Compare commits
185 Commits
hydra
...
nixos-unst
Yves Dubromelle
Yves Dubromelle
Yves Dubromelle
Yves Dubromelle
Yves Dubromelle
Jean-Pierre PRUNARET
Yves Dubromelle
@ -0,0 +1,27 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
mkIf (flags.radio && flags.graphical) {
|
||||||
|
|
||||||
|
# Paquets
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
## GUI
|
||||||
|
chirp # Configuration de radios portatives
|
||||||
|
gqrx # GUI
|
||||||
|
cubicsdr # Another GUI
|
||||||
|
gnuradio-with-packages # Software Defined Radio (SDR) software
|
||||||
|
|
||||||
|
## A Trier
|
||||||
|
#inspectrum # Tool for analysing captured signals from sdr receivers
|
||||||
|
];
|
||||||
|
|
||||||
|
nixpkgs.config.permittedInsecurePackages = [
|
||||||
|
"python2.7-Pillow-6.2.2"
|
||||||
|
];
|
||||||
|
}
|
||||||
@ -0,0 +1,48 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
mkIf true {
|
||||||
|
|
||||||
|
nixpkgs.config.packageOverrides = pkgs: {
|
||||||
|
claws-mail = pkgs.claws-mail.override {
|
||||||
|
enablePgp = true;
|
||||||
|
enablePluginArchive = true;
|
||||||
|
#enablePluginFancy = false; # nécessite wekitgtk qui est troué # Option supprimée dans NixOS 20.03
|
||||||
|
enablePluginPdf = true;
|
||||||
|
enablePluginRavatar = true;
|
||||||
|
enablePluginSmime = true;
|
||||||
|
enablePluginVcalendar = true;
|
||||||
|
enableSpellcheck = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
ffmpeg-full = pkgs.ffmpeg-full.override {
|
||||||
|
nonfreeLicensing = true;
|
||||||
|
nvenc = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
# bug connu : https://nixos.org/nix-dev/2014-December/015225.html
|
||||||
|
# find /nix/store/ -maxdepth 1 -type d -name "*gnuradio-*"
|
||||||
|
# Commande pour générer le path : find /nix/store/ -maxdepth 1 -type d -name "*gnuradio-*"|paste -d: -s -
|
||||||
|
gnuradio-with-packages = pkgs.gnuradio-with-packages.override {
|
||||||
|
extraPackages = with pkgs; [
|
||||||
|
gnuradio-ais
|
||||||
|
gnuradio-gsm
|
||||||
|
gnuradio-nacl
|
||||||
|
gnuradio-osmosdr # support des dongle Realtek
|
||||||
|
gnuradio-rds # support du décodage de RDS sur les radio FM
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
mumble = pkgs.mumble.override { pulseSupport = true; };
|
||||||
|
};
|
||||||
|
|
||||||
|
#nixpkgs.config.permittedInsecurePackages = [
|
||||||
|
# "webkitgtk-2.4.11" # pour que le plugin fancy de claws-mail fonctionne
|
||||||
|
#];
|
||||||
|
}
|
||||||
@ -0,0 +1,29 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
mkIf flags.radio {
|
||||||
|
|
||||||
|
# pour que ça marche
|
||||||
|
# sudo rmmod dvb_usb_rtl28xxu
|
||||||
|
|
||||||
|
# lecture radio FM
|
||||||
|
# rtl_fm -f 96.9e6 -M wbfm -s 440000 -r 44100 - | aplay -r 44100 -f S16_LE
|
||||||
|
# rtl_fm -f 96.95e6 -M wbfm -s 441000 -r 44100 - | aplay -r 44100 -f S16_LE -t raw -c 1
|
||||||
|
# rtl_fm -f 96.95e6 -M wbfm -s 441000 -r 44100 -E deemp - |pv| aplay -r 44100 -f S16_LE -t raw -c 1
|
||||||
|
|
||||||
|
# Paquets
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
gnss-sdr # Global Navigation Satellite Systems software-defined receiver
|
||||||
|
liquid-dsp # Digital signal processing library for software-defined radios
|
||||||
|
rtl-sdr # Turns your Realtek RTL2832 based DVB dongle into a SDR receiver
|
||||||
|
dump1090 # Listen to planes ADS-B and view them on a map
|
||||||
|
];
|
||||||
|
|
||||||
|
hardware.rtl-sdr.enable = true;
|
||||||
|
}
|
||||||
@ -1,20 +1,28 @@
|
|||||||
with import <nixpkgs> {};
|
{pkgs, ... }:
|
||||||
|
|
||||||
vim_configurable.customize {
|
let
|
||||||
# Specifies the vim binary name.
|
myVim = pkgs.vim_configurable.customize {
|
||||||
# E.g. set this to "my-vim" and you need to type "my-vim" to open this vim
|
# Specifies the vim binary name.
|
||||||
# This allows to have multiple vim packages installed (e.g. with a different set of plugins)
|
# E.g. set this to "my-vim" and you need to type "my-vim" to open this vim
|
||||||
name = "vim";
|
# This allows to have multiple vim packages installed (e.g. with a different set of plugins)
|
||||||
vimrcConfig.customRC = builtins.readFile ./vimrc;
|
name = "vim";
|
||||||
vimrcConfig.vam.knownPlugins = pkgs.vimPlugins;
|
vimrcConfig.customRC = builtins.readFile ./vimrc;
|
||||||
vimrcConfig.vam.pluginDictionaries = [
|
vimrcConfig.packages.myVimPackage = with pkgs.vimPlugins; {
|
||||||
{ names = [
|
start = [
|
||||||
# Here you can place all your vim plugins
|
wombat256-vim
|
||||||
# They are installed managed by `vam` (a vim plugin manager)
|
];
|
||||||
#"vim-addon-nix"
|
opt = [
|
||||||
"elm-vim"
|
elm-vim
|
||||||
"vim-nix"
|
vim-fish
|
||||||
"wombat256-vim"
|
vim-nix
|
||||||
]; }
|
vimwiki
|
||||||
];
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
in {
|
||||||
|
programs.vim = {
|
||||||
|
defaultEditor = true;
|
||||||
|
package = myVim;
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|||||||
@ -1,16 +0,0 @@
|
|||||||
{ config, lib, pkgs, ... }:
|
|
||||||
|
|
||||||
let
|
|
||||||
inherit (lib) mkIf mkMerge mkThenElse;
|
|
||||||
cfg = config.r6d.config-generator;
|
|
||||||
computers = config.r6d.computers;
|
|
||||||
profiles = config.r6d.profiles;
|
|
||||||
in
|
|
||||||
|
|
||||||
mkIf cfg.auto-upgrade {
|
|
||||||
|
|
||||||
# Automatic update & automatic clean
|
|
||||||
|
|
||||||
system.autoUpgrade.enable = true;
|
|
||||||
