!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

915 Members
Declaratively manage your switching, routing, wireless, tunneling and more.265 Servers

Load older messages


SenderMessageTime
29 Jun 2025
@antifuchs:asf.computerantifuchs(I’d love to use systemd-initrd with this machine but it lacks all sorts of features that would make it viable with my current configuration, most of all a tpm2 so transferring secrets over even if they’re not all that secret is annoying; also, anytime I mess up I have to do tedious work to recover it via a virtual kvm that sucks, across an ocean… so whenever systemd-initrd turns into the only option that machine gets retired; until then, I script harder)03:19:41
@elvishjerricco:matrix.orgElvishJerricco I don't believe useNetworkd by default depends on systemd initrd in any way 03:24:35
@elvishjerricco:matrix.orgElvishJerriccothe old networking in scripted initrd will be fine with it03:24:48
@elvishjerricco:matrix.orgElvishJerriccoWhat can systemd initrd not do that you need?03:25:29
@elvishjerricco:matrix.orgElvishJerriccoAFAIK the only major feature it lacks is the old LUKS nonsense, but the new LUKS stuff is better03:25:41
@elvishjerricco:matrix.orgElvishJerricco like the tpm2 is not needed to do any secrets stuff; boot.initrd.secrets is effectively implemented the same way in both scripted in systemd initrd 03:27:06
@antifuchs:asf.computerantifuchs
In reply to @elvishjerricco:matrix.org
What can systemd initrd not do that you need?
It’s mainly a problem with some modules I wrote: they expect encrypted systemd credentials for sysd-initrd; falling back on initrd secrets in scripted
03:27:21
@elvishjerricco:matrix.orgElvishJerriccothen I don't understand what the problem is03:27:58
@antifuchs:asf.computerantifuchsYeah it’s not necessary but they still end up in the nix store decrypted, which id like to avoid03:28:00
@elvishjerricco:matrix.orgElvishJerricco boot.initrd.secrets does not necessarily put secrets in the store 03:28:17
@antifuchs:asf.computerantifuchs Indeed, it’s my module. And that needs a rewrite and I’m not eager to do that because any change there can break the machine and that means a wasted afternoon of vnc recovery 03:29:19
@elvishjerricco:matrix.orgElvishJerriccoI still don't get it; presumably you've chosen not to use systemd initrd on that one machine, and therefore you're doing the scripted initrd thing, so you already have this problem.03:30:11
@antifuchs:asf.computerantifuchsHistorical baggage, all my other machines were using scripted until recently (:03:30:55
@antifuchs:asf.computerantifuchsAnyway, I’m happy to ride out the scripted world with this box, once systemd becomes the only option I’ll just grab a newer one from hetzner’s server auction I guess (expecting they have newer hardware then)03:31:55
@elvishjerricco:matrix.orgElvishJerricco... but why03:32:13
@elvishjerricco:matrix.orgElvishJerriccowhatever you did with scripted initrd is possible with systemd initrd03:32:20
@elvishjerricco:matrix.orgElvishJerriccoyou don't need to change hardware for it03:32:25
@uep:matrix.orguepi think the issue is simply the migration, see needing special kvm etc in case it doesn't work or to watch03:33:27
@antifuchs:asf.computerantifuchsI don’t think I wanna explain that on a phone keyboard or even here. It’s my course of action for now.03:33:31
@elvishjerricco:matrix.orgElvishJerricco hot take: I actually don't mind most of the networking.* interface and would be unbothered just supporting it with the networkd backend without any planned deprecation 03:36:17
@elvishjerricco:matrix.orgElvishJerricco * hot take: I actually don't mind most of the networking.* options and would be unbothered just supporting it with the networkd backend without any planned deprecation 03:36:25
@elvishjerricco:matrix.orgElvishJerricco AFAIK Arian said useNetworkd by default is good to go and I have no idea why it never happened 03:37:08
@hexa:lossy.networkhexaprobably because the proponents have been alienated by all the discussions we had03:37:44
@elvishjerricco:matrix.orgElvishJerriccoWe should just double check that we have assertions for any unsupported options and then flip it on ASAP03:38:24
@hexa:lossy.networkhexaimage.png
Download image.png
03:39:12
@hexa:lossy.networkhexaam I missing anything?03:39:14
@hexa:lossy.networkhexathat looks like and awkward interface to set up static addressing03:39:29
@hexa:lossy.networkhexaoh god, it can create tun/tap interfaces03:39:53
@elvishjerricco:matrix.orgElvishJerriccoimage doesn't want to load over here03:40:21
@hexa:lossy.networkhexahttps://search.nixos.org/options?channel=25.05&show=networking.interfaces.%3Cname%3E.proxyARP&from=0&size=50&sort=relevance&type=packages&query=networking.interfaces03:40:28

Show newer messages


Back to Room ListRoom Version: 6