Re-introduce (marked as obsolete) mkStrict function, to allow old nixops deployments to keep working.
buildLocalCabal: include cabalInstall to buildDepends to preserve developer experience
Fix users.*.extraGroups for users.mutableUsers = true.

(cherry picked from commit eb222923054fdc895ab73ff5d0260c1e1fc689c7)
switch-to-configuration: Honour RefuseManualStop

This prevents spurious errors about systemd-tmpfiles-setup.service.

Backport: 14.04
sysinit.target: Don't depend on systemd-tmpfiles-setup.service

systemd-tmpfiles-setup.service pulls in local-fs.target, which
interferes with NixOps' send-keys feature (since sshd.service depends
indirectly on sysinit.target). Since in NixOS we don't use
systemd-tmpfiles for creating files (that's done by activation scripts
and preStart scripts), it's not a problem to start it a bit later.

Backport: 14.04
Don't start getty@tty1 on headless machines (like EC2)

Backport: 14.04
systemd-journal-flush: Require /var/log/journal rather than all filesystems

Backport: 14.04
Don't run hwclock if /dev/rtc doesn't exist

E.g. on EC2 instances.

Backport: 14.04
chromium/source: Propagate system attribute.

The system attribute was already there in the function head of the
shared update helper but it actually wasn't used and thus later the
import of <nixpkgs> was done using builtins.currentSystem instead of the
system attribute inherited from the source derivation.

Now we correctly propagate the attribute, so that even when running a
64bit kernel you can run a 32bit Chromium with binary plugins.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
chromium: Fix userns sandbox patch for version 36.

This fixes build for version 36, which i accidentally broke in commit
f6e31fadd80486cdd68e3ad3d7ae888aa81400b9.

The reason this happened, was that my Hydra didn't pick up the latest
commit and I actually tested and built the parent commit instead of the
update commit.

So, this commit is the real "builds fine, tested" for all channels.

Also, the sandbox client initalization has moved into
setuid_sandbox_client.cc, so we need to move the lookup of the
CHROMIUM_SANDBOX_BINARY_PATH environment variable there.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
idea 13.1.1 -> 13.1.2
Merge pull request #2528 from edwtjo/idea-13.1.2

idea 13.1.1 -> 13.1.2
haskell-defaults.nix: let ghc-7.8.2 use the HEAD prefs for the time being

The whole notion of per-compiler HP-compliant environments has failed
anyway and I'll try to get rid of that ASAP, so it feels pointless to
configure that stuff for GHC 7.8.2 to begin with.
haskell-defaults.nix: let ghc 7.8.2 builds use the binary library shipped with the compiler
eclipse: add Eclipse IDE for C/C++ Developers 4.3.2