epiphany

     

       
422
       
 
       
          pkgs.gnome-text-editor

     

       
423
       
 
       
          pkgs.gnome-calculator

     
···

       
499
       
 
       
      ] config.environment.gnome.excludePackages;

     

       
500
       
 
       
    })

     

       
501
       
 
       


     

       
502
       
-
       
    # Adapt from https://gitlab.gnome.org/GNOME/gnome-build-meta/-/blob/3.38.0/elements/core/meta-gnome-core-developer-tools.bst

     

       
503
       
 
       
    (lib.mkIf serviceCfg.core-developer-tools.enable {

     

       
504
       
 
       
      environment.systemPackages = utils.removePackagesByName [

     

       
505
       
 
       
        pkgs.dconf-editor

     

       
506
       
 
       
        pkgs.devhelp

     

       
0
       
 
       

     

       
507
       
 
       
        pkgs.gnome-builder

     

       
508
       
 
       
        # boxes would make sense in this option, however

     

       
509
       
 
       
        # it doesn't function well enough to be included

     

       
510
       
 
       
        # in default configurations.

     

       
511
       
 
       
        # https://github.com/NixOS/nixpkgs/issues/60908

     

       
512
       
 
       
        # pkgs.gnome-boxes

     

       
0
       
 
       

     

       
513
       
 
       
      ] config.environment.gnome.excludePackages;

     

       
514
       
 
       


     

       
515
       
 
       
      services.sysprof.enable = notExcluded pkgs.sysprof;

     

···

       
325
       
 
       
    })

     

       
326
       
 
       


     

       
327
       
 
       
    (lib.mkIf serviceCfg.core-shell.enable {

     

       
328
       
+
       
      services.xserver.desktopManager.gnome.sessionPath = [

     

       
329
       
+
       
        pkgs.gnome-shell

     

       
330
       
+
       
      ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
331
       
 
       


     

       
332
       
 
       
      services.colord.enable = mkDefault true;

     

       
333
       
 
       
      services.gnome.glib-networking.enable = true;

     
···

       
378
       
 
       
        source-sans

     

       
379
       
 
       
      ];

     

       
380
       
 
       


     

       
381
       
+
       
      # Adapt from https://gitlab.gnome.org/GNOME/gnome-build-meta/blob/gnome-48/elements/core/meta-gnome-core-shell.bst

     

       
382
       
 
       
      environment.systemPackages =

     

       
383
       
 
       
        let

     

       
384
       
 
       
          mandatoryPackages = [

     
···

       
391
       
 
       
            pkgs.gnome-bluetooth

     

       
392
       
 
       
            pkgs.gnome-color-manager

     

       
393
       
 
       
            pkgs.gnome-control-center

     

       
0
       
 
       

     

       
394
       
 
       
            pkgs.gnome-tour # GNOME Shell detects the .desktop file on first log-in.

     

       
395
       
 
       
            pkgs.gnome-user-docs

     

       
396
       
 
       
            pkgs.glib # for gsettings program

     
···

       
404
       
 
       
        ++ utils.removePackagesByName optionalPackages config.environment.gnome.excludePackages;

     

       
405
       
 
       
    })

     

       
406
       
 
       


     

       
407
       
+
       
    # Adapt from https://gitlab.gnome.org/GNOME/gnome-build-meta/-/blob/gnome-48/elements/core/meta-gnome-core-apps.bst

     

       
408
       
 
       
    (lib.mkIf serviceCfg.core-utilities.enable {

     

       
409
       
 
       
      environment.systemPackages = utils.removePackagesByName (

     

       
410
       
 
       
        [

     

       
411
       
 
       
          pkgs.baobab

     

       
412
       
+
       
          pkgs.decibels

     

       
413
       
 
       
          pkgs.epiphany

     

       
414
       
 
       
          pkgs.gnome-text-editor

     

       
415
       
 
       
          pkgs.gnome-calculator

     
···

       
491
       
 
       
      ] config.environment.gnome.excludePackages;

     

       
492
       
 
       
    })

     

       
493
       
 
       


     

       
494
       
+
       
    # Adapt from https://gitlab.gnome.org/GNOME/gnome-build-meta/-/blob/gnome-48/elements/core/meta-gnome-core-developer-tools.bst

     

       
495
       
 
       
    (lib.mkIf serviceCfg.core-developer-tools.enable {

     

       
496
       
 
       
      environment.systemPackages = utils.removePackagesByName [

     

       
497
       
 
       
        pkgs.dconf-editor

     

       
498
       
 
       
        pkgs.devhelp

     

       
499
       
+
       
        pkgs.d-spy

     

       
500
       
 
       
        pkgs.gnome-builder

     

       
501
       
 
       
        # boxes would make sense in this option, however

     

       
502
       
 
       
        # it doesn't function well enough to be included

     

       
503
       
 
       
        # in default configurations.

     

       
504
       
 
       
        # https://github.com/NixOS/nixpkgs/issues/60908

     

       
505
       
 
       
        # pkgs.gnome-boxes

     

       
506
       
+
       
        pkgs.sysprof

     

       
507
       
 
       
      ] config.environment.gnome.excludePackages;

     

       
508
       
 
       


     

       
509
       
 
       
      services.sysprof.enable = notExcluded pkgs.sysprof;