···

       
23
       
 
       
      prefixLength = i.ipv6PrefixLength;

     

       
24
       
 
       
    };

     

       
25
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
26
       
 
       
in

     

       
27
       
 
       


     

       
28
       
 
       
{

     
···

       
174
       
 
       
            after = deps;

     

       
175
       
 
       
            serviceConfig.Type = "oneshot";

     

       
176
       
 
       
            serviceConfig.RemainAfterExit = true;

     

       
177
       
-
       
            path = [ pkgs.bridge_utils pkgs.iproute ];

     

       
178
       
-
       
            script =

     

       
179
       
-
       
              ''

     

       
180
       
-
       
                # Remove Dead Interfaces

     

       
181
       
-
       
                ip link show "${n}" >/dev/null 2>&1 && ip link delete "${n}"

     

       
182
       
 
       


     

       
183
       
-
       
                brctl addbr "${n}"

     

       
0
       
 
       

     

       
184
       
 
       


     

       
185
       
-
       
                # Set bridge's hello time to 0 to avoid startup delays.

     

       
186
       
-
       
                brctl setfd "${n}" 0

     

       
0
       
 
       

     

       
187
       
 
       


     

       
188
       
-
       
                ${flip concatMapStrings v.interfaces (i: ''

     

       
189
       
-
       
                  brctl addif "${n}" "${i}"

     

       
190
       
-
       
                  ip link set "${i}" up

     

       
191
       
-
       
                  ip addr flush dev "${i}"

     

       
192
       
-
       


     

       
193
       
-
       
                  echo "bringing up network device ${n}..."

     

       
194
       
-
       
                  ip link set "${n}" up

     

       
195
       
-
       
                '')}

     

       
196
       
 
       


     

       
197
       
-
       
                # !!! Should delete (brctl delif) any interfaces that

     

       
198
       
-
       
                # no longer belong to the bridge.

     

       
199
       
-
       
              '';

     

       
200
       
-
       
            postStop =

     

       
201
       
-
       
              ''

     

       
202
       
-
       
                ip link set "${n}" down

     

       
203
       
-
       
                brctl delbr "${n}"

     

       
204
       
-
       
              '';

     

       
205
       
 
       
          });

     

       
206
       
 
       


     

       
207
       
 
       
        createBondDevice = n: v: nameValuePair "${n}-netdev"

     
···

       
215
       
 
       
            before = [ "${n}-cfg.service" ];

     

       
216
       
 
       
            serviceConfig.Type = "oneshot";

     

       
217
       
 
       
            serviceConfig.RemainAfterExit = true;

     

       
218
       
-
       
            path = [ pkgs.ifenslave pkgs.iproute ];

     

       
219
       
 
       
            script = ''

     

       
220
       
-
       
              ip link add name "${n}" type bond

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
221
       
 
       


     

       
222
       
 
       
              # !!! There must be a better way to wait for the interface

     

       
223
       
-
       
              while [ ! -d /sys/class/net/${n} ]; do sleep 0.1; done;

     

       
224
       
-
       


     

       
225
       
-
       
              # Ensure the link is down so that we can set options

     

       
226
       
-
       
              ip link set "${n}" down

     

       
227
       
-
       


     

       
228
       
-
       
              # Set the miimon and mode options

     

       
229
       
-
       
              ${optionalString (v.miimon != null)

     

       
230
       
-
       
                "echo \"${toString v.miimon}\" >/sys/class/net/${n}/bonding/miimon"}

     

       
231
       
-
       
              ${optionalString (v.mode != null)

     

       
232
       
-
       
                "echo \"${v.mode}\" >/sys/class/net/${n}/bonding/mode"}

     

       
233
       
-
       
              ${optionalString (v.lacp_rate != null)

     

       
234
       
-
       
                "echo \"${v.lacp_rate}\" >/sys/class/net/${n}/bonding/lacp_rate"}

     

       
235
       
-
       
              ${optionalString (v.xmit_hash_policy != null)

     

       
236
       
-
       
                "echo \"${v.xmit_hash_policy}\" >/sys/class/net/${n}/bonding/xmit_hash_policy"}

     

       
237
       
 
       


     

       
238
       
 
       
              # Bring up the bond and enslave the specified interfaces

     

       
239
       
 
       
              ip link set "${n}" up

     

       
240
       
 
       
              ${flip concatMapStrings v.interfaces (i: ''

     

       
241
       
-
       
                ifenslave "${n}" "${i}"

     

       
242
       
-
       
              '')}

     

       
243
       
-
       
            '';

     

       
244
       
-
       
            postStop = ''

     

       
245
       
-
       
              ${flip concatMapStrings v.interfaces (i: ''

     

       
246
       
-
       
                ifenslave -d "${n}" "${i}" >/dev/null 2>&1 || true

     

       
247
       
 
       
              '')}

     

       
248
       
-
       
              ip link set "${n}" down >/dev/null 2>&1 || true

     

       
249
       
-
       
              ip link del "${n}" >/dev/null 2>&1 || true

     

       
250
       
 
       
            '';

     

       
0
       
 
       

     

       
251
       
 
       
          });

     

       
252
       
 
       


     

       
253
       
 
       
        createSitDevice = n: v: nameValuePair "${n}-netdev"

     

···

       
23
       
 
       
      prefixLength = i.ipv6PrefixLength;

     

       
24
       
 
       
    };

     

       
25
       
 
       


     

       
26
       
+
       
  destroyBond = i: ''

     

       
27
       
+
       
    while true; do

     

       
28
       
+
       
      UPDATED=1

     

       
29
       
+
       
      SLAVES=$(ip link | grep 'master ${i}' | awk -F: '{print $2}')