nix.gc.automatic = true;
|
|
||||||
}
|
|
||||||
@ -1,26 +0,0 @@
|
|||||||
# http://www.git-attitude.fr/2014/09/15/30-options-git-qui-gagnent-a-etre-connues/
|
|
||||||
[color]
|
|
||||||
diff = auto
|
|
||||||
branch = auto
|
|
||||||
interactive = auto
|
|
||||||
pager = true
|
|
||||||
showbranch = auto
|
|
||||||
status = auto
|
|
||||||
[alias]
|
|
||||||
a = add -p
|
|
||||||
br = for-each-ref --sort=committerdate refs/heads/ --format='%(committerdate:short)\t%(authorname)\t%(refname:short)'
|
|
||||||
ci = commit
|
|
||||||
co = checkout
|
|
||||||
ff = pull --ff-only
|
|
||||||
oops = commit --amend --no-edit
|
|
||||||
# Show files ignored by git
|
|
||||||
ignored = ls-files -o -i --exclude-standard
|
|
||||||
ls = ls-files
|
|
||||||
st = status
|
|
||||||
# Logs
|
|
||||||
lol = log --graph --decorate --pretty=oneline --abbrev-commit
|
|
||||||
lola = log --graph --decorate --pretty=oneline --abbrev-commit --all
|
|
||||||
[push]
|
|
||||||
default = simple
|
|
||||||
[core]
|
|
||||||
editor = /usr/bin/env vim
|
|
||||||
@ -0,0 +1,30 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
{
|
||||||
|
|
||||||
|
# Automatic update & automatic clean
|
||||||
|
|
||||||
|
system.autoUpgrade.enable = flags.auto-upgrade;
|
||||||
|
nix = {
|
||||||
|
extraOptions = ''
|
||||||
|
experimental-features = nix-command flakes
|
||||||
|
'';
|
||||||
|
settings = {
|
||||||
|
auto-optimise-store = true;
|
||||||
|
# Nombre de process d'installation en parrallèle effectués par Nix
|
||||||
|
cores = 0;
|
||||||
|
};
|
||||||
|
gc = {
|
||||||
|
automatic = true;
|
||||||
|
dates = "daily";
|
||||||
|
options = "--delete-older-than 7d";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
@ -0,0 +1,41 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
mkIf true {
|
||||||
|
# Ajout du support des yobikey & hyperfido
|
||||||
|
## source des valeurs udev : https://github.com/Yubico/libu2f-host/blob/master/70-u2f.rules
|
||||||
|
|
||||||
|
## source car udev sur nixos semble ancien : https://raw.githubusercontent.com/Yubico/libu2f-host/master/70-old-u2f.rules
|
||||||
|
services.udev.extraRules = ''
|
||||||
|
# this udev file should be used with udev older than 188
|
||||||
|
ACTION!="add|change", GOTO="u2f_end"
|
||||||
|
|
||||||
|
# Yubico YubiKey
|
||||||
|
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120|0402|0403|0406|0407|0410", GROUP="plugdev", MODE="0660"
|
||||||
|
|
||||||
|
# Happlink (formerly Plug-Up) Security KEY
|
||||||
|
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="2581", ATTRS{idProduct}=="f1d0", GROUP="plugdev", MODE="0660"
|
||||||
|
|
||||||
|
# Neowave Keydo and Keydo AES
|
||||||
|
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1e0d", ATTRS{idProduct}=="f1d0|f1ae", GROUP="plugdev", MODE="0660"
|
||||||
|
|
||||||
|
# HyperSecu HyperFIDO
|
||||||
|
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="096e", ATTRS{idProduct}=="0880", GROUP="plugdev", MODE="0660"
|
||||||
|
|
||||||
|
LABEL="u2f_end"
|
||||||
|
|
||||||
|
SUBSYSTEM=="usb", ATTRS{idVendor}=="0bda", ATTRS{idProduct}=="2838", GROUP="audio", MODE="0666", SYMLINK+="rtl_sdr"
|
||||||
|
'';
|
||||||
|
|
||||||
|
security.pam.u2f.enable = true;
|
||||||
|
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
libu2f-host
|
||||||
|
];
|
||||||
|
}
|
||||||
@ -0,0 +1,50 @@
|
|||||||
|
let
|
||||||
|
lib = with import <nixpkgs> {}; pkgs.lib;
|
||||||
|
|
||||||
|
profiles = {
|
||||||
|
isDesktopEnvironment = {
|
||||||
|
awesome = true;
|
||||||
|
internetSuite = true;
|
||||||
|
graphical = true;
|
||||||
|
multimediaSuite = true;
|
||||||
|
officeSuite = true;
|
||||||
|
pulseaudio = true;
|
||||||
|
securitySuite = true;
|
||||||
|
};
|
||||||
|
isWorkstation = {
|
||||||
|
docker = true;
|
||||||
|
developpement = true;
|
||||||
|
developpement-elm = true;
|
||||||
|
developpement-haskell = true;
|
||||||
|
developpement-java = true;
|
||||||
|
developpement-rust = true;
|
||||||
|
};
|
||||||
|
#isServer = {
|
||||||
|
#};
|
||||||
|
};
|
||||||
|
|
||||||
|
in
|
||||||
|
|
||||||
|
with lib; rec{
|
||||||
|
# Apply the profiles (pre-defined + custom) to the whole directory
|
||||||
|
applyProfilesToDirectory = customProfiles: directory:
|
||||||
|
lib.mapAttrs (applyProfilesToMachine customProfiles) directory;
|
||||||
|
|
||||||
|
# Apply the profiles (pre-defined + custom) to a machine
|
||||||
|
applyProfilesToMachine = customProfiles: machineName: machineOptions:
|
||||||
|
{ configurationFlags = lib.recursiveUpdate (generateFlagsSet customProfiles machineOptions.profiles) machineOptions.configurationFlags;
|
||||||
|
configurationOptions = machineOptions.configurationOptions;
|
||||||
|
profiles = machineOptions.profiles;
|
||||||
|
};
|
||||||
|
|
||||||
|
# Generate a set of configuration flags based on profiles
|
||||||
|
generateFlagsSet = customProfiles: machineProfiles:
|
||||||
|
let
|
||||||
|
allProfiles = recursiveUpdate profiles customProfiles;
|
||||||
|
conditionalFlags = name: value:
|
||||||
|
if machineProfiles.${name}
|
||||||
|
then value
|
||||||
|
else {};
|
||||||
|
in
|
||||||
|
foldr (a: b: a // b) {} (mapAttrsToList conditionalFlags allProfiles);
|
||||||
|
}
|
||||||
@ -0,0 +1,8 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
EXCLUSION="~$|swp$|swo$"
|
||||||
|
|
||||||
|
while inotifywait --exclude $EXCLUSION -r -e modify .
