aboutsummaryrefslogtreecommitdiff
path: root/nixos/doc/manual/release-notes/rl-1703.xml
diff options
context:
space:
mode:
authorEelco Dolstra <edolstra@gmail.com>2019-09-19 19:17:30 +0200
committerEelco Dolstra <edolstra@gmail.com>2019-09-19 19:17:30 +0200
commitb0ccd6dd16909c8639c2d9bee7dd2a2a0ac74c30 (patch)
treeee6367837650bb97dc5117d518217b11294900fe /nixos/doc/manual/release-notes/rl-1703.xml
parentdb3d31b903da12bc471e91d811d231dfe5b662ef (diff)
Revert "nixos/doc: re-format"
This reverts commit ea6e8775bd69e4676c623a85c39f1da540d29ad1. The new format is not an improvement.
Diffstat (limited to 'nixos/doc/manual/release-notes/rl-1703.xml')
-rw-r--r--nixos/doc/manual/release-notes/rl-1703.xml193
1 files changed, 148 insertions, 45 deletions
diff --git a/nixos/doc/manual/release-notes/rl-1703.xml b/nixos/doc/manual/release-notes/rl-1703.xml
index 49c364a103ae..14b31b232e90 100644
--- a/nixos/doc/manual/release-notes/rl-1703.xml
+++ b/nixos/doc/manual/release-notes/rl-1703.xml
@@ -13,24 +13,29 @@
<title>Highlights</title>
<para>
- In addition to numerous new and upgraded packages, this release has the following highlights:
+ In addition to numerous new and upgraded packages, this release has the
+ following highlights:
</para>
<itemizedlist>
<listitem>
<para>
- Nixpkgs is now extensible through overlays. See the <link
- xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install">Nixpkgs manual</link> for more information.
+ Nixpkgs is now extensible through overlays. See the
+ <link
+ xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install">Nixpkgs
+ manual</link> for more information.
</para>
</listitem>
<listitem>
<para>
- This release is based on Glibc 2.25, GCC 5.4.0 and systemd 232. The default Linux kernel is 4.9 and Nix is at 1.11.8.
+ This release is based on Glibc 2.25, GCC 5.4.0 and systemd 232. The
+ default Linux kernel is 4.9 and Nix is at 1.11.8.
</para>
</listitem>
<listitem>
<para>
- The default desktop environment now is KDE's Plasma 5. KDE 4 has been removed
+ The default desktop environment now is KDE's Plasma 5. KDE 4 has been
+ removed
</para>
</listitem>
<listitem>
@@ -40,24 +45,35 @@
</listitem>
<listitem>
<para>
- X.org server uses branch 1.19. Due to ABI incompatibilities, <literal>ati_unfree</literal> keeps forcing 1.17 and <literal>amdgpu-pro</literal> starts forcing 1.18.
+ X.org server uses branch 1.19. Due to ABI incompatibilities,
+ <literal>ati_unfree</literal> keeps forcing 1.17 and
+ <literal>amdgpu-pro</literal> starts forcing 1.18.
</para>
</listitem>
<listitem>
<para>
- Cross compilation has been rewritten. See the nixpkgs manual for details. The most obvious breaking change is that in derivations there is no <literal>.nativeDrv</literal> nor <literal>.crossDrv</literal> are now cross by default, not native.
+ Cross compilation has been rewritten. See the nixpkgs manual for details.
+ The most obvious breaking change is that in derivations there is no
+ <literal>.nativeDrv</literal> nor <literal>.crossDrv</literal> are now
+ cross by default, not native.
</para>
</listitem>
<listitem>
<para>
- The <literal>overridePackages</literal> function has been rewritten to be replaced by <link
- xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install"> overlays</link>
+ The <literal>overridePackages</literal> function has been rewritten to be
+ replaced by
+ <link
+ xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install">
+ overlays</link>
</para>
</listitem>
<listitem>
<para>
- Packages in nixpkgs can be marked as insecure through listed vulnerabilities. See the <link
- xlink:href="https://nixos.org/nixpkgs/manual/#sec-allow-insecure">Nixpkgs manual</link> for more information.
