nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-01-08 14:03:29 +00:00
Code Issues Packages Projects Releases Wiki Activity
d52e10c2d7
nixpkgs/nixos/modules/system/boot/networkd.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

3005 lines
96 KiB
Nix
Raw Normal View History

Move systemd-lib.nix and systemd-unit-options.nix into utils
2021-11-20 17:34:13 +00:00
{ config, lib, pkgs, utils, ... }:
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
Move systemd-lib.nix and systemd-unit-options.nix into utils
2021-11-20 17:34:13 +00:00
with utils.systemdUtils.unitOptions;
with utils.systemdUtils.lib;
nixos/networkd: refactor Reduces size of networkd module by moving unit file generation code into a util.
2023-07-01 02:18:05 +00:00
with utils.systemdUtils.network.units;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
with lib;
let
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
check = {
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
global = {
sectionNetwork = checkUnitConfig "Network" [
(assertOnlyFields [
"SpeedMeter"
"SpeedMeterIntervalSec"
"ManageForeignRoutingPolicyRules"
"ManageForeignRoutes"
"RouteTable"
nixos/networkd: allow IPv6PrivacyExtensions in networkd.conf This change adds support for setting IPv6PrivacyExtensions= in systemd.network.config.networkConfig. https://www.freedesktop.org/software/systemd/man/latest/networkd.conf.html#IPv6PrivacyExtensions= Added in systemd version 254.
2024-04-26 07:07:01 +00:00
"IPv6PrivacyExtensions"
systemd: 255.6 -> 256.2
2024-04-26 21:18:12 +00:00
"IPv4Forwarding"
"IPv6Forwarding"
nixos/systemd.network: add support for UseDomains= in [Network] sections Those options were also added with systemd 256, but sadly were missed out in #307068. These options are documented in: - [systemd 256 changelog](https://github.com/systemd/systemd/releases/tag/v256) (search for `UseDomains=`) - [networkd.conf(5)](https://www.freedesktop.org/software/systemd/man/256/networkd.conf.html#UseDomains=) - [systemd.network(5)](https://www.freedesktop.org/software/systemd/man/256/systemd.network.html#UseDomains=)
2024-08-21 17:46:27 +00:00
"UseDomains"
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
])
(assertValueOneOf "SpeedMeter" boolValues)
(assertInt "SpeedMeterIntervalSec")
(assertValueOneOf "ManageForeignRoutingPolicyRules" boolValues)
(assertValueOneOf "ManageForeignRoutes" boolValues)
nixos/networkd: allow IPv6PrivacyExtensions in networkd.conf This change adds support for setting IPv6PrivacyExtensions= in systemd.network.config.networkConfig. https://www.freedesktop.org/software/systemd/man/latest/networkd.conf.html#IPv6PrivacyExtensions= Added in systemd version 254.
2024-04-26 07:07:01 +00:00
(assertValueOneOf "IPv6PrivacyExtensions" (boolValues ++ ["prefer-public" "kernel"]))
systemd: 255.6 -> 256.2
2024-04-26 21:18:12 +00:00
(assertValueOneOf "IPv4Forwarding" boolValues)
(assertValueOneOf "IPv6Forwarding" boolValues)
nixos/systemd.network: add support for UseDomains= in [Network] sections Those options were also added with systemd 256, but sadly were missed out in #307068. These options are documented in: - [systemd 256 changelog](https://github.com/systemd/systemd/releases/tag/v256) (search for `UseDomains=`) - [networkd.conf(5)](https://www.freedesktop.org/software/systemd/man/256/networkd.conf.html#UseDomains=) - [systemd.network(5)](https://www.freedesktop.org/software/systemd/man/256/systemd.network.html#UseDomains=)
2024-08-21 17:46:27 +00:00
(assertValueOneOf "UseDomains" (boolValues ++ ["route"]))
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
];
sectionDHCPv4 = checkUnitConfig "DHCPv4" [
(assertOnlyFields [
networkd: support specifying the ClientIdentifier for DHCPv4 options
2022-04-26 19:49:52 +00:00
"ClientIdentifier"
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
"DUIDType"
"DUIDRawData"
])
networkd: support specifying the ClientIdentifier for DHCPv4 options
2022-04-26 19:49:52 +00:00
(assertValueOneOf "ClientIdentifier" ["mac" "duid" "duid-only"])
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
];
sectionDHCPv6 = checkUnitConfig "DHCPv6" [
(assertOnlyFields [
"DUIDType"
"DUIDRawData"
])
];
};
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
link = {
sectionLink = checkUnitConfig "Link" [
(assertOnlyFields [
"Description"
"Alias"
"MACAddressPolicy"
"MACAddress"
"NamePolicy"
"Name"
"AlternativeNamesPolicy"
"AlternativeName"
"MTUBytes"
"BitsPerSecond"
"Duplex"
"AutoNegotiation"
"WakeOnLan"
"Port"
"Advertise"
"ReceiveChecksumOffload"
"TransmitChecksumOffload"
"TCPSegmentationOffload"
"TCP6SegmentationOffload"
"GenericSegmentationOffload"
"GenericReceiveOffload"
"LargeReceiveOffload"
"RxChannels"
"TxChannels"
"OtherChannels"
"CombinedChannels"
"RxBufferSize"
"TxBufferSize"
nixos/networkd: add TransmitQueues and TransmitQueueLength These are relevant when using networkd to configure CAN networks Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
2023-05-06 04:37:44 +00:00
"ReceiveQueues"
"TransmitQueues"
"TransmitQueueLength"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
(assertValueOneOf "MACAddressPolicy" ["persistent" "random" "none"])
(assertMacAddress "MACAddress")
(assertByteFormat "MTUBytes")
(assertByteFormat "BitsPerSecond")
(assertValueOneOf "Duplex" ["half" "full"])
(assertValueOneOf "AutoNegotiation" boolValues)
networkd: Allow combinations of WakeOnLan policies To comply with the systemd.link WakeOnLan[^1] specification, the option "off" and all other possible policy combinations must be allowed. [^1]: https://www.freedesktop.org/software/systemd/man/systemd.link.html#WakeOnLan=
2023-09-28 15:04:35 +00:00
(assertValuesSomeOfOr "WakeOnLan" ["phy" "unicast" "multicast" "broadcast" "arp" "magic" "secureon"] "off")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "Port" ["tp" "aui" "bnc" "mii" "fibre"])
(assertValueOneOf "ReceiveChecksumOffload" boolValues)
(assertValueOneOf "TransmitChecksumOffload" boolValues)
(assertValueOneOf "TCPSegmentationOffload" boolValues)
(assertValueOneOf "TCP6SegmentationOffload" boolValues)
(assertValueOneOf "GenericSegmentationOffload" boolValues)
(assertValueOneOf "GenericReceiveOffload" boolValues)
(assertValueOneOf "LargeReceiveOffload" boolValues)
(assertInt "RxChannels")
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertRange "RxChannels" 1 4294967295)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertInt "TxChannels")
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertRange "TxChannels" 1 4294967295)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertInt "OtherChannels")
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertRange "OtherChannels" 1 4294967295)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertInt "CombinedChannels")
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertRange "CombinedChannels" 1 4294967295)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertInt "RxBufferSize")
(assertInt "TxBufferSize")
nixos/networkd: add TransmitQueues and TransmitQueueLength These are relevant when using networkd to configure CAN networks Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
2023-05-06 04:37:44 +00:00
(assertRange "ReceiveQueues" 1 4096)
(assertRange "TransmitQueues" 1 4096)
(assertRange "TransmitQueueLength" 1 4294967294)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
};
netdev = let
tunChecks = [
(assertOnlyFields [
"MultiQueue"
"PacketInfo"
"VNetHeader"
"User"
"Group"
nixos/networkd: allow KeepCarrier in tunConfig and tapConfig This is added in systemd.netdev in 252, see https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#KeepCarrier=
2023-12-22 20:28:56 +00:00
"KeepCarrier"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
(assertValueOneOf "MultiQueue" boolValues)
(assertValueOneOf "PacketInfo" boolValues)
(assertValueOneOf "VNetHeader" boolValues)
nixos/networkd: allow KeepCarrier in tunConfig and tapConfig This is added in systemd.netdev in 252, see https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#KeepCarrier=
2023-12-22 20:28:56 +00:00
(assertValueOneOf "KeepCarrier" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
nixos/networkd: add [IPVLAN] and [IPVTAP] configuration options to systemd.netdev files [IPVLAN](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVLAN%5D%20Section%20Options) [IPVTAP](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVTAP%5D%20Section%20Options)
2023-11-17 21:08:18 +00:00
# See https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVTAP%5D%20Section%20Options
ipVlanVtapChecks = [
(assertOnlyFields [
"Mode"
"Flags"
])
(assertValueOneOf "Mode" ["L2" "L3" "L3S" ])
(assertValueOneOf "Flags" ["private" "vepa" "bridge" ])
];
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
in {
sectionNetdev = checkUnitConfig "Netdev" [
(assertOnlyFields [
"Description"
"Name"
"Kind"
"MTUBytes"
"MACAddress"
])
(assertHasField "Name")
(assertHasField "Kind")
(assertValueOneOf "Kind" [
"bond"
"bridge"
"dummy"
"gre"
"gretap"
"erspan"
"ip6gre"
"ip6tnl"
"ip6gretap"
"ipip"
"ipvlan"
nixos/networkd: add ipvtap kind to netdev and IPVTAP= to network From `man systemd.netdev`: https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#Supported%20netdev%20kinds From `man systemd.network`: https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#IPoIB=
2023-11-17 20:54:16 +00:00
"ipvtap"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"macvlan"
"macvtap"
"sit"
"tap"
"tun"
"veth"
"vlan"
"vti"
"vti6"
"vxlan"
"geneve"
"l2tp"
"macsec"
systemd.network.netdev: Add support for WLAN devices These are virtual interface, where one physical wifi adapter can have more than one interface. See https://systemd.network/systemd.netdev.html#%5BWLAN%5D%20Section%20Options and https://github.com/systemd/systemd/commit/dedf2d0054eb3150697b1540bf9733cba9e881fd
2023-10-16 22:04:44 +00:00
"wlan"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"vrf"
"vcan"
"vxcan"
"wireguard"
"netdevsim"
"nlmon"
"fou"
"xfrm"
"ifb"
nixos/networkd: add BatmanAdvanced options (#145963) Since systemd v248 networkd supports BatmanAdvanced. This adds the according config options to the networkd-module
2021-11-16 22:41:17 +00:00
"batadv"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
(assertByteFormat "MTUBytes")
nixos/networkd: support netdev MAC addresses According to systemd.netdev manpage: ``` MACAddress= Specifies the MAC address to use for the device, or takes the special value "none". When "none", systemd-networkd does not request the MAC address for the device, and the kernel will assign a random MAC address. For "tun", "tap", or "l2tp" devices, the MACAddress= setting in the [NetDev] section is not supported and will be ignored. Please specify it in the [Link] section of the corresponding systemd.network(5) file. If this option is not set, "vlan" device inherits the MAC address of the master interface. For other kind of netdevs, if this option is not set, then the MAC address is generated based on the interface name and the machine-id(5). Note, even if "none" is specified, systemd-udevd will assign the persistent MAC address for the device, as 99-default.link has MACAddressPolicy=persistent. So, it is also necessary to create a custom .link file for the device, if the MAC address assignment is not desired. ``` Therefore, `none` is an acceptable value.
2023-07-03 23:21:35 +00:00
(assertNetdevMacAddress "MACAddress")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
nixos/networkd: add [Bridge] section to netdev conf This setting was missing from netdev. This commit additionally adds a test using the new section, ensuring that STP can be enabled.
2024-04-11 07:56:18 +00:00
sectionBridge = checkUnitConfig "Bridge" [
(assertOnlyFields [
"HelloTimeSec"
"MaxAgeSec"
"ForwardDelaySec"
"AgeingTimeSec"
"Priority"
"GroupForwardMask"
"DefaultPVID"
"MulticastQuerier"
"MulticastSnooping"
"VLANFiltering"
"VLANProtocol"
"STP"
"MulticastIGMPVersion"
])
(assertInt "HelloTimeSec")
(assertInt "MaxAgeSec")
(assertInt "ForwardDelaySec")
(assertInt "AgeingTimeSec")
(assertRange "Priority" 0 65535)
(assertRange "GroupForwardMask" 0 65535)
(assertRangeOrOneOf "DefaultPVID" 0 4094 ["none"])
(assertValueOneOf "MulticastQuerier" boolValues)
(assertValueOneOf "MulticastSnooping" boolValues)
(assertValueOneOf "VLANFiltering" boolValues)
(assertValueOneOf "VLANProtocol" ["802.1q" "802.ad"])
(assertValueOneOf "STP" boolValues)
(assertValueOneOf "MulticastIGMPVersion" [2 3])
];
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
sectionVLAN = checkUnitConfig "VLAN" [
(assertOnlyFields [
"Id"
"GVRP"
"MVRP"
"LooseBinding"
"ReorderHeader"
])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "Id")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "Id" 0 4094)
(assertValueOneOf "GVRP" boolValues)
(assertValueOneOf "MVRP" boolValues)
(assertValueOneOf "LooseBinding" boolValues)
(assertValueOneOf "ReorderHeader" boolValues)
];
nixos/networkd: add [IPVLAN] and [IPVTAP] configuration options to systemd.netdev files [IPVLAN](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVLAN%5D%20Section%20Options) [IPVTAP](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVTAP%5D%20Section%20Options)
2023-11-17 21:08:18 +00:00
sectionIPVLAN = checkUnitConfig "IPVLAN" ipVlanVtapChecks;
sectionIPVTAP = checkUnitConfig "IPVTAP" ipVlanVtapChecks;
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
sectionMACVLAN = checkUnitConfig "MACVLAN" [
(assertOnlyFields [
"Mode"
])
(assertValueOneOf "Mode" ["private" "vepa" "bridge" "passthru"])
];
sectionVXLAN = checkUnitConfig "VXLAN" [
(assertOnlyFields [
"VNI"
"Remote"
"Local"
"Group"
"TOS"
"TTL"
"MacLearning"
"FDBAgeingSec"
"MaximumFDBEntries"
"ReduceARPProxy"
"L2MissNotification"
"L3MissNotification"
"RouteShortCircuit"
"UDPChecksum"
"UDP6ZeroChecksumTx"
"UDP6ZeroChecksumRx"
"RemoteChecksumTx"
"RemoteChecksumRx"
"GroupPolicyExtension"
"GenericProtocolExtension"
"DestinationPort"
"PortRange"
"FlowLabel"
"IPDoNotFragment"
nixos/networkd: support `Independent` flag for VXLAN netdevs According to networkd netdev's manpage: ``` Independent= Takes a boolean. When true, the vxlan interface is created without any underlying network interface. Defaults to false, which means that a .network file that requests this VXLAN interface using VXLAN= is required for the VXLAN to be created. ``` is a valid option for [VXLAN] section.
2023-07-03 23:53:34 +00:00
"Independent"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "VNI")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "VNI" 1 16777215)
(assertValueOneOf "MacLearning" boolValues)
(assertInt "MaximumFDBEntries")
(assertValueOneOf "ReduceARPProxy" boolValues)
(assertValueOneOf "L2MissNotification" boolValues)
(assertValueOneOf "L3MissNotification" boolValues)
(assertValueOneOf "RouteShortCircuit" boolValues)
(assertValueOneOf "UDPChecksum" boolValues)
(assertValueOneOf "UDP6ZeroChecksumTx" boolValues)
(assertValueOneOf "UDP6ZeroChecksumRx" boolValues)
(assertValueOneOf "RemoteChecksumTx" boolValues)
(assertValueOneOf "RemoteChecksumRx" boolValues)
(assertValueOneOf "GroupPolicyExtension" boolValues)
(assertValueOneOf "GenericProtocolExtension" boolValues)
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "FlowLabel")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "FlowLabel" 0 1048575)
(assertValueOneOf "IPDoNotFragment" (boolValues + ["inherit"]))
nixos/networkd: support `Independent` flag for VXLAN netdevs According to networkd netdev's manpage: ``` Independent= Takes a boolean. When true, the vxlan interface is created without any underlying network interface. Defaults to false, which means that a .network file that requests this VXLAN interface using VXLAN= is required for the VXLAN to be created. ``` is a valid option for [VXLAN] section.
2023-07-03 23:53:34 +00:00
(assertValueOneOf "Independent" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
sectionTunnel = checkUnitConfig "Tunnel" [
(assertOnlyFields [
"Local"
"Remote"
"TOS"
"TTL"
"DiscoverPathMTU"
"IPv6FlowLabel"
"CopyDSCP"
"EncapsulationLimit"
"Key"
"InputKey"
"OutputKey"
"Mode"
"Independent"
"AssignToLoopback"
"AllowLocalRemote"
"FooOverUDP"
"FOUDestinationPort"
"FOUSourcePort"
"Encapsulation"
"IPv6RapidDeploymentPrefix"
"ISATAP"
"SerializeTunneledPackets"
"ERSPANIndex"
])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "TTL")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "TTL" 0 255)
(assertValueOneOf "DiscoverPathMTU" boolValues)
(assertValueOneOf "CopyDSCP" boolValues)
(assertValueOneOf "Mode" ["ip6ip6" "ipip6" "any"])
(assertValueOneOf "Independent" boolValues)
(assertValueOneOf "AssignToLoopback" boolValues)
(assertValueOneOf "AllowLocalRemote" boolValues)
(assertValueOneOf "FooOverUDP" boolValues)
(assertPort "FOUDestinationPort")
(assertPort "FOUSourcePort")
(assertValueOneOf "Encapsulation" ["FooOverUDP" "GenericUDPEncapsulation"])
(assertValueOneOf "ISATAP" boolValues)
(assertValueOneOf "SerializeTunneledPackets" boolValues)
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "ERSPANIndex")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "ERSPANIndex" 1 1048575)
];
nixos/networking: add foo-over-udp endpoint support allows configuration of foo-over-udp decapsulation endpoints. sadly networkd seems to lack the features necessary to support local and peer address configuration, so those are only supported when using scripted configuration.
