greg/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,088 Commits 8 Branches 0 Tags
Commit Graph

1088 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jonas Nick
ca71eb01d2
Merge #349: elementsd: 0.18.1.9 -> 0.18.1.11 
9bb2c02978a8a738acd8ffbd3f9037ec659fbc76 elementsd: 0.18.1.9 -> 0.18.1.11 (nixbitcoin)

Pull request description:

ACKs for top commit:
  jonasnick:
    ACK 9bb2c02978a8a738acd8ffbd3f9037ec659fbc76

Tree-SHA512: c9ab3588eee0fd19ca23ebcf50b70547614ad6a67958e23cf5b1779c795505166b168a45cc8d6a8e2863aa4ded1cc81d795d495cd551e557592d052ecccf16d6
 2021-04-02 13:00:31 +00:00
Jonas Nick
9e7d9ee475
Merge #348: run-tests: add 'vm' command 
3cce822c6470f7488a607290ef5d82d47115fe61 run-tests: add 'vm' command (Erik Arvstedt)

Pull request description:

ACKs for top commit:
  nixbitcoin:
    ACK 3cce822c6470f7488a607290ef5d82d47115fe61

Tree-SHA512: 1b7cdc0bc3b73634fdc6abd6817417fd49853be076cf71cc54487e5db9e97e67832eef5ecbb8e899e30a91a60ff333e022e51cc664df7364417240f05096eb16
 2021-04-02 12:57:44 +00:00
Jonas Nick
8a531f5cf7
Merge #307: Madaidan hardening 
1ff5f8f01b52ead9b86e794e7a1c9e8de3f3e40f hardening: use generic hostname by default (nixbitcoin)
d56a363d3da2deacf4d264af83ced4050b8643a5 services: improve default hardening (nixbitcoin)
3b938a909f2e493f2920f1720d35f812bba0bd56 add hardened-extended preset (nixbitcoin)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK 1ff5f8f01b52ead9b86e794e7a1c9e8de3f3e40f

Tree-SHA512: 4355dc4b1dab33c363e8133fe7dd909db74e4ab5c58a3d0f2d9628f2877acdaf1ac63164bcc5d68cf682ba81e5cf36c3fdbaffa74310a9454637647c5531ce3e
 2021-04-02 12:55:37 +00:00
nixbitcoin
9bb2c02978
elementsd: 0.18.1.9 -> 0.18.1.11 2021-04-02 11:03:03 +00:00
nixbitcoin
1ff5f8f01b
hardening: use generic hostname by default 
Minimize identifying information
 2021-04-02 10:59:21 +00:00
nixbitcoin
d56a363d3d
services: improve default hardening 2021-04-02 10:59:17 +00:00
nixbitcoin
3b938a909f
add hardened-extended preset 2021-04-02 10:59:09 +00:00
Jonas Nick
4a2bc280e0
Merge #347: lightning-loop: 0.12.0 -> 0.12.1 
cde9597fc44a89f1c58134dbeb9b7783d625d52c lightning-loop: 0.12.0 -> 0.12.1 (nixbitcoin)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK cde9597fc44a89f1c58134dbeb9b7783d625d52c

Tree-SHA512: 30c0eb34c5b7a8a9f592bc4d5b52cbc983efa9c9be08cc3cf0c117a7d67ce251ba0a1e87495eeea010642dae2259821ebbd42fde9880a0212ef1e7dac04e2d25
 2021-03-28 18:07:41 +00:00
Erik Arvstedt
3cce822c64
run-tests: add 'vm' command 2021-03-26 23:23:22 +01:00
nixbitcoin
cde9597fc4
lightning-loop: 0.12.0 -> 0.12.1 2021-03-26 09:31:11 +00:00
Jonas Nick
aea1706e49
Merge #345: electrs: 0.8.8 -> 0.8.9 
d5c53e1510e6c4e8ba6cc136fc99d976d6e2b4ac electrs: 0.8.8 -> 0.8.9 (nixbitcoin)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK d5c53e1510e6c4e8ba6cc136fc99d976d6e2b4ac