|
||||||
|
do
|
||||||
|
$@
|
||||||
|
done
|
||||||
@ -0,0 +1,216 @@
|
|||||||
|
{ config, lib, pkgs, r6d, ... }:
|
||||||
|
let
|
||||||
|
inherit (lib) mkEnableOption mkTextOption mkIf mkMerge mkOption singleton types;
|
||||||
|
|
||||||
|
# TODO: Anglish :)
|
||||||
|
machineOptions = types.submodule {
|
||||||
|
options = {
|
||||||
|
|
||||||
|
configurationFlags = {
|
||||||
|
#enable = mkEnableOption "Génération de la configuration d'une machine.";
|
||||||
|
awesome = mkEnableOption "Profil pour activer le gestionnaire de fenêtre awesome.";
|
||||||
|
auto-upgrade = mkEnableOption "Profil pour activer les mises à jour automatiques.";
|
||||||
|
cartographie = mkEnableOption "Profil pour activer les outils de gestion de données géographiques.";
|
||||||
|
conception-assistee = mkEnableOption "Profil pour activer les outils de conception électronique & modélisation 3D";
|
||||||
|
database_postgres = mkEnableOption "Profil pour activer le SGBD PostgreSQL.";
|
||||||
|
developpement = mkEnableOption "Profil pour activer les outils de développement";
|
||||||
|
developpement-elm = mkEnableOption "Profil pour activer les outils de développement Elm";
|
||||||
|
developpement-haskell = mkEnableOption "Profil pour activer les outils de développement Haskell";
|
||||||
|
developpement-java = mkEnableOption "Profil pour activer les outils de développement Java";
|
||||||
|
developpement-rust = mkEnableOption "Profil pour activer les outils de développement Rust";
|
||||||
|
docker = mkEnableOption "Profil pour l'utilisation de Docker.";
|
||||||
|
dovecot = mkEnableOption "Profil pour activer le serveur Dovecot.";
|
||||||
|
dns_autorite = mkEnableOption "Profil pour servir les fichiers de zone DNS.";
|
||||||
|
dns_resolveur = mkEnableOption "Profil pour activer un résolveur DNS local.";
|
||||||
|
edition-musique = mkEnableOption "Profil pour la création/édition de musique.";
|
||||||
|
edition-photo = mkEnableOption "Profil pour la création/édition de photos.";
|
||||||
|
edition-video = mkEnableOption "Profil pour la création/édition de video.";
|
||||||
|
elasticsearch = mkEnableOption "Profil pour activer le service elasticsearch.";
|
||||||
|
fail2ban = mkEnableOption "Profil pour activer Fail2ban.";
|
||||||
|
graphical = mkEnableOption "Profil pour activer les applications graphgiques.";
|
||||||
|
hydra-builder = mkEnableOption "Profil pour une machine qui compile pour hydra.";
|
||||||
|
hydra-core = mkEnableOption "Profil pour un serveur hydra.";
|
||||||
|
kibana = mkEnableOption "Profil pour activer le service kibana.";
|
||||||
|
internetSuite = mkEnableOption "Profil pour la suite de logiciels pour Internet.";
|
||||||
|
jetbrains-licensed = mkEnableOption "Profil pour la suite de développement Jetbrains payante (sous-ensemble).";
|
||||||
|
jeux = mkEnableOption "Profil pour les jeux vidéos.";
|
||||||
|
laptop = mkEnableOption "Profil pour les outils spécifiques aux ordinateurs portables.";
|
||||||
|
locate = mkEnableOption "Profil pour activer la fonction locate.";
|
||||||
|
mailboxes = mkEnableOption "Profil pour stocker les mails dans des boîtes aux lettres.";
|
||||||
|
multimediaSuite = mkEnableOption "Profil pour la suite multimédia.";
|
||||||
|
munin = mkEnableOption "Profil pour activer la supervision par Munin";
|
||||||
|
murmur = mkEnableOption "Profil pour activer un serveur Mumble (murmur)";
|
||||||
|
nixos-manual = mkEnableOption "Profil pour activer la documentation nixos en local sur un TTY";
|
||||||
|
nix-serve-server = mkEnableOption "Profil pour que la machine soit un serveur de cache nix.";
|
||||||
|
nixStoreProxyCache = mkEnableOption "Profil pour activer le proxy cahce nginx pour le nix store";
|
||||||
|
officeSuite = mkEnableOption "Profil pour la suite bureautique";
|
||||||
|
pipewire = mkEnableOption "Profil pour activer pipewire.";
|
||||||
|
print = mkEnableOption "Profil pour activer cups & pouvoir imprimer.";
|
||||||
|
pulseaudio = mkEnableOption "Profil pour activer pulseaudio.";
|
||||||
|
rabbitmq = mkEnableOption "Profil pour activer le service de messagerie AMQP.";
|
||||||
|
radio = mkEnableOption "Profil pour activer les outils pour faire de radio numérique - SDR.";
|
||||||
|
radicale = mkEnableOption "Profil pour activer le service d'hébergement de calendrier + tâches & contacts.";
|
||||||
|
rmilter = mkEnableOption "Profil pour activer le filtrage de mails par postfix.";
|
||||||
|
scanner = mkEnableOption "Profil pour que les scanners soient utilisable.";
|
||||||
|
securitySuite = mkEnableOption "Profil pour la suite de logiciels de sécurité.";
|
||||||
|
smokeping = mkEnableOption "Profil pour activer le monitoring réseau par smokeping.";
|
||||||
|
swap = mkEnableOption "Profil pour que le swap soit activé.";
|
||||||
|
virtualbox = mkEnableOption "Profil pour l'utilisation de VirtualBox.";
|
||||||
|
xmonad = mkEnableOption "Profil pour activer le gestionnaire de fenêtres xmonad.";
|
||||||
|
znc = mkEnableOption "Profil pour activer le relais IRC ZNC.";
|
||||||
|
};
|
||||||
|
|
||||||
|
configurationOptions = {
|
||||||
|
|
||||||
|
ipAddress = mkOption {
|
||||||
|
description = "Adresse IP.";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
nix-serve-server = mkEnableOption "nix-serve server.";
|
||||||
|
nix-serve-client = {
|
||||||
|
enable = mkEnableOption "nix-serve client";
|
||||||
|
servers = mkOption {
|
||||||
|
default = [ https://cache.nixos.org/ ];
|
||||||
|
description = "List of nix-serve servers providing binary caches.";
|
||||||
|
type = types.listOf types.str;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
tinc = {
|
||||||
|
enable = mkEnableOption "Enable tinc service.";
|
||||||
|
dnsFQDN = mkOption {
|
||||||
|
example = "device.example.net.";
|
||||||
|
description = "DNS name of host pointing to tunnel IP.";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
connectToAddress = mkOption {
|
||||||
|
default = "";
|
||||||
|
example = "192.168.1.1";
|
||||||
|
description = "External address to connect from another node.";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
vpnAddress = mkOption {
|
||||||
|
example = "192.168.69.69/24";
|
||||||
|
description = "VPN local node IP address.";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
vpnCidrLength = mkOption {
|
||||||
|
default = 24;
|
||||||
|
example = 24;
|
||||||
|
description = "VPN netmask length.";
|
||||||
|
type = lib.types.int;
|
||||||
|
};
|
||||||
|
extraConfig = mkOption {
|
||||||
|
default = "";
|
||||||
|
example = ''
|
||||||
|
Mode = router
|
||||||
|
ConnecTo = bar
|
||||||
|
'';
|
||||||
|
description = "Configuration supplémentaire pour tinc.";
|
||||||
|
type = lib.types.str;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
quagga = {
|
||||||
|
enable = mkEnableOption "Enable Quagga + BGP service";
|
||||||
|
bgpConfig = mkOption {
|
||||||
|
type = types.lines;
|
||||||
|
default = "";
|
||||||
|
example =''
|
||||||
|
router bgp 65001
|
||||||
|
neighbor 10.0.0.1 remote-as 65001
|
||||||
|
'';
|
||||||
|
description = ''
|
||||||
|
BGP configuration statements.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
windowsBoot = {
|
||||||
|
enable = mkEnableOption "Activation du démarrage de Windows par Grub";
|
||||||
|
drive = mkOption {
|
||||||
|
description = "Lecteur sur lequel est présent le système Windows (au format GRUB)";
|
||||||
|
type = lib.types.str;
|
||||||
|
default = "hd0,1";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
windowsMount ={
|
||||||
|
enable = mkEnableOption "Montage de la partition data Windows";
|
||||||
|
device = mkOption {
|
||||||
|
description = "Lecteur sur lequel est présent le disque de data Windows";
|
||||||
|
type = lib.types.str;
|
||||||
|
default = "/dev/sda2";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
profiles = {
|
||||||
|
# Domaine
|
||||||
|
isDubronetwork = mkEnableOption "Pour distinguer les machines dubronetwork.";
|
||||||
|
isDubronetworkServer = mkEnableOption "Pour distinguer les machines dubronetwork avec Server.";
|
||||||
|