2021-08-11 09:02:47 +00:00
sectionFooOverUDP = checkUnitConfig "FooOverUDP" [
(assertOnlyFields [
"Port"
"Encapsulation"
"Protocol"
])
(assertPort "Port")
(assertValueOneOf "Encapsulation" ["FooOverUDP" "GenericUDPEncapsulation"])
];
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
sectionPeer = checkUnitConfig "Peer" [
(assertOnlyFields [
"Name"
"MACAddress"
])
(assertMacAddress "MACAddress")
];
sectionTun = checkUnitConfig "Tun" tunChecks;
sectionTap = checkUnitConfig "Tap" tunChecks;
nixos/networkd: add L2TP options
2023-02-27 23:06:39 +00:00
sectionL2TP = checkUnitConfig "L2TP" [
(assertOnlyFields [
"TunnelId"
"PeerTunnelId"
"Remote"
"Local"
"EncapsulationType"
"UDPSourcePort"
"UDPDestinationPort"
"UDPChecksum"
"UDP6ZeroChecksumTx"
"UDP6ZeroChecksumRx"
])
(assertInt "TunnelId")
(assertRange "TunnelId" 1 4294967295)
(assertInt "PeerTunnelId")
(assertRange "PeerTunnelId" 1 4294967295)
(assertValueOneOf "EncapsulationType" [ "ip" "udp" ])
(assertPort "UDPSourcePort")
(assertPort "UDPDestinationPort")
(assertValueOneOf "UDPChecksum" boolValues)
(assertValueOneOf "UDP6ZeroChecksumTx" boolValues)
(assertValueOneOf "UDP6ZeroChecksumRx" boolValues)
];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionL2TPSession = checkUnitConfigWithLegacyKey "l2tpSessionConfig" "L2TPSession" [
nixos/networkd: add L2TP options
2023-02-27 23:06:39 +00:00
(assertOnlyFields [
"Name"
"SessionId"
"PeerSessionId"
"Layer2SpecificHeader"
])
(assertHasField "Name")
(assertHasField "SessionId")
(assertInt "SessionId")
(assertRange "SessionId" 1 4294967295)
(assertHasField "PeerSessionId")
(assertInt "PeerSessionId")
(assertRange "PeerSessionId" 1 4294967295)
(assertValueOneOf "Layer2SpecificHeader" [ "none" "default" ])
];
nixos/networkd: support systemd-creds in WireGuard systemd 256 supports network.wireguard.* credentials (https://github.com/systemd/systemd/pull/30826). Check whether PrivateKey / PresharedKey starts with an @, if so it is a credential.
2024-10-06 21:52:42 +00:00
# NOTE Check whether the key starts with an @, in which case it is
# interpreted as the name of the credential from which the actual key
# shall be read by systemd-creds.
# Do not remove this check as the nix store is world-readable.
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
sectionWireGuard = checkUnitConfig "WireGuard" [
nixos/networkd: support systemd-creds in WireGuard systemd 256 supports network.wireguard.* credentials (https://github.com/systemd/systemd/pull/30826). Check whether PrivateKey / PresharedKey starts with an @, if so it is a credential.
2024-10-06 21:52:42 +00:00
(assertKeyIsSystemdCredential "PrivateKey")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertOnlyFields [
nixos/networkd: support systemd-creds in WireGuard systemd 256 supports network.wireguard.* credentials (https://github.com/systemd/systemd/pull/30826). Check whether PrivateKey / PresharedKey starts with an @, if so it is a credential.
2024-10-06 21:52:42 +00:00
"PrivateKey"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"PrivateKeyFile"
"ListenPort"
"FirewallMark"
nixos/networkd: add support for more WireGuard options (introduced in systemd v250) As of systemd/systemd@e90843445890586912ec366cf017f01483c7fdd6, systemd-networkd now automatically configures routes to addresses specified in AllowedIPs unless explicitly disabled with "RouteTable=off".
2022-03-13 04:04:41 +00:00
"RouteTable"
"RouteMetric"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "FirewallMark")
(assertRange "FirewallMark" 1 4294967295)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
nixos/networkd: support systemd-creds in WireGuard systemd 256 supports network.wireguard.* credentials (https://github.com/systemd/systemd/pull/30826). Check whether PrivateKey / PresharedKey starts with an @, if so it is a credential.
2024-10-06 21:52:42 +00:00
# NOTE Check whether the key starts with an @, in which case it is
# interpreted as the name of the credential from which the actual key
# shall be read by systemd-creds.
# Do not remove this check as the nix store is world-readable.
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionWireGuardPeer = checkUnitConfigWithLegacyKey "wireguardPeerConfig" "WireGuardPeer" [
nixos/networkd: support systemd-creds in WireGuard systemd 256 supports network.wireguard.* credentials (https://github.com/systemd/systemd/pull/30826). Check whether PrivateKey / PresharedKey starts with an @, if so it is a credential.
2024-10-06 21:52:42 +00:00
(assertKeyIsSystemdCredential "PresharedKey")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertOnlyFields [
"PublicKey"
nixos/networkd: support systemd-creds in WireGuard systemd 256 supports network.wireguard.* credentials (https://github.com/systemd/systemd/pull/30826). Check whether PrivateKey / PresharedKey starts with an @, if so it is a credential.
2024-10-06 21:52:42 +00:00
"PresharedKey"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"PresharedKeyFile"
"AllowedIPs"
"Endpoint"
"PersistentKeepalive"
nixos/networkd: add support for more WireGuard options (introduced in systemd v250) As of systemd/systemd@e90843445890586912ec366cf017f01483c7fdd6, systemd-networkd now automatically configures routes to addresses specified in AllowedIPs unless explicitly disabled with "RouteTable=off".
2022-03-13 04:04:41 +00:00
"RouteTable"
"RouteMetric"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "PersistentKeepalive")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "PersistentKeepalive" 0 65535)
];
sectionBond = checkUnitConfig "Bond" [
(assertOnlyFields [
"Mode"
"TransmitHashPolicy"
"LACPTransmitRate"
"MIIMonitorSec"
"UpDelaySec"
"DownDelaySec"
"LearnPacketIntervalSec"
"AdSelect"
"AdActorSystemPriority"
"AdUserPortKey"
"AdActorSystem"
"FailOverMACPolicy"
"ARPValidate"
"ARPIntervalSec"
"ARPIPTargets"
"ARPAllTargets"
"PrimaryReselectPolicy"
"ResendIGMP"
"PacketsPerSlave"
"GratuitousARP"
"AllSlavesActive"
"DynamicTransmitLoadBalancing"
"MinLinks"
])
(assertValueOneOf "Mode" [
"balance-rr"
"active-backup"
"balance-xor"
"broadcast"
"802.3ad"
"balance-tlb"
"balance-alb"
])
(assertValueOneOf "TransmitHashPolicy" [
"layer2"
"layer3+4"
"layer2+3"
"encap2+3"
"encap3+4"
])
(assertValueOneOf "LACPTransmitRate" ["slow" "fast"])
(assertValueOneOf "AdSelect" ["stable" "bandwidth" "count"])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "AdActorSystemPriority")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "AdActorSystemPriority" 1 65535)
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "AdUserPortKey")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "AdUserPortKey" 0 1023)
(assertValueOneOf "FailOverMACPolicy" ["none" "active" "follow"])
(assertValueOneOf "ARPValidate" ["none" "active" "backup" "all"])
(assertValueOneOf "ARPAllTargets" ["any" "all"])
(assertValueOneOf "PrimaryReselectPolicy" ["always" "better" "failure"])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "ResendIGMP")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "ResendIGMP" 0 255)
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "PacketsPerSlave")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "PacketsPerSlave" 0 65535)
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "GratuitousARP")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "GratuitousARP" 0 255)
(assertValueOneOf "AllSlavesActive" boolValues)
(assertValueOneOf "DynamicTransmitLoadBalancing" boolValues)
(assertInt "MinLinks")
(assertMinimum "MinLinks" 0)
];
sectionXfrm = checkUnitConfig "Xfrm" [
(assertOnlyFields [
"InterfaceId"
"Independent"
])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "InterfaceId")
(assertRange "InterfaceId" 1 4294967295)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "Independent" boolValues)
];
sectionVRF = checkUnitConfig "VRF" [
(assertOnlyFields [
"Table"
])
(assertInt "Table")
(assertMinimum "Table" 0)
];
nixos/networkd: add BatmanAdvanced options (#145963) Since systemd v248 networkd supports BatmanAdvanced. This adds the according config options to the networkd-module
2021-11-16 22:41:17 +00:00
systemd.network.netdev: Add support for WLAN devices These are virtual interface, where one physical wifi adapter can have more than one interface. See https://systemd.network/systemd.netdev.html#%5BWLAN%5D%20Section%20Options and https://github.com/systemd/systemd/commit/dedf2d0054eb3150697b1540bf9733cba9e881fd
2023-10-16 22:04:44 +00:00
sectionWLAN = checkUnitConfig "WLAN" [
(assertOnlyFields [
Remove restriction on PhysicalDevice being int; reformat and document the Type field
2023-10-17 16:43:37 +00:00
"PhysicalDevice" # systemd supports both strings ("phy0") and indexes (0) here.
systemd.network.netdev: Add support for WLAN devices These are virtual interface, where one physical wifi adapter can have more than one interface. See https://systemd.network/systemd.netdev.html#%5BWLAN%5D%20Section%20Options and https://github.com/systemd/systemd/commit/dedf2d0054eb3150697b1540bf9733cba9e881fd
2023-10-16 22:04:44 +00:00
"Type"
"WDS"
])
Remove restriction on PhysicalDevice being int; reformat and document the Type field
2023-10-17 16:43:37 +00:00
# See https://github.com/systemd/systemd/blob/main/src/basic/linux/nl80211.h#L3382
(assertValueOneOf "Type" [
"ad-hoc"
"station"
"ap"
"ap-vlan"
"wds"
"monitor"
"mesh-point"
"p2p-client"
"p2p-go"
"p2p-device"
"ocb"
"nan"
])
systemd.network.netdev: Add support for WLAN devices These are virtual interface, where one physical wifi adapter can have more than one interface. See https://systemd.network/systemd.netdev.html#%5BWLAN%5D%20Section%20Options and https://github.com/systemd/systemd/commit/dedf2d0054eb3150697b1540bf9733cba9e881fd
2023-10-16 22:04:44 +00:00
(assertValueOneOf "WDS" boolValues)
];
nixos/networkd: add BatmanAdvanced options (#145963) Since systemd v248 networkd supports BatmanAdvanced. This adds the according config options to the networkd-module
2021-11-16 22:41:17 +00:00
sectionBatmanAdvanced = checkUnitConfig "BatmanAdvanced" [
(assertOnlyFields [
"GatewayMode"
"Aggregation"
"BridgeLoopAvoidance"
"DistributedArpTable"
"Fragmentation"
"HopPenalty"
"OriginatorIntervalSec"
"GatewayBandwithDown"
"GatewayBandwithUp"
"RoutingAlgorithm"
])
(assertValueOneOf "GatewayMode" ["off" "client" "server"])
(assertValueOneOf "Aggregation" boolValues)
(assertValueOneOf "BridgeLoopAvoidance" boolValues)
(assertValueOneOf "DistributedArpTable" boolValues)
(assertValueOneOf "Fragmentation" boolValues)
(assertInt "HopPenalty")
(assertRange "HopPenalty" 0 255)
(assertValueOneOf "RoutingAlgorithm" ["batman-v" "batman-iv"])
];
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
};
network = {
sectionLink = checkUnitConfig "Link" [
(assertOnlyFields [
"MACAddress"
"MTUBytes"
"ARP"
"Multicast"
"AllMulticast"
"Unmanaged"
modified: nixos/modules/system/boot/networkd.nix
2022-08-19 13:00:18 +00:00
"Group"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"RequiredForOnline"
nixos/systemd.network: Add `RequiredFamilyForOnline` to `linkConfig` While writing a configuration, I found a usage for this field and noticed it was missing when building the configuration.
2022-07-25 22:02:25 +00:00
"RequiredFamilyForOnline"
nixos/networkd: add ActivationPolicy option
2021-09-25 14:03:42 +00:00
"ActivationPolicy"
add Promiscuous as valid value for linkConfig configuring a network via `systemd.network.networks.<name>.linkConfig` does not allow to set the attr Promiscuous = "true"; This referes to: https://www.freedesktop.org/software/systemd/man/systemd.network.html#Promiscuous= Signed-off-by: Philippe Schaaf <philippe.schaaf@secunet.com>
2022-08-02 11:36:01 +00:00
"Promiscuous"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
(assertMacAddress "MACAddress")
(assertByteFormat "MTUBytes")
(assertValueOneOf "ARP" boolValues)
(assertValueOneOf "Multicast" boolValues)
(assertValueOneOf "AllMulticast" boolValues)
add Promiscuous as valid value for linkConfig configuring a network via `systemd.network.networks.<name>.linkConfig` does not allow to set the attr Promiscuous = "true"; This referes to: https://www.freedesktop.org/software/systemd/man/systemd.network.html#Promiscuous= Signed-off-by: Philippe Schaaf <philippe.schaaf@secunet.com>
2022-08-02 11:36:01 +00:00
(assertValueOneOf "Promiscuous" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "Unmanaged" boolValues)
modified: nixos/modules/system/boot/networkd.nix
2022-08-19 13:00:18 +00:00
(assertInt "Group")
(assertRange "Group" 0 2147483647)
nixos/networkd: allow state ranges in RequiredForOnline RequiredForOnline takes a boolean or a minimum operational state and an optional maximum operational state. In the latter case, range values are separated with colon.
2023-07-08 04:35:18 +00:00
(assertValueOneOf "RequiredForOnline" (boolValues ++ (
let
# https://freedesktop.org/software/systemd/man/networkctl.html#missing
operationalStates = [
"missing"
"off"
"no-carrier"
"dormant"
"degraded-carrier"
"carrier"
"degraded"
"enslaved"
"routable"
];
operationalStateRanges = concatLists (imap0 (i: min: map (max: "${min}:${max}") (drop i operationalStates)) operationalStates);
in
operationalStates ++ operationalStateRanges
)))
nixos/systemd.network: Add `RequiredFamilyForOnline` to `linkConfig` While writing a configuration, I found a usage for this field and noticed it was missing when building the configuration.
2022-07-25 22:02:25 +00:00
(assertValueOneOf "RequiredFamilyForOnline" [
"ipv4"
"ipv6"
"both"
"any"
])
nixos/networkd: add ActivationPolicy option
2021-09-25 14:03:42 +00:00
(assertValueOneOf "ActivationPolicy" ([
"up"
"always-up"
"manual"
"always-down"
"down"
"bound"
]))
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
sectionNetwork = checkUnitConfig "Network" [
(assertOnlyFields [
"Description"
"DHCP"
"DHCPServer"
"LinkLocalAddressing"
nixos/networkd: allow IPv6LinkLocalAddressGenerationMode in networkConfig Fixes: #199407 .
2022-12-25 19:23:45 +00:00
"IPv6LinkLocalAddressGenerationMode"
"IPv6StableSecretAddress"
nixos/networkd: add new Network section options Adds IPv4LLStartAddress, IPv4ReversePathFilter, IPv4ReversePathFilter, IPv4RouteLocalnet, and IPv4RouteLocalnet
2024-06-06 04:45:03 +00:00
"IPv4LLStartAddress"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"IPv4LLRoute"
"DefaultRouteOnDevice"
"LLMNR"
"MulticastDNS"
"DNSOverTLS"
"DNSSEC"
"DNSSECNegativeTrustAnchors"
"LLDP"
"EmitLLDP"
"BindCarrier"
"Address"
"Gateway"
"DNS"
nixos/systemd.network: add support for UseDomains= in [Network] sections Those options were also added with systemd 256, but sadly were missed out in #307068. These options are documented in: - [systemd 256 changelog](https://github.com/systemd/systemd/releases/tag/v256) (search for `UseDomains=`) - [networkd.conf(5)](https://www.freedesktop.org/software/systemd/man/256/networkd.conf.html#UseDomains=) - [systemd.network(5)](https://www.freedesktop.org/software/systemd/man/256/systemd.network.html#UseDomains=)
2024-08-21 17:46:27 +00:00
"UseDomains"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"Domains"
"DNSDefaultRoute"
"NTP"
"IPForward"
systemd: 255.6 -> 256.2
2024-04-26 21:18:12 +00:00
"IPv4Forwarding"
"IPv6Forwarding"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"IPMasquerade"
"IPv6PrivacyExtensions"
"IPv6AcceptRA"
"IPv6DuplicateAddressDetection"
"IPv6HopLimit"
nixos/networkd: add IPv6RetransmissionTimeSec option to [Network] section
2024-07-28 14:22:34 +00:00
"IPv6RetransmissionTimeSec"
nixos/networkd: add new Network section options Adds IPv4LLStartAddress, IPv4ReversePathFilter, IPv4ReversePathFilter, IPv4RouteLocalnet, and IPv4RouteLocalnet
2024-06-06 04:45:03 +00:00
"IPv4ReversePathFilter"
"IPv4AcceptLocal"
"IPv4RouteLocalnet"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"IPv4ProxyARP"
nixos/networkd add IPv4ProxyARPPrivateVLAN option to [Network] section
2024-07-28 14:24:10 +00:00
"IPv4ProxyARPPrivateVLAN"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"IPv6ProxyNDP"
"IPv6ProxyNDPAddress"
nixos/networkd: rename ipv6PrefixDelegationConfig option to ipv6SendRAConfig networkd's [IPv6PrefixDelegation] section and IPv6PrefixDelegation= options have been renamed as [IPv6SendRA] and IPv6SendRA= in systemd 247. Throws if the deprecated option ipv6PrefixDelegationConfig is used.
2021-01-30 11:33:14 +00:00
"IPv6SendRA"
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
"DHCPPrefixDelegation"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"IPv6MTUBytes"
nixos/networkd: add new Network section options Adds IPv4LLStartAddress, IPv4ReversePathFilter, IPv4ReversePathFilter, IPv4RouteLocalnet, and IPv4RouteLocalnet
2024-06-06 04:45:03 +00:00
"KeepMaster"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"Bridge"
"Bond"
"VRF"
"VLAN"
"IPVLAN"
nixos/networkd: add ipvtap kind to netdev and IPVTAP= to network From `man systemd.netdev`: https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#Supported%20netdev%20kinds From `man systemd.network`: https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#IPoIB=
2023-11-17 20:54:16 +00:00
"IPVTAP"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"MACVLAN"
nixos/networkd: add MACVTAP= option for networks Example 10. of man page of systemd.network(5) shows: ``` Example 10. MacVTap This brings up a network interface "macvtap-test" and attaches it to "enp0s25". # /usr/lib/systemd/network/25-macvtap.network [Match] Name=enp0s25 [Network] MACVTAP=macvtap-test ``` Which is a MACVTAP example and is currently unsupported in NixOS. This is useful for people using "modern" technologies with virtual machines.
2023-07-03 22:46:35 +00:00
"MACVTAP"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"VXLAN"
"Tunnel"
"MACsec"
"ActiveSlave"
"PrimarySlave"
"ConfigureWithoutCarrier"
"IgnoreCarrierLoss"
"Xfrm"
"KeepConfiguration"
nixos/networkd: add BatmanAdvanced options (#145963) Since systemd v248 networkd supports BatmanAdvanced. This adds the according config options to the networkd-module
2021-11-16 22:41:17 +00:00
"BatmanAdvanced"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
# Note: For DHCP the values both, none, v4, v6 are deprecated
nixos/networkd: accept `true` and `false` in addition to "yes" and "no" for DHCP= and LinkLocalAddressing= These were the only two systemd configuration values that were missing the `boolValues ++` treatment, according to my `rg` through the codebase.
