feat: init AP management via Colmena and Liminix #110

Closed

rlahfa wants to merge 28 commits from colmena-liminix into main

Author	SHA1	Message	Date
Ryan Lahfa	ed285ba79d	feat(scripts/liminix): fail HARD and support root prefixes Some checks failed Check meta / check_meta (pull_request) Failing after 17s Details lint / check (push) Successful in 31s Details build configuration / build_compute01 (pull_request) Failing after 52s Details build configuration / build_storage01 (pull_request) Failing after 52s Details build configuration / build_vault01 (pull_request) Failing after 53s Details Check meta / check_dns (pull_request) Failing after 1m6s Details build configuration / build_web01 (pull_request) Failing after 53s Details build configuration / build_web02 (pull_request) Failing after 41s Details build configuration / build_rescue01 (pull_request) Failing after 30s Details build configuration / push_to_cache (pull_request) Has been skipped Details Now that we possess the levitation technology, it's necessary to support root prefixes for rebuild otherwise we will just overwrite our RAM disk configuration. Also, to avoid any issue, let's fail hard and avoid rebooting while being in levitation for nothing. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-08 00:50:33 +02:00
Ryan Lahfa	d29deeae56	feat(ap01): use levitation for mass rebuilds To deal with mass rebuild disk space requirements, we can just levitate. In the future, we will use levitation as a general-purpose mechanism for partition layout migration, etc. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-08 00:50:33 +02:00
Ryan Lahfa	4ed0c435ba	feat(ap01): write nixpkgs version in /etc It's useful for debugging. We should also track our own revisions at some point. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-08 00:50:33 +02:00
Ryan Lahfa	c08d6c464f	feat(ap01): re-enable 2GHz Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-08 00:50:33 +02:00
Ryan Lahfa	46d07da404	fix(hive): misc fixes regarding the nixpkgs usage Previously, we were using <nixpkgs> actually, we fixed liminix and this file to ensure that we are instantiating the right nixpkgs. This helps to deal with unexpected mass rebuilds. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-08 00:50:33 +02:00
Ryan Lahfa	99902d2bb8	chore: upgrade liminix Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-08 00:48:12 +02:00
Ryan Lahfa	c0ec57ef22	fix(ap01): bridge only once the WLAN is in operational state It required a lot of technology, but hey, we now have it. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-07 21:14:27 +02:00
Ryan Lahfa	337a71a169	feat(scripts): add Android profile building via Nix Some checks failed lint / check (push) Successful in 30s Details Check meta / check_meta (pull_request) Failing after 48s Details build configuration / build_compute01 (pull_request) Failing after 49s Details build configuration / build_storage01 (pull_request) Failing after 50s Details build configuration / build_vault01 (pull_request) Failing after 50s Details Check meta / check_dns (pull_request) Failing after 1m4s Details build configuration / build_web01 (pull_request) Failing after 40s Details build configuration / build_rescue01 (pull_request) Failing after 34s Details build configuration / build_web02 (pull_request) Failing after 35s Details build configuration / push_to_cache (pull_request) Has been skipped Details Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-05 17:06:40 +02:00
Ryan Lahfa	9bf83a60fe	fix(ap01): fix _one_ race condition when bridging the LAN Some checks failed Check meta / check_meta (pull_request) Failing after 17s Details lint / check (push) Successful in 28s Details build configuration / build_compute01 (pull_request) Failing after 43s Details build configuration / build_storage01 (pull_request) Failing after 43s Details build configuration / build_vault01 (pull_request) Failing after 45s Details build configuration / build_web01 (pull_request) Failing after 34s Details Check meta / check_dns (pull_request) Failing after 1m3s Details build configuration / build_web02 (pull_request) Failing after 41s Details build configuration / build_rescue01 (pull_request) Failing after 41s Details build configuration / push_to_cache (pull_request) Has been skipped Details The remaining is hostapd notification that the WLAN interface is ready to bridge. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-05 14:59:16 +02:00
Ryan Lahfa	994e593d3b	chore(ap01): cleanup Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-05 14:58:44 +02:00
Ryan Lahfa	adb843dd8b	feat(ap01): add ubus Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-05 14:58:38 +02:00
Ryan Lahfa	45b106190f	feat(ap01): disable IPv6 Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-01 18:08:41 +02:00
Ryan Lahfa	0b94fb5ba7	feat(ap01): external RADIUS + DHCPv4 + jitterRNGd + stable bridge + default route Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-01 18:08:41 +02:00
Ryan Lahfa	4fb39070bb	fix(sources): update to the latest version of Liminix With bridge fixes and many other things. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-01 18:08:41 +02:00
