commit 0b0440e028afc3f8c0240499489f05d96c51e08a · pyrox.dev/nixpkgs

+93

nixos/modules/services/networking/networkmanager.nix

···

       4
        
       

     

       5
        
       let

     

       6
        
         cfg = config.networking.networkmanager;

     

       0
        
       
     

       7
        
       

     

       8
        
         delegateWireless = config.networking.wireless.enable == true && cfg.unmanaged != [ ];

     

       9
        
       

     
···

       379
        
                 https://modemmanager.org/docs/modemmanager/fcc-unlock/#integration-with-third-party-fcc-unlock-tools.

     

       380
        
               '';

     

       381
        
             };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       382
        
           };

     

       383
        
         };

     

       384
        
       

     
···

       505
        
             # useful binaries for user-specified hooks

     

       506
        
             path = [ pkgs.iproute2 pkgs.util-linux pkgs.coreutils ];

     

       507
        
             aliases = [ "dbus-org.freedesktop.nm-dispatcher.service" ];

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       508
        
           };

     

       509
        
       

     

       510
        
           # Turn off NixOS' network management when networking is managed entirely by NetworkManager

···

       4
        
       

     

       5
        
       let

     

       6
        
         cfg = config.networking.networkmanager;

     

       7
       +
         ini = pkgs.formats.ini { };

     

       8
        
       

     

       9
        
         delegateWireless = config.networking.wireless.enable == true && cfg.unmanaged != [ ];

     

       10
        
       

     
···

       380
        
                 https://modemmanager.org/docs/modemmanager/fcc-unlock/#integration-with-third-party-fcc-unlock-tools.

     

       381
        
               '';

     

       382
        
             };

     

       383
       +
             ensureProfiles = {

     

       384
       +
               profiles = with lib.types; mkOption {

     

       385
       +
                 type = attrsOf (submodule {

     

       386
       +
                   freeformType = ini.type;

     

       387
       +
       

     

       388
       +
                   options = {

     

       389
       +
                     connection = {

     

       390
       +
                       id = lib.mkOption {

     

       391
       +
                         type = str;

     

       392
       +
                         description = "This is the name that will be displayed by NetworkManager and GUIs.";

     

       393
       +
                       };

     

       394
       +
                       type = lib.mkOption {

     

       395
       +
                         type = str;

     

       396
       +
                         description = "The connection type defines the connection kind, like vpn, wireguard, gsm, wifi and more.";

     

       397
       +
                         example = "vpn";

     

       398
       +
                       };

     

       399
       +
                     };

     

       400
       +
                   };

     

       401
       +
                 });

     

       402
       +
                 apply = (lib.filterAttrsRecursive (n: v: v != { }));

     

       403
       +
                 default = { };

     

       404
       +
                 example = {

     

       405
       +
                   home-wifi = {

     

       406
       +
                     connection = {

     

       407
       +
                       id = "home-wifi";

     

       408
       +
                       type = "wifi";

     

       409
       +
                       permissions = "";

     

       410
       +
                     };

     

       411
       +
                     wifi = {

     

       412
       +
                       mac-address-blacklist = "";

     

       413
       +
                       mode = "infrastructure";

     

       414
       +
                       ssid = "Home Wi-Fi";

     

       415
       +
                     };

     

       416
       +
                     wifi-security = {

     

       417
       +
                       auth-alg = "open";

     

       418
       +
                       key-mgmt = "wpa-psk";

     

       419
       +
                       psk = "$HOME_WIFI_PASSWORD";

     

       420
       +
                     };

     

       421
       +
                     ipv4 = {

     

       422
       +
                       dns-search = "";

     

       423
       +
                       method = "auto";

     

       424
       +
                     };

     

       425
       +
                     ipv6 = {

     

       426
       +
                       addr-gen-mode = "stable-privacy";

     

       427
       +
                       dns-search = "";

     

       428
       +
                       method = "auto";

     

       429
       +
                     };

     

       430
       +
                   };

     

       431
       +
                 };

     

       432
       +
                 description = lib.mdDoc ''

     

       433
       +
                   Declaratively define NetworkManager profiles. You can find information about the generated file format [here](https://networkmanager.dev/docs/api/latest/nm-settings-keyfile.html) and [here](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/assembly_networkmanager-connection-profiles-in-keyfile-format_configuring-and-managing-networking).