2024-02-27 16:53:32 +00:00
(assertValueOneOf "DHCP" (boolValues ++ ["ipv4" "ipv6"]))
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "DHCPServer" boolValues)
nixos/networkd: accept `true` and `false` in addition to "yes" and "no" for DHCP= and LinkLocalAddressing= These were the only two systemd configuration values that were missing the `boolValues ++` treatment, according to my `rg` through the codebase.
2024-02-27 16:53:32 +00:00
(assertValueOneOf "LinkLocalAddressing" (boolValues ++ ["ipv4" "ipv6" "fallback" "ipv4-fallback"]))
nixos/networkd: allow IPv6LinkLocalAddressGenerationMode in networkConfig Fixes: #199407 .
2022-12-25 19:23:45 +00:00
(assertValueOneOf "IPv6LinkLocalAddressGenerationMode" ["eui64" "none" "stable-privacy" "random"])
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "IPv4LLRoute" boolValues)
(assertValueOneOf "DefaultRouteOnDevice" boolValues)
(assertValueOneOf "LLMNR" (boolValues ++ ["resolve"]))
(assertValueOneOf "MulticastDNS" (boolValues ++ ["resolve"]))
(assertValueOneOf "DNSOverTLS" (boolValues ++ ["opportunistic"]))
(assertValueOneOf "DNSSEC" (boolValues ++ ["allow-downgrade"]))
(assertValueOneOf "LLDP" (boolValues ++ ["routers-only"]))
(assertValueOneOf "EmitLLDP" (boolValues ++ ["nearest-bridge" "non-tpmr-bridge" "customer-bridge"]))
nixos/systemd.network: add support for UseDomains= in [Network] sections Those options were also added with systemd 256, but sadly were missed out in #307068. These options are documented in: - [systemd 256 changelog](https://github.com/systemd/systemd/releases/tag/v256) (search for `UseDomains=`) - [networkd.conf(5)](https://www.freedesktop.org/software/systemd/man/256/networkd.conf.html#UseDomains=) - [systemd.network(5)](https://www.freedesktop.org/software/systemd/man/256/systemd.network.html#UseDomains=)
2024-08-21 17:46:27 +00:00
(assertValueOneOf "UseDomains" (boolValues ++ ["route"]))
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "DNSDefaultRoute" boolValues)
nixos/networkd: warn about naively replacing IPForward See https://github.com/systemd/systemd/issues/33414. The way this was phrased sounded like a dumb search/replace operation to me. This resulted in random parts of my routing being broken (forward from if X -> Y being fine, but the opposite direction being broken). This change makes it explicit that it's a little more complicated and you should really consult the docs before making that change.
2024-11-18 13:16:38 +00:00
(assertRemoved "IPForward" "IPv4Forwarding and IPv6Forwarding in systemd.network(5) and networkd.conf(5). Please note that setting these options on multiple interfaces may lead to unintended results, see https://github.com/systemd/systemd/issues/33414 or the relevant sections in systemd.network(5).")
systemd: 255.6 -> 256.2
2024-04-26 21:18:12 +00:00
(assertValueOneOf "IPv4Forwarding" boolValues)
(assertValueOneOf "IPv6Forwarding" boolValues)
nixos/networking: fix assertion on IPMasquerade
2022-01-20 11:16:46 +00:00
(assertValueOneOf "IPMasquerade" (boolValues ++ ["ipv4" "ipv6" "both"]))
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "IPv6PrivacyExtensions" (boolValues ++ ["prefer-public" "kernel"]))
(assertValueOneOf "IPv6AcceptRA" boolValues)
(assertInt "IPv6DuplicateAddressDetection")
(assertMinimum "IPv6DuplicateAddressDetection" 0)
(assertInt "IPv6HopLimit")
(assertMinimum "IPv6HopLimit" 0)
nixos/networkd: add IPv6RetransmissionTimeSec option to [Network] section
2024-07-28 14:22:34 +00:00
(assertInt "IPv6RetransmissionTimeSec")
nixos/networkd: add new Network section options Adds IPv4LLStartAddress, IPv4ReversePathFilter, IPv4ReversePathFilter, IPv4RouteLocalnet, and IPv4RouteLocalnet
2024-06-06 04:45:03 +00:00
(assertValueOneOf "IPv4ReversePathFilter" ["no" "strict" "loose"])
(assertValueOneOf "IPv4AcceptLocal" boolValues)
(assertValueOneOf "IPv4RouteLocalnet" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "IPv4ProxyARP" boolValues)
nixos/networkd: fix eval Broken by #330662.
2024-11-30 06:08:18 +00:00
(assertValueOneOf "IPv4ProxyARPPrivateVLAN" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "IPv6ProxyNDP" boolValues)
nixos/networkd: rename ipv6PrefixDelegationConfig option to ipv6SendRAConfig networkd's [IPv6PrefixDelegation] section and IPv6PrefixDelegation= options have been renamed as [IPv6SendRA] and IPv6SendRA= in systemd 247. Throws if the deprecated option ipv6PrefixDelegationConfig is used.
2021-01-30 11:33:14 +00:00
(assertValueOneOf "IPv6SendRA" boolValues)
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
(assertValueOneOf "DHCPPrefixDelegation" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertByteFormat "IPv6MTUBytes")
nixos/networkd: add new Network section options Adds IPv4LLStartAddress, IPv4ReversePathFilter, IPv4ReversePathFilter, IPv4RouteLocalnet, and IPv4RouteLocalnet
2024-06-06 04:45:03 +00:00
(assertValueOneOf "KeepMaster" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "ActiveSlave" boolValues)
(assertValueOneOf "PrimarySlave" boolValues)
(assertValueOneOf "ConfigureWithoutCarrier" boolValues)
(assertValueOneOf "KeepConfiguration" (boolValues ++ ["static" "dhcp-on-stop" "dhcp"]))
];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionAddress = checkUnitConfigWithLegacyKey "addressConfig" "Address" [
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertOnlyFields [
"Address"
"Peer"
"Broadcast"
"Label"
"PreferredLifetime"
"Scope"
networkd: allow setting RouteMetric in Address section of a network config file
2022-10-27 04:53:32 +00:00
"RouteMetric"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"HomeAddress"
"DuplicateAddressDetection"
"ManageTemporaryAddress"
"AddPrefixRoute"
"AutoJoin"
])
(assertHasField "Address")
(assertValueOneOf "PreferredLifetime" ["forever" "infinity" "0" 0])
networkd: allow setting RouteMetric in Address section of a network config file
2022-10-27 04:53:32 +00:00
(assertInt "RouteMetric")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "HomeAddress" boolValues)
(assertValueOneOf "DuplicateAddressDetection" ["ipv4" "ipv6" "both" "none"])
(assertValueOneOf "ManageTemporaryAddress" boolValues)
(assertValueOneOf "AddPrefixRoute" boolValues)
(assertValueOneOf "AutoJoin" boolValues)
];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionRoutingPolicyRule = checkUnitConfigWithLegacyKey "routingPolicyRuleConfig" "RoutingPolicyRule" [
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertOnlyFields [
"TypeOfService"
"From"
"To"
"FirewallMark"
"Table"
"Priority"
"IncomingInterface"
"OutgoingInterface"
nixos/networkd: add L3MasterDevice option to [RoutingPolicyRule] section
2024-07-28 12:42:56 +00:00
"L3MasterDevice"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"SourcePort"
"DestinationPort"
"IPProtocol"
"InvertRule"
"Family"
"User"
"SuppressPrefixLength"
nixos/networkd: add RoutingPolicyRule Type option (#146168)
2021-12-07 09:13:22 +00:00
"Type"
nixos/networkd: add new options Systemd 250: > DHCPv4 client support in systemd-networkd learnt a new Label= option > for configuring the address label to apply to configure IPv4 > addresses. > The [IPv6AcceptRA] section of .network files gained support for a new > UseMTU= setting that may be used to control whether to apply the > announced MTU settings to the local interface. > The [DHCPv4] section in .network file gained a new Use6RD= boolean > setting to control whether the DHCPv4 client request and process the > DHCP 6RD option. > The [DHCPv6] section in .network file gained a new setting > UseDelegatedPrefix= to control whether the delegated prefixes will be > propagated to the downstream interfaces. > The [IPv6AcceptRA] section of .network files now understands two new > settings UseGateway=/UseRoutePrefix= for explicitly configuring > whether to use the relevant fields from the IPv6 Router Advertisement > records. > The [RoutingPolicyRule] section of .network file gained a new > SuppressInterfaceGroup= setting. > The IgnoreCarrierLoss= setting in the [Network] section of .network > files now allows a duration to be specified, controlling how long to > wait before reacting to carrier loss. Systemd 246: > systemd-networkd's [DHCPv4] section gained a new setting UseGateway= > which may be used to turn off use of the gateway information provided > by the DHCP lease. A new FallbackLeaseLifetimeSec= setting may be > used to configure how to process leases that lack a lifetime option.
2022-10-08 22:27:52 +00:00
"SuppressInterfaceGroup"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "TypeOfService")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "TypeOfService" 0 255)
nixos/networkd: allow specifying FirewallMark mask
2024-07-22 21:51:18 +00:00
(assertRangeWithOptionalMask "FirewallMark" 1 4294967295)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertInt "Priority")
nixos/networkd: add L3MasterDevice option to [RoutingPolicyRule] section
2024-07-28 12:42:56 +00:00
(assertValueOneOf "L3MasterDevice" boolValues)
nixos/networkd: allow RoutingPolicyRule port ranges Linux and Systemd allow port ranges to be used in routing policy rules. https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#SourcePort=
2024-03-06 08:11:54 +00:00
(assertPortOrPortRange "SourcePort")
(assertPortOrPortRange "DestinationPort")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "InvertRule" boolValues)
(assertValueOneOf "Family" ["ipv4" "ipv6" "both"])
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertInt "SuppressPrefixLength")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertRange "SuppressPrefixLength" 0 128)
nixos/networkd: add RoutingPolicyRule Type option (#146168)
2021-12-07 09:13:22 +00:00
(assertValueOneOf "Type" ["blackhole" "unreachable" "prohibit"])
nixos/networkd: add new options Systemd 250: > DHCPv4 client support in systemd-networkd learnt a new Label= option > for configuring the address label to apply to configure IPv4 > addresses. > The [IPv6AcceptRA] section of .network files gained support for a new > UseMTU= setting that may be used to control whether to apply the > announced MTU settings to the local interface. > The [DHCPv4] section in .network file gained a new Use6RD= boolean > setting to control whether the DHCPv4 client request and process the > DHCP 6RD option. > The [DHCPv6] section in .network file gained a new setting > UseDelegatedPrefix= to control whether the delegated prefixes will be > propagated to the downstream interfaces. > The [IPv6AcceptRA] section of .network files now understands two new > settings UseGateway=/UseRoutePrefix= for explicitly configuring > whether to use the relevant fields from the IPv6 Router Advertisement > records. > The [RoutingPolicyRule] section of .network file gained a new > SuppressInterfaceGroup= setting. > The IgnoreCarrierLoss= setting in the [Network] section of .network > files now allows a duration to be specified, controlling how long to > wait before reacting to carrier loss. Systemd 246: > systemd-networkd's [DHCPv4] section gained a new setting UseGateway= > which may be used to turn off use of the gateway information provided > by the DHCP lease. A new FallbackLeaseLifetimeSec= setting may be > used to configure how to process leases that lack a lifetime option.
2022-10-08 22:27:52 +00:00
(assertRange "SuppressInterfaceGroup" 0 2147483647)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionRoute = checkUnitConfigWithLegacyKey "routeConfig" "Route" [
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertOnlyFields [
"Gateway"
"GatewayOnLink"
"Destination"
"Source"
"Metric"
"IPv6Preference"
"Scope"
"PreferredSource"
"Table"
"Protocol"
"Type"
"InitialCongestionWindow"
"InitialAdvertisedReceiveWindow"
"QuickAck"
"FastOpenNoCookie"
"TTLPropagate"
"MTUBytes"
"IPServiceType"
"MultiPathRoute"
])
(assertValueOneOf "GatewayOnLink" boolValues)
(assertInt "Metric")
(assertValueOneOf "IPv6Preference" ["low" "medium" "high"])
(assertValueOneOf "Scope" ["global" "site" "link" "host" "nowhere"])
(assertValueOneOf "Type" [
"unicast"
"local"
"broadcast"
"anycast"
"multicast"
"blackhole"
"unreachable"
"prohibit"
"throw"
"nat"
"xresolve"
])
(assertValueOneOf "QuickAck" boolValues)
(assertValueOneOf "FastOpenNoCookie" boolValues)
(assertValueOneOf "TTLPropagate" boolValues)
(assertByteFormat "MTUBytes")
(assertValueOneOf "IPServiceType" ["CS6" "CS4"])
];
sectionDHCPv4 = checkUnitConfig "DHCPv4" [
(assertOnlyFields [
"UseDNS"
"RoutesToDNS"
"UseNTP"
"UseSIP"
"UseMTU"
"Anonymize"
"SendHostname"
"UseHostname"
"Hostname"
"UseDomains"
nixos/networkd: add missing UseGateway key in the DHCPv4 section
2024-02-23 16:37:38 +00:00
"UseGateway"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"UseRoutes"
"UseTimezone"
nixos/networkd: add DHCPv4 - IPv6OnlyMode toggle The option was introduced in systemd version 255. https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#IPv6OnlyMode=
2024-09-21 00:08:33 +00:00
"IPv6OnlyMode"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"ClientIdentifier"
"VendorClassIdentifier"
"UserClass"
"MaxAttempts"
"DUIDType"
"DUIDRawData"
"IAID"
"RequestBroadcast"
"RouteMetric"
"RouteTable"
"RouteMTUBytes"
"ListenPort"
"SendRelease"
"SendDecline"
"BlackList"
"RequestOptions"
"SendOption"
nixos/networkd: add new options Systemd 250: > DHCPv4 client support in systemd-networkd learnt a new Label= option > for configuring the address label to apply to configure IPv4 > addresses. > The [IPv6AcceptRA] section of .network files gained support for a new > UseMTU= setting that may be used to control whether to apply the > announced MTU settings to the local interface. > The [DHCPv4] section in .network file gained a new Use6RD= boolean > setting to control whether the DHCPv4 client request and process the > DHCP 6RD option. > The [DHCPv6] section in .network file gained a new setting > UseDelegatedPrefix= to control whether the delegated prefixes will be > propagated to the downstream interfaces. > The [IPv6AcceptRA] section of .network files now understands two new > settings UseGateway=/UseRoutePrefix= for explicitly configuring > whether to use the relevant fields from the IPv6 Router Advertisement > records. > The [RoutingPolicyRule] section of .network file gained a new > SuppressInterfaceGroup= setting. > The IgnoreCarrierLoss= setting in the [Network] section of .network > files now allows a duration to be specified, controlling how long to > wait before reacting to carrier loss. Systemd 246: > systemd-networkd's [DHCPv4] section gained a new setting UseGateway= > which may be used to turn off use of the gateway information provided > by the DHCP lease. A new FallbackLeaseLifetimeSec= setting may be > used to configure how to process leases that lack a lifetime option.
2022-10-08 22:27:52 +00:00
"FallbackLeaseLifetimeSec"
"Label"
"Use6RD"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
(assertValueOneOf "UseDNS" boolValues)
(assertValueOneOf "RoutesToDNS" boolValues)
(assertValueOneOf "UseNTP" boolValues)
(assertValueOneOf "UseSIP" boolValues)
(assertValueOneOf "UseMTU" boolValues)
(assertValueOneOf "Anonymize" boolValues)
(assertValueOneOf "SendHostname" boolValues)
(assertValueOneOf "UseHostname" boolValues)
(assertValueOneOf "UseDomains" (boolValues ++ ["route"]))
nixos/networkd: add missing UseGateway key in the DHCPv4 section
2024-02-23 16:37:38 +00:00
(assertValueOneOf "UseGateway" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "UseRoutes" boolValues)
(assertValueOneOf "UseTimezone" boolValues)
nixos/networkd: add DHCPv4 - IPv6OnlyMode toggle The option was introduced in systemd version 255. https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#IPv6OnlyMode=
2024-09-21 00:08:33 +00:00
(assertValueOneOf "IPv6OnlyMode" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "ClientIdentifier" ["mac" "duid" "duid-only"])
(assertInt "IAID")
(assertValueOneOf "RequestBroadcast" boolValues)
(assertInt "RouteMetric")
(assertInt "RouteTable")
nixos/networkd: use assertRange with 64bits integers
2020-07-09 08:12:22 +00:00
(assertRange "RouteTable" 0 4294967295)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertByteFormat "RouteMTUBytes")
(assertPort "ListenPort")
(assertValueOneOf "SendRelease" boolValues)
(assertValueOneOf "SendDecline" boolValues)
nixos/networkd: add new options Systemd 250: > DHCPv4 client support in systemd-networkd learnt a new Label= option > for configuring the address label to apply to configure IPv4 > addresses. > The [IPv6AcceptRA] section of .network files gained support for a new > UseMTU= setting that may be used to control whether to apply the > announced MTU settings to the local interface. > The [DHCPv4] section in .network file gained a new Use6RD= boolean > setting to control whether the DHCPv4 client request and process the > DHCP 6RD option. > The [DHCPv6] section in .network file gained a new setting > UseDelegatedPrefix= to control whether the delegated prefixes will be > propagated to the downstream interfaces. > The [IPv6AcceptRA] section of .network files now understands two new > settings UseGateway=/UseRoutePrefix= for explicitly configuring > whether to use the relevant fields from the IPv6 Router Advertisement > records. > The [RoutingPolicyRule] section of .network file gained a new > SuppressInterfaceGroup= setting. > The IgnoreCarrierLoss= setting in the [Network] section of .network > files now allows a duration to be specified, controlling how long to > wait before reacting to carrier loss. Systemd 246: > systemd-networkd's [DHCPv4] section gained a new setting UseGateway= > which may be used to turn off use of the gateway information provided > by the DHCP lease. A new FallbackLeaseLifetimeSec= setting may be > used to configure how to process leases that lack a lifetime option.
