!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

884 Members
Declaratively manage your switching, routing, wireless, tunneling and more. | Don't rely on `networking.*` for interface and routing setup, use systemd-networkd, ifstate or NetworkManager instead. | Set `SYSTEMD_LOG_LEVEL=debug` to debug networking issues with networkd | No bad nft puns, please. | Room recommendations: #sysops:nixos.org253 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
29 Jun 2025
@hexa:lossy.networkhexa (clat on linux when)depending on systemd is not adding anything 😄 16:48:18
@emilazy:matrix.orgemily like, look at that _firewall_backend_detect patch 16:48:26
@emilazy:matrix.orgemilytotally not worth it16:48:29
@hexa:lossy.networkhexa (clat on linux when)nm uses its internal dhcp client by default16:49:34
@hexa:lossy.networkhexa (clat on linux when)so dhcpcd can be made optional16:49:43
@emilazy:matrix.orgemilyhmm16:50:13
@emilazy:matrix.orgemilyfair enough16:50:15
@emilazy:matrix.orgemilythat one does not need special patching16:50:42
@hexa:lossy.networkhexa (clat on linux when)but in general more stuff should be looked up from the path 16:50:45
@emilazy:matrix.orgemilyit seems like most of it comes for free just by patching their main function16:50:47
@hexa:lossy.networkhexa (clat on linux when)* but in general more stuff should be looked up from the path at runtime16:50:52
@emilazy:matrix.orgemilybut the firewall stuff, no16:50:56
@hexa:lossy.networkhexa (clat on linux when)like … when firewalling is enabled you have the ipt or nft executables in the path already16:51:43
@hexa:lossy.networkhexa (clat on linux when)so just pick those16:51:45
@emilazy:matrix.orgemilyI agree that late-binding is not the devil fwiw16:52:36
@emilazy:matrix.orgemily but that's an argument to have with upstream re: NFT_PATH 16:53:00
@emilazy:matrix.orgemilyand in the meantime it doesn't matter16:53:10
@emilazy:matrix.orgemily(but I think we agree on this)16:53:12
@hexa:lossy.networkhexa (clat on linux when)

nmcli or nmtui tools pull in the NetworkManager library and use those functions to search for binaries. If you then, for example, add an openconnect VPN and try to connect, they will search for the openconnect binary in their PATH as well.

16:54:03
@hexa:lossy.networkhexa (clat on linux when)I added openconnect as a system package because of that remark16:54:16
@emilazy:matrix.orgemilytbh, the OpenConnect thing probably should actually be a separate option at that point16:54:54
@emilazy:matrix.orgemilysince it is doing more system integration than… adding an item to a list16:55:11
@hexa:lossy.networkhexa (clat on linux when)nah, nm is just instrumenting the vpn binary16:55:39
@hexa:lossy.networkhexa (clat on linux when)I think that's fine16:55:46
@emilazy:matrix.orgemily well I mean vs. pname conditionals 16:55:55
@hexa:lossy.networkhexa (clat on linux when)install the plugin and you get the executable for free16:55:56
@emilazy:matrix.orgemily "system package gets added based on pname of something in the plugins option of another package's module" is not within expected behaviour for me 16:56:28

Show newer messages


Back to Room ListRoom Version: 6