     

       
30
       
+
       
      for I in $SLAVES; do

     

       
31
       
+
       
        UPDATED=0

     

       
32
       
+
       
        ip link set "$I" nomaster

     

       
33
       
+
       
      done

     

       
34
       
+
       
      [ "$UPDATED" -eq "1" ] && break

     

       
35
       
+
       
    done

     

       
36
       
+
       
    ip link set "${i}" down || true

     

       
37
       
+
       
    ip link del "${i}" || true

     

       
38
       
+
       
  '';

     

       
39
       
+
       


     

       
40
       
 
       
in

     

       
41
       
 
       


     

       
42
       
 
       
{

     
···

       
188
       
 
       
            after = deps;

     

       
189
       
 
       
            serviceConfig.Type = "oneshot";

     

       
190
       
 
       
            serviceConfig.RemainAfterExit = true;

     

       
191
       
+
       
            path = [ pkgs.iproute ];

     

       
192
       
+
       
            script = ''

     

       
193
       
+
       
              # Remove Dead Interfaces

     

       
194
       
+
       
              echo "Removing old bridge ${n}..."

     

       
195
       
+
       
              ip link show "${n}" >/dev/null 2>&1 && ip link del "${n}"

     

       
196
       
 
       


     

       
197
       
+
       
              echo "Adding bridge ${n}..."

     

       
198
       
+
       
              ip link add name "${n}" type bridge

     

       
199
       
 
       


     

       
200
       
+
       
              # Set bridge's hello time to 0 to avoid startup delays.

     

       
201
       
+
       
              echo 0 >"/sys/class/net/${n}/bridge/hello_time"

     

       
202
       
+
       
              echo 0 >"/sys/class/net/${n}/bridge/forward_delay"

     

       
203
       
 
       


     

       
204
       
+
       
              # Enslave child interfaces

     

       
205
       
+
       
              ${flip concatMapStrings v.interfaces (i: ''

     

       
206
       
+
       
                ip link set "${i}" master "${n}"

     

       
207
       
+
       
                ip link set "${i}" up

     

       
208
       
+
       
              '')}

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
209
       
 
       


     

       
210
       
+
       
              ip link set "${n}" up

     

       
211
       
+
       
            '';

     

       
212
       
+
       
            postStop = ''

     

       
213
       
+
       
              ip link set "${n}" down || true

     

       
214
       
+
       
              ip link del "${n}" || true

     

       
215
       
+
       
            '';

     

       
0
       
 
       

     

       
0
       
 
       

     

       
216
       
 
       
          });

     

       
217
       
 
       


     

       
218
       
 
       
        createBondDevice = n: v: nameValuePair "${n}-netdev"

     
···

       
226
       
 
       
            before = [ "${n}-cfg.service" ];

     

       
227
       
 
       
            serviceConfig.Type = "oneshot";

     

       
228
       
 
       
            serviceConfig.RemainAfterExit = true;

     

       
229
       
+
       
            path = [ pkgs.iproute ];

     

       
230
       
 
       
            script = ''

     

       
231
       
+
       
              echo "Destroying old bond ${n}..."

     

       
232
       
+
       
              ${destroyBond n}

     

       
233
       
+
       


     

       
234
       
+
       
              echo "Creating new bond ${n}..."

     

       
235
       
+
       
              ip link add name "${n}" type bond \

     

       
236
       
+
       
                ${optionalString (v.mode != null) "mode ${toString v.mode}"} \

     

       
237
       
+
       
                ${optionalString (v.miimon != null) "miimon ${toString v.miimon}"} \

     

       
238
       
+
       
                ${optionalString (v.xmit_hash_policy != null) "xmit_hash_policy ${toString v.xmit_hash_policy}"} \

     

       
239
       
+
       
                ${optionalString (v.lacp_rate != null) "lacp_rate ${toString v.lacp_rate}"}

     

       
240
       
 
       


     

       
241
       
 
       
              # !!! There must be a better way to wait for the interface

     

       
242
       
+
       
              while [ ! -d "/sys/class/net/${n}" ]; do sleep 0.1; done;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
243
       
 
       


     

       
244
       
 
       
              # Bring up the bond and enslave the specified interfaces

     

       
245
       
 
       
              ip link set "${n}" up

     

       
246
       
 
       
              ${flip concatMapStrings v.interfaces (i: ''

     

       
247
       
+
       
                ip link set "${i}" master "${n}"

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
248
       
 
       
              '')}

     

       
0
       
 
       

     

       
0
       
 
       

     

       
249
       
 
       
            '';

     

       
250
       
+
       
            postStop = destroyBond n;

     

       
251
       
 
       
          });

     

       
252
       
 
       


     

       
253
       
 
       
        createSitDevice = n: v: nameValuePair "${n}-netdev"

     

···

       
624
       
 
       
        pkgs.rfkill

     

       
625
       
 
       
        pkgs.openresolv

     

       
626
       
 
       
      ]

     

       
627
       
-
       
      ++ optional (cfg.bridges != {}) pkgs.bridge_utils

     

       
628
       
-
       
      ++ optional hasVirtuals pkgs.tunctl

     

       
629
       
-
       
      ++ optional cfg.enableIPv6 pkgs.ndisc6;

     

       
630
       
 
       


     

       
631
       
 
       
    systemd.services = {

     

       
632
       
 
       
      network-local-commands = {

     

···

       
624
       
 
       
        pkgs.rfkill

     

       
625
       
 
       
        pkgs.openresolv

     

       
626
       
 
       
      ]

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
627
       
 
       


     

       
628
       
 
       
    systemd.services = {

     

       
629
       
 
       
      network-local-commands = {