superconfig/machines/barnacle/ at 8476fd64554f0fc08648d930aba09d97ca51d5e9 · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / machines / barnacle

3 files

at 8476fd64554f0fc08648d930aba09d97ca51d5e9

lassulus barnacle: run 5pkgs/tincr via tincr's darwin module, drop kartei shim 5w ago

US_INTL.keylayout

machines.barnacle: add US_INTL layout

11 months ago

configuration.nix

machines.barnacle: join retiolum barnacle is the first node on kartei darwinModules.retiolum: 2configs/retiolum.nix is built on nixpkgs services.tinc, systemd-networkd and networking.firewall, none of which exist on nix-darwin. Host data (addresses, aliases, peer host files) comes from lass/hosts/barnacle in kartei; the NixOS machines still read their host data through stockholm and will not route to barnacle until that kartei pin is bumped. The Ed25519 keypair is a clan var like on the NixOS nodes, but deployed with neededFor = "activation": clans /run/secrets installer is Linux-only (tmpfs + move-mount). No RSA half, tincr is SPTPS/Ed25519-only.

1 month ago

barnacle: run 5pkgs/tincr via tincr's darwin module, drop kartei shim kartei's darwinModules.retiolum pulled tincd from kartei's own tincr input, so barnacle ran a different daemon than the NixOS nodes. Now every machine runs 5pkgs/tincr (Lassulus/tincr fix/edge-walk-address): barnacle imports tincr's darwinModules.tincr directly with services.tincr.package set, and reproduces the shim's settings itself (node data from kartei's hosts.nix exactly as 2configs/retiolum.nix does, connectTo = krebs hubs + neoprism/starkstrom, LocalDiscovery, Broadcast = no, the BEGIN/END RETIOLUM HOSTS block in /etc/hosts). kartei is host database only on both platforms. New flake input `tincr` (fork branch, module only); kartei's tincr/ crane/fenix follow it so the lock has a single node each.

1 month ago