Hi,
Does anyone here have experience running Tinc on NixOS?
I'm trying to run Tinc on a NixOS machine, using the similar configuration
i had for Ubuntu. My home subnet is 192.168.1.0/24 and my work is
10.16.0.0/24. However, unlike ubuntu, when I start tincd on nixos, and try
to 'ifconfig $INTERFACE 192.168.1.10 netmask 255.255.255.0' in my
tinc-up,
I loose network access on the box (no ping/ssh to the box). I see tun0
interface created, but no data flows.
eno1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.10 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::c23f:d5ff:fe62:8353 prefixlen 64 scopeid 0x20<link>
ether c0:3f:d5:62:83:53 txqueuelen 1000 (Ethernet)
RX packets 33611293 bytes 45550645568 (42.4 GiB)
RX errors 0 dropped 42 overruns 0 frame 0
TX packets 22359766 bytes 26366564624 (24.5 GiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 20 memory 0xf7c00000-f7c20000
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen
500 (UNSPEC)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Here is my tinc-up
#!/nix/store/ajxd1z42ql9qihdj1pa7in12iynf532g-bash-4.2-p45/bin/sh
#ifconfig $INTERFACE 192.168.1.10 netmask 255.255.255.0
ip route add 10.16.0.0/24 dev $INTERFACE
ip link set dev $INTERFACE up
Here are the routes on I see
[zs at homer2:~]$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
default 10.16.0.1 0.0.0.0 UG 0 0 0
eno16777728
10.16.0.0 * 255.255.0.0 U 0 0 0
eno16777728
192.168.1.0 * 255.255.255.0 U 0 0 0
eno16777728
[zs at esprit1:~]$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
default 192.168.1.1 0.0.0.0 UG 202 0 0 eno1
10.16.0.0 * 255.255.255.0 U 0 0 0 eno1
192.168.1.0 * 255.255.255.0 U 202 0 0 eno1
Any suggestions/pointers to debug this would be appreciated. I see the two
tinc nodes are performing PING/PONG.
Thanks,
Zia
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20140825/ee90cfe4/attachment.html>
are you trying to use the same subnet on both interfaces ? 2014-08-26 6:55 GMT+02:00 Zia Syed <xia.syed at gmail.com>:> Hi, > > Does anyone here have experience running Tinc on NixOS? > > I'm trying to run Tinc on a NixOS machine, using the similar configuration i > had for Ubuntu. My home subnet is 192.168.1.0/24 and my work is > 10.16.0.0/24. However, unlike ubuntu, when I start tincd on nixos, and try > to 'ifconfig $INTERFACE 192.168.1.10 netmask 255.255.255.0' in my tinc-up, I > loose network access on the box (no ping/ssh to the box). I see tun0 > interface created, but no data flows. > > eno1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 > inet 192.168.1.10 netmask 255.255.255.0 broadcast 192.168.1.255 > inet6 fe80::c23f:d5ff:fe62:8353 prefixlen 64 scopeid 0x20<link> > ether c0:3f:d5:62:83:53 txqueuelen 1000 (Ethernet) > RX packets 33611293 bytes 45550645568 (42.4 GiB) > RX errors 0 dropped 42 overruns 0 frame 0 > TX packets 22359766 bytes 26366564624 (24.5 GiB) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 20 memory 0xf7c00000-f7c20000 > > > tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500 > unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen > 500 (UNSPEC) > RX packets 0 bytes 0 (0.0 B) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 0 bytes 0 (0.0 B) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > > Here is my tinc-up > > #!/nix/store/ajxd1z42ql9qihdj1pa7in12iynf532g-bash-4.2-p45/bin/sh > #ifconfig $INTERFACE 192.168.1.10 netmask 255.255.255.0 > ip route add 10.16.0.0/24 dev $INTERFACE > ip link set dev $INTERFACE up > > Here are the routes on I see > [zs at homer2:~]$ route > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref Use > Iface > default 10.16.0.1 0.0.0.0 UG 0 0 0 > eno16777728 > 10.16.0.0 * 255.255.0.0 U 0 0 0 > eno16777728 > 192.168.1.0 * 255.255.255.0 U 0 0 0 > eno16777728 > > [zs at esprit1:~]$ route > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref Use > Iface > default 192.168.1.1 0.0.0.0 UG 202 0 0 eno1 > 10.16.0.0 * 255.255.255.0 U 0 0 0 eno1 > 192.168.1.0 * 255.255.255.0 U 202 0 0 eno1 > > > Any suggestions/pointers to debug this would be appreciated. I see the two > tinc nodes are performing PING/PONG. > > Thanks, > Zia > > > _______________________________________________ > tinc mailing list > tinc at tinc-vpn.org > http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc >
On Mon, Aug 25, 2014 at 09:55:05PM -0700, Zia Syed wrote:> I'm trying to run Tinc on a NixOS machine, using the similar configuration > i had for Ubuntu. My home subnet is 192.168.1.0/24 and my work is > 10.16.0.0/24. However, unlike ubuntu, when I start tincd on nixos, and try > to 'ifconfig $INTERFACE 192.168.1.10 netmask 255.255.255.0' in my tinc-up, > I loose network access on the box (no ping/ssh to the box). I see tun0 > interface created, but no data flows. > > eno1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 > inet 192.168.1.10 netmask 255.255.255.0 broadcast 192.168.1.255[...]> #!/nix/store/ajxd1z42ql9qihdj1pa7in12iynf532g-bash-4.2-p45/bin/sh > #ifconfig $INTERFACE 192.168.1.10 netmask 255.255.255.0 > ip route add 10.16.0.0/24 dev $INTERFACE > ip link set dev $INTERFACE upLike Saverio already said, you are configuring tun0 with exactly the same IP address and netmask as the eno1 interface. This will indeed cause you to lose network access. You can use the same IP address on tun0 as on eno1, but then the netmask should be different. Try this instead: #!/nix/store/ajxd1z42ql9qihdj1pa7in12iynf532g-bash-4.2-p45/bin/sh ip addr add 192.168.1.10 dev $INTERFACE ip route add 10.16.0.0/24 dev $INTERFACE ip link set dev $INTERFACE up -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20140826/aff5a77f/attachment.sig>