Tree-SHA512: f57bd85e2c9ca592774d1e5aaa13042cdf6f3887715e99ed6a0aa9a4d5f5e3c9b32200c616ba2a51b7d50ab414297ea79cca0a0be5002c3cf1b1c92023a6e9c5
 2021-03-22 19:58:28 +00:00
Jonas Nick
9ae2c8a6d2
Merge #339: Misc improvements 
4cddf284e96adf8e2e70e228df55ff1efd9d9649 treewide: remove use of deprecated `stdenv.lib` (Erik Arvstedt)
6ba5880b2c5d34d050a64793965dba14b5db004f test.py: improve composability of test 'banlist-and-restart' (Erik Arvstedt)
44439e2a81d9366708bee92f1cf15ad22a5da0b6 tests: optimize building multiple tests at once (Erik Arvstedt)
9ca52af523eba8e58f38bf5ae02b515fe17fae82 tests: improve make-test-vm.nix (Erik Arvstedt)
08fe9ba84ae6b1394679194aa0a98996823cf32a services: add finer-grained address family restrictions (Erik Arvstedt)
020433cec6c333830439a533c2ed09ea7f01df93 services: add helper fn setAllowedIPAddresses (Erik Arvstedt)
cdf27d9d0cf624832a904e312b533164969bd73d bitcoind: improve service timeouts (Erik Arvstedt)
09cd3ce5e41648e526b442bf6fb84e0b46b9cf19 lnd: show curl error messages (Erik Arvstedt)
d214605b3239f81a7585fc4979f134530d0ad050 spark-wallet: add flakes compatibility (Erik Arvstedt)
81db927f6638eb0b77e8272764dc822bba7bfb0d spark-wallet/generate: remove supplement.json (Erik Arvstedt)
84b3217c3d8dfbba8264d164733371674d2895d7 fetch-release: minor improvements (Erik Arvstedt)
45d0964e27c754f6007347e5ff46c00d15bf9e4a examples/shell.nix: minor improvements (Erik Arvstedt)
cc7149eb785b98014032a816de25da4fc072a7dd examples: improve robustness of deploy scripts (Erik Arvstedt)

Pull request description:

ACKs for top commit:
  nixbitcoin:
    ACK 4cddf284e96adf8e2e70e228df55ff1efd9d9649

Tree-SHA512: 5f863a406a56b4b916ea662c411dce6884a7633a49e862015ddf68c20e772a14108095782753c2e33061d8d19cbf9053239f98644cb12fd883ef79e68d8a977b
 2021-03-22 15:52:04 +00:00
Erik Arvstedt
4cddf284e9
treewide: remove use of deprecated stdenv.lib 2021-03-22 14:39:32 +01:00
Erik Arvstedt
6ba5880b2c
test.py: improve composability of test 'banlist-and-restart' 
The test now works if not all services previously used in the
`systemctl restart` command are available.
 2021-03-22 14:39:31 +01:00
Erik Arvstedt
44439e2a81
tests: optimize building multiple tests at once 
The result of `import tests.nix {}` is now an attrset of tests.
This makes it easier and more efficient to evaluate or build multiple
tests in one call to `nix build`.

Simplify tests.nix by removing the large module args scope in favor of
self-contained scenario module definitions.

Add CPU core and memory size defaults to the test configuration to
enable building tests without `run-tests.sh`.

Add the following top-level args to tests.nix:
- `extraScenarios` to provide a nix-level way to define extra scenarios.
- `pkgs` to allow building tests with custom pkgs or systems.
 2021-03-22 14:35:29 +01:00
Erik Arvstedt
9ca52af523
tests: improve make-test-vm.nix 
1. fixedTest: Remove some unneeded layers of function calls.