2022-10-08 22:27:52 +00:00
(assertValueOneOf "FallbackLeaseLifetimeSec" ["forever" "infinity"])
(assertValueOneOf "Use6RD" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
sectionDHCPv6 = checkUnitConfig "DHCPv6" [
(assertOnlyFields [
nixos/networkd: add missing dhcpV6Config options
2021-01-30 10:04:35 +00:00
"UseAddress"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"UseDNS"
"UseNTP"
networkd: add missing option SendHostname and Hostname for dhcpV6Config
2024-10-13 16:44:25 +00:00
"SendHostname"
systemd-networkd: add dhcpv6Config options
2023-08-15 20:23:57 +00:00
"UseHostname"
networkd: add missing option SendHostname and Hostname for dhcpV6Config
2024-10-13 16:44:25 +00:00
"Hostname"
systemd-networkd: add dhcpv6Config options
2023-08-15 20:23:57 +00:00
"UseDomains"
nixos/networkd: add missing dhcpV6Config options
2021-01-30 10:04:35 +00:00
"RouteMetric"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"RapidCommit"
nixos/networkd: add missing dhcpV6Config options
2021-01-30 10:04:35 +00:00
"MUDURL"
"RequestOptions"
"SendVendorOption"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"PrefixDelegationHint"
nixos/networkd: add missing dhcpV6Config options
2021-01-30 10:04:35 +00:00
"WithoutRA"
"SendOption"
"UserClass"
"VendorClass"
nixos/networkd: added IAID, DUIDType and DUIDRawData to DHCPv6 section
2021-09-28 13:33:06 +00:00
"DUIDType"
"DUIDRawData"
"IAID"
nixos/networkd: add new options Systemd 250: > DHCPv4 client support in systemd-networkd learnt a new Label= option > for configuring the address label to apply to configure IPv4 > addresses. > The [IPv6AcceptRA] section of .network files gained support for a new > UseMTU= setting that may be used to control whether to apply the > announced MTU settings to the local interface. > The [DHCPv4] section in .network file gained a new Use6RD= boolean > setting to control whether the DHCPv4 client request and process the > DHCP 6RD option. > The [DHCPv6] section in .network file gained a new setting > UseDelegatedPrefix= to control whether the delegated prefixes will be > propagated to the downstream interfaces. > The [IPv6AcceptRA] section of .network files now understands two new > settings UseGateway=/UseRoutePrefix= for explicitly configuring > whether to use the relevant fields from the IPv6 Router Advertisement > records. > The [RoutingPolicyRule] section of .network file gained a new > SuppressInterfaceGroup= setting. > The IgnoreCarrierLoss= setting in the [Network] section of .network > files now allows a duration to be specified, controlling how long to > wait before reacting to carrier loss. Systemd 246: > systemd-networkd's [DHCPv4] section gained a new setting UseGateway= > which may be used to turn off use of the gateway information provided > by the DHCP lease. A new FallbackLeaseLifetimeSec= setting may be > used to configure how to process leases that lack a lifetime option.
2022-10-08 22:27:52 +00:00
"UseDelegatedPrefix"
systemd-networkd: add dhcpv6Config options
2023-08-15 20:23:57 +00:00
"SendRelease"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
nixos/networkd: add missing dhcpV6Config options
2021-01-30 10:04:35 +00:00
(assertValueOneOf "UseAddress" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "UseDNS" boolValues)
(assertValueOneOf "UseNTP" boolValues)
networkd: add missing option SendHostname and Hostname for dhcpV6Config
2024-10-13 16:44:25 +00:00
(assertValueOneOf "SendHostname" boolValues)
systemd-networkd: add dhcpv6Config options
2023-08-15 20:23:57 +00:00
(assertValueOneOf "UseHostname" boolValues)
(assertValueOneOf "UseDomains" (boolValues ++ ["route"]))
nixos/networkd: add missing dhcpV6Config options
2021-01-30 10:04:35 +00:00
(assertInt "RouteMetric")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "RapidCommit" boolValues)
nixos/networkd: adapt `dhcpV6Config` * Remove `ForceDHCPv6PDOtherInformation=` * Add a missing `WithoutRA=` option Systemd 250: > The ForceDHCPv6PDOtherInformation= setting in the [DHCPv6] section > has been removed. Please use the WithoutRA= and UseDelegatedPrefix= > settings in the [DHCPv6] section and the DHCPv6Client= setting in the > [IPv6AcceptRA] section to control when the DHCPv6 client is started > and how the delegated prefixes are handled by the DHCPv6 client.
2022-10-08 22:14:53 +00:00
(assertValueOneOf "WithoutRA" ["no" "solicit" "information-request"])
nixos/networkd: add missing dhcpV6Config options
2021-01-30 10:04:35 +00:00
(assertRange "SendOption" 1 65536)
nixos/networkd: added IAID, DUIDType and DUIDRawData to DHCPv6 section
2021-09-28 13:33:06 +00:00
(assertInt "IAID")
nixos/networkd: add new options Systemd 250: > DHCPv4 client support in systemd-networkd learnt a new Label= option > for configuring the address label to apply to configure IPv4 > addresses. > The [IPv6AcceptRA] section of .network files gained support for a new > UseMTU= setting that may be used to control whether to apply the > announced MTU settings to the local interface. > The [DHCPv4] section in .network file gained a new Use6RD= boolean > setting to control whether the DHCPv4 client request and process the > DHCP 6RD option. > The [DHCPv6] section in .network file gained a new setting > UseDelegatedPrefix= to control whether the delegated prefixes will be > propagated to the downstream interfaces. > The [IPv6AcceptRA] section of .network files now understands two new > settings UseGateway=/UseRoutePrefix= for explicitly configuring > whether to use the relevant fields from the IPv6 Router Advertisement > records. > The [RoutingPolicyRule] section of .network file gained a new > SuppressInterfaceGroup= setting. > The IgnoreCarrierLoss= setting in the [Network] section of .network > files now allows a duration to be specified, controlling how long to > wait before reacting to carrier loss. Systemd 246: > systemd-networkd's [DHCPv4] section gained a new setting UseGateway= > which may be used to turn off use of the gateway information provided > by the DHCP lease. A new FallbackLeaseLifetimeSec= setting may be > used to configure how to process leases that lack a lifetime option.
2022-10-08 22:27:52 +00:00
(assertValueOneOf "UseDelegatedPrefix" boolValues)
systemd-networkd: add dhcpv6Config options
2023-08-15 20:23:57 +00:00
(assertValueOneOf "SendRelease" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
sectionDHCPPrefixDelegation = checkUnitConfig "DHCPPrefixDelegation" [
nixos/networkd: add dhcpV6PrefixDelegationConfig option networkd gained a new section [DHCPv6PrefixDelegation] which controls delegated prefixes assigned by DHCPv6 client. Added in systemd 246.
2021-01-30 10:24:13 +00:00
(assertOnlyFields [
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
"UplinkInterface"
nixos/networkd: add dhcpV6PrefixDelegationConfig option networkd gained a new section [DHCPv6PrefixDelegation] which controls delegated prefixes assigned by DHCPv6 client. Added in systemd 246.
2021-01-30 10:24:13 +00:00
"SubnetId"
"Announce"
"Assign"
"Token"
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
"ManageTemporaryAddress"
"RouteMetric"
nixos/networkd: add dhcpV6PrefixDelegationConfig option networkd gained a new section [DHCPv6PrefixDelegation] which controls delegated prefixes assigned by DHCPv6 client. Added in systemd 246.
2021-01-30 10:24:13 +00:00
])
(assertValueOneOf "Announce" boolValues)
(assertValueOneOf "Assign" boolValues)
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
(assertValueOneOf "ManageTemporaryAddress" boolValues)
(assertRange "RouteMetric" 0 4294967295)
nixos/networkd: add dhcpV6PrefixDelegationConfig option networkd gained a new section [DHCPv6PrefixDelegation] which controls delegated prefixes assigned by DHCPv6 client. Added in systemd 246.
2021-01-30 10:24:13 +00:00
];
nixos/networkd: add ipv6AcceptRAConfig option Adds `systemd.network.networks.*.ipv6AcceptRAConfig` for networkd's [IPv6AcceptRA] section.
2021-01-30 10:32:07 +00:00
sectionIPv6AcceptRA = checkUnitConfig "IPv6AcceptRA" [
(assertOnlyFields [
"UseDNS"
"UseDomains"
"RouteTable"
"UseAutonomousPrefix"
"UseOnLinkPrefix"
"RouterDenyList"
"RouterAllowList"
"PrefixDenyList"
"PrefixAllowList"
"RouteDenyList"
"RouteAllowList"
"DHCPv6Client"
nixos/networkd: allow RouteMetric for IPv6AcceptRA According to `systemd.network(5)` of systemd v249 this is a valid option. Fixes evaluation of the wildcard network definitions.
2022-04-29 11:55:16 +00:00
"RouteMetric"
nixos/networkd: deprecate `IPv6Token=` > The IPv6Token= section in the [Network] section is deprecated, and >> the [IPv6AcceptRA] section gained the Token= setting for its >> replacement. The [IPv6Prefix] section also gained the Token= setting. >> The Token= setting gained 'eui64' mode to explicitly configure an >> address with the EUI64 algorithm based on the interface MAC address. >> The 'prefixstable' mode can now optionally take a secret key. The >> Token= setting in the [DHCPPrefixDelegation] section now supports all >> algorithms supported by the same settings in the other sections.
2022-10-08 22:46:33 +00:00
"UseMTU"
"UseGateway"
"UseRoutePrefix"
"Token"
nixos/systemd-networkd: add PREF64 related options
2024-06-09 19:15:35 +00:00
"UsePREF64"
nixos/networkd: add ipv6AcceptRAConfig option Adds `systemd.network.networks.*.ipv6AcceptRAConfig` for networkd's [IPv6AcceptRA] section.
2021-01-30 10:32:07 +00:00
])
(assertValueOneOf "UseDNS" boolValues)
(assertValueOneOf "UseDomains" (boolValues ++ ["route"]))
(assertRange "RouteTable" 0 4294967295)
(assertValueOneOf "UseAutonomousPrefix" boolValues)
(assertValueOneOf "UseOnLinkPrefix" boolValues)
(assertValueOneOf "DHCPv6Client" (boolValues ++ ["always"]))
nixos/networkd: add new options Systemd 250: > DHCPv4 client support in systemd-networkd learnt a new Label= option > for configuring the address label to apply to configure IPv4 > addresses. > The [IPv6AcceptRA] section of .network files gained support for a new > UseMTU= setting that may be used to control whether to apply the > announced MTU settings to the local interface. > The [DHCPv4] section in .network file gained a new Use6RD= boolean > setting to control whether the DHCPv4 client request and process the > DHCP 6RD option. > The [DHCPv6] section in .network file gained a new setting > UseDelegatedPrefix= to control whether the delegated prefixes will be > propagated to the downstream interfaces. > The [IPv6AcceptRA] section of .network files now understands two new > settings UseGateway=/UseRoutePrefix= for explicitly configuring > whether to use the relevant fields from the IPv6 Router Advertisement > records. > The [RoutingPolicyRule] section of .network file gained a new > SuppressInterfaceGroup= setting. > The IgnoreCarrierLoss= setting in the [Network] section of .network > files now allows a duration to be specified, controlling how long to > wait before reacting to carrier loss. Systemd 246: > systemd-networkd's [DHCPv4] section gained a new setting UseGateway= > which may be used to turn off use of the gateway information provided > by the DHCP lease. A new FallbackLeaseLifetimeSec= setting may be > used to configure how to process leases that lack a lifetime option.
2022-10-08 22:27:52 +00:00
(assertValueOneOf "UseMTU" boolValues)
(assertValueOneOf "UseGateway" boolValues)
(assertValueOneOf "UseRoutePrefix" boolValues)
nixos/systemd-networkd: add PREF64 related options
2024-06-09 19:15:35 +00:00
(assertValueOneOf "UsePREF64" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
sectionDHCPServer = checkUnitConfig "DHCPServer" [
(assertOnlyFields [
nixos/networkd: add missing options for DHCPServer and IPV6SendRA
2022-08-25 08:35:22 +00:00
"ServerAddress"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"PoolOffset"
"PoolSize"
"DefaultLeaseTimeSec"
"MaxLeaseTimeSec"
nixos/networkd: add missing options for DHCPServer and IPV6SendRA
2022-08-25 08:35:22 +00:00
"UplinkInterface"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"EmitDNS"
"DNS"
"EmitNTP"
"NTP"
"EmitSIP"
"SIP"
nixos/networkd: add missing [DHCPServer] options `systemd.network.networks.*.dhcpServerConfig` did not accept all of the options which are valid for networkd's [DHCPServer] section. See systemd.network(5) of systemd 247 for details.
2021-05-17 16:30:37 +00:00
"EmitPOP3"
"POP3"
"EmitSMTP"
"SMTP"
"EmitLPR"
"LPR"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"EmitRouter"
nixos/networkd: add missing options for DHCPServer and IPV6SendRA
2022-08-25 08:35:22 +00:00
"Router"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"EmitTimezone"
"Timezone"
"SendOption"
nixos/networkd: add missing [DHCPServer] options `systemd.network.networks.*.dhcpServerConfig` did not accept all of the options which are valid for networkd's [DHCPServer] section. See systemd.network(5) of systemd 247 for details.
2021-05-17 16:30:37 +00:00
"SendVendorOption"
nixos/networkd: add missing options for DHCPServer and IPV6SendRA
2022-08-25 08:35:22 +00:00
"BindToInterface"
"RelayTarget"
"RelayAgentCircuitId"
"RelayAgentRemoteId"
nixos/networkd: add DHCPServer PXE boot options Signed-off-by: Matt Layher <mdlayher@gmail.com>
2023-07-21 20:59:21 +00:00
"BootServerAddress"
"BootServerName"
"BootFilename"
nixos/networkd: allow IPv6OnlyPreferredSec in networkd.conf https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#IPv6OnlyPreferredSec= https://datatracker.ietf.org/doc/html/rfc8925
2024-05-18 23:06:36 +00:00
"IPv6OnlyPreferredSec"
nixos/networkd: add dhcpServerConfig.PersistLeases option PersistLeases was added to networkd version 256 (https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#PersistLeases=)
2024-11-02 16:53:02 +00:00
"PersistLeases"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
(assertInt "PoolOffset")
(assertMinimum "PoolOffset" 0)
(assertInt "PoolSize")
(assertMinimum "PoolSize" 0)
(assertValueOneOf "EmitDNS" boolValues)
(assertValueOneOf "EmitNTP" boolValues)
(assertValueOneOf "EmitSIP" boolValues)
nixos/networkd: add missing [DHCPServer] options `systemd.network.networks.*.dhcpServerConfig` did not accept all of the options which are valid for networkd's [DHCPServer] section. See systemd.network(5) of systemd 247 for details.
2021-05-17 16:30:37 +00:00
(assertValueOneOf "EmitPOP3" boolValues)
(assertValueOneOf "EmitSMTP" boolValues)
(assertValueOneOf "EmitLPR" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "EmitRouter" boolValues)
(assertValueOneOf "EmitTimezone" boolValues)
nixos/networkd: add missing options for DHCPServer and IPV6SendRA
2022-08-25 08:35:22 +00:00
(assertValueOneOf "BindToInterface" boolValues)
nixos/networkd: add dhcpServerConfig.PersistLeases option PersistLeases was added to networkd version 256 (https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html#PersistLeases=)
2024-11-02 16:53:02 +00:00
(assertValueOneOf "PersistLeases" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
nixos/networkd: rename ipv6PrefixDelegationConfig option to ipv6SendRAConfig networkd's [IPv6PrefixDelegation] section and IPv6PrefixDelegation= options have been renamed as [IPv6SendRA] and IPv6SendRA= in systemd 247. Throws if the deprecated option ipv6PrefixDelegationConfig is used.
2021-01-30 11:33:14 +00:00
sectionIPv6SendRA = checkUnitConfig "IPv6SendRA" [
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertOnlyFields [
"Managed"
"OtherInformation"
"RouterLifetimeSec"
nixos/networkd: add IPv6SendRA options added in systemd 255
2024-08-19 06:06:21 +00:00
"RetransmitSec"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"RouterPreference"
nixos/networkd: add IPv6SendRA options added in systemd 255
2024-08-19 06:06:21 +00:00
"HopLimit"
nixos/networkd: add missing options for DHCPServer and IPV6SendRA
2022-08-25 08:35:22 +00:00
"UplinkInterface"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
"EmitDNS"
"DNS"
"EmitDomains"
"Domains"
"DNSLifetimeSec"
nixos/networkd: add IPv6SendRA options added in systemd 255
2024-08-19 06:06:21 +00:00
"HomeAgent"
"HomeAgentLifetimeSec"
"HomeAgentPreference"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
(assertValueOneOf "Managed" boolValues)
(assertValueOneOf "OtherInformation" boolValues)
(assertValueOneOf "RouterPreference" ["high" "medium" "low" "normal" "default"])
nixos/networkd: add IPv6SendRA options added in systemd 255
2024-08-19 06:06:21 +00:00
(assertInt "HopLimit")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertValueOneOf "EmitDNS" boolValues)
(assertValueOneOf "EmitDomains" boolValues)
nixos/networkd: add IPv6SendRA options added in systemd 255
2024-08-19 06:06:21 +00:00
(assertValueOneOf "HomeAgent" boolValues)
(assertInt "HomeAgentPreference")
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
nixos/systemd-networkd: add PREF64 related options
2024-06-09 19:15:35 +00:00
sectionIPv6PREF64Prefix = checkUnitConfigWithLegacyKey "ipv6PREF64PrefixConfig" "IPv6PREF64Prefix" [
(assertOnlyFields [
"Prefix"
"LifetimeSec"
])
(assertInt "LifetimeSec")
];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionIPv6Prefix = checkUnitConfigWithLegacyKey "ipv6PrefixConfig" "IPv6Prefix" [
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
(assertOnlyFields [
"AddressAutoconfiguration"
"OnLink"
"Prefix"
"PreferredLifetimeSec"
"ValidLifetimeSec"
systemd-networkd: add option to assign ipv6 prefix
2023-08-15 22:47:51 +00:00
"Assign"
nixos/networkd: deprecate `IPv6Token=` > The IPv6Token= section in the [Network] section is deprecated, and >> the [IPv6AcceptRA] section gained the Token= setting for its >> replacement. The [IPv6Prefix] section also gained the Token= setting. >> The Token= setting gained 'eui64' mode to explicitly configure an >> address with the EUI64 algorithm based on the interface MAC address. >> The 'prefixstable' mode can now optionally take a secret key. The >> Token= setting in the [DHCPPrefixDelegation] section now supports all >> algorithms supported by the same settings in the other sections.
2022-10-08 22:46:33 +00:00
"Token"
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
])
(assertValueOneOf "AddressAutoconfiguration" boolValues)
(assertValueOneOf "OnLink" boolValues)
systemd-networkd: add option to assign ipv6 prefix
2023-08-15 22:47:51 +00:00
(assertValueOneOf "Assign" boolValues)
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionIPv6RoutePrefix = checkUnitConfigWithLegacyKey "ipv6RoutePrefixConfig" "IPv6RoutePrefix" [
nixos/systemd.network: Add `IPv6RoutePrefix` options
2022-07-31 21:11:01 +00:00
(assertOnlyFields [
"Route"
"LifetimeSec"
])
(assertHasField "Route")
(assertInt "LifetimeSec")
];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionDHCPServerStaticLease = checkUnitConfigWithLegacyKey "dhcpServerStaticLeaseConfig" "DHCPServerStaticLease" [
nixos/networkd: add `dhcpServerStaticLeaseConfig` option Add `systemd.network.networks.*.dhcpServerStaticLeaseConfig` to allow for configuring static DHCP leases through the `[DHCPServerStaticLease]` section. See systemd.network(5) of systemd 249 for details. Also adds the NixOS test `systemd-networkd-dhcpserver-static-lease` to test the assignment of static leases.
