From 55bd3067f08fc8def9e93b2c3acf3978b2c92f3d Mon Sep 17 00:00:00 2001 From: Hilton Chain Date: Wed, 20 Sep 2023 20:09:28 +0800 Subject: [PATCH] services: Add iwd. * rosenthal/services/networking.scm: New file. (%iwd-config-general,%iwd-config-network,%iwd-config-blacklist) (%iwd-config-rank,%iwd-config-scan,%iwd-config-ipv4,%iwd-config-driver-quirks) (iwd-shepherd-service,iwd-service-type): New variables. (uglify-field-name,serialize-field,serialize-string,serialize-boolean,cidr4?) (serialize-cidr4,randomization-method?,serialize-randomization-method) (randomization-range?,serialize-randomization-range,signal-strength?) (serialize-signal-strength,seconds?,serialize-seconds,protection-mode?) (serialize-protection-mode,resolution-method?,serialize-resolution-method) (serialize-integer,serialize-number,serialize-list-of-strings,list-of-cidr4?) (serialize-list-of-cidr4,serialize-iwd-configuration,add-iwd-config) (add-iwd-package): New procedures. (string,cidr4,list-of-strings): New maybe values. (iwd-configuration): New data type. * README.org (Services): Add iwd-service-type. --- README.org | 1 + rosenthal/services/networking.scm | 383 ++++++++++++++++++++++++++++++ 2 files changed, 384 insertions(+) create mode 100644 rosenthal/services/networking.scm diff --git a/README.org b/README.org index f10c3ca..930ec1c 100644 --- a/README.org +++ b/README.org @@ -131,6 +131,7 @@ Non-free Packages / 非自由軟件： + clash-service-type + cloudflare-tunnel-service-type + cloudflare-warp-service-type ++ iwd-service-type + miniflux-service-type + qbittorrent-service-type + (home-)shadow-tls-service-type diff --git a/rosenthal/services/networking.scm b/rosenthal/services/networking.scm new file mode 100644 index 0000000..75802f8 --- /dev/null +++ b/rosenthal/services/networking.scm @@ -0,0 +1,383 @@ +;; SPDX-FileCopyrightText: 2023 Hilton Chain +;; +;; SPDX-License-Identifier: GPL-3.0-or-later + +(define-module (rosenthal services networking) + #:use-module (guix gexp) + #:use-module (guix records) + #:use-module (gnu packages dns) + #:use-module (gnu packages networking) + #:use-module (gnu services) + #:use-module (gnu services configuration) + #:use-module (gnu services dbus) + #:use-module (gnu services shepherd) + #:export (iwd-configuration + iwd-service-type)) + +;; +;; iwd +;; + + +(define %iwd-config-general + '(enable-network-configuration? + ap-ranges + use-default-interface? + address-randomization + address-randomization-range + roam-threshold + roam-threshold-5g + roam-retry-interval + management-frame-protection + control-port-over-nl80211? + disable-anqp? + disable-ocv? + country)) + +(define %iwd-config-network + '(enable-ipv6? + name-resolving-service + route-priority-offset)) + +(define %iwd-config-blacklist + '(initial-timeout + multiplier + maximum-timeout)) + +(define %iwd-config-rank + '(band-modifier-5ghz + band-modifier-6ghz)) + +(define %iwd-config-scan + '(disable-periodic-scan? + initial-periodic-scan-interval + maximum-periodic-scan-interval + disable-roaming-scan?)) + +(define %iwd-config-ipv4 + '(ap-address-pool)) + +(define %iwd-config-driver-quirks + '(default-interface + force-pae + power-save-disable)) + +(define (uglify-field-name field-name) + (case field-name + ((ap-ranges) "APRanges") + ((control-port-over-nl80211?) "ControlPortOverNL80211") + ((disable-anqp?) "DisableANQP") + ((disable-ocv?) "DisableOCV") + ((enable-ipv6?) "EnableIPv6") + ((ap-address-pool) "APAddressPool") + (else (string-delete char-set:punctuation + (string-capitalize (symbol->string field-name)))))) + +(define (serialize-field field-name val) + (format #f "~a = ~a~%" (uglify-field-name field-name) val)) + +(define serialize-string serialize-field) + +(define-maybe string) + +(define (serialize-boolean field-name val) + (serialize-field field-name (if val "true" "false"))) + +(define cidr4? (@@ (gnu services vpn) cidr4?)) + +(define serialize-cidr4 serialize-field) + +(define-maybe cidr4) + +(define (randomization-method? val) + (memv val '(#f once network))) + +(define (serialize-randomization-method field-name val) + (serialize-field field-name (or