-
-
Notifications
You must be signed in to change notification settings - Fork 14.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
nist-feed: init at 0-unstable-2024-01-20 #284812
base: master
Are you sure you want to change the base?
Conversation
Successor of #284782 |
@octodi does it contain also the module, right? |
Yup |
@octodi according to the new guidelines, you must change title and commit message from |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for the contribution. Here's a few comments :)
Update nixos/modules/programs/nist-feed.nix
<<<<<<< HEAD | ||
- [NIST-Feed](https://github.com/d3vil0p3r/nist-feed), notifies you about the newest published CVEs from NIST. Available as [programs.nist-feed](#opt-programs.nist-feed.enable). | ||
======= | ||
- [ALVR](https://github.com/alvr-org/alvr), a VR desktop streamer. Available as [programs.alvr](#opt-programs.alvr.enable) | ||
>>>>>>> master |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There seems to be a conflict left over here
}; | ||
|
||
patches = [ | ||
./cron.patch |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe the name of this patch could be a bit more descriptive?
remove-cronjob-instantiation-feature.patch
or something along those lines?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should definitely have a comment explaining why it's needed and/or why it couldn't be upstreamed
Co-authored-by: h7x4 <[email protected]>
Co-authored-by: h7x4 <[email protected]>
Co-authored-by: h7x4 <[email protected]>
Co-authored-by: h7x4 <[email protected]>
Co-authored-by: h7x4 <[email protected]>
This reverts commit 01ef3c2.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the contribution! Some feedback below.
@@ -0,0 +1,54 @@ | |||
{ config, lib, pkgs, ... }: | |||
|
|||
with lib; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
with lib; |
Bad practice that's now discouraged in nixpkgs.
Tracking issue: #208242
extraArgs = mkOption { | ||
type = with types; listOf str; | ||
default = [ "-l" "-s" "CRITICAL" ]; | ||
description = mdDoc '' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
description = mdDoc '' | |
description = '' |
lib.mdDoc
is no longer present in nixpkgs; please remove all usages.
runHook postInstall | ||
''; | ||
|
||
meta = with lib; { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
meta = with lib; { | |
meta = { |
Tracking issue: #292468
license = licenses.gpl3Plus; | ||
maintainers = with maintainers; [ octodi ]; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
license = licenses.gpl3Plus; | |
maintainers = with maintainers; [ octodi ]; | |
license = lib.licenses.gpl3Plus; | |
maintainers = with lib.maintainers; [ octodi ]; |
}; | ||
|
||
patches = [ | ||
./cron.patch |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should definitely have a comment explaining why it's needed and/or why it couldn't be upstreamed
description = "A notification daemon for CVEs"; | ||
serviceConfig = { | ||
Type = "oneshot"; | ||
ExecStart = "${cfg.package}/bin/nist-feed ${escapeShellArgs cfg.extraArgs}"; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ExecStart = "${cfg.package}/bin/nist-feed ${escapeShellArgs cfg.extraArgs}"; | |
ExecStart = "${lib.getExe cfg.package} ${escapeShellArgs cfg.extraArgs}"; |
Description of changes
Added NIST-Feed notifies you about the newest published CVEs according your filters
https://github.com/d3vil0p3r/nist-feed
Related to #81418
Things done
nix.conf
? (See Nix manual)sandbox = relaxed
sandbox = true
nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD"
. Note: all changes have to be committed, also see nixpkgs-review usage./result/bin/
)Add a 👍 reaction to pull requests you find important.