Merge #255658: staging-next 2023-09-17

- The `nixos-rebuild` command has been given a `list-generations` subcommand. See `man nixos-rebuild` for more details.

- [systemd](https://systemd.io) has been updated from v253 to v254, see [the release notes](https://github.com/systemd/systemd/blob/v254/NEWS#L3-L659) for more information on the changes.

    - `boot.resumeDevice` **must be specified** when hibernating if not in EFI mode.

    - systemd may warn your system about the permissions of your ESP partition (often `/boot`), this warning can be ignored for now, we are looking

      into a satisfying solution regarding this problem.

    - Updating with `nixos-rebuild boot` and rebooting is recommended, since in some rare cases the `nixos-rebuild switch` into the new generation on a live system might fail due to missing mount units.

- [`sudo-rs`], a reimplementation of `sudo` in Rust, is now supported.

  An experimental new module `security.sudo-rs` was added.

  Switching to it (via `security.sudo.enable = false; security.sudo-rs.enable = true;`) introduces

[`sudo-rs`]: https://github.com/memorysafety/sudo-rs/

## New Services {#sec-release-23.11-new-services}

- [MCHPRS](https://github.com/MCHPR/MCHPRS), a multithreaded Minecraft server built for redstone. Available as [services.mchprs](#opt-services.mchprs.enable).

- New options were added to `services.searx` for better SearXNG support, including options for the built-in rate limiter and bot protection and automatically configuring a local redis server.

- `jq` was updated to 1.7, its [first release in 5 years](https://github.com/jqlang/jq/releases/tag/jq-1.7).

- A new option was added to the virtualisation module that enables specifying explicitly named network interfaces in QEMU VMs. The existing `virtualisation.vlans` is still supported for cases where the name of the network interface is irrelevant.

- DocBook option documentation is no longer supported, all module documentation now uses markdown.

          # ...but only the keymaps if we don't

          "/etc/kbd/keymaps" = lib.mkIf (!cfg.earlySetup) { source = "${consoleEnv config.boot.initrd.systemd.package.kbd}/share/keymaps"; };

        };

        boot.initrd.systemd.additionalUpstreamUnits = [

          "systemd-vconsole-setup.service"

        ];

        boot.initrd.systemd.storePaths = [

          "${config.boot.initrd.systemd.package}/lib/systemd/systemd-vconsole-setup"

          "${config.boot.initrd.systemd.package.kbd}/bin/setfont"

          nativeBuildInputs = [

            cfg.package

            pkgs.fakeroot

            pkgs.util-linux

          ] ++ fileSystemTools;

        } ''

        amendedRepartDefinitions=$(${amendRepartDefinitions} ${partitions} ${definitionsDirectory})

        mkdir -p $out

        cd $out

        fakeroot systemd-repart \

        unshare --map-root-user fakeroot systemd-repart \

          --dry-run=no \

          --empty=create \

          --size=auto \

      "rescue.service"

      # Udev.

      "systemd-tmpfiles-setup-dev-early.service"

      "systemd-udevd-control.socket"

      "systemd-udevd-kernel.socket"

      "systemd-udevd.service"

    "systemd-ask-password-console.service"

    "systemd-fsck@.service"

    "systemd-halt.service"

    "systemd-hibernate-resume@.service"

    "systemd-journald-audit.socket"

    "systemd-journald-dev-log.socket"

    "systemd-journald.service"