+ Packages in nixpkgs can be marked as insecure through listed
+ vulnerabilities. See the
+ <link
+ xlink:href="https://nixos.org/nixpkgs/manual/#sec-allow-insecure">Nixpkgs
+ manual</link> for more information.
</para>
</listitem>
<listitem>
@@ -496,64 +512,92 @@
<title>Backward Incompatibilities</title>
<para>
- When upgrading from a previous release, please be aware of the following incompatible changes:
+ When upgrading from a previous release, please be aware of the following
+ incompatible changes:
</para>
<itemizedlist>
<listitem>
<para>
- Derivations have no <literal>.nativeDrv</literal> nor <literal>.crossDrv</literal> and are now cross by default, not native.
+ Derivations have no <literal>.nativeDrv</literal> nor
+ <literal>.crossDrv</literal> and are now cross by default, not native.
</para>
</listitem>
<listitem>
<para>
- <literal>stdenv.overrides</literal> is now expected to take <literal>self</literal> and <literal>super</literal> arguments. See <literal>lib.trivial.extends</literal> for what those parameters represent.
+ <literal>stdenv.overrides</literal> is now expected to take
+ <literal>self</literal> and <literal>super</literal> arguments. See
+ <literal>lib.trivial.extends</literal> for what those parameters
+ represent.
</para>
</listitem>
<listitem>
<para>
- <literal>ansible</literal> now defaults to ansible version 2 as version 1 has been removed due to a serious <link
- xlink:href="https://www.computest.nl/advisories/CT-2017-0109_Ansible.txt"> vulnerability</link> unpatched by upstream.
+ <literal>ansible</literal> now defaults to ansible version 2 as version 1
+ has been removed due to a serious
+ <link
+ xlink:href="https://www.computest.nl/advisories/CT-2017-0109_Ansible.txt">
+ vulnerability</link> unpatched by upstream.
</para>
</listitem>
<listitem>
<para>
- <literal>gnome</literal> alias has been removed along with <literal>gtk</literal>, <literal>gtkmm</literal> and several others. Now you need to use versioned attributes, like <literal>gnome3</literal>.
+ <literal>gnome</literal> alias has been removed along with
+ <literal>gtk</literal>, <literal>gtkmm</literal> and several others. Now
+ you need to use versioned attributes, like <literal>gnome3</literal>.
</para>
</listitem>
<listitem>
<para>
- The attribute name of the Radicale daemon has been changed from <literal>pythonPackages.radicale</literal> to <literal>radicale</literal>.
+ The attribute name of the Radicale daemon has been changed from
+ <literal>pythonPackages.radicale</literal> to <literal>radicale</literal>.
</para>
</listitem>
<listitem>
<para>
- The <literal>stripHash</literal> bash function in <literal>stdenv</literal> changed according to its documentation; it now outputs the stripped name to <literal>stdout</literal> instead of putting it in the variable <literal>strippedName</literal>.
+ The <literal>stripHash</literal> bash function in
+ <literal>stdenv</literal> changed according to its documentation; it now
+ outputs the stripped name to <literal>stdout</literal> instead of putting
+ it in the variable <literal>strippedName</literal>.
</para>
</listitem>
<listitem>
<para>
- PHP now scans for extra configuration .ini files in /etc/php.d instead of /etc. This prevents accidentally loading non-PHP .ini files that may be in /etc.
+ PHP now scans for extra configuration .ini files in /etc/php.d instead of
+ /etc. This prevents accidentally loading non-PHP .ini files that may be in
+ /etc.
