kanidm: set default to 1.7, mark 1.6 unsupported, warn on pending alias removal (#439327)

pkgs/by-name/ka/kanidm/1_5.nix pkgs/servers/kanidm/1_5.nix
+1 -1
pkgs/by-name/ka/kanidm/1_6.nix pkgs/servers/kanidm/1_6.nix
···
version = "1.6.4";
hash = "sha256-ui3w1HDHXHARsjQ3WtJfZbM7Xgg3ODnUneXJMQwaOMw=";
cargoHash = "sha256-KJGELBzScwsLd6g3GR9Vk0nfDU2EjZBfXwlXJ+bZb1k=";
-
eolDate = "2025-09-01";
+
unsupported = true;
}
pkgs/by-name/ka/kanidm/1_7.nix pkgs/servers/kanidm/1_7.nix
+1 -2
pkgs/by-name/ka/kanidm/README.md pkgs/servers/kanidm/README.md
···
### Update default
-
1. `sed -i 's/1_4/1_5/' pkgs/by-name/ka/kanidm/package.nix`
-
1. Update `all-packages.nix` and set `kanidmWithSecretProvisioning = kanidmWithSecretProvisioning_1_5;`
+
1. Update kanidm aliases in `aliases.nix`. Should remove completely after 25.11 branch off.
1. Create commit `kanidm: update default to 1.5.0`
### Backport to stable
pkgs/by-name/ka/kanidm/a3bc718a8a0325a53e0857668b8a0134d371794d.patch pkgs/servers/kanidm/a3bc718a8a0325a53e0857668b8a0134d371794d.patch
pkgs/by-name/ka/kanidm/generic.nix pkgs/servers/kanidm/generic.nix
-1
pkgs/by-name/ka/kanidm/package.nix
···
-
import ./1_6.nix
pkgs/by-name/ka/kanidm/provision-patches/1_5/oauth2-basic-secret-modify.patch pkgs/servers/kanidm/provision-patches/1_5/oauth2-basic-secret-modify.patch
pkgs/by-name/ka/kanidm/provision-patches/1_5/recover-account.patch pkgs/servers/kanidm/provision-patches/1_5/recover-account.patch
pkgs/by-name/ka/kanidm/provision-patches/1_6/oauth2-basic-secret-modify.patch pkgs/servers/kanidm/provision-patches/1_6/oauth2-basic-secret-modify.patch
pkgs/by-name/ka/kanidm/provision-patches/1_6/recover-account.patch pkgs/servers/kanidm/provision-patches/1_6/recover-account.patch
pkgs/by-name/ka/kanidm/provision-patches/1_7/oauth2-basic-secret-modify.patch pkgs/servers/kanidm/provision-patches/1_7/oauth2-basic-secret-modify.patch
pkgs/by-name/ka/kanidm/provision-patches/1_7/recover-account.patch pkgs/servers/kanidm/provision-patches/1_7/recover-account.patch
+2
pkgs/top-level/aliases.nix
···
kube3d = k3d; # Added 2022-0705
kafkacat = throw "'kafkacat' has been renamed to/replaced by 'kcat'"; # Converted to throw 2024-10-17
kak-lsp = kakoune-lsp; # Added 2024-04-01
+
kanidm = lib.warnOnInstantiate "'kanidm' will be removed before 26.05. You must use a versioned package, e.g. 'kanidm_1_x'." kanidm_1_7; # Added 2025-09-01
+
kanidmWithSecretProvisioning = lib.warnOnInstantiate "'kanidmWithSecretProvisioning' will be removed before 26.05. You must use a versioned package, e.g. 'kanidmWithSecretProvisioning_1_x'." kanidmWithSecretProvisioning_1_7; # Added 2025-09-01
kanidm_1_3 = throw "'kanidm_1_3' has been removed as it has reached end of life"; # Added 2025-03-10
kanidm_1_4 = throw "'kanidm_1_4' has been removed as it has reached end of life"; # Added 2025-06-18
kanidmWithSecretProvisioning_1_4 = throw "'kanidmWithSecretProvisioning_1_4' has been removed as it has reached end of life"; # Added 2025-06-18
+3 -4
pkgs/top-level/all-packages.nix
···
jetty = jetty_12;
-
kanidm_1_5 = callPackage ../by-name/ka/kanidm/1_5.nix {
+
kanidm_1_5 = callPackage ../servers/kanidm/1_5.nix {
kanidmWithSecretProvisioning = kanidmWithSecretProvisioning_1_5;
};
-
kanidm_1_6 = callPackage ../by-name/ka/kanidm/1_6.nix {
+
kanidm_1_6 = callPackage ../servers/kanidm/1_6.nix {
kanidmWithSecretProvisioning = kanidmWithSecretProvisioning_1_6;
};
-
kanidm_1_7 = callPackage ../by-name/ka/kanidm/1_7.nix {
+
kanidm_1_7 = callPackage ../servers/kanidm/1_7.nix {
kanidmWithSecretProvisioning = kanidmWithSecretProvisioning_1_7;
};
-
kanidmWithSecretProvisioning = kanidm.override { enableSecretProvisioning = true; };
kanidmWithSecretProvisioning_1_5 = kanidm_1_5.override { enableSecretProvisioning = true; };
kanidmWithSecretProvisioning_1_6 = kanidm_1_6.override { enableSecretProvisioning = true; };
kanidmWithSecretProvisioning_1_7 = kanidm_1_7.override { enableSecretProvisioning = true; };
+2 -2
pkgs/top-level/release.nix
···
# so users choosing to allow don't have to rebuild them every time.
permittedInsecurePackages = [
"olm-3.2.16" # see PR #347899
-
"kanidm_1_5-1.5.0"
-
"kanidmWithSecretProvisioning_1_5-1.5.0"
+
"kanidm_1_6-1.6.4"
+
"kanidmWithSecretProvisioning_1_6-1.6.4"
];
};