2021-11-30 08:57:15 +00:00
(assertOnlyFields [
"MACAddress"
"Address"
])
(assertHasField "MACAddress")
(assertHasField "Address")
(assertMacAddress "MACAddress")
];
nixos/networkd: add Bridge options
2023-02-27 23:06:39 +00:00
sectionBridge = checkUnitConfig "Bridge" [
(assertOnlyFields [
"UnicastFlood"
"MulticastFlood"
"MulticastToUnicast"
"NeighborSuppression"
"Learning"
nixos/networkd: fix typoed hairpin option name You can see in https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html that this should be "HairPin" not "Hairpin". Using "Hairpin" results in ``` Oct 25 18:55:03 my-host systemd-networkd[843736]: /etc/systemd/network/10-bridge.network:11: Unknown key name 'Hairpin' in section 'Bridge', ignoring. ```
2023-10-26 01:58:19 +00:00
"HairPin"
nixos/networkd: add Bridge options
2023-02-27 23:06:39 +00:00
"Isolated"
"UseBPDU"
"FastLeave"
"AllowPortToBeRoot"
"ProxyARP"
"ProxyARPWiFi"
"MulticastRouter"
"Cost"
"Priority"
])
(assertValueOneOf "UnicastFlood" boolValues)
(assertValueOneOf "MulticastFlood" boolValues)
(assertValueOneOf "MulticastToUnicast" boolValues)
(assertValueOneOf "NeighborSuppression" boolValues)
(assertValueOneOf "Learning" boolValues)
nixos/networkd: fix typoed hairpin option name You can see in https://www.freedesktop.org/software/systemd/man/latest/systemd.network.html that this should be "HairPin" not "Hairpin". Using "Hairpin" results in ``` Oct 25 18:55:03 my-host systemd-networkd[843736]: /etc/systemd/network/10-bridge.network:11: Unknown key name 'Hairpin' in section 'Bridge', ignoring. ```
2023-10-26 01:58:19 +00:00
(assertValueOneOf "HairPin" boolValues)
nixos/networkd: add Bridge options
2023-02-27 23:06:39 +00:00
(assertValueOneOf "Isolated" boolValues)
(assertValueOneOf "UseBPDU" boolValues)
(assertValueOneOf "FastLeave" boolValues)
(assertValueOneOf "AllowPortToBeRoot" boolValues)
(assertValueOneOf "ProxyARP" boolValues)
(assertValueOneOf "ProxyARPWiFi" boolValues)
(assertValueOneOf "MulticastRouter" [ "no" "query" "permanent" "temporary" ])
(assertInt "Cost")
(assertRange "Cost" 1 65535)
(assertInt "Priority")
(assertRange "Priority" 0 63)
];
nixos/networkd: add BridgeFDB options
2023-02-27 23:06:39 +00:00
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionBridgeFDB = checkUnitConfigWithLegacyKey "bridgeFDBConfig" "BridgeFDB" [
nixos/networkd: add BridgeFDB options
2023-02-27 23:06:39 +00:00
(assertOnlyFields [
"MACAddress"
"Destination"
"VLANId"
"VNI"
"AssociatedWith"
"OutgoingInterface"
])
(assertHasField "MACAddress")
(assertInt "VLANId")
(assertRange "VLANId" 0 4094)
(assertInt "VNI")
(assertRange "VNI" 1 16777215)
(assertValueOneOf "AssociatedWith" [ "use" "self" "master" "router" ])
];
nixos/networkd: add BridgeMDB option
2023-02-27 23:06:39 +00:00
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionBridgeMDB = checkUnitConfigWithLegacyKey "bridgeMDBConfig" "BridgeMDB" [
nixos/networkd: add BridgeMDB option
2023-02-27 23:06:39 +00:00
(assertOnlyFields [
"MulticastGroupAddress"
"VLANId"
])
(assertHasField "MulticastGroupAddress")
(assertInt "VLANId")
(assertRange "VLANId" 0 4094)
];
nixos/networkd: add LLDP options
2023-02-27 23:06:39 +00:00
sectionLLDP = checkUnitConfig "LLDP" [
(assertOnlyFields [
"MUDURL"
])
];
nixos/networkd: add CAN options
2023-02-27 23:06:39 +00:00
sectionCAN = checkUnitConfig "CAN" [
(assertOnlyFields [
"BitRate"
"SamplePoint"
"TimeQuantaNSec"
"PropagationSegment"
"PhaseBufferSegment1"
"PhaseBufferSegment2"
"SyncJumpWidth"
"DataBitRate"
"DataSamplePoint"
"DataTimeQuantaNSec"
"DataPropagationSegment"
"DataPhaseBufferSegment1"
"DataPhaseBufferSegment2"
"DataSyncJumpWidth"
"FDMode"
"FDNonISO"
"RestartSec"
"Termination"
"TripleSampling"
"BusErrorReporting"
"ListenOnly"
"Loopback"
"OneShot"
"PresumeAck"
"ClassicDataLengthCode"
])
(assertInt "TimeQuantaNSec" )
(assertRange "TimeQuantaNSec" 0 4294967295 )
(assertInt "PropagationSegment" )
(assertRange "PropagationSegment" 0 4294967295 )
(assertInt "PhaseBufferSegment1" )
(assertRange "PhaseBufferSegment1" 0 4294967295 )
(assertInt "PhaseBufferSegment2" )
(assertRange "PhaseBufferSegment2" 0 4294967295 )
(assertInt "SyncJumpWidth" )
(assertRange "SyncJumpWidth" 0 4294967295 )
(assertInt "DataTimeQuantaNSec" )
(assertRange "DataTimeQuantaNSec" 0 4294967295 )
(assertInt "DataPropagationSegment" )
(assertRange "DataPropagationSegment" 0 4294967295 )
(assertInt "DataPhaseBufferSegment1" )
(assertRange "DataPhaseBufferSegment1" 0 4294967295 )
(assertInt "DataPhaseBufferSegment2" )
(assertRange "DataPhaseBufferSegment2" 0 4294967295 )
(assertInt "DataSyncJumpWidth" )
(assertRange "DataSyncJumpWidth" 0 4294967295 )
(assertValueOneOf "FDMode" boolValues)
(assertValueOneOf "FDNonISO" boolValues)
(assertValueOneOf "TripleSampling" boolValues)
(assertValueOneOf "BusErrorReporting" boolValues)
(assertValueOneOf "ListenOnly" boolValues)
(assertValueOneOf "Loopback" boolValues)
(assertValueOneOf "OneShot" boolValues)
(assertValueOneOf "PresumeAck" boolValues)
(assertValueOneOf "ClassicDataLengthCode" boolValues)
];
nixos/networkd: add IPoIB options
2023-02-27 23:06:39 +00:00
sectionIPoIB = checkUnitConfig "IPoIB" [
(assertOnlyFields [
"Mode"
"IgnoreUserspaceMulticastGroup"
])
(assertValueOneOf "Mode" [ "datagram" "connected" ])
(assertValueOneOf "IgnoreUserspaceMulticastGroup" boolValues)
];
nixos/networkd: add QDisc options
2023-02-27 23:06:39 +00:00
sectionQDisc = checkUnitConfig "QDisc" [
(assertOnlyFields [
"Parent"
"Handle"
])
(assertValueOneOf "Parent" [ "clsact" "ingress" ])
];
nixos/networkd: add NetworkEmulator options
2023-02-27 23:06:39 +00:00
sectionNetworkEmulator = checkUnitConfig "NetworkEmulator" [
(assertOnlyFields [
"Parent"
"Handle"
"DelaySec"
"DelayJitterSec"
"PacketLimit"
"LossRate"
"DuplicateRate"
])
(assertInt "PacketLimit")
(assertRange "PacketLimit" 0 4294967294)
];
nixos/networkd: add TokenBucketFilter options
2023-02-27 23:06:39 +00:00
sectionTokenBucketFilter = checkUnitConfig "TokenBucketFilter" [
(assertOnlyFields [
"Parent"
"Handle"
"LatencySec"
"LimitBytes"
"BurstBytes"
"Rate"
"MPUBytes"
"PeakRate"
"MTUBytes"
])
];
nixos/networkd: add PIE options
2023-02-27 23:06:39 +00:00
sectionPIE = checkUnitConfig "PIE" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
])
(assertInt "PacketLimit")
(assertRange "PacketLimit" 1 4294967294)
];
nixos/networkd: add FlowQueuePIE options
2023-02-27 23:06:39 +00:00
sectionFlowQueuePIE = checkUnitConfig "FlowQueuePIE" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
])
(assertInt "PacketLimit")
(assertRange "PacketLimit" 1 4294967294)
];
nixos/networkd: add StochasticFairBlue options
2023-02-27 23:06:40 +00:00
sectionStochasticFairBlue = checkUnitConfig "StochasticFairBlue" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
])
(assertInt "PacketLimit")
(assertRange "PacketLimit" 1 4294967294)
];
nixos/networkd: add StochasticFairnessQueueing options
2023-02-27 23:06:40 +00:00
sectionStochasticFairnessQueueing = checkUnitConfig "StochasticFairnessQueueing" [
(assertOnlyFields [
"Parent"
"Handle"
"PerturbPeriodSec"
])
(assertInt "PerturbPeriodSec")
];
nixos/networkd: add PFIFO options
2023-02-27 23:06:40 +00:00
nixos/networkd: add BFIFO options
2023-02-27 23:06:40 +00:00
sectionBFIFO = checkUnitConfig "BFIFO" [
(assertOnlyFields [
"Parent"
"Handle"
"LimitBytes"
])
];
nixos/networkd: add PFIFOHeadDrop options
2023-02-27 23:06:40 +00:00
nixos/networkd: add PFIFO options
2023-02-27 23:06:40 +00:00
sectionPFIFO = checkUnitConfig "PFIFO" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
])
(assertInt "PacketLimit")
(assertRange "PacketLimit" 0 4294967294)
];
nixos/networkd: add PFIFOHeadDrop options
2023-02-27 23:06:40 +00:00
sectionPFIFOHeadDrop = checkUnitConfig "PFIFOHeadDrop" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
])
(assertInt "PacketLimit")
(assertRange "PacketLimit" 0 4294967294)
];
nixos/networkd: add PFIFOFast options
2023-02-27 23:06:40 +00:00
sectionPFIFOFast = checkUnitConfig "PFIFOFast" [
(assertOnlyFields [
"Parent"
"Handle"
])
];
nixos/networkd: add CAKE options
2023-02-27 23:06:40 +00:00
sectionCAKE = checkUnitConfig "CAKE" [
(assertOnlyFields [
"Parent"
"Handle"
"Bandwidth"
"AutoRateIngress"
"OverheadBytes"
"MPUBytes"
"CompensationMode"
"UseRawPacketSize"
"FlowIsolationMode"
"NAT"
"PriorityQueueingPreset"
"FirewallMark"
"Wash"
"SplitGSO"
nixos/networkd: allow configuring AckFilter for CAKE qdisc The CAKE section for systemd.network units allows configuring whether or not redundant ACKs should be dropped. This option corresponds to the respective tc-cake(8) params "ack-filter", "ack-filter-aggressive" or "no-ack-filter". Add support for these values in the `cakeConfig` module so that users can configure it.
2023-10-29 10:27:48 +00:00
"AckFilter"
nixos/networkd: allow configuring RTTSec for CAKE qdisc
2024-02-02 08:23:13 +00:00
"RTTSec"
nixos/networkd: add CAKE options
2023-02-27 23:06:40 +00:00
])
(assertValueOneOf "AutoRateIngress" boolValues)
(assertInt "OverheadBytes")
(assertRange "OverheadBytes" (-64) 256)
(assertInt "MPUBytes")
(assertRange "MPUBytes" 1 256)
(assertValueOneOf "CompensationMode" [ "none" "atm" "ptm" ])
(assertValueOneOf "UseRawPacketSize" boolValues)
(assertValueOneOf "FlowIsolationMode"
[
"none"
"src-host"
"dst-host"
"hosts"
"flows"
"dual-src-host"
"dual-dst-host"
"triple"
])
(assertValueOneOf "NAT" boolValues)
(assertValueOneOf "PriorityQueueingPreset"
[
"besteffort"
"precedence"
"diffserv8"
"diffserv4"
"diffserv3"
])
(assertInt "FirewallMark")
(assertRange "FirewallMark" 1 4294967295)
(assertValueOneOf "Wash" boolValues)
(assertValueOneOf "SplitGSO" boolValues)
nixos/networkd: allow configuring AckFilter for CAKE qdisc The CAKE section for systemd.network units allows configuring whether or not redundant ACKs should be dropped. This option corresponds to the respective tc-cake(8) params "ack-filter", "ack-filter-aggressive" or "no-ack-filter". Add support for these values in the `cakeConfig` module so that users can configure it.
2023-10-29 10:27:48 +00:00
(assertValueOneOf "AckFilter" (boolValues ++ ["aggressive"]))
nixos/networkd: add CAKE options
2023-02-27 23:06:40 +00:00
];
nixos/networkd: add ControlledDelay options
2023-02-27 23:06:40 +00:00
sectionControlledDelay = checkUnitConfig "ControlledDelay" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
"TargetSec"
"IntervalSec"
"ECN"
"CEThresholdSec"
])
(assertValueOneOf "ECN" boolValues)
];
nixos/networkd: add DeficitRoundRobinScheduler options
2023-02-27 23:06:40 +00:00
sectionDeficitRoundRobinScheduler = checkUnitConfig "DeficitRoundRobinScheduler" [
(assertOnlyFields [
"Parent"
"Handle"
])
];
nixos/networkd: add DeficitRoundRobinSchedulerClass options
2023-02-27 23:06:40 +00:00
sectionDeficitRoundRobinSchedulerClass = checkUnitConfig "DeficitRoundRobinSchedulerClass" [
(assertOnlyFields [
"Parent"
"Handle"
"QuantumBytes"
])
];
nixos/networkd: add EnhancedTransmissionSelection options
2023-02-27 23:06:40 +00:00
sectionEnhancedTransmissionSelection = checkUnitConfig "EnhancedTransmissionSelection" [
(assertOnlyFields [
"Parent"
"Handle"
"Bands"
"StrictBands"
"QuantumBytes"
"PriorityMap"
])
(assertInt "Bands")
(assertRange "Bands" 1 16)
(assertInt "StrictBands")
(assertRange "StrictBands" 1 16)
];
nixos/networkd: add GenericRandomEarlyDetection options
2023-02-27 23:06:40 +00:00
sectionGenericRandomEarlyDetection = checkUnitConfig "GenericRandomEarlyDetection" [
(assertOnlyFields [
"Parent"
"Handle"
"VirtualQueues"
"DefaultVirtualQueue"
"GenericRIO"
])
(assertInt "VirtualQueues")
(assertRange "VirtualQueues" 1 16)
(assertInt "DefaultVirtualQueue")
(assertRange "DefaultVirtualQueue" 1 16)
(assertValueOneOf "GenericRIO" boolValues)
];
nixos/networkd: add FairQueueingControlledDelay options
2023-02-27 23:06:40 +00:00
sectionFairQueueingControlledDelay = checkUnitConfig "FairQueueingControlledDelay" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
"MemoryLimitBytes"
"Flows"
"TargetSec"
"IntervalSec"
"QuantumBytes"
"ECN"
"CEThresholdSec"
])
(assertInt "PacketLimit")
(assertInt "Flows")
(assertValueOneOf "ECN" boolValues)
];
nixos/networkd: add FairQueueing options
2023-02-27 23:06:40 +00:00
sectionFairQueueing = checkUnitConfig "FairQueueing" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
"FlowLimit"
"QuantumBytes"
"InitualQuantumBytes"
"MaximumRate"
"Buckets"
"OrphanMask"
"Pacing"
"CEThresholdSec"
])
(assertInt "PacketLimit")
(assertInt "FlowLimit")
(assertInt "OrphanMask")
(assertValueOneOf "Pacing" boolValues)
];
nixos/networkd: add TrivialLinkEqualizer options
2023-02-27 23:06:40 +00:00
sectionTrivialLinkEqualizer = checkUnitConfig "TrivialLinkEqualizer" [
(assertOnlyFields [
"Parent"
"Handle"
"Id"
])
];
nixos/networkd: add HierarchyTokenBucket options
2023-02-27 23:06:41 +00:00
sectionHierarchyTokenBucket = checkUnitConfig "HierarchyTokenBucket" [
(assertOnlyFields [
"Parent"
"Handle"
"DefaultClass"
"RateToQuantum"
])
(assertInt "RateToQuantum")
];
nixos/networkd: add HierarchyTokenBucketClass options
2023-02-27 23:06:41 +00:00
sectionHierarchyTokenBucketClass = checkUnitConfig "HierarchyTokenBucketClass" [
(assertOnlyFields [
"Parent"
"ClassId"
"Priority"
"QuantumBytes"
"MTUBytes"
"OverheadBytes"
"Rate"
"CeilRate"
"BufferBytes"
"CeilBufferBytes"
])
];
nixos/networkd: add HeavyHitterFilter options
2023-02-27 23:06:41 +00:00
sectionHeavyHitterFilter = checkUnitConfig "HeavyHitterFilter" [
(assertOnlyFields [
"Parent"
"Handle"
"PacketLimit"
])
(assertInt "PacketLimit")
(assertRange "PacketLimit" 0 4294967294)
];
nixos/networkd: add QuickFairQueueing options
2023-02-27 23:06:41 +00:00
sectionQuickFairQueueing = checkUnitConfig "QuickFairQueueing" [
(assertOnlyFields [
"Parent"
"Handle"
])
];
nixos/networkd: add QuickFairQueueingClass options
2023-02-27 23:06:41 +00:00
sectionQuickFairQueueingClass = checkUnitConfig "QuickFairQueueingClass" [
(assertOnlyFields [
"Parent"
"ClassId"
"Weight"
"MaxPacketBytes"
])
(assertInt "Weight")
(assertRange "Weight" 1 1023)
];
nixos/networkd: add BridgeVLAN options
2023-02-27 23:06:41 +00:00
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
sectionBridgeVLAN = checkUnitConfigWithLegacyKey "bridgeVLANConfig" "BridgeVLAN" [
nixos/networkd: add BridgeVLAN options
2023-02-27 23:06:41 +00:00
(assertOnlyFields [
"VLAN"
"EgressUntagged"
"PVID"
])
(assertInt "PVID")
(assertRange "PVID" 0 4094)
];
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
};
};
nixos/systemd-networkd: allow [Link] section in .network files
2017-07-27 17:49:56 +00:00
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
commonNetworkOptions = {
enable = mkOption {
networkd: Fix disabled networkd units. In f8dbe5f, the default value for networking unit "enabled" option suddenly flipped to false. I have no idea of whether this happened by accident, but I'm setting it to true again, because it essentially breaks systemd networking support and we have systemd.network.enable to have a "turn the world off" switch. And of course, because the mentioned commit obviously wasn't done with even a run of the simplest run of one of the network VM tests, we now get an evaluation error if we switch useNetworkd to true. Fixes the core issue of #7505. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2015-04-30 04:20:54 +00:00
default = true;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
type = types.bool;
description = ''
Whether to manage network configuration using {command}`systemd-network`.
nixos/networkd: doc activation of systemd.networkd
2022-04-08 13:06:20 +00:00
This also enables {option}`systemd.networkd.enable`.