     

       434
       +
                   You current profiles which are most likely stored in `/etc/NetworkManager/system-connections` and there is [a tool](https://github.com/janik-haag/nm2nix) to convert them to the needed nix code.

     

       435
       +
                   If you add a new ad-hoc connection via a GUI or nmtui or anything similar it should just work together with the declarative ones.

     

       436
       +
                   And if you edit a declarative profile NetworkManager will move it to the persistent storage and treat it like a ad-hoc one,

     

       437
       +
                   but there will be two profiles as soon as the systemd unit from this option runs again which can be confusing since NetworkManager tools will start displaying two profiles with the same name and probably a bit different settings depending on what you edited.

     

       438
       +
                   A profile won't be deleted even if it's removed from the config until the system reboots because that's when NetworkManager clears it's temp directory.

     

       439
       +
                 '';

     

       440
       +
               };

     

       441
       +
               environmentFiles = mkOption {

     

       442
       +
                 default = [];

     

       443
       +
                 type = types.listOf types.path;

     

       444
       +
                 example = [ "/run/secrets/network-manager.env" ];

     

       445
       +
                 description = lib.mdDoc ''

     

       446
       +
                   Files to load as environment file. Environment variables from this file

     

       447
       +
                   will be substituted into the static configuration file using [envsubst](https://github.com/a8m/envsubst).

     

       448
       +
                 '';

     

       449
       +
               };

     

       450
       +
             };

     

       451
        
           };

     

       452
        
         };

     

       453
        
       

     
···

       574
        
             # useful binaries for user-specified hooks

     

       575
        
             path = [ pkgs.iproute2 pkgs.util-linux pkgs.coreutils ];

     

       576
        
             aliases = [ "dbus-org.freedesktop.nm-dispatcher.service" ];

     

       577
       +
           };

     

       578
       +
       

     

       579
       +
           systemd.services.NetworkManager-ensure-profiles = mkIf (cfg.ensureProfiles.profiles != { }) {

     

       580
       +
             description = "Ensure that NetworkManager declarative profiles are created";

     

       581
       +
             wantedBy = [ "multi-user.target" ];

     

       582
       +
             before = [ "network-online.target" ];

     

       583
       +
             script = let

     

       584
       +
               path = id: "/run/NetworkManager/system-connections/${id}.nmconnection";

     

       585
       +
             in ''

     

       586
       +
               mkdir -p /run/NetworkManager/system-connections

     

       587
       +
             '' + lib.concatMapStringsSep "\n"

     

       588
       +
               (profile: ''

     

       589
       +
                 ${pkgs.envsubst}/bin/envsubst -i ${ini.generate (lib.escapeShellArg profile.n) profile.v} > ${path (lib.escapeShellArg profile.n)}

     

       590
       +
               '') (lib.mapAttrsToList (n: v: { inherit n v; }) cfg.ensureProfiles.profiles)

     

       591
       +
             + ''

     

       592
       +
               if systemctl is-active --quiet NetworkManager; then

     

       593
       +
                 ${pkgs.networkmanager}/bin/nmcli connection reload

     

       594
       +
               fi

     

       595
       +
             '';

     

       596
       +
             serviceConfig = {

     

       597
       +
               EnvironmentFile = cfg.ensureProfiles.environmentFiles;

     

       598
       +
               UMask = "0177";

     

       599
       +
               Type = "oneshot";

     

       600
       +
             };

     

       601
        
           };

     

       602
        
       

     

       603
        
           # Turn off NixOS' network management when networking is managed entirely by NetworkManager