isDubronetworkWorkstation = mkEnableOption "Pour distinguer les machines dubronetwork avec Workstation.";
|
||||||
|
isPrunetwork = mkEnableOption "Pour distinguer les machines prunetwork.";
|
||||||
|
isPrunetworkServer = mkEnableOption "Pour distinguer les machines prunetwork avec Server.";
|
||||||
|
isPrunetworkWorkstation = mkEnableOption "Pour distinguer les machines prunetwork avec Workstation.";
|
||||||
|
# Utilisation machine
|
||||||
|
isDesktopEnvironment = mkEnableOption "Pour indiquer une machine avec interface graphique.";
|
||||||
|
isServer = mkEnableOption "Pour indiquer qu'il s'agit d'un serveur.";
|
||||||
|
isWorkstation = mkEnableOption "Pour indiquer que la machine sert à travailler.";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
{
|
||||||
|
options = {
|
||||||
|
r6d.machines = mkOption {
|
||||||
|
type = types.attrsOf machineOptions;
|
||||||
|
description = ''
|
||||||
|
Machines directory.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
config = {
|
||||||
|
/**
|
||||||
|
prototype : (expression A ) && tests || !(expression A) -> réalise le test si A est satisfait, et continue sinon = pas de politique
|
||||||
|
*/
|
||||||
|
assertions = [
|
||||||
|
{
|
||||||
|
assertion = (currentMachine.profiles.isWorkstation && (currentMachine.configurationFlags.graphical == true))
|
||||||
|
|| (!currentMachine.profiles.isWorkstation);
|
||||||
|
message = "A workstation requires a graphical environement.";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
assertion = (currentMachine.profiles.isDesktopEnvironment && (currentMachine.configurationFlags.graphical == true))
|
||||||
|
|| (!currentMachine.profiles.isDesktopEnvironment);
|
||||||
|
message = "A desktop station requires a graphical environement.";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
assertion = (currentMachine.profiles.isDesktopEnvironment && (config.services.xserver.enable == true))
|
||||||
|
|| (!currentMachine.profiles.isDesktopEnvironment);
|
||||||
|
message = "You need to enable xserver manually.";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
assertion = (currentMachine.profiles.isServer && (currentMachine.profiles.isDesktopEnvironment == false))
|
||||||
|
|| (!currentMachine.profiles.isServer);
|
||||||
|
message = "A graphical environment is not required for a server.";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
/* At least one (authorité or resolveur) */
|
||||||
|
assertion = flags.dns_autorite || flags.dns_resolveur;
|
||||||
|
message = "DNS service is disabled. You must enable a dns recursor or autoritative.";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
/* authorité xor resolveur */
|
||||||
|
assertion = (flags.dns_autorite && ! flags.dns_resolveur)
|
||||||
|
|| (!flags.dns_autorite && flags.dns_resolveur);
|
||||||
|
message = "Both authoritative and recursor DNS services can't be live simultaneously. Choose only one!";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
};
|
||||||
|
}
|
||||||
@ -0,0 +1,14 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
mkIf true {
|
||||||
|
|
||||||
|
# prise en charge de la souris en console
|
||||||
|
services.gpm.enable = true;
|
||||||
|
}
|
||||||
@ -0,0 +1,123 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
: <<=cut
|
||||||
|
|
||||||
|
=head1 NAME
|
||||||
|
|
||||||
|
parse Chrony Tracking output for timeserver status information
|
||||||
|
|
||||||
|
=head1 APPLICABLE SYSTEMS
|
||||||
|
|
||||||
|
Any system with a local chronyd service.
|
||||||
|
|
||||||
|
=head1 CONFIGURATION
|
||||||
|
|
||||||
|
No configuration.
|
||||||
|
|
||||||
|
=head1 MAGIC MARKERS
|
||||||
|
|
||||||
|
#%# family=auto
|
||||||
|
#%# capabilities=autoconf
|
||||||
|
|
||||||
|
=head1 VERSION
|
||||||
|
|
||||||
|
Revision 0.1 2008/08/23 13:06:00 joti
|
||||||
|
|
||||||
|
First version only chronyc tracking, autodetection included.
|
||||||
|
|
||||||
|
Revision 0.2 2008/10/11 16:09:00 joti
|
||||||
|
|
||||||
|
Added scaling of other values to match with frequency, added more description to fields
|
||||||
|
|
||||||
|
Revision 0.3 2014/02/16 zjttoefs
|
||||||
|
|
||||||
|
reduce forking by using awk
|
||||||
|
do not limit output precision
|
||||||
|
add stratum monitoring
|
||||||
|
detect slow/fast time or freqency and adjust sign of value accordingly
|
||||||
|
remove commented out code
|
||||||
|
|
||||||
|
Revision 0.4 2016/11/10 Lars Kruse
|
||||||
|
|
||||||
|
rewrite field handling
|
||||||
|
use "which" for "chronyc" location
|
||||||
|
switch from "bash" to "sh"
|
||||||
|
fix exit code of failing "autoconf"
|
||||||
|
|
||||||
|
=head1 AUTHOR
|
||||||
|
|
||||||
|
joti
|
||||||
|
zjttoefs
|
||||||
|
Lars Kruse <devel@sumpfralle.de>
|
||||||
|
|
||||||
|
=cut
|
||||||
|
|
||||||
|
CHRONYC="$(which chronyc | head -1)"
|
||||||
|
|
||||||
|
# Frequency has extremely higher values than other. Therefore they are fitted by scaling via suitable factors.
|
||||||
|
# field definitions:
|
||||||
|
# - munin fieldname
|
||||||
|
# - factor for graph visualization (all values are supposed to reach a similar dimension)
|
||||||
|
# - regular expression of the chrony output line (may not contain whitespace, case insensitive)
|
||||||
|
# - label (may include "%d" for including the factor; may contain whitespace)
|
||||||
|
fields="stratum 1 ^Stratum Stratum
|
||||||
|
systime 1000000 ^System.time System Time (us)
|
||||||
|
offsetlast 1000000 ^Last.offset Last Offset (us)
|
||||||
|
offsetrms 1000000 ^RMS.offset RMS Offset (us)
|
||||||
|
frequency 1 ^Frequency Frequency (ppm)
|
||||||
|
residualfreq 1 ^Residual.freq Residual Freq (ppm)
|
||||||
|
skew 1 ^Skew Skew (ppm)
|
||||||
|
rootdelay 1000000 ^Root.delay Root Delay (us)
|
||||||
|
rootdispersion 1000000 ^Root.dispersion Root Dispersion (us)
|
||||||
|
updateinterval 1 ^Update.interval Update Interval (s)"
|
||||||
|
|
||||||
|
# chrony example output (v2.4.1):
|
||||||
|
# Reference ID : 131.188.3.221 (ntp1.rrze.uni-erlangen.de)
|
||||||
|
# Stratum : 2
|
||||||
|
# Ref time (UTC) : Thu Nov 10 22:39:50 2016
|
||||||
|
# System time : 0.000503798 seconds slow of NTP time
|
||||||
|
# Last offset : +0.000254355 seconds
|
||||||
|
# RMS offset : 0.002186779 seconds
|
||||||
|
# Frequency : 17.716 ppm slow
|
||||||
|
# Residual freq : +0.066 ppm
|
||||||
|
# Skew : 4.035 ppm
|
||||||
|
# Root delay : 0.042980 seconds
|
||||||
|
# Root dispersion : 0.005391 seconds
|
||||||
|
# Update interval : 258.4 seconds
|
||||||
|
# Leap status : Normal
|
||||||
|
|
||||||
|
|
||||||
|
if [ "$1" = "autoconf" ]; then
|
||||||
|
if [ -n "$CHRONYC" ] && [ -x "$CHRONYC" ]; then
|
||||||
|
echo yes
|
||||||
|
else
|
||||||
|
echo "no (missing 'chronyc' executable)"
|
||||||
|
fi
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$1" = "config" ]; then
|
||||||
|
echo 'graph_title Chrony Tracking Stats'
|
||||||
|
echo 'graph_args --base 1000 -l 0'
|
||||||
|
echo 'graph_vlabel (time,ppm)'
|
||||||
|
echo 'graph_category time'
|
||||||
|
echo 'graph_scale no'
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
# insert the factor, if "%d" is part of the label
|
||||||
|
printf "${fieldname}.label $label\n" "$factor"
|
||||||
|
echo "${fieldname}.type GAUGE"
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
chrony_status="$("$CHRONYC" tracking)"
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
status_line="$(echo "$chrony_status" | grep -i -- "$regex " | cut -d ":" -f 2-)"
|
||||||
|
if [ -z "$status_line" ]; then
|
||||||
|
value="U"
|
||||||
|
else
|
||||||
|
# the keyword "slow" indicates negative values
|
||||||
|
value="$(echo "$status_line" | awk '{ /slow/ ? SIGN=-1 : SIGN=1; print $1 * SIGN * '"$factor"' }')"
|
||||||
|
fi
|
||||||
|
echo "${fieldname}.value $value"
|
||||||
|
done
|
||||||
@ -0,0 +1,116 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
: <<=cut
|
||||||
|
|
||||||
|
=head1 NAME
|
||||||
|
|
||||||
|
parse Chrony Tracking output for timeserver status information
|
||||||
|
|
||||||
|
=head1 APPLICABLE SYSTEMS
|
||||||
|
|
||||||
|
Any system with a local chronyd service.
