asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity

flake: update inputs

Browse source 
nixpkgs moves from 2026-10-17 to 2026-11-01. Also updated: nix-amd-ai
and sops-nix.

Fallout handled in the same commit so every revision builds:
- tlp-profile-switcher was dropped from nixpkgs (upstream declares only
  GNOME 48) and aider-chat's posthog dependency is broken on Python
  3.14; take both from the previous nixpkgs until they evaluate again.
- NSS 3.131.1 removed "emSign ECC Root CA - G3", and a blacklist entry
  for a missing root fails the cacert build; drop it.
- A cached firefox-devedition is back in nixpkgs, so remove the
  2026-07-05 pin.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-08 05:08:44 +04:00
commit 8f0062a5b0
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
4 changed files with 31 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

3
modules/security.nix
View file

@ -48,7 +48,8 @@
# Drop these roots from the system CA bundle (names must match bundle labels)
security.pki.caCertificateBlacklist = [
"Comodo AAA Services root"
"emSign ECC Root CA - G3"
# "emSign ECC Root CA - G3": removed upstream in NSS 3.131.1; a stale
# entry fails the cacert build.
];
# USBGuard configuration