val 'disabled))) + +(define (randomization-range? val) + (memv val '(full nic))) + +(define serialize-randomization-range serialize-field) + +(define (signal-strength? val) + (and (number? val) + (>= val -100) + (<= val 1))) + +(define serialize-signal-strength serialize-field) + +(define (seconds? val) + (and (integer? val) + (not (negative? val)))) + +(define serialize-seconds serialize-field) + +(define (protection-mode? val) + (memv val '(0 1 2))) + +(define serialize-protection-mode serialize-field) + +(define (resolution-method? val) + (memv val '(#f resolvconf))) + +(define (serialize-resolution-method field-name val) + (serialize-field field-name (or val 'none))) + +(define serialize-integer serialize-field) + +(define serialize-number serialize-field) + +(define (serialize-list-of-strings field-name val) + (serialize-field field-name (string-join val ","))) + +(define-maybe list-of-strings) + +(define list-of-cidr4? (list-of cidr4?)) + +(define serialize-list-of-cidr4 serialize-list-of-strings) + +(define-configuration iwd-configuration + (iwd + (file-like iwd) + "The iwd package to use.") + + (resolvconf + (file-like openresolv) + "The resolvconf package to use.") + + (log-file + (string "/var/log/iwd.log") + "Log file location.") + + ;; General + (enable-network-configuration? + (boolean #f) + "Enable network configuration.") + + (ap-ranges + maybe-cidr4 + "IP range for DHCP server (AP mode).") + + (use-default-interface? + (boolean #f) + "Do not allow iwd to destroy / recreate wireless interfaces at startup, +including default interfaces.") + + (address-randomization + (randomization-method #f) + "Available values are @code{#f}, @code{once} and @code{network}. @code{#f} +for default kernel behavior, @code{once} to randomize the MAC address when iwd +starts or the hardware is detected for the first time, @code{network} to +randomize the MAC address on each connection to a network (the MAC address is +generated based on the SSID and permanent address of the adapter).") + + (address-randomization-range + (randomization-range 'full) + "Available values are @code{nic} and @code{full}. @code{nic} to only +randomize the NIC specific octets (last 3 ones), @code{full} to randomize all +6 octets of the address.") + + (roam-threshold + (signal-strength -70) + "Value in dBm, control how aggressively iwd roams when connected to a 2.4Ghz +access point.") + + (roam-threshold-5g + (signal-strength -76) + "Value in dBm, control how aggressively iwd roams when connected to a 5Ghz +access point.") + + (roam-retry-interval + (seconds 60) + "How long to wait before attempting to roam again if the last roam attempt +failed, or if the signal of the newly connected BSS is still considered weak.") + + (management-frame-protection + (protection-mode 1) + "Available values are @code{0}, @code{1} and @code{2}. @code{0} to +completely turn off MFP (even if the hardware is capable), @code{1} to enable +MFP if the local hardware and remote AP both support it, @code{2} to always +require MFP.") + + (control-port-over-nl80211? + (boolean #t) + "Enable sending EAPoL packets over NL80211.") + + (disable-anqp? + (boolean #t) + "Disable ANQP queries.") + + (disable-ocv? + (boolean #f) + "Disable Operating Channel Validation.") + + (country + maybe-string + "ISO Alpha-2 Country Code. Request the country to be set for the system.") + + ;; Network + (enable-ipv6? + (boolean #t) + "Configure IPv6 addresses and routes.") + + (name-resolving-service + (resolution-method 'resolvconf) + "Available values are @code{resolvconf} and @code{#f}. Configure a DNS +resolution method used by the system and must be used in conjunction with +@code{enable-network-configuration?