We should use the right DHCPv4.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>

@@ -0,0 +11,4 @@
+    admin-vlan = svc.vlan.build {
+      ifname = "admin";
+      primary = config.hardware.networkInterfaces.lan;
+      vid = "3001";

@@ -0,0 +114,4 @@
+
+  services = {
+    # wlan0 is the 2.4GHz interface.
+    hostap-1 = lib.mkIf (!is5GOnly) (

@@ -21,0 +41,4 @@
+    }:
+    singleAttr name {
+      inherit is5GOnly;
+      channelIndex = lib.mod channelIndex 3;

@@ -21,0 +108,4 @@
+    let
+      f =
+        self:
+        { }

@@ -21,0 +147,4 @@
+        # CD
+        // singleFloor {
+          name = ap: "AP-CD2-${builtins.toString ap}";
+          ap-range = mkRange 1 5;

@@ -21,0 +188,4 @@
+                "16"
+              ];
+            in
+            "AP-MB${builtins.toString f}-${room ap}";

@@ -21,0 +228,4 @@
+        aps:
+        builtins.listToAttrs (
+          lib.imap0 (idx: v: {
+            inherit (v) name;

@@ -21,0 +230,4 @@
+          lib.imap0 (idx: v: {
+            inherit (v) name;
+            value = v.value // {
+              "apIndex" = idx;

@@ -32,0 +270,4 @@
+
+      sshKeys = optional (hasAttr name apMeta) apMeta.${name}.sshKey;
+
+      need-ci = false;

@@ -32,0 +277,4 @@
+          adminIp
+          is5GOnly
+          channelIndex
+          apIndex

@@ -299,0 +305,4 @@
+        (pkgs.callPackage (sources.liminix + "/pkgs/min-copy-closure") { nix = pkgs.lix; })
+
+        # Daemon-less garbage collection for Liminix systems.
+        (pkgs.callPackage (sources.liminix + "/pkgs/min-collect-garbage") { nix = pkgs.lix; })

@@ -65,2 +66,3 @@
       monitoring = {
-        aps = builtins.fromJSON (builtins.readFile ./aps.json);
+        aps = mapAttrs (_: node: node.extra-args.adminIp) (
+          filterAttrs (name: node: (hasPrefix "AP" name) && (node.site == config.dgn-isp.site)) meta.nodes

@@ -27,3 +34,3 @@
             inherit hostname;
           };
-        }) cfg.monitoring.aps;
+        }) aps;

@@ -290,12 +292,18 @@ in
       [
         pkgs.lon
 
+        pkgs.rage

@@ -0,0 +9,4 @@
+  ...
+}:
+let
+  parentConfig = config;

@@ -0,0 +46,4 @@
+          zyxel-bootconfig
+        ];
+        # Only keep root, which should inherit from DGN access control's root permissions.
+        users.root = config.users.root;

@@ -0,0 +35,4 @@
+    mtdutils
+    min-collect-garbage
+    hostapd-radius
+    ubus

@@ -16,1 +16,4 @@
 # }
+{ lib, ... }:
+let
+  inherit (lib.extra) genFuse singleAttr fuseAttrs;

@@ -22,0 +61,4 @@
+    genFuse (
+      apRel:
+      let
+        ap = apRel + ap-range.from;

@@ -22,0 +90,4 @@
+    genFuse (
+      floorRel:
+      let
+        floor = floorRel + floor-range.from;

@@ -0,0 +1,13 @@
+# SPDX-FileCopyrightText: 2024 Maurice Debray <maurice.debray@dgnum.eu>
+#
+# SPDX-License-Identifier: EUPL-1.2
+

@@ -0,0 +14,4 @@
+FIRMWARE_OUTPUT="$2"
+
+dumpimage -T flat_dt -p 0 $ZYXEL_NWA_FIT -o $FIRMWARE_OUTPUT
+

@@ -0,0 +38,4 @@
+    exit 1
+fi
+
+if toplevel="$(nom-build $(colmena eval -E "{ nodes, ... }: nodes.$@.config.system.outputs.systemConfiguration" --instantiate))"; then

@@ -0,0 +40,4 @@
+
+if toplevel="$(nom-build $(colmena eval -E "{ nodes, ... }: nodes.$@.config.system.outputs.systemConfiguration" --instantiate))"; then
+    echo systemConfiguration $toplevel aimed at $root_prefix
+    sleep 3

@@ -0,0 +41,4 @@
+if toplevel="$(nom-build $(colmena eval -E "{ nodes, ... }: nodes.$@.config.system.outputs.systemConfiguration" --instantiate))"; then
+    echo systemConfiguration $toplevel aimed at $root_prefix
+    sleep 3
+    min-copy-closure --root "$root_prefix" $target_host $toplevel

@@ -0,0 +42,4 @@
+    echo systemConfiguration $toplevel aimed at $root_prefix
+    sleep 3
+    min-copy-closure --root "$root_prefix" $target_host $toplevel
+    $ssh_command $target_host "$root_prefix/$toplevel/bin/install" "$root_prefix"

@@ -0,0 +9,4 @@
+set -euxo pipefail
+
+usage() {
+  echo "./ftp_zeroday.sh [FIT-IMAGE] [IP]"

@@ -0,0 +6,4 @@
+let
+  inherit (pkgs.pseudofile) dir symlink;
+
+  dns = [

@@ -0,0 +16,4 @@
+        "pool.ntp.org" = [ "iburst" ];
+      };
+
+      makestep = {

@@ -0,0 +33,4 @@
+  defaultProfile.packages = with pkgs; [
+    hostapd-radius
+    min-collect-garbage
+    mtdutils

@@ -0,0 +88,4 @@
+    # No DNS here, hostapd do not support this mode.
+    auth_server_addr = "10.0.253.1";
+    auth_server_port = 1812;
+    auth_server_shared_secret =

@@ -0,0 +108,4 @@
+    };
+in
+{
+  hardware.wlanMacAddresses = {

@@ -0,0 +3,4 @@
+    "ip": "10.0.253.2",
+    "mac": "f4:4d:5c:ff:65:36",
+    "sshKey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEN/cTa9mC3Z1Thh+l9faXHMO5uXN7GSBznO+I8mO4fM",
+    "bssid2G": "02:5B:6A:00:00:00",

@@ -39,6 +42,17 @@ let
       colmena
       jq
     ];
+    liminix-rebuild = [

@@ -0,0 +1,17 @@
+# SPDX-FileCopyrightText: 2024 Ryan Lahfa <ryan.lahfa@dgnum.eu>

@@ -22,0 +93,4 @@
+      }
+    ) (lenRange floor-range);
+
+  AP =

@@ -0,0 +1,14 @@
+# SPDX-FileCopyrightText: 2024 Maurice Debray <maurice.debray@dgnum.eu>
+#
+# SPDX-License-Identifier: EUPL-1.2
+