nixpkgs
9a73e32f - nixos/firmware: remove restrictive hardware.enableAllFirmware assertion

Commit

152 days ago

nixos/firmware: remove restrictive hardware.enableAllFirmware assertion Remove the too restrictive hardware.enableAllFirmware assertion introduced in commit 05aa80c06ab4 ("hardware: add enableRedistributalFirmware"). This assertion is too restrictive because it enforces globally enabling unfree packages without allowing explicit whitelisting: hardware.enableAllFirmware = true; -nixpkgs.config.allowUnfree = true; +nixpkgs.config.allowUnfreePredicate = pkg: + builtins.elem (lib.getName pkg) [ + "b43-firmware" + "broadcom-bt-firmware" + "facetimehd-calibration" + "facetimehd-firmware" + "xow_dongle-firmware" + ]; Declaring neither nixpkgs.config.allowUnfree nor nixpkgs.config.allowUnfreePredicate without this hardware.enableAllFirmware assertion results in detailed and instructive evaluation error messages. (cherry picked from commit ea7e940d6fbcbed1a4a92b8eed0198543b7c3261)

References

#465613 - [Backport release-25.11] nixos/firmware: remove restrictive hardware.enableAllFirmware assertion

#468069 - [Backport release-25.11] nixos/sshd: add generateHostKeys setting

#468221 - [Backport release-25.11] nixVersions.nix_2_31: Add patch for SRI hash formatting fix

#468454 - [Backport release-25.11] fishPlugins.done: 1.20.0 -> 1.20.1

#468721 - [Backport release-25.11] progress-tracker: 1.6 -> 1.7.1

#469341 - [Backport release-25.11] fblog: 4.16.0 -> 4.17.0

#469711 - [Backport release-25.11] drbd driver: 9.2.15 -> 9.2.16

#470049 - [Backport release-25.11] python3Packages.bugwarrior: 1.8.0 -> 2.0.0

#471278 - [Backport release-25.11] littlegptracker: 1.4.2 -> 1.5.0

#471493 - [Backport release-25.11] pam_pgsql: fix build; unstable-2020-05-05 -> 0-unstable-2025-01-24

#471926 - [Backport release-25.11] teapot: update src

#472115 - [Backport release-25.11] rpPPPoE: update src

#472117 - [Backport release-25.11] nixos/slurm: fix wrapper script variable expansion, and refactor

#472594 - [Backport release-25.11] code: 0.2.188 -> 0.6.5

#472707 - [Backport release-25.11] nixos/syncthing: Fix race condition when updating from 1.x to 2.x

#472908 - [Backport release-25.11] linuxPackages.nvidiaPackages.latest: 580.119.02 -> 590.48.01

#472983 - [Backport release-25.11] lk-jwt-service: fix deprecated envvar

#473134 - [Backport release-25.11] pyrseas: fix rev

#473948 - [Backport release-25.11] vigra: 1.12.2 -> 1.12.3

#474778 - [Backport release-25.11] reqable: 2.33.12 -> 3.0.30; fix settings schema; adopted

#475554 - [Backport release-25.11] cifs-utils: 7.4 -> 7.5

#475555 - [Backport release-25.11] mcpp: 2.7.2.2 -> 2.7.2.3

#475850 - [Backport release-25.11] fishPlugins.foreign-env: 0-unstable-2020-02-09 -> 0-unstable-2023-08-23

#476056 - [Backport release-25.11] rbw: 1.14.1 -> 1.15.0

#476244 - [Backport release-25.11] nixos/tests/fish: test nixos-env-preinit.fish

#476492 - [Backport release-25.11] wtfis: 0.13.0 -> 0.14.0

#476530 - [Backport release-25.11] claude-code-router: 1.0.64 -> 1.0.73

#476950 - [Backport release-25.11] buildPython*: support fixed-point arguments

#477273 - [Backport release-25.11] treewide: use overlays to pass a custom stdenv to buildPythonPackage / bulidPythonApplication

#478090 - [Backport release-25.11] python3Packages.sipsimple: fix build with gcc15; refactor and modernize

#478713 - [Backport release-25.11] cnijfilter2: clean up, adopt & 6.40 -> 6.90-1

#478714 - [Backport release-25.11] openvscode-server: 1.103.1 -> 1.106.3

#479324 - [Backport release-25.11] gcc-arm-embedded: 14.3.rel1 -> 15.2.rel1

#479395 - [Backport release-25.11] tlp: add missing runtime dependency usbutils (#423866)

#479661 - [Backport release-25.11] phpExtensions.pcov: drop patch

#480327 - [Backport release-25.11] python313Packages.celery: skip tests that check group

#480328 - [Backport release-25.11] openconnect: 9.12-unstable-2025-01-14 -> 9.12-unstable-2025-11-03

#480388 - [Backport release-25.11] Add clang64 toolchain to pkgsCross

#480542 - [Backport release-25.11] nixVersions.nix_2_33: init

#480751 - [Backport release-25.11] gpd-pocket-4-pipewire: init at 0-unstable-2025-04-08

