Skyworks/skyworks-Nix-infra

Fork: 0

Skyworks / skyworks-Nix-infra

2026-03-25	8f61461 Browse files » add ylw ed25519 key: agenix access, SSH auth, rekey all secrets ... - Add ylw's ed25519 public key to secrets.nix admins list - Re-encrypt all .age secrets so ylw can decrypt - Add ed25519 key to ye-lw21 authorized SSH keys Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]> Dixiao-L committed on 25 Mar
2026-03-24	257a2b8 Browse files » harden and fix: nftables input chain, sudo, agenix, ZFS, NAT priority ... - Add inet input_filter table to xlab-gateway (policy drop on WAN) - Restrict NOPASSWD sudo to ldx only; ylw uses password sudo via wheel - Restructure secrets.nix with admins list, prepare for ylw ed25519 key - Add ye-lw21 to trusted-users in common.nix - Remove contradictory relatime=on when atime=off on rpool - Fix NAT postrouting priority: filter → srcnat - Remove duplicate nixpkgs.hostPlatform from xlab-gateway hardware-configuration Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]> Dixiao-L committed on 24 Mar
2026-03-24	95f22e0 Browse files » skydick: document drive10 added as second hot spare ... sg_format completed on drive10 (c9bcfa0f). Both LUNs added as spares, bringing the pool to 8 mirrors + 2 hot spares (4 spare LUNs total). Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]> Dixiao-L committed on 24 Mar
2026-03-23	88b128c Browse files » clamp mss to pmtu fix v6 physicsdolphin committed on 23 Mar
	9270993 Browse files » skydick: document pool expansion to 8 mirrors (~50.9T) ... Added 4 new SAS Mach2 drives (drive6-9) as 4 mirror vdevs. Updated drive inventory, layout diagram, expansion commands, and runbook with sg_format/wipefs steps. drive10 pending sg_format completion. Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]> Dixiao-L committed on 23 Mar
	234e1a5 Browse files » Update networking.nix physicsdolphin committed on 23 Mar
	408ef51 Browse files » Update networking.nix physicsdolphin committed on 23 Mar
	8ffd49b Browse files » add route from subnet to phicomm mgmt physicsdolphin committed on 23 Mar
2026-03-21	c5a1147 Browse files » 王八蛋bitlocker解密升级版 physicsdolphin committed on 21 Mar
	554b424 Browse files » fix gateway itself to .1 physicsdolphin committed on 21 Mar
	a11467b Browse files » change xlab pubkey physicsdolphin committed on 21 Mar
	f45a2ae Browse files » Update default.nix physicsdolphin committed on 21 Mar
	65da1c7 Browse files » Update default.nix physicsdolphin committed on 21 Mar
	18dad95 Browse files » agenix? physicsdolphin committed on 21 Mar
	a0cabc6 Browse files » Update dhcp.nix physicsdolphin committed on 21 Mar
	6b64222 Browse files » Update dhcp.nix physicsdolphin committed on 21 Mar
	a73a076 Browse files » fix syntax error physicsdolphin committed on 21 Mar
	3aba056 Browse files » make sure DHCP start after interface initialization physicsdolphin committed on 21 Mar
2026-03-16	9631094 Browse files » skydick: fix localsearch, I/O schedulers, wait-online, NIC tuning ... - Replace broken localsearch oneshot with proper miner daemon running as ldx on ldx's session bus (lingering enabled) so Samba Spotlight queries from macOS clients actually work - Fix systemd-networkd-wait-online 2-min boot timeout (anyInterface=true) - Add storage-tuning service to enforce mq-deadline on SAS HDDs and increase Mellanox ring buffers (1024→4096) at boot - Simplify udev I/O scheduler rules to match by rotational attribute instead of hardcoded kernel device names - Update TM dataset recordsize comments to reflect 1M (applied on pool) - Fix deprecated linuxPackages_6_6.perf → perf ZFS properties applied separately on skydick: com.sun:auto-snapshot=true on dick (was unset — no snapshots taken) com.sun:auto-snapshot=false on dick/users/ldx/timemachine recordsize=1M on dick/users/ldx/timemachine Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
	6635cc0 Browse files » skydick: drop fruit:time machine max size (buggy bandsize parser) ... Samba's fruit_get_bandsize() regex-based plist parser fails on valid Info.plist files. Rely on ZFS refquota on dick/users/ldx instead. Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
	99fafc7 Browse files » skydick: upgrade to nixos-25.11, add Spotlight + recycle bin ... - Upgrade nixpkgs from nixos-24.11 to nixos-25.11 (Samba 4.20→4.22) - Build sambaFull with Spotlight/tracker support via overlay: - Patch waf to detect tracker-sparql-3.0 (upstream only checks ≤2.0) - Patch rpcd_mdssvc for tinysparql 3.x bus API rename (get_async/get_finish → bus_new_async/bus_new_finish) - Disable tevent_glib_tracker test (uses removed tracker 2.x API, test-only) - Add icu for Unicode normalisation required by Spotlight - Add Spotlight search with tracker backend for Finder search over SMB - Add localsearch indexer service for public, media, and ldx files - Add recycle bin (vfs recycle) for public/homes shares - Add global fruit VFS for Apple compatibility - Move fruit:model=TimeCapsule to ldx-timemachine share only - Disable Spotlight on timemachine share - Fix package renames for 25.11: targetcli→targetcli-fb, dstat→dool Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
	9a55e9c Browse files » skydick: bump TM max size to 3T for three Macs ... 1T was too tight — 579G already used across 3 sparsebundles left only ~450G visible to macOS. 3T leaves headroom for growth while keeping 7T of the 10T ldx quota available for other datasets. Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
	a11cc24 Browse files » skydick: rename TM share to ldx-timemachine ... Per-user naming makes ownership unambiguous. The share points to ldx's dedicated timemachine ZFS dataset, not a shared location. Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
	c140a15 Browse files » skydick: add Samba Time Machine share for macOS backups ... Exposes dick/users/ldx/timemachine as an SMB share with Apple fruit VFS extensions (fruit:time machine = yes) so Macs can back up directly to skydick instead of door1. Capped at 1T via fruit:time machine max size. Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
	947e56e Browse files » skydick: add timemachine dataset for macOS backups ... Dedicated ZFS dataset with recordsize=64K and zstd compression, better matched for Time Machine sparsebundle band files than the media dataset (1M recordsize, compression=off) where backups were previously dumped. Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
	06ed430 Browse files » skydick: tune ZFS async read and prefetch for NFS throughput ... Benchmarking showed 320 MB/s read over NFS against a 4-mirror-vdev pool capable of much more. The default async_read_max_active=8 starves the I/O scheduler across 4 vdevs of spinning Mach2 drives, and the prefetch data miss rate was 93%. - zfs_vdev_async_read_max_active: 8 → 32 - zfs_vdev_async_read_min_active: 1 → 4 - zfetch_max_streams: 8 → 16 Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
	22a386a Browse files » skydick: document Windows NFS client path differences ... Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 16 Mar
2026-03-15	95816ac Browse files » Merge branch 'main' of https://gitbucket.skyw.top/git/Skyworks/skyworks-Nix-infra Dixiao-L committed on 15 Mar
	e957d8e Browse files » skydick: clean SMB tuning and enforce datapool atime Dixiao-L committed on 15 Mar
	fea28fc Browse files » add wg-peers to SMB allowed ips physicsdolphin committed on 15 Mar