Release 2022_004 (2022-02-07)¶

Impact¶

[NixOS 21.05]: Many services will be restarted because of a core dependency change.

Increase neighbor discovery tables for IPv4 and IPv6 on all nodes to ensure services that talk to a lot of neighbors on a single LAN work properly with at least multiple hundreds of neighbors (#PL-130380).
K3s/Kubernetes frontend improvements (#PL-130265):
- VM now adds cluster DNS to resolv.conf so names like web-service.namespace.svc.cluster.local can be resolved now. Before, only haproxy could resolve internal DNS names.
- Added option sslBackend to use SSL for the backend pod connection from haproxy to the backend pod.
- Added new option extraPodTemplateOptions to add options to the generated server-template line.
Pull upstream NixOS changes that include security fixes and other updates (#PL-130353):
- binutils: 2.35.1 -> 2.35.2 (CVE-2020-35448, CVE-2021-20284, CVE-2021-20294)
- gegl_0_4: patch https://github.com/advisories/GHSA-g9gv-9646-jvp8
- unicorn: add patch for https://github.com/advisories/GHSA-rmvm-v6m6-87vr
Fix memcached’s localhost dualstack binding when running in a devhost container (#FC-21094).
Our Ceph infrastructure has been fully ported to NixOS now (#PL-127635).
Production channel URL for this release: https://hydra.flyingcircus.io/build/132731/download/1/nixexprs.tar.xz