DGNum's fork of Liminix, tailored for our infrastructure.
Find a file
Daniel Barlow b2f7a429f7 build a kernel, using malta_kvm_defconfig
(there's a lot in this config that I don't think is needed)
2022-09-20 18:54:27 +01:00
devices build a kernel, using malta_kvm_defconfig 2022-09-20 18:54:27 +01:00
tests build a kernel, using malta_kvm_defconfig 2022-09-20 18:54:27 +01:00
tools generate a mips squashfs with some s6-rc services 2022-09-19 23:51:38 +01:00
.gitignore placeholder readme 2022-09-20 15:46:42 +01:00
default.nix build a kernel, using malta_kvm_defconfig 2022-09-20 18:54:27 +01:00
make-image.nix remove unused lets, add test case 2022-09-20 15:46:03 +01:00
make-kernel.nix build a kernel, using malta_kvm_defconfig 2022-09-20 18:54:27 +01:00
make-vmlinux.nix build a kernel, using malta_kvm_defconfig 2022-09-20 18:54:27 +01:00
overlay.nix generate a mips squashfs with some s6-rc services 2022-09-19 23:51:38 +01:00
README.md link to CITL mips security paper 2022-09-20 18:24:27 +01:00
run-qemu.sh build a kernel, using malta_kvm_defconfig 2022-09-20 18:54:27 +01:00
run-tests.sh build a kernel, using malta_kvm_defconfig 2022-09-20 18:54:27 +01:00

Liminix

Līminis + Nix

  • Līminis : Latin, genitive declension of limen. "Of the threshold"
  • Nix : a tool for reproducible and declarative configuration management
  • Liminix : a Nix-based system for configuring consumer wifi routers

What is this?

This is a reboot/restart of NixWRT: a Nix-based collection of software tailored for domestic wifi router or IoT device devices, of the kind that OpenWrt or DD-WRT or Gargoyle or Tomato run on.

This is not NixOS-on-your-router: it's aimed at devices that are underpowered for the full NixOS experience.

Running tests

Assuming you have nixpkgs checked out in a peer directory of this one,

NIX_PATH=nixpkgs=../nixpkgs:$NIX_PATH ./run-tests.sh

Articles of interest

  • Build Safety of Software in 28 Popular Home Routers: "of the access points and routers we reviewed, not a single one took full advantage of the basic application armoring features provided by the operating system. Indeed, only one or two models even came close, and no brand did well consistently across all models tested"