Tinc on NixOS

[Zia Syed]

Hi,

Does anyone here have experience running Tinc on NixOS?

I'm trying to run Tinc on a NixOS machine, using the similar configuration
i had for Ubuntu. My home subnet is 192.168.1.0/24 and my work is
10.16.0.0/24. However, unlike ubuntu, when I start tincd on nixos, and try
to 'ifconfig $INTERFACE 192.168.1.10 netmask 255.255.255.0' in my tinc-up,
I loose network access on the box (no ping/ssh to the box). I see tun0
interface created, but no data flows.

eno1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.10  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::c23f:d5ff:fe62:8353  prefixlen 64  scopeid 0x20<link>
        ether c0:3f:d5:62:83:53  txqueuelen 1000  (Ethernet)
        RX packets 33611293  bytes 45550645568 (42.4 GiB)
        RX errors 0  dropped 42  overruns 0  frame 0
        TX packets 22359766  bytes 26366564624 (24.5 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device interrupt 20  memory 0xf7c00000-f7c20000


tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen
500  (UNSPEC)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Here is my tinc-up

#!/nix/store/ajxd1z42ql9qihdj1pa7in12iynf532g-bash-4.2-p45/bin/sh
#ifconfig $INTERFACE 192.168.1.10 netmask 255.255.255.0
ip route add 10.16.0.0/24 dev $INTERFACE
ip link set dev $INTERFACE up

Here are the routes on I see
[zs at homer2:~]$ route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
default         10.16.0.1       0.0.0.0         UG    0      0        0
eno16777728
10.16.0.0       *               255.255.0.0     U     0      0        0
eno16777728
192.168.1.0     *               255.255.255.0   U     0      0        0
eno16777728

[zs at esprit1:~]$ route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
default         192.168.1.1     0.0.0.0         UG    202    0        0 eno1
10.16.0.0       *               255.255.255.0   U     0      0        0 eno1
192.168.1.0     *               255.255.255.0   U     202    0        0 eno1


Any suggestions/pointers to debug this would be appreciated. I see the two
tinc nodes are performing PING/PONG.

Thanks,
Zia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20140825/ee90cfe4/attachment.html>