This repository has no description
machines.barnacle: join retiolum
barnacle is the first node on kartei darwinModules.retiolum: 2configs/retiolum.nix
is built on nixpkgs services.tinc, systemd-networkd and networking.firewall,
none of which exist on nix-darwin.
Host data (addresses, aliases, peer host files) comes from lass/hosts/barnacle
in kartei; the NixOS machines still read their host data through stockholm and
will not route to barnacle until that kartei pin is bumped.
The Ed25519 keypair is a clan var like on the NixOS nodes, but deployed with
neededFor = "activation": clans /run/secrets installer is Linux-only (tmpfs +
move-mount). No RSA half, tincr is SPTPS/Ed25519-only.
author
lassulus
date
(Sep 11, 2026, 12:16 PM CEST)
commit
a6b1644c
a6b1644cfe286bdda177aa9b9c0722353064da23
parent
ffc841fe
ffc841fe8a45da6053fdbd6b5abbf01185bf86ce
+6
-12
+3
-3
flake.lock
+3
-3
flake.lock
···
485
485
"treefmt-nix": "treefmt-nix_2"
486
486
},
487
487
"locked": {
488
-
"lastModified": 1788812154,
489
-
"narHash": "sha256-Z1CjMkP4x3dhnTdxpVB8h9UR4TMICtEB7tElLONVvXM=",
488
+
"lastModified": 1789120890,
489
+
"narHash": "sha256-OMslqJ6Lqg0e++3cMgtuXKw36zoNy7a2ShDkIc6Owyw=",
490
490
"owner": "krebs",
491
491
"repo": "kartei",
492
-
"rev": "bc93da3e2815802f11925a13b983e977737c2b5d",
492
+
"rev": "ae7dc39ff2dbf7d1663f0624ab9d4c6a96cfcc3f",
493
493
"type": "github"
494
494
},
495
495
"original": {
+1
machines/barnacle/configuration.nix
+1
machines/barnacle/configuration.nix
+2
-9
machines/barnacle/retiolum.nix
+2
-9
machines/barnacle/retiolum.nix
···
16
16
{
17
17
imports = [ self.inputs.kartei.darwinModules.retiolum ];
18
18
19
-
# nodename defaults to networking.hostName ("barnacle"); the addresses are
20
-
# looked up in kartei by that name.
21
-
#
22
-
# Pinned explicitly until krebs/kartei#lass-add-barnacle lands: without the
23
-
# card the module falls back to a hostname-derived IPv6 and no IPv4, which
24
-
# would re-address the running node. Drop both lines once the input carries
25
-
# the card -- the values are identical to lass/hosts/barnacle/retiolum/ip{4,6}.
26
-
networking.retiolum.ipv4 = "10.243.133.117";
27
-
networking.retiolum.ipv6 = "42:0:ce16::ba2c";
19
+
# nodename defaults to networking.hostName ("barnacle"); the addresses and
20
+
# aliases come from lass/hosts/barnacle in kartei.
28
21
29
22
networking.retiolum.ed25519PrivateKeyFile = vars.files."${net}.ed25519_key.priv".path;
30
23