</para>
</listitem>
<listitem>
<para>
- Two lone top-level dict dbs moved into <literal>dictdDBs</literal>. This affects: <literal>dictdWordnet</literal> which is now at <literal>dictdDBs.wordnet</literal> and <literal>dictdWiktionary</literal> which is now at <literal>dictdDBs.wiktionary</literal>
+ Two lone top-level dict dbs moved into <literal>dictdDBs</literal>. This
+ affects: <literal>dictdWordnet</literal> which is now at
+ <literal>dictdDBs.wordnet</literal> and <literal>dictdWiktionary</literal>
+ which is now at <literal>dictdDBs.wiktionary</literal>
</para>
</listitem>
<listitem>
<para>
- Parsoid service now uses YAML configuration format. <literal>service.parsoid.interwikis</literal> is now called <literal>service.parsoid.wikis</literal> and is a list of either API URLs or attribute sets as specified in parsoid's documentation.
+ Parsoid service now uses YAML configuration format.
+ <literal>service.parsoid.interwikis</literal> is now called
+ <literal>service.parsoid.wikis</literal> and is a list of either API URLs
+ or attribute sets as specified in parsoid's documentation.
</para>
</listitem>
<listitem>
<para>
- <literal>Ntpd</literal> was replaced by <literal>systemd-timesyncd</literal> as the default service to synchronize system time with a remote NTP server. The old behavior can be restored by setting <literal>services.ntp.enable</literal> to <literal>true</literal>. Upstream time servers for all NTP implementations are now configured using <literal>networking.timeServers</literal>.
+ <literal>Ntpd</literal> was replaced by
+ <literal>systemd-timesyncd</literal> as the default service to synchronize
+ system time with a remote NTP server. The old behavior can be restored by
+ setting <literal>services.ntp.enable</literal> to <literal>true</literal>.
+ Upstream time servers for all NTP implementations are now configured using
+ <literal>networking.timeServers</literal>.
</para>
</listitem>
<listitem>
<para>
- <literal>service.nylon</literal> is now declared using named instances. As an example:
+ <literal>service.nylon</literal> is now declared using named instances. As
+ an example:
<programlisting>
services.nylon = {
enable = true;
@@ -576,8 +620,11 @@
</listitem>
<listitem>
<para>
- <literal>overridePackages</literal> function no longer exists. It is replaced by <link
- xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install"> overlays</link>. For example, the following code:
+ <literal>overridePackages</literal> function no longer exists. It is
+ replaced by
+ <link
+ xlink:href="https://nixos.org/nixpkgs/manual/#sec-overlays-install">
+ overlays</link>. For example, the following code:
<programlisting>
let
pkgs = import &lt;nixpkgs&gt; {};
@@ -595,42 +642,72 @@ in
</listitem>
<listitem>
<para>
- Autoloading connection tracking helpers is now disabled by default. This default was also changed in the Linux kernel and is considered insecure if not configured properly in your firewall. If you need connection tracking helpers (i.e. for active FTP) please enable <literal>networking.firewall.autoLoadConntrackHelpers</literal> and tune <literal>networking.firewall.connectionTrackingModules</literal> to suit your needs.
+ Autoloading connection tracking helpers is now disabled by default. This
+ default was also changed in the Linux kernel and is considered insecure if
+ not configured properly in your firewall. If you need connection tracking
+ helpers (i.e. for active FTP) please enable
+ <literal>networking.firewall.autoLoadConntrackHelpers</literal> and tune
+ <literal>networking.firewall.connectionTrackingModules</literal> to suit
+ your needs.
</para>
</listitem>
<listitem>
<para>
- <literal>local_recipient_maps</literal> is not set to empty value by Postfix service. It's an insecure default as stated by Postfix documentation. Those who want to retain this setting need to set it via <literal>services.postfix.extraConfig</literal>.
+ <literal>local_recipient_maps</literal> is not set to empty value by
+ Postfix service. It's an insecure default as stated by Postfix
+ documentation. Those who want to retain this setting need to set it via
+ <literal>services.postfix.extraConfig</literal>.
</para>
</listitem>
<listitem>
<para>
- Iputils no longer provide ping6 and traceroute6. The functionality of these tools has been integrated into ping and traceroute respectively. To enforce an address family the new flags <literal>-4</literal> and <literal>-6</literal> have been added. One notable incompatibility is that specifying an interface (for link-local IPv6 for instance) is no longer done with the <literal>-I</literal> flag, but by encoding the interface into the address (<literal>ping fe80::1%eth0</literal>).
