!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

883 Members
Declaratively manage your switching, routing, wireless, tunneling and more. | Don't rely on `networking.*` for interface and routing setup, use systemd-networkd, ifstate or NetworkManager instead. | Set `SYSTEMD_LOG_LEVEL=debug` to debug networking issues with networkd | No bad nft puns, please. | Room recommendations: #sysops:nixos.org253 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
29 Jun 2025
@hexa:lossy.networkhexa (clat on linux when)why do I get such a small closure size increase then?15:20:10
@hexa:lossy.networkhexa (clat on linux when)did we have that in there before?15:20:20
@emilazy:matrix.orgemily you aren't eliminating openconnect from networkmanager the package 15:20:24
@emilazy:matrix.orgemilyjust the plugin, which is a separate thing that also pulls it in15:20:30
@emilazy:matrix.orgemily get rid of the fix-paths.patch in NM and it should get a lot smaller 15:20:38
@emilazy:matrix.orgemilywe have to actually… fix that, of course15:20:46
@hexa:lossy.networkhexa (clat on linux when)right, but why does the ISO only become 38 MB larger I don't understand15:21:03
@emilazy:matrix.orgemilyI don't fully understand the results you're getting but it might just be compression15:21:08
@hexa:lossy.networkhexa (clat on linux when)possibly15:21:15
@emilazy:matrix.orgemily but like, openconnect is pulling in GTK 3 15:21:23
@emilazy:matrix.orgemilyif we had GTK 3 on the minimal ISO already that's uh…15:21:27
@hexa:lossy.networkhexa (clat on linux when)bad15:21:45
@emilazy:matrix.orgemily(I guess we probably do now that I say that…)15:21:45
@emilazy:matrix.orgemilyit pulls in GTK via… https://github.com/stoken-dev/stoken15:22:02
@hexa:lossy.networkhexa (clat on linux when)
diff --git a/src/libnmc-base/nm-vpn-helpers.c b/src/libnmc-base/nm-vpn-helpers.c
index cbe76f5f1c..0c9185e8ff 100644
--- a/src/libnmc-base/nm-vpn-helpers.c
+++ b/src/libnmc-base/nm-vpn-helpers.c
@@ -311,13 +311,8 @@ nm_vpn_openconnect_authenticate_helper(NMSettingVpn *s_vpn, GPtrArray *secrets,
 
     port = extract_url_port(gw);
 
-    path = nm_utils_file_search_in_paths("openconnect",
-                                         "/usr/sbin/openconnect",
-                                         DEFAULT_PATHS,
-                                         G_FILE_TEST_IS_EXECUTABLE,
-                                         NULL,
-                                         NULL,
-                                         error);
+    path = g_find_program_in_path("openconnect");
+
     if (!path)
         return FALSE;
 
15:39:41
@hexa:lossy.networkhexa (clat on linux when)https://docs.gtk.org/glib/func.find_program_in_path.html15:39:56
@emilazy:matrix.orgemily probably works, but no idea if we reliably get openconnect into the path when the plugin is enabled 15:45:05
@emilazy:matrix.orgemilyor if the plugin even uses this helper15:45:11
@hexa:lossy.networkhexa (clat on linux when)
diff --git a/nixos/modules/services/networking/networkmanager.nix b/nixos/modules/services/networking/networkmanager.nix
index 803cc741ce15..66360915c724 100644
--- a/nixos/modules/services/networking/networkmanager.nix
+++ b/nixos/modules/services/networking/networkmanager.nix
@@ -15,6 +15,8 @@ let
 
   enableIwd = cfg.wifi.backend == "iwd";
 
+  withPlugin = name: builtins.elem name (map (plugin: plugin.pname) cfg.plugins);
+
   configAttrs = lib.recursiveUpdate {
     main = {
       plugins = "keyfile";
@@ -716,5 +718,9 @@ in
       ++ optional (cfg.dns == "dnsmasq") pkgs.dnsmasq;
 
     services.udev.packages = packages;
+
+    systemd.services.NetworkManager.path = lib.optionals (withPlugin "NetworkManager-openconnect") [
+      openconnect
+    ];
   };
 }
15:47:52
@hexa:lossy.networkhexa (clat on linux when)so yeah, still need to check if this makes it work15:48:11

Show newer messages


Back to Room ListRoom Version: 6