Mastodawn

@GhostOnTheHalfShell
OpenWrt on a Raspberry Pi 4 with a ue300 USB NIC was my router from 2020 to 2025 when I shifted to my #guixrouter VM. It would handle a gigabit connection without breaking a sweat.

Show thread

Daniel Lakeland 2d ago

@alienghic
Well 3 of them used to be desktop PCs for my kids or a media PC for our front room. So they were kinda "free". They run as a #proxmox cluster so you need an odd number for quorum. Right now they host a #homeassistant VM, a VM thats a #Cfengine3 policy server, my #guixrouter which routes and traffic shapes the entire network, a 2 node #glusterfs cluster thats our home NAS (hosts home dirs for desktop machines), a #guix build VM, and a #yunohost machine hosting #Immich, and #Zabbix

Show thread

Sharlatan Mar 13

@nmott you might be surprised when you know how many Frame laptops are used among Guix enthusiasts with big success
Even on routers #guixrouter
And Mac book @levenson
On Lenovo X1 @abcdw

Daniel Lakeland Mar 12

Where are my #ipv6 experts at?

My #guixrouter is having problems where when I restart its networking, it can respond to neighbor discovery, but after some time... it stops receiving neighbor discovery requests (they don't appear in tcpdumps). I think this must be either something to do with my switch or something to do with the linux bridge on the proxmox host... why would this happen? I can see the ndp snooping entry disappears on switch, but it happens even if ndp snooping is off

@doachs ?

Daniel Lakeland Feb 26

Right now my #guixrouter uses unbound to forward upstream queries to Cloudflare DNS over TLS.

I'm thinking of moving that to DNS over Tor. How many of you do your DNS over Tor and how reliable is it? Since unbound doesn't handle this directly with socks proxy options, I'm thinking of using socat to open tls connections to like 4 DNS over TCP services through the Tor proxy (say 1.1.1.1 and 8.8.8.8 and their ipv6 versions) and then have unbound open 4 TCP streams to locally bound ports

#guix

Daniel Lakeland Feb 20

Saw the message from @guix about a potential security issue this morning. did a #guix pull and deployed to my #guixrouter, problem was fixed within 10 mins of seeing the announcement. So great for an internet facing device. My previous Raspberry Pi 4 device running the Pi OS got updated rarely because of the difficulty of doing it while keeping network online (2 or 3 times in 5 years). This is a substantial security improvement for me.

Daniel Lakeland Feb 17

#guix experts, for my #guixrouter I am trying to add the tor snowflake proxy, and I'm getting a problem with conflicting versions of some dependency. Screenshot is hard to read so I'll give the gist of it in the next post. Anyone got an idea how to handle this? The idea is at root default profile I want to run yggdrasil and the tor snowflake proxy contained in the go-gitlab-torproject-etcetcetc package, but those two packages want different veresions of some go quic library?

Daniel Lakeland Feb 14

Ive been making a bunch of steady progress on the computer projects I have. For example ive got Tor doing relay on my router. Ive got storage for my Yunohost. Ive got both my kids laptops working, ive got backups for my laptop, and backups for my NAS, etc.

So one thing I'd like to get back to is cleaning up my router and making it public. for those interested in the #guixrouter who would be interested in doing testing? i really can't test on my network.

#guix

Daniel Lakeland Dec 27

Is anyone using #frrouting in #guix? I'm trying to get babeld to run over my VPN network. I've got it running on the remote end where it's OpenWrt, I want to start frrouting on my #guixrouter and have it start babeld and use similar settings, it look like /gnu/store/...-frrouting/sbin/frrinit.sh should be run to start the daemons and it'll default to looking in /etc/frr/daemons and /etc/frr/frr.conf

but is there a guix approved way to get this up and running or is it roll-your-own?

Daniel Lakeland Dec 16

One of my projects for the 2 week christmas break we're doing is to finally put together and upload the #guixrouter to a Codeberg site. Merry Christmas y'all I hope I am able to give you guys that gift, and that a few of you will test it out and provide some feedback. #guix