!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

910 Members
Declaratively manage your switching, routing, wireless, tunneling and more.265 Servers

Load older messages


SenderMessageTime
16 Aug 2021
@schnecfk:ruhr-uni-bochum.deCRTified * The former has a - well - top down approach, while the second one is "bottom-up" (with respect to the OSI layers) (I personally did only work with the first one)21:17:24
@schnecfk:ruhr-uni-bochum.deCRTified
In reply to @hpfr:matrix.org
as for the VM's, how does nix make things easier here?
You can use e.g. nixops to deploy to libvirtd or virtualbox and orchestrate multiple machines that way. I'm currently writing a configuration for a HPC cluster and have one "master node" and five identical slave nodes that are all created by nixops
21:18:40
@schnecfk:ruhr-uni-bochum.deCRTified
In reply to @hpfr:matrix.org
as for the VM's, how does nix make things easier here?
* You can use e.g. nixops to deploy to libvirtd or virtualbox and orchestrate multiple machines that way. I'm currently writing a configuration for a HPC cluster and have one "master node" (where the slurm administration, LDAP and NFS server are running) and five identical "slave nodes" that are all created by nixops
21:19:14
@hpfr:matrix.orghpfroh, yeah21:19:11
@hpfr:matrix.orghpfrok, thanks21:19:23
@schnecfk:ruhr-uni-bochum.deCRTifiedAnd as soon as you're happy, you "only" need to switch the deployment target :)21:19:39
@hpfr:matrix.orghpfrwhy the scare quotes 😅21:20:22
@hpfr:matrix.orghpfrthat sounds accurate21:20:34
@schnecfk:ruhr-uni-bochum.deCRTifiedWell, VMs don't need a hardware-configuration - I'm not sure whether it will work completely out of the box 😅21:21:07
@hpfr:matrix.orghpfroh, right21:21:47
@schnecfk:ruhr-uni-bochum.deCRTifiedAnd I don't have enough time right now to test it on the real hardware, as there's a somewhat urgent deadline coming 🤐21:22:43
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneIs it possible for anyone to tell me how to port forward?23:15:28
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneI'm trying to provide someone access to a libvirt vm that is using the default nat interface. This would be great, since then the person I'm giving access to this VM wouldn't be able to snoop around my network.23:16:03
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneI was hoping I could do it entirely in the libvirt xml config, but can someone tell me how to set it up in Nix code, since I don't want to manually be playing with iptables!23:16:27
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneSo I want to port forward: 192.168.3.4:2222 -> 192.168.122.x:222223:19:32
@schnecfk:ruhr-uni-bochum.deCRTified
In reply to @matthewcroughan:defenestrate.it
So I want to port forward: 192.168.3.4:2222 -> 192.168.122.x:2222
Probably networking.nat.forwardPorts?
23:25:12
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneis that the only option I need to set?23:25:20
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zone * is that the only option I need to set and use?23:25:22
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zone what about .enable .internalIPs and externalInterface? 23:25:38
@schnecfk:ruhr-uni-bochum.deCRTifiedYou'll probably need to enable nat, too23:25:38
@schnecfk:ruhr-uni-bochum.deCRTifiedOh yes, at least ne internal and 3xternql interfaces should be set23:25:59
@schnecfk:ruhr-uni-bochum.deCRTified* Oh yes, at least the internal and external interfaces should be set23:26:12
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneIs it possible for me to lock myself out of the machine?23:26:28
@schnecfk:ruhr-uni-bochum.deCRTified(Sorry, on mobile/in bed already)23:26:33
@schnecfk:ruhr-uni-bochum.deCRTified
In reply to @matthewcroughan:defenestrate.it
Is it possible for me to lock myself out of the machine?
Yes, definitely
23:26:41
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zone I wish nixos-rebuild test had a --rollback-timer option :D 23:26:53
@schnecfk:ruhr-uni-bochum.deCRTified
In reply to @matthewcroughan:defenestrate.it
I wish nixos-rebuild test had a --rollback-timer option :D
Shouldn't that be doable? One-shot systemd timer in a different root config? 🤔
23:28:05
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zonedeploy-rs does it, somehow 23:28:18
@eyjhb:eyjhb.dkeyJhbNixus ;)23:35:37
17 Aug 2021
@putch4r:matrix.orgputchar joined the room.09:51:02

There are no newer messages yet.


Back to Room ListRoom Version: 6