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
'';
};
matchConfig = mkOption {
default = {};
example = { Name = "eth0"; };
type = types.attrsOf unitOption;
description = ''
Each attribute in this set specifies an option in the
`[Match]` section of the unit. See
{manpage}`systemd.link(5)`
{manpage}`systemd.netdev(5)`
{manpage}`systemd.network(5)`
for details.
'';
};
networkd: add extraConfig to all units networkd options are always correct or up to date. This option allows to by pass type checking. It is also easier to write because examples can be just copy and paste from manpages.
2016-12-17 11:03:40 +00:00
extraConfig = mkOption {
default = "";
type = types.lines;
description = "Extra configuration append to unit";
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
};
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
networkdOptions = {
networkConfig = mkOption {
default = {};
example = { SpeedMeter = true; ManageForeignRoutingPolicyRules = false; };
type = types.addCheck (types.attrsOf unitOption) check.global.sectionNetwork;
description = ''
Each attribute in this set specifies an option in the
`[Network]` section of the networkd config.
See {manpage}`networkd.conf(5)` for details.
'';
};
dhcpV4Config = mkOption {
default = {};
example = { DUIDType = "vendor"; };
type = types.addCheck (types.attrsOf unitOption) check.global.sectionDHCPv4;
description = ''
Each attribute in this set specifies an option in the
`[DHCPv4]` section of the networkd config.
See {manpage}`networkd.conf(5)` for details.
'';
};
dhcpV6Config = mkOption {
default = {};
example = { DUIDType = "vendor"; };
type = types.addCheck (types.attrsOf unitOption) check.global.sectionDHCPv6;
description = ''
Each attribute in this set specifies an option in the
`[DHCPv6]` section of the networkd config.
See {manpage}`networkd.conf(5)` for details.
'';
};
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
linkOptions = commonNetworkOptions // {
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
# overwrite enable option from above
enable = mkOption {
default = true;
type = types.bool;
description = ''
Whether to enable this .link unit. It's handled by udev no matter if {command}`systemd-networkd` is enabled or not
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
linkConfig = mkOption {
default = {};
example = { MACAddress = "00:ff:ee:aa:cc:dd"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.link.sectionLink;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Link]` section of the unit. See
{manpage}`systemd.link(5)` for details.
'';
};
};
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
mkSubsectionType = oldKey: checkF:
let
type = types.addCheck (types.attrsOf unitOption) checkF;
in type // {
merge = loc: defs:
let
final = type.merge loc defs;
in
if final?${oldKey}
then warn
"Using '${oldKey}' is deprecated! Move all attributes inside one level up and remove it."
final.${oldKey}
else
final;
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
netdevOptions = commonNetworkOptions // {
netdevConfig = mkOption {
example = { Name = "mybridge"; Kind = "bridge"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionNetdev;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Netdev]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
nixos/networkd: add [Bridge] section to netdev conf This setting was missing from netdev. This commit additionally adds a test using the new section, ensuring that STP can be enabled.
2024-04-11 07:56:18 +00:00
bridgeConfig = mkOption {
default = {};
example = { STP = true; };
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionBridge;
description = ''
Each attribute in this set specifies an option in the
`[Bridge]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
vlanConfig = mkOption {
default = {};
nixos/networkd: fix systemd.network.netdevs.<name>.vlanConfig.Id example This is passed as integer, not string. Closes https://github.com/NixOS/nixpkgs/issues/91172.
2020-07-08 18:43:17 +00:00
example = { Id = 4; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionVLAN;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[VLAN]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
nixos/networkd: add [IPVLAN] and [IPVTAP] configuration options to systemd.netdev files [IPVLAN](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVLAN%5D%20Section%20Options) [IPVTAP](https://www.freedesktop.org/software/systemd/man/latest/systemd.netdev.html#%5BIPVTAP%5D%20Section%20Options)
2023-11-17 21:08:18 +00:00
ipvlanConfig = mkOption {
default = {};
example = { Mode = "L2"; Flags = "private"; };
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionIPVLAN;
description = ''
Each attribute in this set specifies an option in the `[IPVLAN]` section of the unit.
See {manpage}`systemd.netdev(5)` for details.
'';
};
ipvtapConfig = mkOption {
default = {};
example = { Mode = "L3"; Flags = "vepa"; };
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionIPVTAP;
description = ''
Each attribute in this set specifies an option in the `[IPVTAP]` section of the unit.
See {manpage}`systemd.netdev(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
macvlanConfig = mkOption {
default = {};
example = { Mode = "private"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionMACVLAN;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[MACVLAN]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
vxlanConfig = mkOption {
default = {};
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionVXLAN;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[VXLAN]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
tunnelConfig = mkOption {
default = {};
example = { Remote = "192.168.1.1"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionTunnel;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Tunnel]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
nixos/networking: add foo-over-udp endpoint support allows configuration of foo-over-udp decapsulation endpoints. sadly networkd seems to lack the features necessary to support local and peer address configuration, so those are only supported when using scripted configuration.
2021-08-11 09:02:47 +00:00
fooOverUDPConfig = mkOption {
default = { };
example = { Port = 9001; };
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionFooOverUDP;
description = ''
Each attribute in this set specifies an option in the
`[FooOverUDP]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
peerConfig = mkOption {
default = {};
example = { Name = "veth2"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionPeer;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Peer]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
tunConfig = mkOption {
default = {};
example = { User = "openvpn"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionTun;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Tun]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
tapConfig = mkOption {
default = {};
example = { User = "openvpn"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionTap;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Tap]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
nixos/networkd: add L2TP options
2023-02-27 23:06:39 +00:00
l2tpConfig = mkOption {
default = {};
example = {
TunnelId = 10;
PeerTunnelId = 12;
Local = "static";
Remote = "192.168.30.101";
EncapsulationType = "ip";
};
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionL2TP;
description = ''
Each attribute in this set specifies an option in the
`[L2TP]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
l2tpSessions = mkOption {
default = [];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ {
nixos/networkd: add L2TP options
2023-02-27 23:06:39 +00:00
SessionId = 25;
PeerSessionId = 26;
Name = "l2tp-sess";
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
}];
type = types.listOf (mkSubsectionType "l2tpSessionConfig" check.netdev.sectionL2TPSession);
nixos/networkd: add L2TP options
2023-02-27 23:06:39 +00:00
description = ''
Each item in this array specifies an option in the
`[L2TPSession]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
wireguardConfig = mkOption {
default = {};
example = {
PrivateKeyFile = "/etc/wireguard/secret.key";
ListenPort = 51820;
nixos/doc: clean up defaults and examples
2021-10-03 16:06:03 +00:00
FirewallMark = 42;
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
};
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionWireGuard;
description = ''
Each attribute in this set specifies an option in the
`[WireGuard]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
Use `PrivateKeyFile` instead of
`PrivateKey`: the nix store is
world-readable.
'';
};
wireguardPeers = mkOption {
default = [];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ {
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
Endpoint = "192.168.1.1:51820";
PublicKey = "27s0OvaBBdHoJYkH9osZpjpgSOVNw+RaKfboT/Sfq0g=";
PresharedKeyFile = "/etc/wireguard/psk.key";
AllowedIPs = [ "10.0.0.1/32" ];
PersistentKeepalive = 15;
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
} ];
type = types.listOf (mkSubsectionType "wireguardPeerConfig" check.netdev.sectionWireGuardPeer);
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
description = ''
Each item in this array specifies an option in the
`[WireGuardPeer]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
Use `PresharedKeyFile` instead of
`PresharedKey`: the nix store is
world-readable.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
bondConfig = mkOption {
default = {};
example = { Mode = "802.3ad"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionBond;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Bond]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
systemd-networkd: add configuration for XFRM interfaces
2020-01-14 09:37:52 +00:00
xfrmConfig = mkOption {
default = {};
example = { InterfaceId = 1; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionXfrm;
systemd-networkd: add configuration for XFRM interfaces
2020-01-14 09:37:52 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Xfrm]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
vrfConfig = mkOption {
default = {};
example = { Table = 2342; };
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionVRF;
description = ''
Each attribute in this set specifies an option in the
`[VRF]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
A detailed explanation about how VRFs work can be found in the
[kernel docs](https://www.kernel.org/doc/Documentation/networking/vrf.txt).
'';
};
systemd.network.netdev: Add support for WLAN devices These are virtual interface, where one physical wifi adapter can have more than one interface. See https://systemd.network/systemd.netdev.html#%5BWLAN%5D%20Section%20Options and https://github.com/systemd/systemd/commit/dedf2d0054eb3150697b1540bf9733cba9e881fd
2023-10-16 22:04:44 +00:00
wlanConfig = mkOption {
default = {};
example = { PhysicalDevice = 0; Type = "station"; };
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionWLAN;
description = ''
Each attribute in this set specifies an option in the `[WLAN]` section of the unit.
See {manpage}`systemd.netdev(5)` for details.
'';
};
nixos/networkd: add BatmanAdvanced options (#145963) Since systemd v248 networkd supports BatmanAdvanced. This adds the according config options to the networkd-module
2021-11-16 22:41:17 +00:00
batmanAdvancedConfig = mkOption {
default = {};
example = {
GatewayMode = "server";
RoutingAlgorithm = "batman-v";
};
type = types.addCheck (types.attrsOf unitOption) check.netdev.sectionBatmanAdvanced;
description = ''
Each attribute in this set specifies an option in the
`[BatmanAdvanced]` section of the unit. See
{manpage}`systemd.netdev(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
};
networkOptions = commonNetworkOptions // {
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
linkConfig = mkOption {
default = {};
example = { Unmanaged = true; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionLink;
description = ''
Each attribute in this set specifies an option in the
`[Link]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
networkConfig = mkOption {
default = {};
example = { Description = "My Network"; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.network.sectionNetwork;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
`[Network]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: rename the networkd dhcpConfig option to dhcpV4Config This follows upstreams change in documentation. While the `[DHCP]` section might still work it is undocumented and we should probably not be using it anymore. Users can just upgrade to the new option without much hassle. I had to create a bit of custom module deprecation code since the usual approach doesn't support wildcards in the path.
2020-01-08 19:18:26 +00:00
# systemd.network.networks.*.dhcpConfig has been deprecated in favor of ….dhcpV4Config
# Produce a nice warning message so users know it is gone.
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
dhcpConfig = mkOption {
nixos/networkd: rename the networkd dhcpConfig option to dhcpV4Config This follows upstreams change in documentation. While the `[DHCP]` section might still work it is undocumented and we should probably not be using it anymore. Users can just upgrade to the new option without much hassle. I had to create a bit of custom module deprecation code since the usual approach doesn't support wildcards in the path.
2020-01-08 19:18:26 +00:00
visible = false;
apply = _: throw "The option `systemd.network.networks.*.dhcpConfig` can no longer be used since it's been removed. Please use `systemd.network.networks.*.dhcpV4Config` instead.";
};
dhcpV4Config = mkOption {
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
default = {};
example = { UseDNS = true; UseRoutes = true; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.network.sectionDHCPv4;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
Each attribute in this set specifies an option in the
nixos/networkd: rename the networkd dhcpConfig option to dhcpV4Config This follows upstreams change in documentation. While the `[DHCP]` section might still work it is undocumented and we should probably not be using it anymore. Users can just upgrade to the new option without much hassle. I had to create a bit of custom module deprecation code since the usual approach doesn't support wildcards in the path.
2020-01-08 19:18:26 +00:00
`[DHCPv4]` section of the unit. See
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: introduce the DHCPv6 network section eqivalent You can now specify option for the `[DHCPv6]` section with `systemd.network.<name>.dhcpV6Config.…`. Previously you could only use the combined legacy DHCP configuration.
2020-01-08 19:15:09 +00:00
dhcpV6Config = mkOption {
default = {};
nixos/doc: clean up defaults and examples
2021-10-03 16:06:03 +00:00
example = { UseDNS = true; };
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
type = types.addCheck (types.attrsOf unitOption) check.network.sectionDHCPv6;
nixos/networkd: introduce the DHCPv6 network section eqivalent You can now specify option for the `[DHCPv6]` section with `systemd.network.<name>.dhcpV6Config.…`. Previously you could only use the combined legacy DHCP configuration.
2020-01-08 19:15:09 +00:00
description = ''
Each attribute in this set specifies an option in the
`[DHCPv6]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add dhcpV6PrefixDelegationConfig option networkd gained a new section [DHCPv6PrefixDelegation] which controls delegated prefixes assigned by DHCPv6 client. Added in systemd 246.
2021-01-30 10:24:13 +00:00
dhcpV6PrefixDelegationConfig = mkOption {
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
visible = false;
apply = _: throw "The option `systemd.network.networks.<name>.dhcpV6PrefixDelegationConfig` has been renamed to `systemd.network.networks.<name>.dhcpPrefixDelegationConfig`.";
};
dhcpPrefixDelegationConfig = mkOption {
nixos/networkd: add dhcpV6PrefixDelegationConfig option networkd gained a new section [DHCPv6PrefixDelegation] which controls delegated prefixes assigned by DHCPv6 client. Added in systemd 246.
2021-01-30 10:24:13 +00:00
default = {};
example = { SubnetId = "auto"; Announce = true; };
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
type = types.addCheck (types.attrsOf unitOption) check.network.sectionDHCPPrefixDelegation;
nixos/networkd: add dhcpV6PrefixDelegationConfig option networkd gained a new section [DHCPv6PrefixDelegation] which controls delegated prefixes assigned by DHCPv6 client. Added in systemd 246.
2021-01-30 10:24:13 +00:00
description = ''
Each attribute in this set specifies an option in the
nixos/networkd: `DHCPv6PrefixDelegation` -> `DHCPPrefixDelegation` Adapt to changes introduced in Systemd 250: > The [DHCPv6PrefixDelegation] section in .network file is renamed to > [DHCPPrefixDelegation], as now the prefix delegation is also > supported with DHCPv4 protocol by enabling the Use6RD= setting. Replaces the `dhcpV6PrefixDelegationConfig` with `dhcpPrefixDelegationConfig` and throws an error if the old option is used. Also adapt the respective IPv6 prefix delegation test.
2022-10-08 22:00:18 +00:00
`[DHCPPrefixDelegation]` section of the unit. See
nixos/networkd: add dhcpV6PrefixDelegationConfig option networkd gained a new section [DHCPv6PrefixDelegation] which controls delegated prefixes assigned by DHCPv6 client. Added in systemd 246.
2021-01-30 10:24:13 +00:00
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add ipv6AcceptRAConfig option Adds `systemd.network.networks.*.ipv6AcceptRAConfig` for networkd's [IPv6AcceptRA] section.
2021-01-30 10:32:07 +00:00
ipv6AcceptRAConfig = mkOption {
default = {};
example = { UseDNS = true; DHCPv6Client = "always"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionIPv6AcceptRA;
description = ''
Each attribute in this set specifies an option in the
`[IPv6AcceptRA]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
dhcpServerConfig = mkOption {
nixos/networkd: add ipv6PrefixDelegationConfig to networkd
2020-03-07 13:44:46 +00:00
default = {};
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
example = { PoolOffset = 50; EmitDNS = false; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionDHCPServer;
nixos/networkd: add ipv6PrefixDelegationConfig to networkd
2020-03-07 13:44:46 +00:00
description = ''
Each attribute in this set specifies an option in the
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
`[DHCPServer]` section of the unit. See
nixos/networkd: add ipv6Prefix
2020-03-07 14:06:58 +00:00
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: rename ipv6PrefixDelegationConfig option to ipv6SendRAConfig networkd's [IPv6PrefixDelegation] section and IPv6PrefixDelegation= options have been renamed as [IPv6SendRA] and IPv6SendRA= in systemd 247. Throws if the deprecated option ipv6PrefixDelegationConfig is used.
2021-01-30 11:33:14 +00:00
# systemd.network.networks.*.ipv6PrefixDelegationConfig has been deprecated
# in 247 in favor of systemd.network.networks.*.ipv6SendRAConfig.
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
ipv6PrefixDelegationConfig = mkOption {
nixos/networkd: rename ipv6PrefixDelegationConfig option to ipv6SendRAConfig networkd's [IPv6PrefixDelegation] section and IPv6PrefixDelegation= options have been renamed as [IPv6SendRA] and IPv6SendRA= in systemd 247. Throws if the deprecated option ipv6PrefixDelegationConfig is used.
2021-01-30 11:33:14 +00:00
visible = false;
apply = _: throw "The option `systemd.network.networks.*.ipv6PrefixDelegationConfig` has been replaced by `systemd.network.networks.*.ipv6SendRAConfig`.";
};
ipv6SendRAConfig = mkOption {
networkd: add DHCPServer config section
2015-12-23 05:04:39 +00:00
default = {};
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
example = { EmitDNS = true; Managed = true; OtherInformation = true; };
nixos/networkd: rename ipv6PrefixDelegationConfig option to ipv6SendRAConfig networkd's [IPv6PrefixDelegation] section and IPv6PrefixDelegation= options have been renamed as [IPv6SendRA] and IPv6SendRA= in systemd 247. Throws if the deprecated option ipv6PrefixDelegationConfig is used.
2021-01-30 11:33:14 +00:00
type = types.addCheck (types.attrsOf unitOption) check.network.sectionIPv6SendRA;
networkd: add DHCPServer config section
2015-12-23 05:04:39 +00:00
description = ''
Each attribute in this set specifies an option in the
nixos/networkd: rename ipv6PrefixDelegationConfig option to ipv6SendRAConfig networkd's [IPv6PrefixDelegation] section and IPv6PrefixDelegation= options have been renamed as [IPv6SendRA] and IPv6SendRA= in systemd 247. Throws if the deprecated option ipv6PrefixDelegationConfig is used.
2021-01-30 11:33:14 +00:00
`[IPv6SendRA]` section of the unit. See
networkd: add DHCPServer config section
2015-12-23 05:04:39 +00:00
{manpage}`systemd.network(5)` for details.
