The old build was failing on darwin because yubikey needs the PCSC framework dependency. I also upgraded to the latest vpnc-script as recommended on the openconnect homepage (see: https://www.infradead.org/openconnect/platforms.html). Lastly, I moved all dependencies which are not used at runtime from propagatedBuildInputs to buildInputs (Please correct me if that is wrong).

It seems that dnsdist doesn't actually request CAP_NET_BIND_SERVICE, which is why normally it's executed and root and setuids to another, unprivileged, user. This means that as it is, dnsdist will be unable to bind to any port under 1024 and will fail with access denied.

Removing CAP_SETGID and CAP_SETUID is also related to this as we don't actually change the uid or gid after the fact as we use DynamicUser. (That part isn't strictly NEEDED but there's no reason to have those capabilities if we don't use them).

There are also some additional sandboxing we can remove from the service definition as they are assumed true or strict by DynamicUser: specifically PrivateTmp and ProtectSystem respectively.

ProtectHome is still there, despite being assumed read-only as setting it to true means they are seen as empty. I don't think it really matters as I don't know if systemd will ignore it or not, but I didn't see any reason to go hunting for excuses to make it a bigger change.

I'm see this test timout frequently, most often on aarch64 on hydra.
Patch is from debian, which probably noticed the same issue.

Patched Makefile so that includedir correctly points to "dev" output
instead of "out" output.

NixOS/nixpkgs#71584 did merging without mkMerge.

cc @jtojnar

cc #72828

This reverts commits 53a536c
and af931c1.

The repology.org info was incorrect, pulling in a development version
of mu as a release. The current (stable) release of mu is still 1.2:
https://github.com/djcb/mu/releases

openconnect: Add darwin support

libco-canonical: fix pkgconfig includedir

gnome3.geary: add patch for longer client test timeout

nixos/pppd: port test to python

nixos/smokeping: port test to python

nixos/powerdns: port test to python

nixos/redis: fix merging

Fix mu version from unreleased to stable (revert to 1.2)

shiori: update modSha256, update test to python, do more tests

nixos/dnsdist: Add CAP_NET_BIND_SERVICE to AmbientCapabilities

ruplacer: init at 0.4.1