eyJhb changed the topic of #nixos-on-your-router to: NixOS on your Router || https://logs.nix.samueldr.com/nixos-on-your-router
<thefloweringash> I'm really not enjoying pasting together a shell script with `networking.firewall.extraCommands`. I make typos because I'm human, then my firewall is half started, half not, and prevents the next start since extra chains aren't cleaned up.
<thefloweringash> the features of the built-in firewall seem fairly straightforward, is there a project to move nixos to using nftables by default?
<thefloweringash> complications: software that assumes iptables (fail2ban? docker?), existing user configuration using `extraCommands`
<andi-> thefloweringash: I wanted to do that 2y ago... but never got around to actually do that :/
<clever> Nov 12 04:23:15 system76 3s0avjla52qx9zx8yi6glba43did5bvq-unit-script-wpa_supplicant-start[7893]: /nix/store/3s0avjla52qx9zx8yi6glba43did5bvq-unit-script-wpa_supplicant-start: line 4: /sys/class/net/bonding_masters/uevent: Not a directory
<clever> ive tried setting up bonding between my wifi&wired, with wired set as the primary
<clever> so it will try to use wired at all times and if wired "fails", it will fallback to wifi, while keeping the same ip&mac
<clever> but, if bonding is loaded when wpa_supplicant starts, it fails hard
<clever> i have to `rmmod bonding` (deleting the IF isnt enough) for wpa_supplicant to even start
<flokli> clever: I gave up trying to use wpa supplicant on a bonded interface. I just route between different L2 networks ;-)
codyopel has quit [Write error: Connection reset by peer]
dtz has quit [Remote host closed the connection]
phyfey[m] has quit [Write error: Connection reset by peer]
thefloweringash has quit [Write error: Connection reset by peer]
dtz has joined #nixos-on-your-router
thefloweringash has joined #nixos-on-your-router
phyfey[m] has joined #nixos-on-your-router
codyopel has joined #nixos-on-your-router
<clever> flokli: i'm aiming wpa_supplicant to the wifi interface (i believe), but even if bond0 doesnt exist, it refuses to start
<clever> flokli: i have to fully unload the bonding driver to make it start
<flokli> clever: I don't remember anymore what failed, sorry.
<clever> flokli: somebody in #nixos already made a pr to fix my issue
<flokli> clever: even better! :-)