'';
};
nixos/systemd-networkd: add PREF64 related options
2024-06-09 19:15:35 +00:00
ipv6PREF64Prefixes = mkOption {
default = [];
example = [ { Prefix = "64:ff9b::/96"; } ];
type = types.listOf (mkSubsectionType "ipv6PREF64PrefixConfig" check.network.sectionIPv6PREF64Prefix);
description = ''
A list of IPv6PREF64Prefix sections to be added to the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add `dhcpServerStaticLeaseConfig` option Add `systemd.network.networks.*.dhcpServerStaticLeaseConfig` to allow for configuring static DHCP leases through the `[DHCPServerStaticLease]` section. See systemd.network(5) of systemd 249 for details. Also adds the NixOS test `systemd-networkd-dhcpserver-static-lease` to test the assignment of static leases.
2021-11-30 08:57:15 +00:00
dhcpServerStaticLeases = mkOption {
default = [];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { MACAddress = "65:43:4a:5b:d8:5f"; Address = "192.168.1.42"; } ];
type = types.listOf (mkSubsectionType "dhcpServerStaticLeaseConfig" check.network.sectionDHCPServerStaticLease);
nixos/networkd: add `dhcpServerStaticLeaseConfig` option Add `systemd.network.networks.*.dhcpServerStaticLeaseConfig` to allow for configuring static DHCP leases through the `[DHCPServerStaticLease]` section. See systemd.network(5) of systemd 249 for details. Also adds the NixOS test `systemd-networkd-dhcpserver-static-lease` to test the assignment of static leases.
2021-11-30 08:57:15 +00:00
description = ''
A list of DHCPServerStaticLease sections to be added to the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
ipv6Prefixes = mkOption {
default = [];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { AddressAutoconfiguration = true; OnLink = true; } ];
type = types.listOf (mkSubsectionType "ipv6PrefixConfig" check.network.sectionIPv6Prefix);
nixos/systemd-networkd: allow [Link] section in .network files
2017-07-27 17:49:56 +00:00
description = ''
nixos/networkd: reoder code to match networkd documentation
2020-07-01 16:05:32 +00:00
A list of ipv6Prefix sections to be added to the unit. See
nixos/systemd-networkd: allow [Link] section in .network files
2017-07-27 17:49:56 +00:00
{manpage}`systemd.network(5)` for details.
'';
};
nixos/systemd.network: Add `IPv6RoutePrefix` options
2022-07-31 21:11:01 +00:00
ipv6RoutePrefixes = mkOption {
default = [];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { Route = "fd00::/64"; LifetimeSec = 3600; } ];
type = types.listOf (mkSubsectionType "ipv6RoutePrefixConfig" check.network.sectionIPv6RoutePrefix);
nixos/*: fix docbook deprecation notices mostly no rendering changes except in buildkite, which used markdown where docbook was expected without marking up its markdown.
2022-09-01 17:44:36 +00:00
description = ''
nixos/systemd.network: Add `IPv6RoutePrefix` options
2022-07-31 21:11:01 +00:00
A list of ipv6RoutePrefix sections to be added to the unit. See
nixos/*: fix docbook deprecation notices mostly no rendering changes except in buildkite, which used markdown where docbook was expected without marking up its markdown.
2022-09-01 17:44:36 +00:00
{manpage}`systemd.network(5)` for details.
nixos/systemd.network: Add `IPv6RoutePrefix` options
2022-07-31 21:11:01 +00:00
'';
};
nixos/networkd: add Bridge options
2023-02-27 23:06:39 +00:00
bridgeConfig = mkOption {
default = {};
example = { MulticastFlood = false; Cost = 20; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionBridge;
description = ''
Each attribute in this set specifies an option in the
`[Bridge]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add BridgeFDB options
2023-02-27 23:06:39 +00:00
bridgeFDBs = mkOption {
default = [];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { MACAddress = "90:e2:ba:43:fc:71"; Destination = "192.168.100.4"; VNI = 3600; } ];
type = types.listOf (mkSubsectionType "bridgeFDBConfig" check.network.sectionBridgeFDB);
nixos/networkd: add BridgeFDB options
2023-02-27 23:06:39 +00:00
description = ''
A list of BridgeFDB sections to be added to the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add BridgeMDB option
2023-02-27 23:06:39 +00:00
bridgeMDBs = mkOption {
default = [];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { MulticastGroupAddress = "ff02::1:2:3:4"; VLANId = 10; } ];
type = types.listOf (mkSubsectionType "bridgeMDBConfig" check.network.sectionBridgeMDB);
nixos/networkd: add BridgeMDB option
2023-02-27 23:06:39 +00:00
description = ''
A list of BridgeMDB sections to be added to the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add LLDP options
2023-02-27 23:06:39 +00:00
lldpConfig = mkOption {
default = {};
example = { MUDURL = "https://things.example.org/product_abc123/v5"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionLLDP;
description = ''
Each attribute in this set specifies an option in the
`[LLDP]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add CAN options
2023-02-27 23:06:39 +00:00
canConfig = mkOption {
default = {};
example = { };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionCAN;
description = ''
Each attribute in this set specifies an option in the
`[CAN]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add IPoIB options
2023-02-27 23:06:39 +00:00
ipoIBConfig = mkOption {
default = {};
example = { };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionIPoIB;
description = ''
Each attribute in this set specifies an option in the
`[IPoIB]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add QDisc options
2023-02-27 23:06:39 +00:00
qdiscConfig = mkOption {
default = {};
example = { Parent = "ingress"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionQDisc;
description = ''
Each attribute in this set specifies an option in the
`[QDisc]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add NetworkEmulator options
2023-02-27 23:06:39 +00:00
networkEmulatorConfig = mkOption {
default = {};
example = { Parent = "ingress"; DelaySec = "20msec"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionNetworkEmulator;
description = ''
Each attribute in this set specifies an option in the
`[NetworkEmulator]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add TokenBucketFilter options
2023-02-27 23:06:39 +00:00
tokenBucketFilterConfig = mkOption {
default = {};
example = { Parent = "ingress"; Rate = "100k"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionTokenBucketFilter;
description = ''
Each attribute in this set specifies an option in the
`[TokenBucketFilter]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add PIE options
2023-02-27 23:06:39 +00:00
pieConfig = mkOption {
default = {};
example = { Parent = "ingress"; PacketLimit = "3847"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionPIE;
description = ''
Each attribute in this set specifies an option in the
`[PIE]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add FlowQueuePIE options
2023-02-27 23:06:39 +00:00
flowQueuePIEConfig = mkOption {
default = {};
example = { Parent = "ingress"; PacketLimit = "3847"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionFlowQueuePIE;
description = ''
Each attribute in this set specifies an option in the
`[FlowQueuePIE]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add StochasticFairBlue options
2023-02-27 23:06:40 +00:00
stochasticFairBlueConfig = mkOption {
default = {};
example = { Parent = "ingress"; PacketLimit = "3847"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionStochasticFairBlue;
description = ''
Each attribute in this set specifies an option in the
`[StochasticFairBlue]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add StochasticFairnessQueueing options
2023-02-27 23:06:40 +00:00
stochasticFairnessQueueingConfig = mkOption {
default = {};
example = { Parent = "ingress"; PerturbPeriodSec = "30"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionStochasticFairnessQueueing;
description = ''
Each attribute in this set specifies an option in the
`[StochasticFairnessQueueing]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add BFIFO options
2023-02-27 23:06:40 +00:00
bfifoConfig = mkOption {
default = {};
example = { Parent = "ingress"; LimitBytes = "20K"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionBFIFO;
description = ''
Each attribute in this set specifies an option in the
`[BFIFO]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add PFIFO options
2023-02-27 23:06:40 +00:00
pfifoConfig = mkOption {
default = {};
example = { Parent = "ingress"; PacketLimit = "300"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionPFIFO;
description = ''
Each attribute in this set specifies an option in the
`[PFIFO]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add PFIFOHeadDrop options
2023-02-27 23:06:40 +00:00
pfifoHeadDropConfig = mkOption {
default = {};
example = { Parent = "ingress"; PacketLimit = "300"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionPFIFOHeadDrop;
description = ''
Each attribute in this set specifies an option in the
`[PFIFOHeadDrop]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add PFIFOFast options
2023-02-27 23:06:40 +00:00
pfifoFastConfig = mkOption {
default = {};
example = { Parent = "ingress"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionPFIFOFast;
description = ''
Each attribute in this set specifies an option in the
`[PFIFOFast]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add CAKE options
2023-02-27 23:06:40 +00:00
cakeConfig = mkOption {
default = {};
example = { Bandwidth = "40M"; OverheadBytes = 8; CompensationMode = "ptm"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionCAKE;
description = ''
Each attribute in this set specifies an option in the
`[CAKE]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add ControlledDelay options
2023-02-27 23:06:40 +00:00
controlledDelayConfig = mkOption {
default = {};
example = { Parent = "ingress"; TargetSec = "20msec"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionControlledDelay;
description = ''
Each attribute in this set specifies an option in the
`[ControlledDelay]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add DeficitRoundRobinScheduler options
2023-02-27 23:06:40 +00:00
deficitRoundRobinSchedulerConfig = mkOption {
default = {};
example = { Parent = "root"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionDeficitRoundRobinScheduler;
description = ''
Each attribute in this set specifies an option in the
`[DeficitRoundRobinScheduler]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add DeficitRoundRobinSchedulerClass options
2023-02-27 23:06:40 +00:00
deficitRoundRobinSchedulerClassConfig = mkOption {
default = {};
example = { Parent = "root"; QuantumBytes = "300k"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionDeficitRoundRobinSchedulerClass;
description = ''
Each attribute in this set specifies an option in the
`[DeficitRoundRobinSchedulerClass]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add EnhancedTransmissionSelection options
2023-02-27 23:06:40 +00:00
enhancedTransmissionSelectionConfig = mkOption {
default = {};
example = { Parent = "root"; QuantumBytes = "300k"; Bands = 3; PriorityMap = "100 200 300"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionEnhancedTransmissionSelection;
description = ''
Each attribute in this set specifies an option in the
`[EnhancedTransmissionSelection]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add GenericRandomEarlyDetection options
2023-02-27 23:06:40 +00:00
genericRandomEarlyDetectionConfig = mkOption {
default = {};
example = { Parent = "root"; VirtualQueues = 5; DefaultVirtualQueue = 3; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionGenericRandomEarlyDetection;
description = ''
Each attribute in this set specifies an option in the
`[GenericRandomEarlyDetection]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add FairQueueingControlledDelay options
2023-02-27 23:06:40 +00:00
fairQueueingControlledDelayConfig = mkOption {
default = {};
example = { Parent = "root"; Flows = 5; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionFairQueueingControlledDelay;
description = ''
Each attribute in this set specifies an option in the
`[FairQueueingControlledDelay]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add FairQueueing options
2023-02-27 23:06:40 +00:00
fairQueueingConfig = mkOption {
default = {};
example = { Parent = "root"; FlowLimit = 5; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionFairQueueing;
description = ''
Each attribute in this set specifies an option in the
`[FairQueueing]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add TrivialLinkEqualizer options
2023-02-27 23:06:40 +00:00
trivialLinkEqualizerConfig = mkOption {
default = {};
example = { Parent = "root"; Id = 0; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionTrivialLinkEqualizer;
description = ''
Each attribute in this set specifies an option in the
`[TrivialLinkEqualizer]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add HierarchyTokenBucket options
2023-02-27 23:06:41 +00:00
hierarchyTokenBucketConfig = mkOption {
default = {};
example = { Parent = "root"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionHierarchyTokenBucket;
description = ''
Each attribute in this set specifies an option in the
`[HierarchyTokenBucket]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add HierarchyTokenBucketClass options
2023-02-27 23:06:41 +00:00
hierarchyTokenBucketClassConfig = mkOption {
default = {};
example = { Parent = "root"; Rate = "10M"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionHierarchyTokenBucketClass;
description = ''
Each attribute in this set specifies an option in the
`[HierarchyTokenBucketClass]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add HeavyHitterFilter options
2023-02-27 23:06:41 +00:00
heavyHitterFilterConfig = mkOption {
default = {};
example = { Parent = "root"; PacketLimit = 10000; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionHeavyHitterFilter;
description = ''
Each attribute in this set specifies an option in the
`[HeavyHitterFilter]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add QuickFairQueueing options
2023-02-27 23:06:41 +00:00
quickFairQueueingConfig = mkOption {
default = {};
example = { Parent = "root"; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionQuickFairQueueing;
description = ''
Each attribute in this set specifies an option in the
`[QuickFairQueueing]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add QuickFairQueueingClass options
2023-02-27 23:06:41 +00:00
quickFairQueueingConfigClass = mkOption {
default = {};
example = { Parent = "root"; Weight = 133; };
type = types.addCheck (types.attrsOf unitOption) check.network.sectionQuickFairQueueingClass;
description = ''
Each attribute in this set specifies an option in the
`[QuickFairQueueingClass]` section of the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add BridgeVLAN options
2023-02-27 23:06:41 +00:00
bridgeVLANs = mkOption {
default = [];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { VLAN = "10-20"; } ];
type = types.listOf (mkSubsectionType "bridgeVLANConfig" check.network.sectionBridgeVLAN);
nixos/networkd: add BridgeVLAN options
2023-02-27 23:06:41 +00:00
description = ''
A list of BridgeVLAN sections to be added to the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
name = mkOption {
type = types.nullOr types.str;
default = null;
description = ''
The name of the network interface to match against.
'';
};
DHCP = mkOption {
type = types.nullOr types.str;
default = null;
description = ''
Whether to enable DHCP on the interfaces matched.
'';
};
domains = mkOption {
type = types.nullOr (types.listOf types.str);
default = null;
description = ''
A list of domains to pass to the network config.
'';
};
address = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of addresses to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
gateway = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of gateways to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
dns = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of dns servers to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
ntp = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of ntp servers to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add missing options
2018-07-30 07:22:33 +00:00
bridge = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of bridge interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
bond = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of bond interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
vrf = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of vrf interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
vlan = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of vlan interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
macvlan = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of macvlan interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: add MACVTAP= option for networks Example 10. of man page of systemd.network(5) shows: ``` Example 10. MacVTap This brings up a network interface "macvtap-test" and attaches it to "enp0s25". # /usr/lib/systemd/network/25-macvtap.network [Match] Name=enp0s25 [Network] MACVTAP=macvtap-test ``` Which is a MACVTAP example and is currently unsupported in NixOS. This is useful for people using "modern" technologies with virtual machines.
2023-07-03 22:46:35 +00:00
macvtap = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of macvtap interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
vxlan = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of vxlan interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
tunnel = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of tunnel interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
systemd-networkd: add configuration for XFRM interfaces
2020-01-14 09:37:52 +00:00
xfrm = mkOption {
default = [ ];
type = types.listOf types.str;
description = ''
A list of xfrm interfaces to be added to the network section of the
unit. See {manpage}`systemd.network(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
addresses = mkOption {
default = [ ];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { Address = "192.168.0.100/24"; } ];
type = types.listOf (mkSubsectionType "addressConfig" check.network.sectionAddress);
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
A list of address sections to be added to the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
nixos/networkd: Add the RoutingPolicyRule-related options
2020-02-29 17:17:27 +00:00
routingPolicyRules = mkOption {
default = [ ];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { Table = 10; IncomingInterface = "eth1"; Family = "both"; } ];
type = types.listOf (mkSubsectionType "routingPolicyRuleConfig" check.network.sectionRoutingPolicyRule);
nixos/networkd: Add the RoutingPolicyRule-related options
2020-02-29 17:17:27 +00:00
description = ''
A list of routing policy rules sections to be added to the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
routes = mkOption {
default = [ ];
nixos/networkd: get rid of *Config attributes in lists This patch is about removing `wireguardPeerConfig`, `dhcpServerStaticLeaseConfig` - a.k.a. the AbstractSingletonProxyFactoryBean of nixpkgs - and friends. As a former colleague said > worst abstraction ever I second that. I've written enough networkd config for NixOS systems so far to have a strong dislike. In fact, these don't even make sense: `netdevs.wireguardPeers._.wireguardPeerConfig` will be rendered into the key `[WireGuardPeer]` and every key from `wireguardPeerConfig` is in there. Since it's INI, there's no place where sections on the same level as wireguardPeerConfig fit into. Hence, get rid of it all. For the transition, using the old way is still allowed, but gives a warning. I think we could drop this after one release. The tests of rosenpass and systemd-networkd-dhcpserver-static-leases were broken on the rev before, hence they were updated, but are still not building.
2024-05-17 16:21:52 +00:00
example = [ { Gateway = "192.168.0.1"; } ];
type = types.listOf (mkSubsectionType "routeConfig" check.network.sectionRoute);
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = ''
A list of route sections to be added to the unit. See
{manpage}`systemd.network(5)` for details.
'';
};
};
[bot] nixos/*: remove unused arguments in lambdas
2018-07-20 20:56:59 +00:00
networkConfig = { config, ... }: {
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
config = {
matchConfig = optionalAttrs (config.name != null) {
Name = config.name;
};
networkConfig = optionalAttrs (config.DHCP != null) {
DHCP = config.DHCP;
} // optionalAttrs (config.domains != null) {
Domains = concatStringsSep " " config.domains;
};
};
};
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
networkdConfig = { config, ... }: {
options = {
routeTables = mkOption {
default = {};
example = { foo = 27; };
type = with types; attrsOf int;
description = ''
Defines route table names as an attrset of name to number.
See {manpage}`networkd.conf(5)` for details.
'';
};
addRouteTablesToIPRoute2 = mkOption {
default = true;
example = false;
type = types.bool;
description = ''
If true and routeTables are set, then the specified route tables
will also be installed into /etc/iproute2/rt_tables.
'';
};
};
config = {
networkConfig = optionalAttrs (config.routeTables != { }) {
RouteTable = mapAttrsToList
(name: number: "${name}:${toString number}")
config.routeTables;
};
};
};
renderConfig = def:
{ text = ''
[Network]
${attrsToSection def.networkConfig}
''
+ optionalString (def.dhcpV4Config != { }) ''
[DHCPv4]
${attrsToSection def.dhcpV4Config}
''
+ optionalString (def.dhcpV6Config != { }) ''
[DHCPv6]
${attrsToSection def.dhcpV6Config}
''; };
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
mkUnitFiles = prefix: cfg: listToAttrs (map (name: {
name = "${prefix}systemd/network/${name}";
treewide: use attrs instead of list for types.loaOf options
2019-09-14 17:51:29 +00:00
value.source = "${cfg.units.${name}.unit}/${name}";
}) (attrNames cfg.units));
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
commonOptions = visible: {
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
enable = mkOption {
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
default = false;
type = types.bool;
description = ''
Whether to enable networkd or not.
