| 4 Aug 2025 |
 emily | boot.initrd.kernelModules should almost never be used fwiw | 23:21:41 |
| emily | it forces module load which is not meant to be necessary | 23:21:50 |
| emily | availableKernelModules is the appropriate thing if we're going to be sniffing the config like that | 23:23:23 |
 @marcel:envs.net | updated it, thx | 23:36:13 |
| 5 Aug 2025 |
|  isabel changed their profile picture. | 09:49:46 |
| 6 Aug 2025 |
|  Frédéric Christ changed their display name from Frédéric Christ to Frédéric Christ 🏕️ 15.8.. | 08:28:52 |
| 8 Aug 2025 |
|  problems changed their profile picture. | 01:43:17 |
|  0x4A6F joined the room. | 06:32:20 |
 nikstur | I had some fun and let systemd networkd take care of the ipv6 privacy extensions instead of our custom udev rule: https://github.com/NixOS/nixpkgs/pull/431967 | 17:11:16 |
| emily | shouldn't we maybe be using kernel? | 17:13:30 |
| emily | to match the kernel's default preference | 17:13:34 |
| emily | rather than having two knobs | 17:13:47 |
| emily | also, it can be set in networkd.conf | 17:14:09 |
| emily | so we don't need a separate .network for it | 17:14:16 |
| emily | ah I guess the kernel preference is per-interface | 17:15:41 |
| emily | systemd.network.config.networkConfig.IPv6PrivacyExtensions = lib.mkDefault true; should do it, though | 17:15:50 |
| emily | btw (sorry for doing this on Matrix rather than leaving reviews, I haven't had the time to do a proper substantive review) is there a reason you got bash out of the iptables closure rather than just disabling iptables? it's pretty legacy itself at this point, and systemd is dropping support for it in 259 | 17:17:02 |
| emily | * The legacy iptables support through libiptc will be removed in v259.
Only nftables backend will be supported by systemd-networkd and
systemd-nspawn since v259.
| 17:17:10 |
