Martin Weinelt mweinelt

This document contains some ideas for additions to the Nix language.

Motivation

The Nix package manager, Nixpkgs and NixOS currently have several problems:

Poor discoverability of package options. Package functions have function arguments like enableFoo, but there is no way for the Nix UI to discover them, let alone to provide programmatic ways to

Python on Nix infrastructure

Introduction

Python is used throughout Nixpkgs. We use it for certain scripts, we provide Python libraries, and we provide applications. There are several methods on how to use Python on Nix, each with their pros and cons. An overview of all issues with the current Python infrastructure on Nix is available in the placeholder issue 1819.

Goal

Gluon has a single interface to configure node information like location or contact info. This is done in config mode, a distinct operating mode of each node that can only be accessed by pressing button and physically connecting a network cable, while disrupting normal mesh operation at the same time. While this is feasible on planned installation it is less suited for ad-hoc setups of new nodes and while moving nodes.

A core principle of most Gluon-based firmwares is to prevent any accidental access to a node's config during normal operation, except for signed automatic updates. While users are free set a password or add a SSH key, there is no default password. We'd not like to encourage users to set passwords, either. Passwords are likely to be unsafe yet granting full root access to a node so we'd like to keep that attack vector as small as possible.

Most communities would like to have coordinates and contact information set for all nodes. At good map seems to stimulate a communities growth quite a bit a

Install USB device support;

opkg install kmod-usb-core kmod-usb-ohci kmod-usb2 kmod-usb-storage e2fsprogs fdisk usbutils mount-utils block-mount kmod-fs-ext4 kmod-fs-vfat kmod-nls-utf-8 kmod-nls-cp437 kmod-nls-iso8859-1

reboot

Install blkid, run opkg update && opkg install blkid;
Copy block.sh to directory /lib/functions;
Copy 10-mount and 20-swap to directory /etc/hotplug.d/block;
That's it! run logread -f command then plug in a USB stick to test.

Operational PGP

This is a guide on how to email securely.

There are many guides on how to install and use PGP to encrypt email. This is not one of them. This is a guide on secure communication using email with PGP encryption. If you are not familiar with PGP, please read another guide first. If you are comfortable using PGP to encrypt and decrypt emails, this guide will raise your security to the next level.

	{ pkgs ? import <nixpkgs> {} }:

	let
	fixWrapper = pkgs.runCommand "fix-wrapper" {} ''
	mkdir -p $out/bin
	for i in ${pkgs.gcc.cc}/bin/-gnu-gcc; do
	ln -s ${pkgs.gcc}/bin/gcc $out/bin/$(basename "$i")
	done
	for i in ${pkgs.gcc.cc}/bin/-gnu-{g++,c++}; do
	ln -s ${pkgs.gcc}/bin/g++ $out/bin/$(basename "$i")

	[[source]]
	url = "https://pypi.org/simple"
	verify_ssl = true
	name = "pypi"

	[packages]
	mpris2 = "*"
	paho-mqtt = "*"
	dbus-python = "*"
	pygobject = "*"

	# /etc/nixos/configuration.nix
	boot = {
	initrd.network = {
	enable = true;
	ssh = {
	enable = true;
	port = 2222;
	hostECDSAKey = /etc/nixos/secrets/initrd-ssh-key;
	};
	postCommands = ''

	#!/bin/bash

	name=$RANDOM
	url='http://localhost:9093/api/v1/alerts'

	echo "firing up alert $name"

	# change url o
	curl -XPOST $url -d "[{
	\"status\": \"firing\",

	required types
	--------------

	- [X] Block allocation/freeing/delegation
	- [ ] request for block owner
	- [ ] lease renewal (proxy)
	- [ ] lease renewal response (proxy)


	Allocate Block