|
||||||
|
|
||||||
|
=head1 CONFIGURATION
|
||||||
|
|
||||||
|
No configuration.
|
||||||
|
|
||||||
|
=head1 MAGIC MARKERS
|
||||||
|
|
||||||
|
#%# family=auto
|
||||||
|
#%# capabilities=autoconf
|
||||||
|
|
||||||
|
=head1 VERSION
|
||||||
|
|
||||||
|
Revision 0.1 2008/08/23 13:06:00 joti
|
||||||
|
|
||||||
|
First version only chronyc tracking, autodetection included.
|
||||||
|
|
||||||
|
Revision 0.2 2008/10/11 16:09:00 joti
|
||||||
|
|
||||||
|
Added scaling of other values to match with frequency, added more description to fields
|
||||||
|
|
||||||
|
Revision 0.3 2014/02/16 zjttoefs
|
||||||
|
|
||||||
|
reduce forking by using awk
|
||||||
|
do not limit output precision
|
||||||
|
add stratum monitoring
|
||||||
|
detect slow/fast time or freqency and adjust sign of value accordingly
|
||||||
|
remove commented out code
|
||||||
|
|
||||||
|
Revision 0.4 2016/11/10 Lars Kruse
|
||||||
|
|
||||||
|
rewrite field handling
|
||||||
|
use "which" for "chronyc" location
|
||||||
|
switch from "bash" to "sh"
|
||||||
|
fix exit code of failing "autoconf"
|
||||||
|
|
||||||
|
=head1 AUTHOR
|
||||||
|
|
||||||
|
joti
|
||||||
|
zjttoefs
|
||||||
|
Lars Kruse <devel@sumpfralle.de>
|
||||||
|
|
||||||
|
=cut
|
||||||
|
|
||||||
|
CHRONYC="$(which chronyc | head -1)"
|
||||||
|
|
||||||
|
# Frequency has extremely higher values than other. Therefore they are fitted by scaling via suitable factors.
|
||||||
|
# field definitions:
|
||||||
|
# - munin fieldname
|
||||||
|
# - factor for graph visualization (all values are supposed to reach a similar dimension)
|
||||||
|
# - regular expression of the chrony output line (may not contain whitespace, case insensitive)
|
||||||
|
# - label (may include "%d" for including the factor; may contain whitespace)
|
||||||
|
fields="frequency 1 ^Frequency Local Clock Frequency Drift (ppm)
|
||||||
|
residualfreq 1 ^Residual.freq Residual Freq (ppm)
|
||||||
|
skew 1 ^Skew Skew (ppm)"
|
||||||
|
|
||||||
|
# chrony example output (v2.4.1):
|
||||||
|
# Reference ID : 131.188.3.221 (ntp1.rrze.uni-erlangen.de)
|
||||||
|
# Stratum : 2
|
||||||
|
# Ref time (UTC) : Thu Nov 10 22:39:50 2016
|
||||||
|
# System time : 0.000503798 seconds slow of NTP time
|
||||||
|
# Last offset : +0.000254355 seconds
|
||||||
|
# RMS offset : 0.002186779 seconds
|
||||||
|
# Frequency : 17.716 ppm slow
|
||||||
|
# Residual freq : +0.066 ppm
|
||||||
|
# Skew : 4.035 ppm
|
||||||
|
# Root delay : 0.042980 seconds
|
||||||
|
# Root dispersion : 0.005391 seconds
|
||||||
|
# Update interval : 258.4 seconds
|
||||||
|
# Leap status : Normal
|
||||||
|
|
||||||
|
|
||||||
|
if [ "$1" = "autoconf" ]; then
|
||||||
|
if [ -n "$CHRONYC" ] && [ -x "$CHRONYC" ]; then
|
||||||
|
echo yes
|
||||||
|
else
|
||||||
|
echo "no (missing 'chronyc' executable)"
|
||||||
|
fi
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$1" = "config" ]; then
|
||||||
|
echo 'graph_title Chrony Tracking Stats - Frequencies stability'
|
||||||
|
echo 'graph_args --base 1000 -l 0'
|
||||||
|
echo 'graph_vlabel (ppm)'
|
||||||
|
echo 'graph_category time'
|
||||||
|
echo 'graph_scale no'
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
# insert the factor, if "%d" is part of the label
|
||||||
|
printf "${fieldname}.label $label\n" "$factor"
|
||||||
|
echo "${fieldname}.type GAUGE"
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
chrony_status="$("$CHRONYC" tracking)"
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
status_line="$(echo "$chrony_status" | grep -i -- "$regex " | cut -d ":" -f 2-)"
|
||||||
|
if [ -z "$status_line" ]; then
|
||||||
|
value="U"
|
||||||
|
else
|
||||||
|
# the keyword "slow" indicates negative values
|
||||||
|
value="$(echo "$status_line" | awk '{ /slow/ ? SIGN=-1 : SIGN=1; print $1 * SIGN * '"$factor"' }')"
|
||||||
|
fi
|
||||||
|
echo "${fieldname}.value $value"
|
||||||
|
done
|
||||||
@ -0,0 +1,116 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
: <<=cut
|
||||||
|
|
||||||
|
=head1 NAME
|
||||||
|
|
||||||
|
parse Chrony Tracking output for timeserver status information
|
||||||
|
|
||||||
|
=head1 APPLICABLE SYSTEMS
|
||||||
|
|
||||||
|
Any system with a local chronyd service.
|
||||||
|
|
||||||
|
=head1 CONFIGURATION
|
||||||
|
|
||||||
|
No configuration.
|
||||||
|
|
||||||
|
=head1 MAGIC MARKERS
|
||||||
|
|
||||||
|
#%# family=auto
|
||||||
|
#%# capabilities=autoconf
|
||||||
|
|
||||||
|
=head1 VERSION
|
||||||
|
|
||||||
|
Revision 0.1 2008/08/23 13:06:00 joti
|
||||||
|
|
||||||
|
First version only chronyc tracking, autodetection included.
