Commit Graph

85 Commits

Author SHA1 Message Date
a-kenji
1f03a9b7ec Fix typo 2023-11-16 14:39:15 +01:00
a-kenji
0604d5a83d Configure nix inside the machines
Add sane nix defaults for debugging and usability reasons
2023-11-16 14:08:50 +01:00
Jörg Thalheim
d2fecd0a94 clanCore: install essential tools for debugging 2023-11-16 13:46:13 +01:00
Jörg Thalheim
2bda2293cb meshnamed: fix container 2023-11-15 11:20:56 +01:00
Jörg Thalheim
df1e166afb clanCore/networking: allow ping unconditionally 2023-11-15 11:07:03 +01:00
Jörg Thalheim
1e49bf3378 zerotier: also install identity secrets for non-controllers 2023-11-15 11:07:03 +01:00
Jörg Thalheim
fcb22f254c move resolved configuration to a dummy interface 2023-11-15 11:07:03 +01:00
Jörg Thalheim
dca61fa5fa explicitly set networkd as the default 2023-11-15 07:21:26 +01:00
Jörg Thalheim
8cda86d34c integrated meshnamed with systemd-resolved 2023-11-15 07:21:26 +01:00
Jörg Thalheim
75f1815f98 move clan-imports into clanCore 2023-11-15 07:21:26 +01:00
Jörg Thalheim
2306b2ec50 zerotier: fix eval if meshname is not known yet 2023-11-15 07:21:26 +01:00
Jörg Thalheim
fdfe02fb77 zerotier: also enable meshnamed for non-controllers 2023-11-14 17:45:30 +01:00
Jörg Thalheim
b2422f9c74 zerotier: write hostname to file 2023-11-14 17:45:30 +01:00
Jörg Thalheim
d2303df18b enable meshnamed in zerotier module 2023-11-14 14:40:26 +01:00
Jörg Thalheim
cf9f24a3b2 zerotier: add leading zeros at subnet 2023-11-14 14:25:58 +01:00
Jörg Thalheim
99649f77d4 zerotier: compute ipv6 subnets 2023-11-14 14:04:05 +01:00
Jörg Thalheim
5d41bcee7f drop zerotier-subnet, we can compute this. 2023-11-14 13:50:44 +01:00
Jörg Thalheim
bdc8ef63ed add module for meshnamed 2023-11-14 12:58:15 +01:00
Jörg Thalheim
c28089d4b2 allow to persist zerotier identities/ips/meshnames for non-controller 2023-11-10 11:56:54 +01:00
Jörg Thalheim
0efbb461e6 drop bloatware module 2023-11-08 14:47:31 +01:00
lassulus
7b3d3e20b4 clan-cli secrets: flake_name -> flake_dir 2023-11-05 16:58:48 +01:00
Jörg Thalheim
52a56701ff zerotier: enable networkd 2023-10-31 15:35:09 +01:00
Qubasa
3581e0c9a8 Fixing a multitude of tests 2023-10-27 19:21:50 +02:00
Qubasa
d1c35301e3 Added repro_env_break debugging command. This spawn a terminal inside the temp home folder with the same environment as the python test 2023-10-27 19:20:17 +02:00
DavHau
bf176ad277 api/machines: allow importing extra modules
- add top-level option `clanImports` to clanCore
- clanImports can be set and checked as any other option
- buildClan resolves the clanImports from the settings.json before calling evalModules to prevent infinite recursions
- new endpoint PUT machines/{name}/schema to allow getting the schema for a specific list of imports
- to retrieve the currently imported modules, cimply do a GET or PU on machines/{name}/config which will return `clanImports` as part of the config

Still missing: get list of available modules
2023-10-25 16:36:30 +01:00
DavHau
c5b2e9b5f3 secrets: fix: don't generate secrets if no secrets are defined 2023-10-06 18:34:49 +02:00
lassulus
2d2e097f6d secrets.password-store: mkdir correct fact folder 2023-10-05 20:22:30 +02:00
lassulus
386da9e6c4 zerotier generate-network: terminate fakeroot for process cleanup 2023-10-05 19:14:10 +02:00
lassulus
13e8dba417 password-store: generate each secret in tmpdir 2023-10-05 19:14:10 +02:00
DavHau
9559357c56 clanCore: specify interface for system.clan 2023-10-05 17:08:59 +02:00
DavHau
dbf80595fd zerotier: fix: find free port without collissions 2023-10-05 17:03:01 +02:00
lassulus
3fb36b3ac1 secrets upload: skip on exit 23, cleanup 2023-10-04 21:29:19 +02:00
lassulus
bc36ec4c1a vms: support secrets and fix cross compilation 2023-10-04 18:04:27 +02:00
lassulus
3c1d7a0553 secrets.password-store: ignore ssh errors 2023-10-04 16:34:37 +02:00
Jörg Thalheim
fcd1d18e15 restore possibility to update all machines without having to specify them 2023-10-04 08:35:59 +02:00
lassulus
62caf98f15 secrets.password-store: optimize secret existence check 2023-09-30 09:36:39 +02:00
lassulus
347d9676c5 secrets.password-store: fix multi-secret check 2023-09-30 09:27:25 +02:00
lassulus
d810d2b4e1 secrets: allow empty facts 2023-09-30 09:18:24 +02:00
lassulus
6cdf5615fe clanCore.zerotier: create network-id only if fact exists 2023-09-29 20:05:35 +02:00
lassulus
89b7ffce6c clan-cli secrets upload: secrets are populated into tmpdir 2023-09-29 20:05:35 +02:00
lassulus
7ca9c49163 restore clanInternals with valid nixos config 2023-09-29 19:39:35 +02:00
lassulus
a5f181a430 clan-cli: init vm command 2023-09-29 19:18:27 +02:00
Jörg Thalheim
89e69e5cb6 add treewide pyproject.toml
Than we don't need a pyproject.toml per script
2023-09-29 16:41:14 +02:00
Jörg Thalheim
9daeaf5c62 zerotier: fix creating controller directory 2023-09-29 16:41:14 +02:00
Jörg Thalheim
5f15ec4495 add zerotier-members script 2023-09-29 16:07:22 +02:00
Jörg Thalheim
739d3b3578 zerotier: document mdns ports; drop duplicate udp firewall rules
the nixos module already opens the zerotier port
2023-09-28 17:58:42 +02:00
lassulus
b587bd1b49 secrets.password-store: readd targetDirectory 2023-09-27 21:26:58 +02:00
Jörg Thalheim
2f73e6b472 drop requirement for importing qemu-vm.nix 2023-09-27 14:54:01 +02:00
lassulus
c1a124d0bf clan.networking.zerotier: create init script only if fact exists 2023-09-27 11:02:54 +02:00
lassulus
5cf9b4428f clanCore.secrets: facts.value can be null or str 2023-09-27 10:34:53 +02:00