2. Don't add a modified version of `black` to the global pkgs set.
   Tests should not affect the pkgs of the tested system modules.
   Fix the driver build script instead by adding an extra arg to the
   call to `black`.
 2021-03-22 14:35:29 +01:00
Erik Arvstedt
08fe9ba84a
services: add finer-grained address family restrictions 
Due to a possible NixOS bug, this commit has no effect on NixOS 20.09
where `RestrictAddressFamilies` is a no-op.
It's only relevant for NixOS unstable with cgroups v2.

bitcoind+zmq: instead of allowing all address families, only add the required
AF_NETLINK family.

lnd: lnd only runs a zmq client, not a server, therefore it requires
no additional address families.

lightning-pool, clightning-plugin-zmq: add AF_NETLINK.
 2021-03-22 14:35:29 +01:00
Erik Arvstedt
020433cec6
services: add helper fn setAllowedIPAddresses 
Also use 'allowLocalIPAddresses' instead of 'allowTor' in bitcoind-import-banlist
which doesn't use Tor.
 2021-03-22 13:20:45 +01:00
nixbitcoin
d5c53e1510
electrs: 0.8.8 -> 0.8.9 2021-03-22 11:54:28 +00:00
Erik Arvstedt
cdf27d9d0c
bitcoind: improve service timeouts 
- Improve readability by using minutes
- set `TimeoutStopSec` like in bitcoin/contrib/init/bitcoind.service.
  Stopping bitcoind can exceed the default timeout during IBD.
 2021-03-16 12:46:19 +01:00
Erik Arvstedt
09cd3ce5e4
lnd: show curl error messages 2021-03-16 12:46:19 +01:00
Erik Arvstedt
d214605b32
spark-wallet: add flakes compatibility 
Pure flakes can't use NIX_PATH.
 2021-03-16 12:46:19 +01:00
Erik Arvstedt
81db927f66
spark-wallet/generate: remove supplement.json 
This file is empty and has no effect.
 2021-03-16 12:46:19 +01:00
Erik Arvstedt
84b3217c3d
fetch-release: minor improvements 
This script is potentially fetched from an untrusted source and should
be in good shape to be easily auditable.

- Create just one TMPDIR
- Improve comments
- Use `cut` to extract sha256
- Use camelCase var names like in other scripts
 2021-03-16 12:46:18 +01:00
Erik Arvstedt
45d0964e27
examples/shell.nix: minor improvements 
- Use idiomatic var name `pkgs` for the imported nixpkgs.
- Don't add `figlet` to PATH because it's only used internally.
- Only print figlet in interactive shells to avoid interfering with
  stdout when running `nix-shell --run <cmd>`.
- Define `fetch-release` as a function to enable running it via
  `nix-shell --run fetch-release`
 2021-03-16 12:46:18 +01:00
Erik Arvstedt
cc7149eb78
examples: improve robustness of deploy scripts 
- The scripts now work within arbitrary nix-shells.
  Previously, they failed when run from nix shells other than
  `examples/shell.nix`.

- The scripts now work from arbitrary working dirs.
 2021-03-16 12:46:18 +01:00
Jonas Nick
4022f86b92
Merge #296: Remove nixops examples and as recommended deployment method; replace with krops 
520a983862728320ca6fec3677e5fcbf57d05217 docs: nixops-krops migration guide (nixbitcoin)
7c0b521785377e2e68fca3dc9ab1f7c84af93ded docs: describe deploying with krops in installation tutorial (Jonas Nick)
eb6dff54788b7fc77998f124c2ba3e8cc4012c9f docs: various improvements to installation tutorial (Jonas Nick)
e8b47f099c9a149b85300f30d41455c41fc1b4e8 examples: add deploy-krops.sh (Erik Arvstedt)
fe118b28ffa3c65b45a8cbbe6f637b8f465fe65d examples: add krops deployment method (Jonas Nick)
e017675d5e961d622314663e711ae752bac222a2 krops: add package (Jonas Nick)
03db1a61b1121954460300aeb3651c09b052169b lnd, joinmarket: don't write to secrets dir (Erik Arvstedt)
55d87490ec330b2fe78b4cc9275db287990f59fc secrets: make configuration more robust (Erik Arvstedt)
b0c223e71676c26a76aaf6704f347e8089a8d68d secrets: don't stop services when the secrets target stops (Erik Arvstedt)
b701cb5603c5f996c8c202c679820180ad7f28e9 secrets: add option 'generateSecrets' (Erik Arvstedt)
03515a8da600cbe56ba9d4c3c9b33a2cca45ef08 examples/qemu: disable hardened preset (Erik Arvstedt)
908af3bfb8f4dc90bc2168345c60d8a0e15bfbf3 examples/deploy-qemu-vm: show progress when waiting (Erik Arvstedt)
ccba86a0f0d07f0c82fba363c5314304ad076a5c examples: extract common features for running QEMU VMs (Erik Arvstedt)
cb3d5446c8f16e5008e18adc5ab7e5fbb4de0d3b examples: use relative paths to example files (Erik Arvstedt)
a4dabc73900cef226bac8a33d567a0dc6f415b85 Remove nixops examples and documentation (Jonas Nick)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK 520a983862728320ca6fec3677e5fcbf57d05217