Ryan Lahfa	47231417cc	feat(liminix-rebuild): support hive names directly Some checks failed Check meta / check_meta (pull_request) Failing after 20s Details build configuration / build_vault01 (pull_request) Failing after 22s Details build configuration / build_compute01 (pull_request) Failing after 22s Details lint / check (push) Successful in 28s Details build configuration / build_storage01 (pull_request) Failing after 26s Details build configuration / build_web01 (pull_request) Failing after 19s Details build configuration / build_rescue01 (pull_request) Failing after 21s Details build configuration / build_web02 (pull_request) Failing after 21s Details build configuration / push_to_cache (pull_request) Has been skipped Details Check meta / check_dns (pull_request) Failing after 1m0s Details Thanks @catvayor, I'm so dumb. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-09-01 17:20:37 +02:00
Ryan Lahfa	afd92ab203	feat(devshell): add kanidm & freeradius Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-08-31 22:38:07 +02:00
Ryan Lahfa	270eb4b106	chore(ap01): cleanup Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-08-31 22:37:46 +02:00
Ryan Lahfa	04cb0a9f04	feat(scripts): add liminix-oriented scripts Some checks failed lint / check (push) Successful in 24s Details Check meta / check_meta (pull_request) Failing after 20s Details build configuration / build_storage01 (pull_request) Failing after 42s Details build configuration / build_compute01 (pull_request) Failing after 43s Details build configuration / build_vault01 (pull_request) Failing after 42s Details Check meta / check_dns (pull_request) Failing after 1m3s Details build configuration / build_web01 (pull_request) Failing after 38s Details build configuration / build_web02 (pull_request) Failing after 39s Details build configuration / build_rescue01 (pull_request) Failing after 38s Details build configuration / push_to_cache (pull_request) Has been skipped Details - extraction for manual recovery via nandwrite - liminix rebuild to interactively develop the AP Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-08-31 22:23:04 +02:00
Ryan Lahfa	c4d9d6d000	feat(ap01): enable fully RADIUS via internal RADIUS server This adds two public keys. For the private keys, heh… Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-08-31 22:23:04 +02:00
Ryan Lahfa	be1673c6aa	feat(devshell): add liminix-related tools serial console, deployment tools and TFTP tool Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-08-31 22:20:24 +02:00
Ryan Lahfa	8b66b2b7c3	feat: add access control for APs via our custom modules Some checks failed Check meta / check_meta (push) Failing after 17s Details Check meta / check_meta (pull_request) Failing after 18s Details lint / check (push) Successful in 24s Details build configuration / build_compute01 (pull_request) Failing after 38s Details build configuration / build_storage01 (pull_request) Failing after 35s Details Check meta / check_dns (push) Failing after 1m9s Details Check meta / check_dns (pull_request) Failing after 59s Details build configuration / build_vault01 (pull_request) Failing after 36s Details build configuration / build_web01 (pull_request) Failing after 35s Details build configuration / build_web02 (pull_request) Failing after 40s Details build configuration / build_rescue01 (pull_request) Failing after 33s Details build configuration / push_to_cache (pull_request) Has been skipped Details It works! Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-08-22 18:45:40 +02:00
Ryan Lahfa	3ed6ecba31	feat: ensure that `colmena repl` can evaluate `nodes.ap01` Some checks failed lint / check (push) Successful in 49s Details Check meta / check_meta (pull_request) Failing after 16s Details Check meta / check_dns (pull_request) Failing after 58s Details build configuration / build_vault01 (pull_request) Failing after 1m2s Details build configuration / build_storage01 (pull_request) Failing after 1m5s Details build configuration / build_compute01 (pull_request) Failing after 1m16s Details build configuration / build_web02 (pull_request) Failing after 36s Details build configuration / build_rescue01 (pull_request) Failing after 36s Details build configuration / build_web01 (pull_request) Failing after 36s Details build configuration / push_to_cache (pull_request) Has been skipped Details Bump to latest Liminix and use the new `defaults` function. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-08-22 15:28:34 +02:00
Ryan Lahfa	5a8fe24dce	feat: achieve custom evaluation in the framework Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-05-24 18:46:13 +02:00
Tom Hubrecht	0a948e6148	feat: Specialize nixpkgs as a function of the system	2024-05-24 18:46:13 +02:00
Ryan Lahfa	41ca207b41	feat: wip! wip! wip!	2024-05-24 18:46:01 +02:00
Ryan Lahfa	aa6b082b81	feat: enable liminix-rebuild Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-05-24 18:46:01 +02:00
Ryan Lahfa	17b2345a02	feat: add liminix-rebuild in the shell Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-05-24 18:46:01 +02:00
Ryan Lahfa	fde8f66ea7	feat: init Liminix evaluation system Very rudimentary; undocumented, untested in production. This is for testing purposes. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>	2024-05-24 18:46:01 +02:00