}. @code{#f} to ignore DNS and domain name +information.") + + (route-priority-offset + (integer 300) + "Configure a route priority offset used by the system to prioritize the +default routes. The route with lower priority offset is preferred.") + + ;; Blacklist + (initial-timeout + (seconds 60) + "The initial time that a BSS spends on the blacklist.") + + (multiplier + (integer 30) + "If the BSS was blacklisted previously and another connection attempt has +failed after the initial timeout has expired, then the BSS blacklist time will +be extended by a multiple of @code{multiplier} for each unsuccessful attempt up +to @code{maximum-timeout} time.") + + (maximum-timeout + (seconds 86400) + "Maximum time that a BSS is blacklisted.") + + ;; Rank + (band-modifier-5ghz + (number 1.0) + "Increase or decrease the preference for 5GHz access points by increasing or +decreasing the value of this modifier.") + + (band-modifier-6ghz + (number 1.0) + "Increase or decrease the preference for 6GHz access points by increasing or +decreasing the value of this modifier.") + + ;; Scan + (disable-periodic-scan? + (boolean #f) + "Disable periodic scan.") + + (initial-periodic-scan-interval + (seconds 10) + "The initial periodic scan interval upon disconnect.") + + (maximum-periodic-scan-interval + (seconds 300) + "The maximum periodic scan interval.") + + (disable-roaming-scan? + (boolean #f) + "Disable roaming scan.") + + ;; IPv4 + (ap-address-pool + (list-of-cidr4 '("192.168.0.0/16")) + "Define the space of IPs used for the AP mode subnet addresses and the DHCP +server.") + + ;; DriverQuirks + (default-interface + maybe-list-of-strings + "List of drivers or glob matches. If a driver in use matches one in this +list, IWD will not attempt to remove and re-create the default interface.") + + (force-pae + maybe-list-of-strings + "List of drivers or glob matches. If a driver in use matches one in this +list, @code{control-port-over-nl80211?} will not be used, and PAE will be used +instead.") + + (power-save-disable + maybe-list-of-strings + "List of drivers or glob matches. If a driver in use matches one in this +list, power save will be disabled.")) + +(define (serialize-iwd-configuration config) + (mixed-text-file + "main.conf" + #~(string-append + "[General]\n" + #$(serialize-configuration config + (filter-configuration-fields + iwd-configuration-fields + %iwd-config-general)) + "[Network]\n" + #$(serialize-configuration config + (filter-configuration-fields + iwd-configuration-fields + %iwd-config-network)) + "[Blacklist]\n" + #$(serialize-configuration config + (filter-configuration-fields + iwd-configuration-fields + %iwd-config-blacklist)) + "[Rank]\n" + #$(serialize-configuration config + (filter-configuration-fields + iwd-configuration-fields + %iwd-config-rank)) + "[Scan]\n" + #$(serialize-configuration config + (filter-configuration-fields + iwd-configuration-fields + %iwd-config-scan)) + "[IPv4]\n" + #$(serialize-configuration config + (filter-configuration-fields + iwd-configuration-fields + %iwd-config-ipv4)) + "[DriverQuirks]\n" + #$(serialize-configuration config + (filter-configuration-fields + iwd-configuration-fields + %iwd-config-driver-quirks))))) + +(define (add-iwd-config-file config) + `(("iwd/main.conf" + ,(serialize-iwd-configuration config)))) + +(define add-iwd-package + (compose list iwd-configuration-iwd)) + +(define (iwd-shepherd-service config) + (match-record config + (iwd resolvconf log-file name-resolving-service) + (let ((conf (serialize-iwd-configuration config)) + (environment + (if (eqv? name-resolving-service 'resolvconf) + #~(list (string-append + "PATH=" #$(file-append resolvconf "/sbin"))) + #~(default-environment-variables)))) + (list (shepherd-service + (documentation "Run iwd") + (provision '(iwd networking)) + (requirement '(user-processes dbus-system)) + (start #~(make-forkexec-constructor + (list (string-append #$iwd "/libexec/iwd")) + #:log-file #$log-file + #:environment-variables #$environment)) + (stop #~(make-kill-destructor)) + (actions (list (shepherd-configuration-action conf)))))))) + +(define iwd-service-type + (service-type + (name 'iwd) + (extensions + (list (service-extension shepherd-root-service-type + iwd-shepherd-service) + (service-extension dbus-root-service-type + add-iwd-package) + (service-extension etc-service-type + add-iwd-config-file) + (service-extension profile-service-type + add-iwd-package))) + (default-value (iwd-configuration)) + (description "Run iwd, the iNet wireless daemon.")))