diff options
Diffstat (limited to 'hosts/vidhar/network/default.nix')
-rw-r--r-- | hosts/vidhar/network/default.nix | 152 |
1 files changed, 2 insertions, 150 deletions
diff --git a/hosts/vidhar/network/default.nix b/hosts/vidhar/network/default.nix index 2d9a7b8f..85ddd4ef 100644 --- a/hosts/vidhar/network/default.nix +++ b/hosts/vidhar/network/default.nix | |||
@@ -1,6 +1,6 @@ | |||
1 | { flake, config, lib, pkgs, ... }: | 1 | { ... }: |
2 | { | 2 | { |
3 | imports = [ ./dsl.nix ./bifrost ]; | 3 | imports = [ ./dsl.nix ./bifrost ./dhcp ]; |
4 | 4 | ||
5 | config = { | 5 | config = { |
6 | networking = { | 6 | networking = { |
@@ -53,132 +53,6 @@ | |||
53 | llmnr = "false"; | 53 | llmnr = "false"; |
54 | }; | 54 | }; |
55 | 55 | ||
56 | services.kea = { | ||
57 | dhcp4 = { | ||
58 | enable = true; | ||
59 | settings = { | ||
60 | valid-lifetime = 4000; | ||
61 | rebind-timer = 2000; | ||
62 | renew-timer = 1000; | ||
63 | |||
64 | interfaces-config = { | ||
65 | interfaces = [ "lan" "mgmt" ]; | ||
66 | }; | ||
67 | |||
68 | lease-database = { | ||
69 | name = "/var/lib/kea/dhcp4.leases"; | ||
70 | persist = true; | ||
71 | type = "memfile"; | ||
72 | }; | ||
73 | |||
74 | client-classes = [ | ||
75 | { name = "ipxe"; | ||
76 | test = "option[77].hex == 'iPXE'"; | ||
77 | next-server = "10.141.0.1"; | ||
78 | boot-file-name = "netboot.ipxe"; | ||
79 | only-if-required = true; | ||
80 | } | ||
81 | { name = "uefi-64"; | ||
82 | test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00007' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00008' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00009'"; | ||
83 | only-if-required = true; | ||
84 | option-data = [ | ||
85 | { name = "tftp-server-name"; data = "10.141.0.1"; } | ||
86 | ]; | ||
87 | boot-file-name = "ipxe.efi"; | ||
88 | } | ||
89 | { name = "uefi-32"; | ||
90 | test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00002' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00006'"; | ||
91 | only-if-required = true; | ||
92 | option-data = [ | ||
93 | { name = "tftp-server-name"; data = "10.141.0.1"; } | ||
94 | ]; | ||
95 | boot-file-name = "i386-ipxe.efi"; | ||
96 | } | ||
97 | { name = "legacy"; | ||
98 | test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00000'"; | ||
99 | only-if-required = true; | ||
100 | option-data = [ | ||
101 | { name = "tftp-server-name"; data = "10.141.0.1"; } | ||
102 | ]; | ||
103 | boot-file-name = "undionly.kpxe"; | ||
104 | } | ||
105 | ]; | ||
106 | |||
107 | subnet4 = [ | ||
108 | { subnet = "10.141.0.0/24"; | ||
109 | option-data = [ | ||
110 | { name = "domain-name-servers"; | ||
111 | data = "10.141.0.1"; | ||
112 | } | ||
113 | { name = "broadcast-address"; | ||
114 | data = "10.141.0.255"; | ||
115 | } | ||
116 | { name = "routers"; | ||
117 | data = "10.141.0.1"; | ||
118 | } | ||
119 | { name = "domain-name"; | ||
120 | data = "yggdrasil"; | ||
121 | } | ||
122 | ]; | ||
123 | pools = [ { pool = "10.141.0.128 - 10.141.0.254"; } ]; | ||