#481072 - [Backport release-25.11] wg-access-server: 0.12.1 -> 0.13.1

#481214 - [Backport release-25.11] nixosTests.dwl: fix on aarch64-linux

#481404 - [Backport release-25.11] mago: 1.0.0-beta.14 -> 1.0.3

#482361 - [Backport release-25.11] awstats: 7.9 -> 8.0

#483274 - [Backport release-25.11] iosevka: fix quoting issue in buildPhase

#483309 - [Backport release-25.11] nixos/podman: fix starting unprivileged containers with sdnotify=conmon

#484434 - [Backport release-25.11] dino: disable optional features per default as they are experimental

#484481 - [Backport release-25.11] keycloak.plugins: add new plugins from extensions page

#484827 - [Backport release-25.11] btop: 1.4.5 -> 1.4.6

#485029 - [Backport release-25.11] libqb: 2.0.8 -> 2.0.9, modernize, fixes hash mismatch

#485416 - [Backport release-25.11] nixos/osquery: add `package` option

#485995 - [Backport release-25.11] onedrive: 2.5.9 -> 2.5.10

#486839 - [Backport release-25.11] inkscape: Add missing dependencies

#487971 - [Backport release-25.11] gnomeExtensions: auto-update

#488143 - [Backport release-25.11] mariadb: 10.6.24, 10.11.15, 11.4.9, 11.8.5

#488815 - [Backport release-25.11] nixos/netbird: moved login hardening to the hardening section

#488903 - [Backport release-25.11] pixel2svg: fix build, modernise, move to by-name

#489033 - [Backport release-25.11] ncspot: 1.3.2 -> 1.3.3

#489198 - [Backport release-25.11] libsForQt5.qtstyleplugin-kvantum: 1.1.5 -> 1.1.6

#489880 - [Backport release-25.11] elmPackages.*: remove myself as maintainer from packages where I was

#490183 - [Backport release-25.11] vesktop: 1.6.4 -> 1.6.5

#490268 - [Backport release-25.11] m-cli: 2.0.5 -> 2.0.7

#490857 - [Backport release-25.11] flux9s: init at 0.7.2

#494414 - [Backport release-25.11] nixos/rspamd: Add extraArgs option to rspamd module

#495299 - [Backport release-25.11] jadx: 1.5.0 -> 1.5.3

#495379 - [Backport release-25.11] crowdsec-firewall-bouncer: use cscli from the nix store instead of /run/current-system/sw/bin

#495768 - [Backport staging-25.11] qemu: add fuse support

#495775 - [Backport release-25.11] snitch: init at 0.1.9

#496437 - [Backport release-25.11] nixos/sssd: fix sssd-kcm wrong command-line options

#496654 - [Backport release-25.11] pihole-ftl: fix build

#496950 - [Backport release-25.11] zabbix: Multiple Versions

#497040 - [Backport release-25.11] pupdate: 3.20.0 -> 4.7.0

#497152 - [Backport release-25.11] mercury: move to by-name

#497224 - [Backport release-25.11] davmail: Various tweaks to Davmail package

#497922 - [Backport release-25.11] nixos/mihomo: add an option for processes info

#498210 - [Backport release-25.11] flatpak: 1.16.2 -> 1.16.3

#499072 - [Backport release-25.11] python3Packages.modern-colorthief: 0.1.7 -> 0.1.12

#499075 - [Backport release-25.11] nixos/tuned: add recommend option, fix ppdSupport, minor refactor

#499079 - [Backport release-25.11] tuned: 2.26.0 -> 2.27.0

#499621 - [Backport release-25.11] nixos/acme: Make the maximum jitter configurable

#499778 - [Backport release-25.11] lock: 1.8.2 -> 1.9.3

#499812 - [Backport release-25.11] _7zz: add 7-zip to description for discoverability

#499927 - [Backport release-25.11] percona-server: 8.4.7-7 -> 8.4.8-8

#500537 - [Backport release-25.11] msbuild-structured-log-viewer: miscellaneous updates

#501467 - [Backport release-25.11] ddhx: init at 0.9.1

#503441 - [Backport release-25.11] putty: fix CVE-2026-4115

#503776 - [Backport release-25.11] nextcloud{32,33}Apps: add oidc, update all

#503787 - [Backport release-25.11] flclash: 0.8.91 -> 0.8.92

#504177 - [Backport release-25.11] linkwarden: 2.13.5 -> 2.14.0

#504363 - [Backport release-25.11] unityhub: 3.16.2 -> 3.16.3

#504715 - [Backport release-25.11] fakedir: init at 0-unstable-2025-12-02

#505187 - [Backport release-25.11] ubootRaspberryPiAarch64: init

#505503 - [Backport release-25.11] python3Packages.tinytag: 2.2.0 -> 2.2.1

#506041 - [Backport release-25.11] nixos/grocy: enforce data directory presence

#506528 - [Backport release-25.11] firewalld: fix CVE-2026-4948

#506550 - [Backport release-25.11] openvr: 2.12.14 -> 2.15.6

#507269 - [Backport release-25.11] nix-user-chroot: init at 2.1.0

#507291 - [Backport release-25.11] nixos/roundcube: increase client_max_body_size for maxAttachmentSize

#507322 - [Backport release-25.11] nixos/crowdsec-firewall-bouncer: Fix missing systemd dependencies to firewall services

#507719 - [Backport release-25.11] motioneye: init at 0.43.1

Author

trueNAHO

trueNAHO

Committer

github-actions[bot]

github-actions[bot]

Parents

Loading