| 6 Aug 2025 |
|  Frédéric Christ changed their display name from Frédéric Christ to Frédéric Christ 🏕️ 15.8.. | 08:28:52 |
| 8 Aug 2025 |
|  problems changed their profile picture. | 01:43:17 |
|  0x4A6F joined the room. | 06:32:20 |
 nikstur | I had some fun and let systemd networkd take care of the ipv6 privacy extensions instead of our custom udev rule: https://github.com/NixOS/nixpkgs/pull/431967 | 17:11:16 |
 emily | shouldn't we maybe be using kernel? | 17:13:30 |
| emily | to match the kernel's default preference | 17:13:34 |
| emily | rather than having two knobs | 17:13:47 |
| emily | also, it can be set in networkd.conf | 17:14:09 |
| emily | so we don't need a separate .network for it | 17:14:16 |
| emily | ah I guess the kernel preference is per-interface | 17:15:41 |
| emily | systemd.network.config.networkConfig.IPv6PrivacyExtensions = lib.mkDefault true; should do it, though | 17:15:50 |
| emily | btw (sorry for doing this on Matrix rather than leaving reviews, I haven't had the time to do a proper substantive review) is there a reason you got bash out of the iptables closure rather than just disabling iptables? it's pretty legacy itself at this point, and systemd is dropping support for it in 259 | 17:17:02 |
| emily | * The legacy iptables support through libiptc will be removed in v259.
Only nftables backend will be supported by systemd-networkd and
systemd-nspawn since v259.
| 17:17:10 |
 ElvishJerricco | I'm pretty sure this doesn't actually work. Have you checked that the expected things actually get set with interfaces that are actually configured with networkd? With networkd, an interface only ever applies a single .network file, and drop-ins for that file; the first one whose Match section matches it. So if I've got a 40-eth0.network, this 99-default-ipv6-privacy-extensions.network won't apply to my eth0 it at all. | 19:29:40 |
| ElvishJerricco | emily's idea of just adding a default value for that directive in the networkConfig option would fix that. | 19:30:48 |
| emily | (we should have a test for this if we don't) | 19:31:13 |
| nikstur | Until we have 259, I don't see a way to get it out of the systemd closure. That's why I removed bash from it. I think that's fine for now. | 19:46:41 |
| nikstur | Sounds good, I'll apply that | 19:46:52 |
| emily | huh I thought it was optional already | 19:46:58 |