|
||||||
|
|
||||||
|
Revision 0.2 2008/10/11 16:09:00 joti
|
||||||
|
|
||||||
|
Added scaling of other values to match with frequency, added more description to fields
|
||||||
|
|
||||||
|
Revision 0.3 2014/02/16 zjttoefs
|
||||||
|
|
||||||
|
reduce forking by using awk
|
||||||
|
do not limit output precision
|
||||||
|
add stratum monitoring
|
||||||
|
detect slow/fast time or freqency and adjust sign of value accordingly
|
||||||
|
remove commented out code
|
||||||
|
|
||||||
|
Revision 0.4 2016/11/10 Lars Kruse
|
||||||
|
|
||||||
|
rewrite field handling
|
||||||
|
use "which" for "chronyc" location
|
||||||
|
switch from "bash" to "sh"
|
||||||
|
fix exit code of failing "autoconf"
|
||||||
|
|
||||||
|
=head1 AUTHOR
|
||||||
|
|
||||||
|
joti
|
||||||
|
zjttoefs
|
||||||
|
Lars Kruse <devel@sumpfralle.de>
|
||||||
|
|
||||||
|
=cut
|
||||||
|
|
||||||
|
CHRONYC="$(which chronyc | head -1)"
|
||||||
|
|
||||||
|
# Frequency has extremely higher values than other. Therefore they are fitted by scaling via suitable factors.
|
||||||
|
# field definitions:
|
||||||
|
# - munin fieldname
|
||||||
|
# - factor for graph visualization (all values are supposed to reach a similar dimension)
|
||||||
|
# - regular expression of the chrony output line (may not contain whitespace, case insensitive)
|
||||||
|
# - label (may include "%d" for including the factor; may contain whitespace)
|
||||||
|
fields="stratum 1 ^Stratum Stratum"
|
||||||
|
|
||||||
|
# chrony example output (v2.4.1):
|
||||||
|
# Reference ID : 131.188.3.221 (ntp1.rrze.uni-erlangen.de)
|
||||||
|
# Stratum : 2
|
||||||
|
# Ref time (UTC) : Thu Nov 10 22:39:50 2016
|
||||||
|
# System time : 0.000503798 seconds slow of NTP time
|
||||||
|
# Last offset : +0.000254355 seconds
|
||||||
|
# RMS offset : 0.002186779 seconds
|
||||||
|
# Frequency : 17.716 ppm slow
|
||||||
|
# Residual freq : +0.066 ppm
|
||||||
|
# Skew : 4.035 ppm
|
||||||
|
# Root delay : 0.042980 seconds
|
||||||
|
# Root dispersion : 0.005391 seconds
|
||||||
|
# Update interval : 258.4 seconds
|
||||||
|
# Leap status : Normal
|
||||||
|
|
||||||
|
|
||||||
|
if [ "$1" = "autoconf" ]; then
|
||||||
|
if [ -n "$CHRONYC" ] && [ -x "$CHRONYC" ]; then
|
||||||
|
echo yes
|
||||||
|
else
|
||||||
|
echo "no (missing 'chronyc' executable)"
|
||||||
|
fi
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$1" = "config" ]; then
|
||||||
|
echo 'graph_title Chrony Tracking Stats - Stratum'
|
||||||
|
echo 'graph_args --base 1000 -l 0'
|
||||||
|
echo 'graph_vlabel (stratum)'
|
||||||
|
echo 'graph_category time'
|
||||||
|
echo 'graph_scale no'
|
||||||
|
echo 'stratum.warning 8'
|
||||||
|
echo 'stratum.critical 11'
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
# insert the factor, if "%d" is part of the label
|
||||||
|
printf "${fieldname}.label $label\n" "$factor"
|
||||||
|
echo "${fieldname}.type GAUGE"
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
chrony_status="$("$CHRONYC" tracking)"
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
status_line="$(echo "$chrony_status" | grep -i -- "$regex " | cut -d ":" -f 2-)"
|
||||||
|
if [ -z "$status_line" ]; then
|
||||||
|
value="U"
|
||||||
|
else
|
||||||
|
# the keyword "slow" indicates negative values
|
||||||
|
value="$(echo "$status_line" | awk '{ /slow/ ? SIGN=-1 : SIGN=1; print $1 * SIGN * '"$factor"' }')"
|
||||||
|
fi
|
||||||
|
echo "${fieldname}.value $value"
|
||||||
|
done
|
||||||
@ -0,0 +1,118 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
: <<=cut
|
||||||
|
|
||||||
|
=head1 NAME
|
||||||
|
|
||||||
|
parse Chrony Tracking output for timeserver status information
|
||||||
|
|
||||||
|
=head1 APPLICABLE SYSTEMS
|
||||||
|
|
||||||
|
Any system with a local chronyd service.
|
||||||
|
|
||||||
|
=head1 CONFIGURATION
|
||||||
|
|
||||||
|
No configuration.
|
||||||
|
|
||||||
|
=head1 MAGIC MARKERS
|
||||||
|
|
||||||
|
#%# family=auto
|
||||||
|
#%# capabilities=autoconf
|
||||||
|
|
||||||
|
=head1 VERSION
|
||||||
|
|
||||||
|
Revision 0.1 2008/08/23 13:06:00 joti
|
||||||
|
|
||||||
|
First version only chronyc tracking, autodetection included.
|
||||||
|
|
||||||
|
Revision 0.2 2008/10/11 16:09:00 joti
|
||||||
|
|
||||||
|
Added scaling of other values to match with frequency, added more description to fields
|
||||||
|
|
||||||
|
Revision 0.3 2014/02/16 zjttoefs
|
||||||
|
|
||||||
|
reduce forking by using awk
|
||||||
|
do not limit output precision
|
||||||
|
add stratum monitoring
|
||||||
|
detect slow/fast time or freqency and adjust sign of value accordingly
|
||||||
|
remove commented out code
|
||||||
|
|
||||||
|
Revision 0.4 2016/11/10 Lars Kruse
|
||||||
|
|
||||||
|
rewrite field handling
|
||||||
|
use "which" for "chronyc" location
|
||||||
|
switch from "bash" to "sh"
|
||||||
|
fix exit code of failing "autoconf"
|
||||||
|
|
||||||
|
=head1 AUTHOR
|
||||||
|
|
||||||
|
joti
|
||||||
|
zjttoefs
|
||||||
|
Lars Kruse <devel@sumpfralle.de>
|
||||||
|
|
||||||
|
=cut
|
||||||
|
|
||||||
|
CHRONYC="$(which chronyc | head -1)"
