This repository has no description
tincr: track upstream Mic92/main again
Fork carried only fix/pmtu-blackhole-recovery on a base now 167 commits
behind upstream. Upstream has since landed the principled successors
(pmtu revalidate-idle-UDP, sub-MINMTU convergence, UDPDiscoveryTimeout
floor, gossip dedup purge). tinc-crypto now links openssl-sys, so add
pkg-config + openssl.
author
lassulus
date
(Sep 7, 2026, 2:46 PM CEST)
commit
d79a23fa
d79a23fabe2b546d7dcd39a6ccc557e2a8b401b8
parent
bbe42a61
bbe42a61d712d7afc0f75c5862008e569a6f0300
+54
-16
+38
clan_modules/retiolum.nix
+38
clan_modules/retiolum.nix
···
1
+
{
2
+
config,
3
+
clanLib,
4
+
lib,
5
+
...
6
+
}:
7
+
{
8
+
_class = "clan.service";
9
+
manifest.name = "retiolum";
10
+
manifest.description = "reach machines as <name>.r over retiolum (tinc); preferred over every other network";
11
+
manifest.categories = [ "Network" ];
12
+
manifest.exports.out = [
13
+
"networking"
14
+
"peer"
15
+
];
16
+
17
+
exports = lib.mapAttrs' (instanceName: _: {
18
+
name = clanLib.buildScopeKey {
19
+
inherit instanceName;
20
+
serviceName = config.manifest.name;
21
+
};
22
+
value = {
23
+
# internet/yggdrasil are 2000; retiolum wins
24
+
networking.priority = 3000;
25
+
};
26
+
}) config.instances;
27
+
28
+
roles.default = {
29
+
description = "machine reachable as <name>.r; retiolum itself is configured in 2configs/retiolum.nix";
30
+
perInstance =
31
+
{ mkExports, machine, ... }:
32
+
{
33
+
exports = mkExports {
34
+
peer.hosts = [ { plain = "${machine.name}.r"; } ];
35
+
};
36
+
};
37
+
};
38
+
}
+13
-12
5pkgs/tincr/package.nix
+13
-12
5pkgs/tincr/package.nix
···
3
3
rustPlatform,
4
4
fetchFromGitHub,
5
5
installShellFiles,
6
+
pkg-config,
7
+
openssl,
6
8
}:
7
9
8
10
rustPlatform.buildRustPackage {
9
11
pname = "tincr";
10
-
version = "0-unstable-2026-08-09";
12
+
version = "0-unstable-2026-09-07";
11
13
12
-
# Lassulus/tincr = upstream main + fix/pmtu-blackhole-recovery. Point
13
-
# back at Mic92/main (and revert update.sh) once that lands upstream.
14
-
# Without it a UDP path that dies after being confirmed is never
15
-
# abandoned: udp_confirmed stays pinned, maxmtu sticks at 0, and the
16
-
# peer logs "Fixing MTU ... to 0" every 3.4s forever. Bites any two
17
-
# nodes behind the same non-hairpinning NAT (ignavia <-> coaxmetal).
18
14
src = fetchFromGitHub {
19
-
owner = "Lassulus";
15
+
owner = "Mic92";
20
16
repo = "tincr";
21
-
rev = "32a10488622ad271942078712c3708cab66347ba";
22
-
hash = "sha256-zagrdeJIhS6G0fDjf2tM5oA3HS9kX42UuVm8zOqVvtE=";
17
+
rev = "da74995ab9257057dcfce1d8b12926c77d81bc43";
18
+
hash = "sha256-oslhal/av02Ov8WOhgwVu14Juibrs7G/qVN5cA9Dqvo=";
23
19
};
24
20
25
-
cargoHash = "sha256-3zq9SoOiBRqwXWr7N0NRW+oM2OLu8/IY3B3WCCZ0Chw=";
21
+
cargoHash = "sha256-IaVZzNWxVIpzlLtE4xzt+gIBeIV6xX4/3C/eh1tlE04=";
26
22
27
23
# Just the deployable bin crates; --workspace would pull tinc-ffi's cc.
28
24
cargoBuildFlags = [
···
35
31
# netns tests need bwrap+userns the build sandbox lacks.
36
32
doCheck = false;
37
33
38
-
nativeBuildInputs = [ installShellFiles ];
34
+
# tinc-crypto's ChaPoly backend links openssl-sys against system openssl.
35
+
nativeBuildInputs = [
36
+
installShellFiles
37
+
pkg-config
38
+
];
39
+
buildInputs = [ openssl ];
39
40
40
41
postInstall = ''
41
42
installManPage man/*.[0-9]
+3
-4
5pkgs/tincr/update.sh
+3
-4
5pkgs/tincr/update.sh
···
1
1
#!/usr/bin/env bash
2
2
set -euo pipefail
3
3
4
-
# Tracking the fork branch that carries fix/pmtu-blackhole-recovery.
5
-
# Revert to owner=Mic92 / branch=main once it merges upstream.
6
-
owner=Lassulus
4
+
# Tracks upstream Mic92/main.
5
+
owner=Mic92
7
6
repo=tincr
8
-
branch=fix/pmtu-blackhole-recovery
7
+
branch=main
9
8
attr=tincr
10
9
11
10
pkg="$(dirname "$(realpath "$0")")/package.nix"