aboutsummaryrefslogtreecommitdiff
path: root/nixos/modules/profiles (follow)
Commit message (Expand)AuthorAgeFilesLines
* qemu-guest: allow to override security.rngdMatthieu Coudron2019-09-181-2/+2
* Merge pull request #63773 from flokli/installation-device-fixesFlorian Klink2019-08-311-7/+10
|\
| * nixos/installation-device.nix: explain sshd usageFlorian Klink2019-08-191-7/+10
* | Merge pull request #66687 from joachifm/feat/hardened-nixos-revert-graphene-m...Marek Mahut2019-08-191-2/+0
|\ \ | |/ |/|
| * Revert "nixos/hardened: use graphene-hardened malloc by default"Joachim Fasting2019-08-151-2/+0
* | nixos/systemd: install sysctl snippetsFlorian Klink2019-08-181-11/+5
|/
* nixos-hardened: disable unprivileged userfaultfd syscallsJoachim Fasting2019-08-151-0/+3
* nixos-hardened: enable page alloc randomizationJoachim Fasting2019-08-151-0/+3
* installer: Don't run as rootworldofpeace2019-08-121-7/+20
* nixos/hardened: make pti=on overridablePierre Bourdon2019-07-301-3/+2
* Renaming security.virtualization.flushL1DataCache to virtualisationMarek Mahut2019-07-191-1/+1
* nixos/hardened: harder inet defaultsJoachim Fasting2019-07-041-0/+30
* nixos/hardened: disable ftrace by defaultJoachim Fasting2019-07-041-0/+3
* nixos/hardened: use graphene-hardened malloc by defaultJoachim Fasting2019-05-071-0/+2
* profiles/graphical.nix: Enable pulseaudio for virtualbox appliancesElis Hirwing2019-02-221-0/+4
* types.optionSet: deprecate and remove last usagesdanbst2019-01-311-1/+1
* modules/profiles/minimal: sound is disabled by defaultProfpatsch2019-01-132-2/+1
* nixos/hardened profile: always enable ptiJoachim Fasting2019-01-051-0/+3
* nixos/hardened profile: slab/slub hardeningJoachim Fasting2019-01-051-0/+6
* nixos/security/misc: expose SMT control optionJoachim Fasting2018-12-271-0/+2
* nixos/security/misc: expose l1tf mitigation optionJoachim Fasting2018-12-271-0/+2
* nixos/security/misc: factor out protectKernelImageJoachim Fasting2018-12-271-6/+2
* Revert "zfs cannot be distributed. Disabling it in the isos."Graham Christensen2018-11-261-1/+1
* Merge branch 'master' of https://github.com/nixos/nixpkgs into tarball-closur...Ding Xiang Fei2018-11-261-0/+2
|\
| * nixos/hardened: restrict access to nix daemonJoachim Fasting2018-11-241-0/+2
* | Merge branch 'master' of https://github.com/nixos/nixpkgs into tarball-closur...Ding Xiang Fei2018-11-141-1/+1
|\|
| * Merge pull request #49326 from c0bw3b/nixos/installation-deviceEelco Dolstra2018-10-301-1/+1
| |\
| | * installation-device: set GC initial heap size to 1MBRenaud2018-10-281-1/+1
* | | use closure-info for building system tarballDing Xiang Fei2018-11-071-6/+10
|/ /
* | Merge pull request #48801 from matthewbauer/cloneConfigExtraMatthew Bauer2018-10-281-0/+9
|\ \ | |/ |/|
| * ova: add cloneConfigExtra optionMatthew Bauer2018-10-211-0/+9
* | nixos/installation-device: Move systemPackages additions to profiles/baseTuomas Tynkkynen2018-10-272-3/+3
* | nixos/installer: Drop extra copy of w3mTuomas Tynkkynen2018-10-271-1/+1
|/
* Merge pull request #48439 from joachifm/hardened-miscJoachim F2018-10-151-12/+2
|\
| * nixos/security/misc: initJoachim Fasting2018-10-151-12/+2
* | nixos/hardened: add myself to maintainersJoachim Fasting2018-10-151-0/+4
|/
* nixos: Fix eval error for documentation.nixosaszlig2018-09-251-0/+1
* Merge pull request #47298 from oxij/nixos/doc-in-installerMichael Raskin2018-09-252-2/+1
|\
| * nixos: doc: fix minimal profile and installer configsJan Malakhovski2018-09-242-2/+1
* | Merge pull request #47296 from matthewbauer/closure-size-reductionsxeji2018-09-241-1/+4
|\ \
| * | nixos: don’t enableQt4Support for installer profileMatthew Bauer2018-09-241-1/+4
* | | Merge pull request #46193 from oxij/nixos/manual-to-docSamuel Dionne-Riel2018-09-242-2/+2
|\ \ \ | | |/ | |/|
| * | nixos: doc: move non-service parts of `service.nixosManual` to `documentation...Jan Malakhovski2018-09-232-2/+2
| |/
* / nixos: make firefox default browserMatthew Bauer2018-09-221-1/+1
|/
* usb-storage -> uasvolth2018-08-231-1/+1
* nixos: Fix iso_graphical evaluationTuomas Tynkkynen2018-08-171-2/+2
* installer: Disable udisksTuomas Tynkkynen2018-08-171-0/+1
* set initialHashedPassword in installation-device.nixBob van der Linden2018-08-071-0/+4
* [bot] nixos/*: remove unused arguments in lambdasvolth2018-07-208-8/+8
* [bot]: remove unreferenced codevolth2018-07-201-1/+0