Tree-SHA512: 380fcda3528e703e8a218f92a216befbee6cc279952388b2df48c1bcb803b72336bbe6e4deed87f3f26caba7a5cb5ab60c2bcabf2b13eba56f34c47eb02e128a
 2021-03-15 19:03:47 +00:00
nixbitcoin
520a983862
docs: nixops-krops migration guide 2021-03-15 19:02:58 +01:00
Jonas Nick
7c0b521785
docs: describe deploying with krops in installation tutorial 2021-03-15 19:02:58 +01:00
Jonas Nick
eb6dff5478
docs: various improvements to installation tutorial 
- Update nixos iso
- Make sure to be root before parting and give instructions for checking
  UEFI vs. legacy
- Instead of making user replace automatically generated nixos config,
  explain how to add options.
- Add boot.loader options directly to hardware-configuration.nix
- Copy .gitignore when setting up a deployment dir
- Stress that the first config that is deployed remotely must include ssh key.
- Debian: 9 Strech -> Debian 10 Buster
- nix: 2.3.3 -> 2.3.10
 2021-03-15 19:02:58 +01:00
Erik Arvstedt
e8b47f099c
examples: add deploy-krops.sh 2021-03-15 19:02:58 +01:00
Jonas Nick
fe118b28ff
examples: add krops deployment method 2021-03-15 18:53:07 +01:00
Jonas Nick
e017675d5e
krops: add package 2021-03-15 18:53:07 +01:00
Erik Arvstedt
03db1a61b1
lnd, joinmarket: don't write to secrets dir 
Keeping the secrets dir read-only is more simple and robust.

- lnd seed mnemonic creation and joinmarket wallet creation can be
  run as the regular service user instead of root.

- It is easier to switch to a third-party secrets deployment
  method in the future.

Don't create a seed mnemonic for lnd when a wallet exists.
This avoids creating unused mnemonics and helps simplifying
the migration command in `versioning.nix`.
 2021-03-15 18:50:15 +01:00
Erik Arvstedt
55d87490ec
secrets: make configuration more robust 
- Fail at evaluation when secrets setup is not configured.
  Previously, bitcoind failed at runtime due to the missing secrets target.

- Fail at evaluation when conflicting secrets setup methods are used.
  This happens when `secretsSetupMethod` has more than one definition.
 2021-03-15 12:42:52 +00:00
Erik Arvstedt
b0c223e716
secrets: don't stop services when the secrets target stops 
With krops or nixops the secrets target is always restarted during
the deployment process.
This previously caused unnecessary restarts of all nix-bitcoin services.
 2021-03-15 12:42:52 +00:00
Erik Arvstedt
b701cb5603
secrets: add option 'generateSecrets' 
Move this feature from a module preset to a regular option, so that it's
easily discoverable and accessible.

Simplify the implementation of `generateSecrets` by adding it to the
existing `setup-secrets` service script.

Also rename option setup-secrets -> setupSecrets.
 2021-03-15 12:42:52 +00:00
Erik Arvstedt
03515a8da6
examples/qemu: disable hardened preset 
- Hardening is irrelevant in examples
- The decreased performance is especially noticeable in VMs
 2021-03-15 12:42:52 +00:00
Erik Arvstedt
908af3bfb8
examples/deploy-qemu-vm: show progress when waiting 
This improves the user experience on VM startup, which can take a few
seconds.
 2021-03-15 12:42:51 +00:00
Erik Arvstedt
ccba86a0f0
examples: extract common features for running QEMU VMs 
Needed by commit: "examples: add deploy-krops.sh"
 2021-03-15 12:42:51 +00:00
Erik Arvstedt
cb3d5446c8
examples: use relative paths to example files 
This ensures that the examples files from the current example dir are used.
Previously, the default examples from the nix-bitcoin source were used.
 2021-03-15 12:42:51 +00:00
Jonas Nick
a4dabc7390
Remove nixops examples and documentation 2021-03-15 12:42:47 +00:00
Jonas Nick
b07185915a
Merge #331: nixops: remove libvirtd plugin 
f1064761d75fa34a6b04de40a0bf7aa6a7d3f78f nixops: remove libvirtd plugin (nixbitcoin)