+ Iputils no longer provide ping6 and traceroute6. The functionality of
+ these tools has been integrated into ping and traceroute respectively. To
+ enforce an address family the new flags <literal>-4</literal> and
+ <literal>-6</literal> have been added. One notable incompatibility is that
+ specifying an interface (for link-local IPv6 for instance) is no longer
+ done with the <literal>-I</literal> flag, but by encoding the interface
+ into the address (<literal>ping fe80::1%eth0</literal>).
</para>
</listitem>
<listitem>
<para>
- The socket handling of the <literal>services.rmilter</literal> module has been fixed and refactored. As rmilter doesn't support binding to more than one socket, the options <literal>bindUnixSockets</literal> and <literal>bindInetSockets</literal> have been replaced by <literal>services.rmilter.bindSocket.*</literal>. The default is still a unix socket in <literal>/run/rmilter/rmilter.sock</literal>. Refer to the options documentation for more information.
+ The socket handling of the <literal>services.rmilter</literal> module has
+ been fixed and refactored. As rmilter doesn't support binding to more than
+ one socket, the options <literal>bindUnixSockets</literal> and
+ <literal>bindInetSockets</literal> have been replaced by
+ <literal>services.rmilter.bindSocket.*</literal>. The default is still a
+ unix socket in <literal>/run/rmilter/rmilter.sock</literal>. Refer to the
+ options documentation for more information.
</para>
</listitem>
<listitem>
<para>
- The <literal>fetch*</literal> functions no longer support md5, please use sha256 instead.
+ The <literal>fetch*</literal> functions no longer support md5, please use
+ sha256 instead.
</para>
</listitem>
<listitem>
<para>
- The dnscrypt-proxy module interface has been streamlined around the <option>extraArgs</option> option. Where possible, legacy option declarations are mapped to <option>extraArgs</option> but will emit warnings. The <option>resolverList</option> has been outright removed: to use an unlisted resolver, use the <option>customResolver</option> option.
+ The dnscrypt-proxy module interface has been streamlined around the
+ <option>extraArgs</option> option. Where possible, legacy option
+ declarations are mapped to <option>extraArgs</option> but will emit
+ warnings. The <option>resolverList</option> has been outright removed: to
+ use an unlisted resolver, use the <option>customResolver</option> option.
</para>
</listitem>
<listitem>
<para>
- torbrowser now stores local state under <filename>~/.local/share/tor-browser</filename> by default. Any browser profile data from the old location, <filename>~/.torbrowser4</filename>, must be migrated manually.
+ torbrowser now stores local state under
+ <filename>~/.local/share/tor-browser</filename> by default. Any browser
+ profile data from the old location, <filename>~/.torbrowser4</filename>,
+ must be migrated manually.
</para>
</listitem>
<listitem>
<para>
- The ihaskell, monetdb, offlineimap and sitecopy services have been removed.
+ The ihaskell, monetdb, offlineimap and sitecopy services have been
+ removed.
</para>
</listitem>
</itemizedlist>
@@ -646,12 +723,18 @@ in
<itemizedlist>
<listitem>
<para>
- Module type system have a new extensible option types feature that allow to extend certain types, such as enum, through multiple option declarations of the same option across multiple modules.
+ Module type system have a new extensible option types feature that allow
+ to extend certain types, such as enum, through multiple option
+ declarations of the same option across multiple modules.
</para>
</listitem>
<listitem>
<para>
- <literal>jre</literal> now defaults to GTK UI by default. This improves visual consistency and makes Java follow system font style, improving the situation on HighDPI displays. This has a cost of increased closure size; for server and other headless workloads it's recommended to use <literal>jre_headless</literal>.
