1
0
Commit Graph

1536 Commits

Author SHA1 Message Date
73f1a566c3 massage doc pathnames for publishing 2025-04-10 00:22:29 +01:00
a720f8f114 intro: subtitles, add irc links 2025-04-08 23:57:20 +01:00
f9f55ee6bc placeholder doc for porting to new device 2025-04-08 23:51:12 +01:00
16168dc730 move stuff about implementing modules/services into Developer manual 2025-04-08 23:41:27 +01:00
b3f0c33347 add note about Hydra 2025-04-08 21:27:34 +01:00
2f092e126a add appendices for modules/service/outputs generated doc 2025-04-08 21:25:54 +01:00
eb16a35ff3 convert "supported hardware" to an appendix 2025-04-08 21:24:31 +01:00
6a7aa0898e add community and CoC to the manual 2025-04-08 13:27:57 +01:00
a792fab8ac think 2025-04-07 23:58:36 +01:00
9910ecefc0 improve the Contributions section (IMO it's better) 2025-04-07 23:48:08 +01:00
98a377b551 mess with the outline
(config and admin now come under a single top-level section)
2025-04-07 23:40:42 +01:00
9f9a4a2dc7 remove unnecessary words 2025-04-07 23:40:09 +01:00
643e2ec376 add tiny bit of phram info 2025-04-07 23:39:40 +01:00
887fe16020 review installation docs 2025-04-07 23:33:10 +01:00
6b61ba3b52 move Contributions to the top of the Development section
and various minor edits
2025-04-07 21:40:42 +01:00
a0b36be5e4 randomly proofread small sections 2025-04-06 23:53:03 +01:00
9bc9a077e3 fix refs and raise heading levels in generated hardware doc 2025-04-06 23:46:24 +01:00
9f501018bf include all the doc sections in index 2025-04-06 21:38:17 +01:00
de2757b798 extract ci doc derivation into its own file 2025-04-06 21:37:18 +01:00
de861a2ee0 convert rst to asciidoc
for i in *.rst ; do pandoc -f rst -t asciidoc -o `basename $i .rst`.adoc $i ;done
2025-04-06 18:16:53 +01:00
936eb1a7cd setup to parse asciidoc 2025-04-06 18:10:35 +01:00
e4aad311a8 think 2025-04-02 21:09:13 +01:00
6674826990 think 2025-04-02 21:08:49 +01:00
97ff2f3009 think 2025-03-31 23:22:04 +01:00
210b41efc0 improve robustness of ppp readiness notification
there was a race where ip-up could write ifname and then
ip6-up could write its outputs and then test ifname and
signal ready before ip-up had written the rest of its outputs
2025-03-31 23:17:50 +01:00
53c6d506cf dhcp6c subscribe to ppp ifindex
when the peer bounces ppp, s6 will restart the ppp process but not
restart the dependent services (because the service isn't considered
to have gone down)

so the dependent services need to notice when the outputs from ppp
have changed
2025-03-31 23:15:28 +01:00
01fe2159b4 ppp: write ifindex as output
because what happens if the service is restarted but the new ppp0 is
a different interface than the old one so that services which had
bound to it with the old name are now not getting new data

(I am not 100% that this actually happens but it seems like it would
be good to avoid it if it does)
2025-03-31 23:11:30 +01:00
d7d19b5ed0 dhcp6 client: fix service dir in address and prefix acquirers
the scripts now expect the actual service dir instead of the .outputs
subdir
2025-03-31 23:06:40 +01:00
ee683f2202 firewall: fix syntax of icmp v4 rule 2025-03-31 23:03:24 +01:00
d9723aeb87 secrets subscriber: make restart-all work 2025-03-31 23:01:48 +01:00
46ed8f0199 add bandwidth as a service option for ppp (l2tp, pppoe) 2025-03-27 20:23:26 +00:00
dd44fbaec1 rate limit for v4 icmp 2025-03-27 20:21:48 +00:00
89065be6cd bandwidth is bits/second so divide by 8 2025-03-27 20:21:14 +00:00
420320e434 firewall: remove unused args/names/vars 2025-03-27 18:40:07 +00:00
9ecd2b4fb4 think 2025-03-25 23:55:00 +00:00
1a6160bcab firewall: show how to ratelimit icmp6 to 5% of available bandwidth
it's a little klunky as yet, requires setting properties.bandwidth on
the interface service
2025-03-25 23:53:02 +00:00
b1bf13bb01 add svc:directory, mostly for use in debugging messages 2025-03-25 23:47:01 +00:00
c3f550698d watch-outputs fix update logic
it was only working by accident, when it worked, which was by no
means all of the time

note that we unconditionally perform the action (restart or whatever)
once we've started and got the initial state of the outputs. That's
because we have no idea whether the outputs changed in the interval
between the controlled service initially starting and watch-outputs
starting, so updates in that interval could be lost
2025-03-25 23:44:21 +00:00
05991225de anoia.svc allow open of a service that is not yet running
we change the inotify watcher so that it attempts to monitor
/run/service as well as /run/service/foo. If foo doesn't yet exist
then that call to addwatch fails, so we need to be looking at the
parent if we are to be told when foo gets created
2025-03-25 23:37:58 +00:00
7ce1c6bb7d add realpath to lualinux 2025-03-24 22:39:59 +00:00
8440378a39 anoia: make dirname handle tralning / like posix 2025-03-24 22:37:24 +00:00
e5cfd41013 add nft_limit kmodule for rate limiting in firewall 2025-03-21 21:19:48 +00:00
0ae5689a40 support maps in firewallgen 2025-03-21 21:19:18 +00:00
45047dc023 squahs falls back 2025-03-21 21:09:05 +00:00
3673804b93 think 2025-03-21 21:08:17 +00:00
be03e9e8c8 service outputs falls back to properties (untested) 2025-03-18 18:38:04 +00:00
4e51977ae0 provide properties attr to services
properties are similar to outputs, but are different in that they are
fixed values (do not change) and are present even when the service is
down

if the attribute is present and an attrset, this will write the
equivalent recursive directory structure to $out/.properties/
2025-03-12 23:35:56 +00:00
2b0972ed73 svc.open accepts a /nix/store folder not an outputs folder
this mostly makes things simpler
2025-03-11 00:21:44 +00:00
f22237a3b3 doc: filter src attribute to not rebuild as much 2025-03-10 23:08:37 +00:00
9dc0f25587 min-copy-clocure test: ensure sshd up before starting
this test goes wrong intermittently in CI, see if this makes it more
reliable
2025-03-09 21:37:13 +00:00