'';
};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
links = mkOption {
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
default = {};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
inherit visible;
networkd module: fix submodule options declaration
2016-10-03 04:02:42 +00:00
type = with types; attrsOf (submodule [ { options = linkOptions; } ]);
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = "Definition of systemd network links.";
};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
netdevs = mkOption {
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
default = {};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
inherit visible;
networkd module: fix submodule options declaration
2016-10-03 04:02:42 +00:00
type = with types; attrsOf (submodule [ { options = netdevOptions; } ]);
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = "Definition of systemd network devices.";
};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
networks = mkOption {
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
default = {};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
inherit visible;
networkd module: fix submodule options declaration
2016-10-03 04:02:42 +00:00
type = with types; attrsOf (submodule [ { options = networkOptions; } networkConfig ]);
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = "Definition of systemd networks.";
};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
config = mkOption {
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
default = {};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
inherit visible;
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
type = with types; submodule [ { options = networkdOptions; } networkdConfig ];
description = "Definition of global systemd network config.";
};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
units = mkOption {
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
description = "Definition of networkd units.";
default = {};
nixos/networkd: mark `units` option as internal The options at `systemd.network` (`links`, `netdevs` and `networks`) are directly mapped to the three different unit types of `systemd-networkd(8)`. However there's also the option `systemd.network.units` which is basically used as a container for generated unit-configs that are linked to `/etc/systemd/networkd`[1]. This should not be exposed to the user as it's unclear whether or not it should be used directly which can be pretty confusing which is why I decided to declare this option as internal (including all sub-options as `internal` doesn't seem to be propagated to submodules). [1] https://github.com/NixOS/nixpkgs/blob/9db75ed88fd87e17ec448ad7a43b62acb4842854/nixos/modules/system/boot/networkd.nix#L933-L937
2019-11-29 11:50:51 +00:00
internal = true;
networkd module: optionSet -> submodule
2016-09-13 03:56:05 +00:00
type = with types; attrsOf (submodule (
{ name, config, ... }:
nixos/networkd: mark `units` option as internal The options at `systemd.network` (`links`, `netdevs` and `networks`) are directly mapped to the three different unit types of `systemd-networkd(8)`. However there's also the option `systemd.network.units` which is basically used as a container for generated unit-configs that are linked to `/etc/systemd/networkd`[1]. This should not be exposed to the user as it's unclear whether or not it should be used directly which can be pretty confusing which is why I decided to declare this option as internal (including all sub-options as `internal` doesn't seem to be propagated to submodules). [1] https://github.com/NixOS/nixpkgs/blob/9db75ed88fd87e17ec448ad7a43b62acb4842854/nixos/modules/system/boot/networkd.nix#L933-L937
2019-11-29 11:50:51 +00:00
{ options = mapAttrs (_: x: x // { internal = true; }) concreteUnitOptions;
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
config = {
unit = mkDefault (makeUnit name config);
};
networkd module: optionSet -> submodule
2016-09-13 03:56:05 +00:00
}));
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
};
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
wait-online = {
nixos/networkd: add wait-online.enable option When no interfaces are managed by systemd-networkd, it will unconditionally fail. This option allows it to be disabled in those situations where it prevents system switches from succeeding.
2022-11-26 01:47:47 +00:00
enable = mkOption {
type = types.bool;
default = true;
example = false;
description = ''
Whether to enable the systemd-networkd-wait-online service.
systemd-networkd-wait-online can timeout and fail if there are no network interfaces
available for it to manage. When systemd-networkd is enabled but a different service is
responsible for managing the system's internet connection (for example, NetworkManager or
connman are used to manage WiFi connections), this service is unnecessary and can be
disabled.
'';
};
nixos/networkd: add `wait-online` options
2022-03-28 20:56:49 +00:00
anyInterface = mkOption {
description = ''
Whether to consider the network online when any interface is online, as opposed to all of them.
This is useful on portable machines with a wired and a wireless interface, for example.
nixos/networkd: make wait-online not time out A further bug to our strange multi-user.target depending on network-online.target issue is that systemd recently changed the behaviour of systemd-networkd-wait-online to no longer consider the absence of interfaces with RequiredForOnline to be sufficient to be online: https://github.com/systemd/systemd/pull/27825 On the advice of the systemd developers (https://github.com/systemd/systemd/issues/29388), this commit changes the configuration of systemd-networkd-wait-online to pass --any by default, and lets the default DHCP interfaces be RequiredForOnline as they would be by default if the option is omitted. It is plausible that systemd-networkd-wait-online may still fail if there are no interfaces at all. However, that probably cannot be avoided.
2023-10-01 22:24:11 +00:00
This is on by default if {option}`networking.useDHCP` is enabled.
nixos/networkd: add `wait-online` options
2022-03-28 20:56:49 +00:00
'';
type = types.bool;
nixos/networkd: make wait-online not time out A further bug to our strange multi-user.target depending on network-online.target issue is that systemd recently changed the behaviour of systemd-networkd-wait-online to no longer consider the absence of interfaces with RequiredForOnline to be sufficient to be online: https://github.com/systemd/systemd/pull/27825 On the advice of the systemd developers (https://github.com/systemd/systemd/issues/29388), this commit changes the configuration of systemd-networkd-wait-online to pass --any by default, and lets the default DHCP interfaces be RequiredForOnline as they would be by default if the option is omitted. It is plausible that systemd-networkd-wait-online may still fail if there are no interfaces at all. However, that probably cannot be avoided.
2023-10-01 22:24:11 +00:00
defaultText = "config.networking.useDHCP";
default = config.networking.useDHCP;
nixos/networkd: add `wait-online` options
2022-03-28 20:56:49 +00:00
};
ignoredInterfaces = mkOption {
description = ''
Network interfaces to be ignored when deciding if the system is online.
'';
type = with types; listOf str;
default = [];
example = [ "wg0" ];
};
timeout = mkOption {
description = ''
Time to wait for the network to come online, in seconds. Set to 0 to disable.
'';
type = types.ints.unsigned;
default = 120;
example = 0;
};
extraArgs = mkOption {
description = ''
Extra command-line arguments to pass to systemd-networkd-wait-online.
These also affect per-interface `systemd-network-wait-online@` services.
nixos/manual: fix manpage links {manpage} already exapnds to a link but akkoma wants to link to a specific setting. split the mention for clarity. networkd just straight up duplicated what {manpage} generates anyway, so that link can go away completely.
2023-02-17 12:48:15 +00:00
See {manpage}`systemd-networkd-wait-online.service(8)` for all available options.
nixos/networkd: add `wait-online` options
2022-03-28 20:56:49 +00:00
'';
type = with types; listOf str;
default = [];
};
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
};
nixos/networkd: refactor Reduces size of networkd module by moving unit file generation code into a util.
2023-07-01 02:18:05 +00:00
commonConfig = config: let
cfg = config.systemd.network;
mkUnit = f: def: { inherit (def) enable; text = f def; };
in mkMerge [
nixos/networkd: rename the networkd dhcpConfig option to dhcpV4Config This follows upstreams change in documentation. While the `[DHCP]` section might still work it is undocumented and we should probably not be using it anymore. Users can just upgrade to the new option without much hassle. I had to create a bit of custom module deprecation code since the usual approach doesn't support wildcards in the path.
2020-01-08 19:18:26 +00:00
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
# .link units are honored by udev, no matter if systemd-networkd is enabled or not.
{
nixos/networkd: refactor Reduces size of networkd module by moving unit file generation code into a util.
2023-07-01 02:18:05 +00:00
systemd.network.units = mapAttrs' (n: v: nameValuePair "${n}.link" (mkUnit linkToUnit v)) cfg.links;
nixos/networkd: add `wait-online` options
2022-03-28 20:56:49 +00:00
systemd.network.wait-online.extraArgs =
[ "--timeout=${toString cfg.wait-online.timeout}" ]
++ optional cfg.wait-online.anyInterface "--any"
++ map (i: "--ignore=${i}") cfg.wait-online.ignoredInterfaces;
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
}
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
(mkIf config.systemd.network.enable {
nixos/networkd: add systemd-network user to group systemd-network
2019-11-24 21:45:39 +00:00
nixos/networkd: refactor Reduces size of networkd module by moving unit file generation code into a util.
2023-07-01 02:18:05 +00:00
systemd.network.units = mapAttrs' (n: v: nameValuePair "${n}.netdev" (mkUnit netdevToUnit v)) cfg.netdevs
// mapAttrs' (n: v: nameValuePair "${n}.network" (mkUnit networkToUnit v)) cfg.networks;
Fix #7476
2015-04-20 09:31:17 +00:00
nixos/networkd: Make activatible through dbus and netlink With this systemd buffers netlink messages in early boot from the kernel itself; and passes them on to networkd for processing once it's started. Makes sure no routing messages are missed. Also makes an alias so that dbus can activate this unit. Upstream has this too.
2020-05-19 09:04:14 +00:00
# systemd-networkd is socket-activated by kernel netlink route change
# messages. It is important to have systemd buffer those on behalf of
# networkd.
systemd.sockets.systemd-networkd.wantedBy = [ "sockets.target" ];
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
systemd.services.systemd-networkd-wait-online = {
nixos/networkd: add wait-online.enable option When no interfaces are managed by systemd-networkd, it will unconditionally fail. This option allows it to be disabled in those situations where it prevents system switches from succeeding.
2022-11-26 01:47:47 +00:00
inherit (cfg.wait-online) enable;
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
wantedBy = [ "network-online.target" ];
nixos/networkd: add `wait-online` options
2022-03-28 20:56:49 +00:00
serviceConfig.ExecStart = [
""
"${config.systemd.package}/lib/systemd/systemd-networkd-wait-online ${utils.escapeSystemdExecArgs cfg.wait-online.extraArgs}"
];
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
systemd.services."systemd-network-wait-online@" = {
description = "Wait for Network Interface %I to be Configured";
conflicts = [ "shutdown.target" ];
requisite = [ "systemd-networkd.service" ];
after = [ "systemd-networkd.service" ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
nixos/networkd: add `wait-online` options
2022-03-28 20:56:49 +00:00
ExecStart = "${config.systemd.package}/lib/systemd/systemd-networkd-wait-online -i %I ${utils.escapeSystemdExecArgs cfg.wait-online.extraArgs}";
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
};
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
};
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
})
];
stage2Config = let
cfg = config.systemd.network;
unitFiles = mkUnitFiles "" cfg;
in mkMerge [
(commonConfig config)
{ environment.etc = unitFiles; }
(mkIf config.systemd.network.enable {
users.users.systemd-network.group = "systemd-network";
systemd.additionalUpstreamSystemUnits = [
"systemd-networkd-wait-online.service"
"systemd-networkd.service"
"systemd-networkd.socket"
systemd: 255.6 -> 256.2
2024-04-26 21:18:12 +00:00
"systemd-networkd-persistent-storage.service"
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
];
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
environment.etc."systemd/networkd.conf" = renderConfig cfg.config;
nixos/networkd: Reload (not restart) when only .network units change Underneath, systemd-networkd’s reload is just `networkctl reload`. Per `man networkctl`, calling `reload` is expected to fully handle new, modified, and removed .network files, but it only handles *new* .netdev files. For simplicity, assume .network -> reload and .netdev -> restart. It’s desirable to perform reload instead of restart, as restart has the potential to bring down interfaces, resulting in a loss of network connectivity.
2022-08-14 04:33:24 +00:00
systemd.services.systemd-networkd = let
isReloadableUnitFileName = unitFileName: strings.hasSuffix ".network" unitFileName;
nixos/networkd: Fix incorrectly treating attrset as list This reverses a [change made during PR review][1] that I did not sufficiently test, causing [this error][2]. [1]: https://github.com/NixOS/nixpkgs/pull/249643#discussion_r1309151135 [2]: https://github.com/NixOS/nixpkgs/pull/249643#issuecomment-1712707336
2023-09-10 04:54:42 +00:00
reloadableUnitFiles = attrsets.filterAttrs (k: v: isReloadableUnitFileName k) unitFiles;
nonReloadableUnitFiles = attrsets.filterAttrs (k: v: !isReloadableUnitFileName k) unitFiles;
nixos/networkd: Reload (not restart) when only .network units change Underneath, systemd-networkd’s reload is just `networkctl reload`. Per `man networkctl`, calling `reload` is expected to fully handle new, modified, and removed .network files, but it only handles *new* .netdev files. For simplicity, assume .network -> reload and .netdev -> restart. It’s desirable to perform reload instead of restart, as restart has the potential to bring down interfaces, resulting in a loss of network connectivity.
2022-08-14 04:33:24 +00:00
unitFileSources = unitFiles: map (x: x.source) (attrValues unitFiles);
in {
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
wantedBy = [ "multi-user.target" ];
nixos/networkd: Reload (not restart) when only .network units change Underneath, systemd-networkd’s reload is just `networkctl reload`. Per `man networkctl`, calling `reload` is expected to fully handle new, modified, and removed .network files, but it only handles *new* .netdev files. For simplicity, assume .network -> reload and .netdev -> restart. It’s desirable to perform reload instead of restart, as restart has the potential to bring down interfaces, resulting in a loss of network connectivity.
2022-08-14 04:33:24 +00:00
reloadTriggers = unitFileSources reloadableUnitFiles;
restartTriggers = unitFileSources nonReloadableUnitFiles ++ [
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
config.environment.etc."systemd/networkd.conf".source
];
aliases = [ "dbus-org.freedesktop.network1.service" ];
};
nixos/networkd: configure /etc/systemd/networkd.conf The networkd.conf file controls a variety of interesting settings which don't seem to be configurable at the moment, including adding names to route tables (for networkd only, although this commit also exports them into iproute2 for convenience's sake), and the speed metering functionality built into networkd. Importantly, however, this also allows disabling the systemd functionality where it likes to delete all the routes and routing rules that haven't been configured through networkd whenever something causes it to perform a reconfiguration.
2022-03-13 04:30:49 +00:00
networking.iproute2 = mkIf (cfg.config.addRouteTablesToIPRoute2 && cfg.config.routeTables != { }) {
enable = mkDefault true;
rttablesExtraConfig = ''
# Extra tables defined in NixOS systemd.networkd.config.routeTables.
${concatStringsSep "\n" (mapAttrsToList (name: number: "${toString number} ${name}") cfg.config.routeTables)}
'';
};
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
services.resolved.enable = mkDefault true;
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
})
];
systemd stage 1 networking: Use KeepConfiguration
2023-06-11 06:30:01 +00:00
stage1Options = {
options.boot.initrd.systemd.network.networks = mkOption {
type = with types; attrsOf (submodule {
# Default in initrd is dhcp-on-stop, which is correct if flushBeforeStage2 = false
config = mkIf config.boot.initrd.network.flushBeforeStage2 {
networkConfig.KeepConfiguration = mkDefault false;
};
});
};
};
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
stage1Config = let
cfg = config.boot.initrd.systemd.network;
in mkMerge [
(commonConfig config.boot.initrd)
{
systemd.network.enable = mkDefault config.boot.initrd.network.enable;
systemd.contents = mkUnitFiles "/etc/" cfg;
# Networkd link files are used early by udev to set up interfaces early.
# This must be done in stage 1 to avoid race conditions between udev and
# network daemons.
systemd.network.units = lib.filterAttrs (n: _: hasSuffix ".link" n) config.systemd.network.units;
systemd.storePaths = ["${config.boot.initrd.systemd.package}/lib/systemd/network/99-default.link"];
}
(mkIf cfg.enable {
systemd-initrd: dbus
2023-03-07 03:21:48 +00:00
# For networkctl
systemd.dbus.enable = mkDefault true;
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
systemd.additionalUpstreamUnits = [
"systemd-networkd-wait-online.service"
"systemd-networkd.service"
"systemd-networkd.socket"
"systemd-network-generator.service"
"network-online.target"
"network-pre.target"
"network.target"
"nss-lookup.target"
"nss-user-lookup.target"
"remote-fs-pre.target"
"remote-fs.target"
];
systemd.users.systemd-network = {};
systemd.groups.systemd-network = {};
systemd.contents."/etc/systemd/networkd.conf" = renderConfig cfg.config;
systemd stage 1 networking: Stop systemd-networkd on switch-root This essentially backports https://github.com/systemd/systemd/pull/27791. `systemd-networkd.service` is sent the `SIGTERM` signal, but it is not required to be stopped before `initrd-switch-root.target` is reached, despite the use of `systemctl isolate initrd-switch-root.target`. This is because when there is no ordering at all between two units, and a transaction stops one and starts the other, the two operations can happen simultaneously. This means the service could still be running when `switch-root` actually occurs. Then, stage 2 systemd will see the service still running and decide it doesn't need to add a start operation for it to its initial transaction. Finally, the service exits, but only after it's already too late. If, however, there is any ordering at all between a stopping unit and a starting unit, then the stop operation will be done first. This way, we ensure that the service is properly exited before doing `switch-root`. This is something to keep in mind going forward. There may be other services that need this treatment. These `before` and `conflicts` definitions are the correct way to ensure a unit is actually stopped before you reach initrd-switch-root
2023-06-07 02:41:08 +00:00
systemd.services.systemd-networkd = {
wantedBy = [ "initrd.target" ];
};
systemd.sockets.systemd-networkd = {
wantedBy = [ "initrd.target" ];
};
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
systemd.services.systemd-network-generator.wantedBy = [ "sysinit.target" ];
systemd.storePaths = [
"${config.boot.initrd.systemd.package}/lib/systemd/systemd-networkd"
"${config.boot.initrd.systemd.package}/lib/systemd/systemd-networkd-wait-online"
"${config.boot.initrd.systemd.package}/lib/systemd/systemd-network-generator"
];
kernelModules = [ "af_packet" ];
})
];
in
{
systemd stage 1 networking: Use KeepConfiguration
2023-06-11 06:30:01 +00:00
imports = [ stage1Options ];
systemd-stage-1: Make networkd options shallow
2023-04-21 17:34:35 +00:00
options = {
systemd.network = commonOptions true;
boot.initrd.systemd.network = commonOptions "shallow";
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
};
config = mkMerge [
stage2Config
(mkIf config.boot.initrd.systemd.enable {
assertions = [{
systemd-stage-1: Improve udhcpc assertion
2023-10-22 13:12:34 +00:00
assertion = !config.boot.initrd.network.udhcpc.enable && config.boot.initrd.network.udhcpc.extraArgs == [];
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
message = ''
systemd-stage-1: Improve udhcpc assertion
2023-10-22 13:12:34 +00:00
systemd stage 1 networking does not support 'boot.initrd.network.udhcpc'. Configure
DHCP with 'networking.*' options or with 'boot.initrd.systemd.network' options.
systemd-initrd: networkd
2022-06-29 05:01:59 +00:00
'';
}];
boot.initrd = stage1Config;
nixos/networkd: respect systemd.network.links also with disabled systemd-networkd This mirrors the behaviour of systemd - It's udev that parses `.link` files, not `systemd-networkd`. This was originally applied in 36ef112a477034fc6d1d9170bf1bcda0140a8d1d, but was reverted due to 1115959a8d4d73ad73341563dc8bbf52230a281e causing evaluation errors on hydra.
2020-03-10 23:24:50 +00:00
})
];
systemd: Move networkd into separate modules The systemd module was getting rather bloated.
2015-04-19 19:05:12 +00:00
}
Reference in New Issue Copy Permalink