|
||||||
|
|
||||||
|
# Frequency has extremely higher values than other. Therefore they are fitted by scaling via suitable factors.
|
||||||
|
# field definitions:
|
||||||
|
# - munin fieldname
|
||||||
|
# - factor for graph visualization (all values are supposed to reach a similar dimension)
|
||||||
|
# - regular expression of the chrony output line (may not contain whitespace, case insensitive)
|
||||||
|
# - label (may include "%d" for including the factor; may contain whitespace)
|
||||||
|
fields="systime 1000000 ^System.time System Time (us)
|
||||||
|
offsetlast 1000000 ^Last.offset Last Offset (us)
|
||||||
|
offsetrms 1000000 ^RMS.offset RMS Offset (us)
|
||||||
|
rootdelay 1000000 ^Root.delay Root Delay (us)
|
||||||
|
rootdispersion 1000000 ^Root.dispersion Root Dispersion (us)"
|
||||||
|
|
||||||
|
# chrony example output (v2.4.1):
|
||||||
|
# Reference ID : 131.188.3.221 (ntp1.rrze.uni-erlangen.de)
|
||||||
|
# Stratum : 2
|
||||||
|
# Ref time (UTC) : Thu Nov 10 22:39:50 2016
|
||||||
|
# System time : 0.000503798 seconds slow of NTP time
|
||||||
|
# Last offset : +0.000254355 seconds
|
||||||
|
# RMS offset : 0.002186779 seconds
|
||||||
|
# Frequency : 17.716 ppm slow
|
||||||
|
# Residual freq : +0.066 ppm
|
||||||
|
# Skew : 4.035 ppm
|
||||||
|
# Root delay : 0.042980 seconds
|
||||||
|
# Root dispersion : 0.005391 seconds
|
||||||
|
# Update interval : 258.4 seconds
|
||||||
|
# Leap status : Normal
|
||||||
|
|
||||||
|
|
||||||
|
if [ "$1" = "autoconf" ]; then
|
||||||
|
if [ -n "$CHRONYC" ] && [ -x "$CHRONYC" ]; then
|
||||||
|
echo yes
|
||||||
|
else
|
||||||
|
echo "no (missing 'chronyc' executable)"
|
||||||
|
fi
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$1" = "config" ]; then
|
||||||
|
echo 'graph_title Chrony Tracking Stats - Time'
|
||||||
|
echo 'graph_args --base 1000 -l 0'
|
||||||
|
echo 'graph_vlabel (time)'
|
||||||
|
echo 'graph_category time'
|
||||||
|
echo 'graph_scale no'
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
# insert the factor, if "%d" is part of the label
|
||||||
|
printf "${fieldname}.label $label\n" "$factor"
|
||||||
|
echo "${fieldname}.type GAUGE"
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
chrony_status="$("$CHRONYC" tracking)"
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
status_line="$(echo "$chrony_status" | grep -i -- "$regex " | cut -d ":" -f 2-)"
|
||||||
|
if [ -z "$status_line" ]; then
|
||||||
|
value="U"
|
||||||
|
else
|
||||||
|
# the keyword "slow" indicates negative values
|
||||||
|
value="$(echo "$status_line" | awk '{ /slow/ ? SIGN=-1 : SIGN=1; print $1 * SIGN * '"$factor"' }')"
|
||||||
|
fi
|
||||||
|
echo "${fieldname}.value $value"
|
||||||
|
done
|
||||||
@ -0,0 +1,115 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
: <<=cut
|
||||||
|
|
||||||
|
=head1 NAME
|
||||||
|
|
||||||
|
parse Chrony Tracking output for timeserver status information
|
||||||
|
|
||||||
|
=head1 APPLICABLE SYSTEMS
|
||||||
|
|
||||||
|
Any system with a local chronyd service.
|
||||||
|
|
||||||
|
=head1 CONFIGURATION
|
||||||
|
|
||||||
|
No configuration.
|
||||||
|
|
||||||
|
=head1 MAGIC MARKERS
|
||||||
|
|
||||||
|
#%# family=auto
|
||||||
|
#%# capabilities=autoconf
|
||||||
|
|
||||||
|
=head1 VERSION
|
||||||
|
|
||||||
|
Revision 0.1 2008/08/23 13:06:00 joti
|
||||||
|
|
||||||
|
First version only chronyc tracking, autodetection included.
|
||||||
|
|
||||||
|
Revision 0.2 2008/10/11 16:09:00 joti
|
||||||
|
|
||||||
|
Added scaling of other values to match with frequency, added more description to fields
|
||||||
|
|
||||||
|
Revision 0.3 2014/02/16 zjttoefs
|
||||||
|
|
||||||
|
reduce forking by using awk
|
||||||
|
do not limit output precision
|
||||||
|
add stratum monitoring
|
||||||
|
detect slow/fast time or freqency and adjust sign of value accordingly
|
||||||
|
remove commented out code
|
||||||
|
|
||||||
|
Revision 0.4 2016/11/10 Lars Kruse
|
||||||
|
|
||||||
|
rewrite field handling
|
||||||
|
use "which" for "chronyc" location
|
||||||
|
switch from "bash" to "sh"
|
||||||
|
fix exit code of failing "autoconf"
|
||||||
|
|
||||||
|
=head1 AUTHOR
|
||||||
|
|
||||||
|
joti
|
||||||
|
zjttoefs
|
||||||
|
Lars Kruse <devel@sumpfralle.de>
|
||||||
|
|
||||||
|
=cut
|
||||||
|
|
||||||
|
CHRONYC="$(which chronyc | head -1)"
|
||||||
|
|
||||||
|
# Frequency has extremely higher values than other. Therefore they are fitted by scaling via suitable factors.
|
||||||
|
# field definitions:
|
||||||
|
# - munin fieldname
|
||||||
|
# - factor for graph visualization (all values are supposed to reach a similar dimension)
|
||||||
|
# - regular expression of the chrony output line (may not contain whitespace, case insensitive)
|
||||||
|
# - label (may include "%d" for including the factor; may contain whitespace)
|
||||||
|
fields="rootdelay 1000000 ^Root.delay Root Delay (us)
|
||||||
|
rootdispersion 1000000 ^Root.dispersion Root Dispersion (us)"
|
||||||
|
|
||||||
|
# chrony example output (v2.4.1):
|
||||||
|
# Reference ID : 131.188.3.221 (ntp1.rrze.uni-erlangen.de)
|
||||||
|
# Stratum : 2
|
||||||
|
# Ref time (UTC) : Thu Nov 10 22:39:50 2016
|
||||||
|
# System time : 0.000503798 seconds slow of NTP time
|
||||||
|
# Last offset : +0.000254355 seconds
|
||||||
|
# RMS offset : 0.002186779 seconds
|
||||||
|
# Frequency : 17.716 ppm slow
|
||||||
|
# Residual freq : +0.066 ppm
|
||||||
|
# Skew : 4.035 ppm
|
||||||
|
# Root delay : 0.042980 seconds
|
||||||
|
# Root dispersion : 0.005391 seconds
|
||||||
|
# Update interval : 258.4 seconds
|
||||||
|
# Leap status : Normal
|
||||||
|
|
||||||
|
|
||||||
|
if [ "$1" = "autoconf" ]; then
|
||||||
|
if [ -n "$CHRONYC" ] && [ -x "$CHRONYC" ]; then
|
||||||
|
echo yes
|
||||||
|
else
|
||||||
|
echo "no (missing 'chronyc' executable)"
|
||||||
|
fi
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$1" = "config" ]; then
|
||||||
|
echo 'graph_title Chrony Tracking Stats - Root Time'
|
||||||
|
echo 'graph_args --base 1000 -l 0'
|
||||||
|
echo 'graph_vlabel (time)'
|
||||||
|
echo 'graph_category time'
|
||||||
|
echo 'graph_scale no'
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
# insert the factor, if "%d" is part of the label
|
||||||
|
printf "${fieldname}.label $label\n" "$factor"
|
||||||
|
echo "${fieldname}.type GAUGE"
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
chrony_status="$("$CHRONYC" tracking)"
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
status_line="$(echo "$chrony_status" | grep -i -- "$regex " | cut -d ":" -f 2-)"
|
||||||
|
if [ -z "$status_line" ]; then
|
||||||
|
value="U"
|
||||||
|
else
|
||||||
|
# the keyword "slow" indicates negative values
|
||||||
|
value="$(echo "$status_line" | awk '{ /slow/ ? SIGN=-1 : SIGN=1; print $1 * SIGN * '"$factor"' }')"
|
||||||
|
fi
|
||||||
|
echo "${fieldname}.value $value"
|
||||||
|
done
|
||||||
@ -0,0 +1,114 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
: <<=cut
|
||||||
|
|
||||||
|
=head1 NAME
|
||||||
|
|
||||||
|
parse Chrony Tracking output for timeserver status information
|
||||||
|
|
||||||
|
=head1 APPLICABLE SYSTEMS
|
||||||
|
|
||||||
|
Any system with a local chronyd service.
|
||||||
|
|
||||||
|
=head1 CONFIGURATION
|
||||||
|
|
||||||
|
No configuration.
|
||||||
|
|
||||||
|
=head1 MAGIC MARKERS
|
||||||
|
|
||||||
|
#%# family=auto
|
||||||
|
#%# capabilities=autoconf
|
||||||
|
|
||||||
|
=head1 VERSION
|
||||||
|
|
||||||
|
Revision 0.1 2008/08/23 13:06:00 joti
|
||||||
|
|
||||||
|
First version only chronyc tracking, autodetection included.
