PRs ready for review _

The situation

  • ip_tables (kernel module) seems to be missing on kernels >= 6.17
  • networking.nftables.enable is not explicitly set to true when this happens

virtualization.waydroid relies on ip_tables being avaliable, in which case it can just use pkgs.waydroid. Recently, nftables support was added in nixpkgs with the pkgs.waydroid-nftables package, which is used when networking.nftables.enable is true.

The problem

On the latest kernels, without messing with anything, networking.nftables.enable is false and ip_tables is unavaliable, causing waydroid.package to be set to pkgs.waydroid, which then fails to start.

Note that nftables is actually avaliable despite its module not being enabled, but the waydroid module simply doesn’t use it.

Solutions

  1. nixos/waydroid: use waydroid-nftables by default also if kernel.version >= 6.17 by Elec3137 · Pull Request #466473 · NixOS/nixpkgs · GitHub This is the least disruptive change, essentially account for exactly this situation in the logic of the waydroid module.
  2. nixos/nftables: enable by default if kernel >= 6.17 by Elec3137 · Pull Request #477049 · NixOS/nixpkgs · GitHub This is the most disruptive change, and I don’t pretend to know all the problems this might cause.
  3. Entirely replace pkgs.waydroid with pkgs.waydroid-nftables since it seems to work regardless in any nixos version. (suggestion) This should only affect people who explicitly set waydroid-nftables, which is likely very few.

fixes a GCC15 build error

Updates all of the keycloak plugins, adds a new plugin, and adds support for using unix socket auth for postgres connections to the base keycloak module

Adding a new package, cog. This name was used before for a package that was removed, but its alias left. I’m not sure whether the name should be reused or changed for the new package. I’d appreciate some guidance here.

Just a quick update that I need. Thanks for reviewing

This thread seems a bit more active then the other one.

I already have a review from the upstream maintainer, but I would really like to also have some more people look at it.

Simple backport, switches build to GCC 15 to fix compilation.