+ <literal>jre</literal> now defaults to GTK UI by default. This improves
+ visual consistency and makes Java follow system font style, improving the
+ situation on HighDPI displays. This has a cost of increased closure size;
+ for server and other headless workloads it's recommended to use
+ <literal>jre_headless</literal>.
</para>
</listitem>
<listitem>
@@ -661,37 +744,53 @@ in
</listitem>
<listitem>
<para>
- The Python 2.7 interpreter does not use modules anymore. Instead, all CPython interpreters now include the whole standard library except for `tkinter`, which is available in the Python package set.
+ The Python 2.7 interpreter does not use modules anymore. Instead, all
+ CPython interpreters now include the whole standard library except for
+ `tkinter`, which is available in the Python package set.
</para>
</listitem>
<listitem>
<para>
- Python 2.7, 3.5 and 3.6 are now built deterministically and 3.4 mostly. Minor modifications had to be made to the interpreters in order to generate deterministic bytecode. This has security implications and is relevant for those using Python in a <literal>nix-shell</literal>. See the Nixpkgs manual for details.
+ Python 2.7, 3.5 and 3.6 are now built deterministically and 3.4 mostly.
+ Minor modifications had to be made to the interpreters in order to
+ generate deterministic bytecode. This has security implications and is
+ relevant for those using Python in a <literal>nix-shell</literal>. See the
+ Nixpkgs manual for details.
</para>
</listitem>
<listitem>
<para>
- The Python package sets now use a fixed-point combinator and the sets are available as attributes of the interpreters.
+ The Python package sets now use a fixed-point combinator and the sets are
+ available as attributes of the interpreters.
</para>
</listitem>
<listitem>
<para>
- The Python function <literal>buildPythonPackage</literal> has been improved and can be used to build from Setuptools source, Flit source, and precompiled Wheels.
+ The Python function <literal>buildPythonPackage</literal> has been
+ improved and can be used to build from Setuptools source, Flit source, and
+ precompiled Wheels.
</para>
</listitem>
<listitem>
<para>
- When adding new or updating current Python libraries, the expressions should be put in separate files in <literal>pkgs/development/python-modules</literal> and called from <literal>python-packages.nix</literal>.
+ When adding new or updating current Python libraries, the expressions
+ should be put in separate files in
+ <literal>pkgs/development/python-modules</literal> and called from
+ <literal>python-packages.nix</literal>.
</para>
</listitem>
<listitem>
<para>
- The dnscrypt-proxy service supports synchronizing the list of public resolvers without working DNS resolution. This fixes issues caused by the resolver list becoming outdated. It also improves the viability of DNSCrypt only configurations.
+ The dnscrypt-proxy service supports synchronizing the list of public
+ resolvers without working DNS resolution. This fixes issues caused by the
+ resolver list becoming outdated. It also improves the viability of
+ DNSCrypt only configurations.
</para>
</listitem>
<listitem>
<para>
- Containers using bridged networking no longer lose their connection after changes to the host networking.
+ Containers using bridged networking no longer lose their connection after
+ changes to the host networking.
</para>
</listitem>
<listitem>
@@ -701,12 +800,16 @@ in
</listitem>
<listitem>
<para>
- The bind DNS utilities (e.g. dig) have been split into their own output and are now also available in <literal>pkgs.dnsutils</literal> and it is no longer necessary to pull in all of <literal>bind</literal> to use them.
+ The bind DNS utilities (e.g. dig) have been split into their own output
+ and are now also available in <literal>pkgs.dnsutils</literal> and it is
+ no longer necessary to pull in all of <literal>bind</literal> to use them.
</para>
</listitem>
<listitem>
<para>
- Per-user configuration was moved from <filename>~/.nixpkgs</filename> to <filename>~/.config/nixpkgs</filename>. The former is still valid for <filename>config.nix</filename> for backwards compatibility.
+ Per-user configuration was moved from <filename>~/.nixpkgs</filename> to
+ <filename>~/.config/nixpkgs</filename>. The former is still valid for
+ <filename>config.nix</filename> for backwards compatibility.
</para>
</listitem>
</itemizedlist>