|
||||||
|
|
||||||
|
Revision 0.2 2008/10/11 16:09:00 joti
|
||||||
|
|
||||||
|
Added scaling of other values to match with frequency, added more description to fields
|
||||||
|
|
||||||
|
Revision 0.3 2014/02/16 zjttoefs
|
||||||
|
|
||||||
|
reduce forking by using awk
|
||||||
|
do not limit output precision
|
||||||
|
add stratum monitoring
|
||||||
|
detect slow/fast time or freqency and adjust sign of value accordingly
|
||||||
|
remove commented out code
|
||||||
|
|
||||||
|
Revision 0.4 2016/11/10 Lars Kruse
|
||||||
|
|
||||||
|
rewrite field handling
|
||||||
|
use "which" for "chronyc" location
|
||||||
|
switch from "bash" to "sh"
|
||||||
|
fix exit code of failing "autoconf"
|
||||||
|
|
||||||
|
=head1 AUTHOR
|
||||||
|
|
||||||
|
joti
|
||||||
|
zjttoefs
|
||||||
|
Lars Kruse <devel@sumpfralle.de>
|
||||||
|
|
||||||
|
=cut
|
||||||
|
|
||||||
|
CHRONYC="$(which chronyc | head -1)"
|
||||||
|
|
||||||
|
# Frequency has extremely higher values than other. Therefore they are fitted by scaling via suitable factors.
|
||||||
|
# field definitions:
|
||||||
|
# - munin fieldname
|
||||||
|
# - factor for graph visualization (all values are supposed to reach a similar dimension)
|
||||||
|
# - regular expression of the chrony output line (may not contain whitespace, case insensitive)
|
||||||
|
# - label (may include "%d" for including the factor; may contain whitespace)
|
||||||
|
fields="updateinterval 1 ^Update.interval Update Interval (s)"
|
||||||
|
|
||||||
|
# chrony example output (v2.4.1):
|
||||||
|
# Reference ID : 131.188.3.221 (ntp1.rrze.uni-erlangen.de)
|
||||||
|
# Stratum : 2
|
||||||
|
# Ref time (UTC) : Thu Nov 10 22:39:50 2016
|
||||||
|
# System time : 0.000503798 seconds slow of NTP time
|
||||||
|
# Last offset : +0.000254355 seconds
|
||||||
|
# RMS offset : 0.002186779 seconds
|
||||||
|
# Frequency : 17.716 ppm slow
|
||||||
|
# Residual freq : +0.066 ppm
|
||||||
|
# Skew : 4.035 ppm
|
||||||
|
# Root delay : 0.042980 seconds
|
||||||
|
# Root dispersion : 0.005391 seconds
|
||||||
|
# Update interval : 258.4 seconds
|
||||||
|
# Leap status : Normal
|
||||||
|
|
||||||
|
|
||||||
|
if [ "$1" = "autoconf" ]; then
|
||||||
|
if [ -n "$CHRONYC" ] && [ -x "$CHRONYC" ]; then
|
||||||
|
echo yes
|
||||||
|
else
|
||||||
|
echo "no (missing 'chronyc' executable)"
|
||||||
|
fi
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$1" = "config" ]; then
|
||||||
|
echo 'graph_title Chrony Tracking Stats - Update interval'
|
||||||
|
echo 'graph_args --base 1000 -l 0'
|
||||||
|
echo 'graph_vlabel (time)'
|
||||||
|
echo 'graph_category time'
|
||||||
|
echo 'graph_scale no'
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
# insert the factor, if "%d" is part of the label
|
||||||
|
printf "${fieldname}.label $label\n" "$factor"
|
||||||
|
echo "${fieldname}.type GAUGE"
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
chrony_status="$("$CHRONYC" tracking)"
|
||||||
|
echo "$fields" | while read fieldname factor regex label; do
|
||||||
|
status_line="$(echo "$chrony_status" | grep -i -- "$regex " | cut -d ":" -f 2-)"
|
||||||
|
if [ -z "$status_line" ]; then
|
||||||
|
value="U"
|
||||||
|
else
|
||||||
|
# the keyword "slow" indicates negative values
|
||||||
|
value="$(echo "$status_line" | awk '{ /slow/ ? SIGN=-1 : SIGN=1; print $1 * SIGN * '"$factor"' }')"
|
||||||
|
fi
|
||||||
|
echo "${fieldname}.value $value"
|
||||||
|
done
|
||||||
@ -0,0 +1,32 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
mkIf flags.nixos-manual {
|
||||||
|
|
||||||
|
# Paquets
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
bc
|
||||||
|
mailutils
|
||||||
|
];
|
||||||
|
|
||||||
|
# Services
|
||||||
|
|
||||||
|
## documentation sur ctrl + alt + F8
|
||||||
|
documentation.nixos = {
|
||||||
|
enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
# Réseau
|
||||||
|
networking.firewall = {
|
||||||
|
allowedTCPPorts = [
|
||||||
|
];
|
||||||
|
allowedUDPPorts = [
|
||||||
|
];
|
||||||
|
};
|
||||||
|
}
|
||||||
@ -0,0 +1,35 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
mkIf flags.pipewire {
|
||||||
|
|
||||||
|
# Paquets
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
helvum # patchbay pipewire
|
||||||
|
paprefs # préferences pulseaudio
|
||||||
|
pavucontrol # mixer pulseaudio
|
||||||
|
pa_applet # status et contrôle dans le system tray
|
||||||
|
];
|
||||||
|
|
||||||
|
security.rtkit.enable = true;
|
||||||
|
|
||||||
|
services.pipewire = {
|
||||||
|
enable = true;
|
||||||
|
alsa.enable = true;
|
||||||
|
alsa.support32Bit = true;
|
||||||
|
pulse.enable = true;
|
||||||
|
# If you want to use JACK applications, uncomment this
|
||||||
|
jack.enable = true;
|
||||||
|
|
||||||
|
# use the example session manager (no others are packaged yet so this is enabled by default,
|
||||||
|
# no need to redefine it in your config for now)
|
||||||
|
#media-session.enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
}
|
||||||
@ -0,0 +1,42 @@
|
|||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
inherit (lib) mkIf mkMerge mkThenElse;
|
||||||
|
annuaire = config.r6d.machines;
|
||||||
|
currentMachine = annuaire."${config.networking.fqdn}";
|
||||||
|
flags = currentMachine.configurationFlags;
|
||||||
|
in
|
||||||
|
|
||||||
|
mkIf true {
|
||||||
|
|
||||||
|
# Services
|
||||||
|
# https://github.com/NixOS/nixpkgs/issues/15960
|
||||||
|
|
||||||
|
services = {
|
||||||
|
pcscd.enable = true;
|
||||||
|
|
||||||
|
udev.packages = with pkgs; [
|
||||||
|
libu2f-host
|
||||||
|
yubikey-personalization
|
||||||
|
];
|
||||||
|
|
||||||
|
xserver.displayManager.sessionCommands = ''
|
||||||
|
# https://github.com/NixOS/nixpkgs/commit/5391882ebd781149e213e8817fba6ac3c503740c
|
||||||
|
gpg-connect-agent /bye
|
||||||
|
GPG_TTY=$(tty)
|
||||||
|
export GPG_TTY
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
users.extraGroups.yubikey = {};
|
||||||
|
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
gnupg opensc pcsctools libu2f-host yubikey-personalization
|
||||||
|
];
|
||||||
|
|
||||||
|
security.pam.u2f.enable = true;
|
||||||
|
|
||||||
|
/*users.extraUsers.joko = {
|
||||||
|
isNormalUser = true;
|
||||||
|
extraGroups = [ "wheel" "input" "audio" "video" ];
|
||||||
|
};*/
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue