2014-11-20 10:37:48 +00:00
|
|
|
|
{ config, lib, pkgs, utils, ... }:
|
|
|
|
|
|
|
|
|
|
with lib;
|
|
|
|
|
with utils;
|
|
|
|
|
|
|
|
|
|
let
|
|
|
|
|
|
|
|
|
|
cfg = config.networking;
|
|
|
|
|
interfaces = attrValues cfg.interfaces;
|
|
|
|
|
hasVirtuals = any (i: i.virtual) interfaces;
|
|
|
|
|
|
|
|
|
|
# We must escape interfaces due to the systemd interpretation
|
|
|
|
|
subsystemDevice = interface:
|
|
|
|
|
"sys-subsystem-net-devices-${escapeSystemdPath interface}.device";
|
|
|
|
|
|
|
|
|
|
interfaceIps = i:
|
|
|
|
|
i.ip4 ++ optionals cfg.enableIPv6 i.ip6
|
|
|
|
|
++ optional (i.ipAddress != null) {
|
|
|
|
|
address = i.ipAddress;
|
|
|
|
|
prefixLength = i.prefixLength;
|
|
|
|
|
} ++ optional (cfg.enableIPv6 && i.ipv6Address != null) {
|
|
|
|
|
address = i.ipv6Address;
|
|
|
|
|
prefixLength = i.ipv6PrefixLength;
|
|
|
|
|
};
|
|
|
|
|
|
2014-11-25 09:53:37 +00:00
|
|
|
|
destroyBond = i: ''
|
|
|
|
|
while true; do
|
|
|
|
|
UPDATED=1
|
|
|
|
|
SLAVES=$(ip link | grep 'master ${i}' | awk -F: '{print $2}')
|
|
|
|
|
for I in $SLAVES; do
|
|
|
|
|
UPDATED=0
|
|
|
|
|
ip link set "$I" nomaster
|
|
|
|
|
done
|
|
|
|
|
[ "$UPDATED" -eq "1" ] && break
|
|
|
|
|
done
|
|
|
|
|
ip link set "${i}" down || true
|
|
|
|
|
ip link del "${i}" || true
|
|
|
|
|
'';
|
|
|
|
|
|
2014-11-20 10:37:48 +00:00
|
|
|
|
in
|
|
|
|
|
|
|
|
|
|
{
|
|
|
|
|
|
|
|
|
|
config = mkIf (!cfg.useNetworkd) {
|
|
|
|
|
|
|
|
|
|
systemd.targets."network-interfaces" =
|
|
|
|
|
{ description = "All Network Interfaces";
|
|
|
|
|
wantedBy = [ "network.target" ];
|
|
|
|
|
unitConfig.X-StopOnReconfiguration = true;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
systemd.services =
|
|
|
|
|
let
|
|
|
|
|
|
|
|
|
|
networkLocalCommands = {
|
|
|
|
|
after = [ "network-setup.service" ];
|
|
|
|
|
bindsTo = [ "network-setup.service" ];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
networkSetup =
|
|
|
|
|
{ description = "Networking Setup";
|
|
|
|
|
|
|
|
|
|
after = [ "network-interfaces.target" ];
|
2014-11-24 19:57:50 +00:00
|
|
|
|
before = [ "network.target" ];
|
|
|
|
|
wantedBy = [ "network.target" ];
|
2014-11-20 10:37:48 +00:00
|
|
|
|
|
|
|
|
|
unitConfig.ConditionCapability = "CAP_NET_ADMIN";
|
|
|
|
|
|
|
|
|
|
path = [ pkgs.iproute ];
|
|
|
|
|
|
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
|
|
|
serviceConfig.RemainAfterExit = true;
|
|
|
|
|
|
|
|
|
|
script =
|
|
|
|
|
(optionalString (!config.services.resolved.enable) ''
|
|
|
|
|
# Set the static DNS configuration, if given.
|
|
|
|
|
${pkgs.openresolv}/sbin/resolvconf -m 1 -a static <<EOF
|
|
|
|
|
${optionalString (cfg.nameservers != [] && cfg.domain != null) ''
|
|
|
|
|
domain ${cfg.domain}
|
|
|
|
|
''}
|
|
|
|
|
${optionalString (cfg.search != []) ("search " + concatStringsSep " " cfg.search)}
|
|
|
|
|
${flip concatMapStrings cfg.nameservers (ns: ''
|
|
|
|
|
nameserver ${ns}
|
|
|
|
|
'')}
|
|
|
|
|
EOF
|
|
|
|
|
'') + ''
|
|
|
|
|
# Set the default gateway.
|
|
|
|
|
${optionalString (cfg.defaultGateway != null) ''
|
|
|
|
|
# FIXME: get rid of "|| true" (necessary to make it idempotent).
|
|
|
|
|
ip route add default via "${cfg.defaultGateway}" ${
|
|
|
|
|
optionalString (cfg.defaultGatewayWindowSize != null)
|
|
|
|
|
"window ${cfg.defaultGatewayWindowSize}"} || true
|
|
|
|
|
''}
|
|
|
|
|
'';
|
|
|
|
|
};
|
|
|
|
|
|
2014-11-24 20:06:07 +00:00
|
|
|
|
# For each interface <foo>, create a job ‘network-addresses-<foo>.service"
|
|
|
|
|
# that performs static address configuration. It has a "wants"
|
2014-11-20 10:37:48 +00:00
|
|
|
|
# dependency on ‘<foo>.service’, which is supposed to create
|
|
|
|
|
# the interface and need not exist (i.e. for hardware
|
|
|
|
|
# interfaces). It has a binds-to dependency on the actual
|
|
|
|
|
# network device, so it only gets started after the interface
|
|
|
|
|
# has appeared, and it's stopped when the interface
|
|
|
|
|
# disappears.
|
2014-11-24 20:06:07 +00:00
|
|
|
|
configureAddrs = i:
|
2014-11-20 10:37:48 +00:00
|
|
|
|
let
|
|
|
|
|
ips = interfaceIps i;
|
|
|
|
|
in
|
2014-11-24 20:06:07 +00:00
|
|
|
|
nameValuePair "network-addresses-${i.name}"
|
|
|
|
|
{ description = "Addresss configuration of ${i.name}";
|
2014-11-20 10:37:48 +00:00
|
|
|
|
wantedBy = [ "network-interfaces.target" ];
|
2014-11-24 20:06:07 +00:00
|
|
|
|
before = [ "network-interfaces.target" ];
|
2014-11-20 10:37:48 +00:00
|
|
|
|
bindsTo = [ (subsystemDevice i.name) ];
|
|
|
|
|
after = [ (subsystemDevice i.name) ];
|
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
|
|
|
serviceConfig.RemainAfterExit = true;
|
2014-11-26 19:19:31 +00:00
|
|
|
|
path = [ pkgs.iproute ];
|
2014-11-20 10:37:48 +00:00
|
|
|
|
script =
|
|
|
|
|
''
|
|
|
|
|
echo "bringing up interface..."
|
|
|
|
|
ip link set "${i.name}" up
|
|
|
|
|
|
2014-11-24 20:06:07 +00:00
|
|
|
|
restart_network_interfaces=false
|
|
|
|
|
'' + flip concatMapStrings (ips) (ip:
|
2014-11-20 10:37:48 +00:00
|
|
|
|
let
|
|
|
|
|
address = "${ip.address}/${toString ip.prefixLength}";
|
|
|
|
|
in
|
|
|
|
|
''
|
|
|
|
|
echo "checking ip ${address}..."
|
2014-11-24 20:06:07 +00:00
|
|
|
|
if out=$(ip addr add "${address}" dev "${i.name}" 2>&1); then
|
|
|
|
|
echo "added ip ${address}..."
|
|
|
|
|
restart_network_setup=true
|
|
|
|
|
elif ! echo "$out" | grep "File exists" >/dev/null 2>&1; then
|
|
|
|
|
echo "failed to add ${address}"
|
|
|
|
|
exit 1
|
2014-11-20 10:37:48 +00:00
|
|
|
|
fi
|
|
|
|
|
'')
|
|
|
|
|
+ optionalString (ips != [ ])
|
|
|
|
|
''
|
2014-11-23 06:22:09 +00:00
|
|
|
|
if [ "$restart_network_setup" = "true" ]; then
|
2014-11-20 10:37:48 +00:00
|
|
|
|
# Ensure that the default gateway remains set.
|
|
|
|
|
# (Flushing this interface may have removed it.)
|
|
|
|
|
${config.systemd.package}/bin/systemctl try-restart --no-block network-setup.service
|
|
|
|
|
fi
|
|
|
|
|
${config.systemd.package}/bin/systemctl start ip-up.target
|
|
|
|
|
'';
|
|
|
|
|
preStop =
|
|
|
|
|
''
|
|
|
|
|
echo "releasing configured ip's..."
|
2014-11-24 20:06:07 +00:00
|
|
|
|
'' + flip concatMapStrings (ips) (ip:
|
2014-11-20 10:37:48 +00:00
|
|
|
|
let
|
|
|
|
|
address = "${ip.address}/${toString ip.prefixLength}";
|
|
|
|
|
in
|
|
|
|
|
''
|
|
|
|
|
echo -n "Deleting ${address}..."
|
|
|
|
|
ip addr del "${address}" dev "${i.name}" >/dev/null 2>&1 || echo -n " Failed"
|
|
|
|
|
echo ""
|
|
|
|
|
'');
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
createTunDevice = i: nameValuePair "${i.name}-netdev"
|
|
|
|
|
{ description = "Virtual Network Interface ${i.name}";
|
|
|
|
|
requires = [ "dev-net-tun.device" ];
|
|
|
|
|
after = [ "dev-net-tun.device" ];
|
|
|
|
|
wantedBy = [ "network.target" (subsystemDevice i.name) ];
|
|
|
|
|
path = [ pkgs.iproute ];
|
|
|
|
|
serviceConfig = {
|
|
|
|
|
Type = "oneshot";
|
|
|
|
|
RemainAfterExit = true;
|
|
|
|
|
};
|
|
|
|
|
script = ''
|
|
|
|
|
ip tuntap add dev "${i.name}" \
|
|
|
|
|
${optionalString (i.virtualType != null) "mode ${i.virtualType}"} \
|
|
|
|
|
user "${i.virtualOwner}"
|
|
|
|
|
'';
|
|
|
|
|
postStop = ''
|
|
|
|
|
ip link del ${i.name}
|
|
|
|
|
'';
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
createBridgeDevice = n: v: nameValuePair "${n}-netdev"
|
|
|
|
|
(let
|
|
|
|
|
deps = map subsystemDevice v.interfaces;
|
|
|
|
|
in
|
|
|
|
|
{ description = "Bridge Interface ${n}";
|
|
|
|
|
wantedBy = [ "network.target" (subsystemDevice n) ];
|
|
|
|
|
bindsTo = deps;
|
|
|
|
|
after = deps;
|
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
|
|
|
serviceConfig.RemainAfterExit = true;
|
2014-11-25 09:53:37 +00:00
|
|
|
|
path = [ pkgs.iproute ];
|
|
|
|
|
script = ''
|
|
|
|
|
# Remove Dead Interfaces
|
|
|
|
|
echo "Removing old bridge ${n}..."
|
|
|
|
|
ip link show "${n}" >/dev/null 2>&1 && ip link del "${n}"
|
2014-11-20 10:37:48 +00:00
|
|
|
|
|
2014-11-25 09:53:37 +00:00
|
|
|
|
echo "Adding bridge ${n}..."
|
|
|
|
|
ip link add name "${n}" type bridge
|
2014-11-20 10:37:48 +00:00
|
|
|
|
|
2014-11-25 09:53:37 +00:00
|
|
|
|
# Enslave child interfaces
|
|
|
|
|
${flip concatMapStrings v.interfaces (i: ''
|
|
|
|
|
ip link set "${i}" master "${n}"
|
|
|
|
|
ip link set "${i}" up
|
|
|
|
|
'')}
|
2014-11-20 10:37:48 +00:00
|
|
|
|
|
2014-11-25 09:53:37 +00:00
|
|
|
|
ip link set "${n}" up
|
|
|
|
|
'';
|
|
|
|
|
postStop = ''
|
|
|
|
|
ip link set "${n}" down || true
|
|
|
|
|
ip link del "${n}" || true
|
|
|
|
|
'';
|
2014-11-20 10:37:48 +00:00
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
createBondDevice = n: v: nameValuePair "${n}-netdev"
|
|
|
|
|
(let
|
|
|
|
|
deps = map subsystemDevice v.interfaces;
|
|
|
|
|
in
|
|
|
|
|
{ description = "Bond Interface ${n}";
|
|
|
|
|
wantedBy = [ "network.target" (subsystemDevice n) ];
|
|
|
|
|
bindsTo = deps;
|
|
|
|
|
after = deps;
|
|
|
|
|
before = [ "${n}-cfg.service" ];
|
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
|
|
|
serviceConfig.RemainAfterExit = true;
|
2014-11-28 06:53:50 +00:00
|
|
|
|
path = [ pkgs.iproute pkgs.gawk ];
|
2014-11-20 10:37:48 +00:00
|
|
|
|
script = ''
|
2014-11-25 09:53:37 +00:00
|
|
|
|
echo "Destroying old bond ${n}..."
|
|
|
|
|
${destroyBond n}
|
2014-11-20 10:37:48 +00:00
|
|
|
|
|
2014-11-25 09:53:37 +00:00
|
|
|
|
echo "Creating new bond ${n}..."
|
|
|
|
|
ip link add name "${n}" type bond \
|
|
|
|
|
${optionalString (v.mode != null) "mode ${toString v.mode}"} \
|
|
|
|
|
${optionalString (v.miimon != null) "miimon ${toString v.miimon}"} \
|
|
|
|
|
${optionalString (v.xmit_hash_policy != null) "xmit_hash_policy ${toString v.xmit_hash_policy}"} \
|
|
|
|
|
${optionalString (v.lacp_rate != null) "lacp_rate ${toString v.lacp_rate}"}
|
2014-11-20 10:37:48 +00:00
|
|
|
|
|
2014-11-25 09:53:37 +00:00
|
|
|
|
# !!! There must be a better way to wait for the interface
|
|
|
|
|
while [ ! -d "/sys/class/net/${n}" ]; do sleep 0.1; done;
|
2014-11-20 10:37:48 +00:00
|
|
|
|
|
|
|
|
|
# Bring up the bond and enslave the specified interfaces
|
|
|
|
|
ip link set "${n}" up
|
|
|
|
|
${flip concatMapStrings v.interfaces (i: ''
|
2014-11-25 09:53:37 +00:00
|
|
|
|
ip link set "${i}" master "${n}"
|
2014-11-20 10:37:48 +00:00
|
|
|
|
'')}
|
|
|
|
|
'';
|
2014-11-25 09:53:37 +00:00
|
|
|
|
postStop = destroyBond n;
|
2014-11-20 10:37:48 +00:00
|
|
|
|
});
|
|
|
|
|
|
2014-11-26 23:42:32 +00:00
|
|
|
|
createMacvlanDevice = n: v: nameValuePair "${n}-netdev"
|
|
|
|
|
(let
|
|
|
|
|
deps = [ (subsystemDevice v.interface) ];
|
|
|
|
|
in
|
|
|
|
|
{ description = "Vlan Interface ${n}";
|
|
|
|
|
wantedBy = [ "network.target" (subsystemDevice n) ];
|
|
|
|
|
bindsTo = deps;
|
|
|
|
|
after = deps;
|
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
|
|
|
serviceConfig.RemainAfterExit = true;
|
|
|
|
|
path = [ pkgs.iproute ];
|
|
|
|
|
script = ''
|
|
|
|
|
# Remove Dead Interfaces
|
|
|
|
|
ip link show "${n}" >/dev/null 2>&1 && ip link delete "${n}"
|
|
|
|
|