Pull request description:

ACKs for top commit:
  jonasnick:
    ACK f1064761d75fa34a6b04de40a0bf7aa6a7d3f78f
  erikarvstedt:
    ACK f1064761d75fa34a6b04de40a0bf7aa6a7d3f78f

Tree-SHA512: 66c8fc20c2f210d5d37025cc1772330354a6a8ecbdb1fb9e8fcd1391030485c936ab28647f739bd90b083d627602ade39a5575114d69db8e8d1375989d5cdd0e
 2021-03-14 14:42:43 +00:00
Jonas Nick
1377cf5147
Merge #337: joinmarket: 0.8.1 -> 0.8.2 
5ead2a707555d922e0251b2f102dd6df0dab6095 joinmarket: 0.8.1 -> 0.8.2 (nixbitcoin)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK 5ead2a707555d922e0251b2f102dd6df0dab6095

Tree-SHA512: 2ac87f74a1008c058adef81d11049d985a64f435d75ef61584e8debdcc985f78c1d43430c09ee71c247a93908a5ba3a1efdcf91b0666a84b3269509a99685343
 2021-03-10 21:24:12 +00:00
nixbitcoin
5ead2a7075
joinmarket: 0.8.1 -> 0.8.2 
- add SNICKER to default config
- update package
- ob-watcher: copy vendorized js and css dependencies
- add missing dependency to jmbase
- use cryptography from pinned.nixpkgs-unstable
 2021-03-10 13:33:49 +00:00
Jonas Nick
24b0824f4e
Merge #335: lightning-loop: 0.11.3-beta -> 0.12.0-beta 
6c9c820862516a69ec387a52443f60a279d929f6 lightning-loop: 0.11.3-beta -> 0.12.0-beta (nixbitcoin)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK 6c9c820862516a69ec387a52443f60a279d929f6

Tree-SHA512: bd425e415c8a4aba370ad5bec48572d27f2d5c063b3eb88f60027acb9294fb1ddda9f5276e4930cf01342089e4fa2b7692f1b1cd6e25581879e8226fa1d74c48
 2021-03-08 07:30:59 +00:00
nixbitcoin
6c9c820862
lightning-loop: 0.11.3-beta -> 0.12.0-beta 2021-03-07 18:28:08 +00:00
Jonas Nick
820de2e4c9
Merge #313: Lightning pool 
eb210127455ae7de45169237ee8b8eb53585c20b pool: add pkg, module & tests (kon)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK eb210127455ae7de45169237ee8b8eb53585c20b
  nixbitcoin:
    ACK eb210127455ae7de45169237ee8b8eb53585c20b

Tree-SHA512: 0083b5f7bcc803c475cce3414923f43df0b80d6b85aaa54d6b5da637f2aaa7ea6e7525a5eff41be49921bed0214972e356c79b6e4086468c13716c925ec6f8b0
 2021-03-01 21:52:20 +00:00
kon
eb21012745 pool: add pkg, module & tests 2021-03-01 10:59:35 +01:00
Jonas Nick
f214a703a5
Merge #332: update nixpkgs-unstable 
32acaa5f48c3bbef013aa905d2d66a682c5325e7 update nixpkgs-unstable (nixbitcoin)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK 32acaa5f48c3bbef013aa905d2d66a682c5325e7
  jonasnick:
    ACK 32acaa5f48c3bbef013aa905d2d66a682c5325e7

Tree-SHA512: b688c81da82ef5166fc8074471187f72188b3fb5dc455a9b24c5e3497e3406898185acd2e551356af3300578b2b98eeabf22edcbb7614f02f6ca34afa05b05b0
 2021-02-25 08:03:24 +00:00