Only include Linux builds in the NixOS channel
Add an aggregated to replace the "tested" NixOS view

Also get rid of the "system" jobset input.
Grmbl
Use nixUnstable
Revert "Don't mount /nix/store ro if it's a mountpoint"

Now that nixUnstable supports remounting in the "/nix/store is a
mountpoint" case, this is no longer necessary.

This reverts commit f1d48aec43947e5dddae8ba02e3133ee8d0d0ff9.

Signed-off-by: Shea Levy <shea@shealevy.com>
"Maintain" the tested job so I get notifications when it fails

Signed-off-by: Shea Levy <shea@shealevy.com>
iso_efi: Fix build

Thanks to mwc in irc for pointing it out

Signed-off-by: Shea Levy <shea@shealevy.com>
add almir service
Don't set the firmware path in 3 different places
Updates for systemd 198/199
Set the kernel.poweroff_cmd sysctl

This allows Xen (and EC2) to power off an instance properly.  We had
this before (see aeb89fc753c6f95c9d143e6f5346f92e4a02fa67), but it got
lost in the systemd migration.
Clear /proc/sys/kernel/hotplug again

Otherwise the kernel will pointlessly try to invoke /sbin/hotplug all
the time.  Another feature lost in the systemd switch.
Add support for systemd timers
nix-gc.timer: Fix the start time
Hack: force timers.target to be started

Usually timers.target is pulled in by basic.target, but we don't
restart basic.target.  So timers.target wouldn't be started when
coming from an older systemd.
Sync after installing the boot loader

Previously we synced just before calling switch-to-configuration.
That prevents corruption of the Nix store, but it can leave the boot
loader configuration and kernel files in /boot corrupted.  So do the
sync after installing the boot loader.
pam: adding otpw optional, default false
Setting pam otpw *after* pam_unix, for dovecot failed auth messages.

I think it's nice that it first asks the usual password, and then offers the
otpw one if enabled. That enables dovecot to show the last pam prompt.

I also add the dovecot option for that.