ip link add link "${v.interface}" name "${n}" type macvlan \
|
|
|
|
|
${optionalString (v.mode != null) "mode ${v.mode}"}
|
|
|
|
|
ip link set "${n}" up
|
|
|
|
|
'';
|
|
|
|
|
postStop = ''
|
|
|
|
|
ip link delete "${n}"
|
|
|
|
|
'';
|
|
|
|
|
});
|
|
|
|
|
|
2014-11-20 10:37:48 +00:00
|
|
|
|
createSitDevice = n: v: nameValuePair "${n}-netdev"
|
|
|
|
|
(let
|
|
|
|
|
deps = optional (v.dev != null) (subsystemDevice v.dev);
|
|
|
|
|
in
|
|
|
|
|
{ description = "6-to-4 Tunnel Interface ${n}";
|
|
|
|
|
wantedBy = [ "network.target" (subsystemDevice n) ];
|
|
|
|
|
bindsTo = deps;
|
|
|
|
|
after = deps;
|
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
|
|
|
serviceConfig.RemainAfterExit = true;
|
|
|
|
|
path = [ pkgs.iproute ];
|
|
|
|
|
script = ''
|
|
|
|
|
# Remove Dead Interfaces
|
|
|
|
|
ip link show "${n}" >/dev/null 2>&1 && ip link delete "${n}"
|
|
|
|
|
ip link add name "${n}" type sit \
|
|
|
|
|
${optionalString (v.remote != null) "remote \"${v.remote}\""} \
|
|
|
|
|
${optionalString (v.local != null) "local \"${v.local}\""} \
|
|
|
|
|
${optionalString (v.ttl != null) "ttl ${toString v.ttl}"} \
|
|
|
|
|
${optionalString (v.dev != null) "dev \"${v.dev}\""}
|
|
|
|
|
ip link set "${n}" up
|
|
|
|
|
'';
|
|
|
|
|
postStop = ''
|
|
|
|
|
ip link delete "${n}"
|
|
|
|
|
'';
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
createVlanDevice = n: v: nameValuePair "${n}-netdev"
|
|
|
|
|
(let
|
|
|
|
|
deps = [ (subsystemDevice v.interface) ];
|
|
|
|
|
in
|
|
|
|
|
{ description = "Vlan Interface ${n}";
|
|
|
|
|
wantedBy = [ "network.target" (subsystemDevice n) ];
|
|
|
|
|
bindsTo = deps;
|
|
|
|
|
after = deps;
|
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
|
|
|
serviceConfig.RemainAfterExit = true;
|
|
|
|
|
path = [ pkgs.iproute ];
|
|
|
|
|
script = ''
|
|
|
|
|
# Remove Dead Interfaces
|
|
|
|
|
ip link show "${n}" >/dev/null 2>&1 && ip link delete "${n}"
|
|
|
|
|
ip link add link "${v.interface}" name "${n}" type vlan id "${toString v.id}"
|
|
|
|
|
ip link set "${n}" up
|
|
|
|
|
'';
|
|
|
|
|
postStop = ''
|
|
|
|
|
ip link delete "${n}"
|
|
|
|
|
'';
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
in listToAttrs (
|
2014-11-24 20:06:07 +00:00
|
|
|
|
map configureAddrs interfaces ++
|
2014-11-20 10:37:48 +00:00
|
|
|
|
map createTunDevice (filter (i: i.virtual) interfaces))
|
|
|
|
|
// mapAttrs' createBridgeDevice cfg.bridges
|
|
|
|
|
// mapAttrs' createBondDevice cfg.bonds
|
2014-11-26 23:42:32 +00:00
|
|
|
|
// mapAttrs' createMacvlanDevice cfg.macvlans
|
2014-11-20 10:37:48 +00:00
|
|
|
|
// mapAttrs' createSitDevice cfg.sits
|
|
|
|
|
// mapAttrs' createVlanDevice cfg.vlans
|
|
|
|
|
// {
|
|
|
|
|
"network-setup" = networkSetup;
|
|
|
|
|
"network-local-commands" = networkLocalCommands;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
services.udev.extraRules =
|
|
|
|
|
''
|
|
|
|
|
KERNEL=="tun", TAG+="systemd"
|
|
|
|
|
'';
|
|
|
|
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
}
|