124 | reservations = []; | ||
125 | require-client-classes = ["ipxe" "uefi-64" "uefi-32" "legacy"]; | ||
126 | } | ||
127 | { subnet = "10.141.1.0/24"; | ||
128 | option-data = [ | ||
129 | { name = "domain-name-servers"; | ||
130 | data = "10.141.1.1"; | ||
131 | } | ||
132 | { name = "broadcast-address"; | ||
133 | data = "10.141.1.255"; | ||
134 | } | ||
135 | ]; | ||
136 | pools = [ { pool = "10.141.1.128 - 10.141.1.254"; } ]; | ||
137 | reservations = [ | ||
138 | { hostname = "switch01"; | ||
139 | hw-address = "60:a4:b7:53:94:b5"; | ||
140 | ip-address = "10.141.1.2"; | ||
141 | } | ||
142 | { hostname = "ap01"; | ||
143 | hw-address = "74:ac:b9:29:ad:9a"; | ||
144 | ip-address = "10.141.1.4"; | ||
145 | } | ||
146 | ]; | ||
147 | } | ||
148 | { subnet = "10.141.2.0/24"; | ||
149 | option-data = [ | ||
150 | { name = "domain-name-servers"; | ||
151 | data = "10.141.2.1"; | ||
152 | } | ||
153 | { name = "broadcast-address"; | ||
154 | data = "10.141.2.255"; | ||
155 | } | ||
156 | { name = "routers"; | ||
157 | data = "10.141.2.1"; | ||
158 | } | ||
159 | ]; | ||
160 | pools = [ { pool = "10.141.2.128 - 10.141.2.254"; } ]; | ||
161 | reservations = []; | ||
162 | } | ||
163 | ]; | ||
164 | }; | ||
165 | }; | ||
166 | dhcp6 = { | ||
167 | enable = true; | ||
168 | settings = { | ||
169 | interfaces-config = { | ||
170 | interfaces = [ "lan" ]; | ||
171 | }; | ||
172 | |||
173 | lease-database = { | ||
174 | name = "/var/lib/kea/dhcp6.leases"; | ||
175 | persist = true; | ||
176 | type = "memfile"; | ||
177 | }; | ||
178 | }; | ||
179 | }; | ||
180 | }; | ||
181 | |||
182 | systemd.network.networks = { | 56 | systemd.network.networks = { |
183 | "eno1" = { | 57 | "eno1" = { |
184 | matchConfig.Name = "eno1"; | 58 | matchConfig.Name = "eno1"; |
@@ -191,27 +65,5 @@ | |||
191 | networkConfig.LinkLocalAddressing = "no"; | 65 | networkConfig.LinkLocalAddressing = "no"; |
192 | }; | 66 | }; |
193 | }; | 67 | }; |
194 | |||
195 | systemd.services."installer-atftpd" = { | ||
196 | description = "TFTP Server for PXE Booting NixOS Installer"; | ||
197 | after = [ "network.target" ]; | ||
198 | wantedBy = [ "multi-user.target" ]; | ||
199 | serviceConfig.ExecStart = let | ||
200 | installerBuild = flake.nixosConfigurations.installer-x86_64-linux-netboot.config.system.build; | ||
201 | ipxe = pkgs.ipxe.override { | ||
202 | additionalTargets = { | ||
203 | "bin-i386-efi/ipxe.efi" = "i386-ipxe.efi"; | ||
204 | }; | ||
205 | }; | ||
206 | tftpRoot = pkgs.runCommandLocal "installer-netboot" {} '' | ||
207 | mkdir -p $out | ||
208 | install -m 0444 -t $out \ | ||
209 | ${installerBuild.netbootRamdisk}/initrd \ | ||
210 | ${installerBuild.kernel}/bzImage \ | ||
211 | ${installerBuild.netbootIpxeScript}/netboot.ipxe \ | ||
212 | ${ipxe}/ipxe.efi ${ipxe}/i386-ipxe.efi ${ipxe}/undionly.kpxe | ||
213 | ''; | ||
214 | in "${pkgs.atftp}/sbin/atftpd --daemon --no-fork --bind-address=10.141.0.1 ${tftpRoot}"; | ||
215 | }; | ||
216 | }; | 68 | }; |
217 | } | 69 | } |