From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED, MAILING_LIST_MULTI,SPF_HELO_NONE autolearn=unavailable autolearn_force=no version=3.4.6 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id 8BE7227863; Tue, 3 Jan 2023 07:00:16 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 496) id 0CD8127889; Tue, 3 Jan 2023 07:00:13 +0000 (UTC) Received: from server220-3.web-hosting.com (server220-3.web-hosting.com [198.54.115.164]) by atuin.qyliss.net (Postfix) with ESMTPS id C5F3127855 for ; Tue, 3 Jan 2023 07:00:10 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=westernsemico.com; s=default; h=Message-ID:Date:Cc:To:From:Subject: References:In-Reply-To:Content-Transfer-Encoding:MIME-Version:Content-Type: Sender:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=uyPPtfviyxVqofV0ByCNdmF4EZXdb/zfwWtrxmRpJMw=; b=U8L249csc8ftdULje0YUoYkhhA J7a8VH+trx2YTSHoSX7TjG4XkQ7YtJ+CAIAnQSFHAUPlEnRej3Vgm7YSSkz0rcbkfCgt/AlaAnL48 zsiwrkIGc71/eHuggs+YTgzE7wxTE6kxQ3bqWTHnmY/cmtQXbIOomsljAN0baN2nERjVCqKUMBUj9 ba4Qu56v3LkPMqarm4DlhWbOyODY2GMWlW6RMtna4U1yRqSAjsQcVr20zdm2fhQ/S1kN68xq3D7WA 6mczGYg5vAdb00EKNL6Zm3cicgu9sfh42E2PIRkkeCRqWzORlWF6L5A9I2fs5gDXvo15GSZq252P7 jtaET/kA==; Received: from [142.147.89.230] (port=60910 helo=localhost) by server220.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1pCbHD-00H6ar-LN; Tue, 03 Jan 2023 02:00:04 -0500 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable In-Reply-To: <20220708110215.92996-1-ville.ilvonen@unikie.com> References: <20220708110215.92996-1-ville.ilvonen@unikie.com> Subject: Re: [PATCH] Documentation: Architecture Decision Record From: Adam Joseph To: devel@spectrum-os.org Date: Mon, 02 Jan 2023 23:03:43 -0800 Message-ID: <167272942335.19302.1324067862019435223@localhost> X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server220.web-hosting.com X-AntiAbuse: Original Domain - spectrum-os.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - westernsemico.com X-Get-Message-Sender-Via: server220.web-hosting.com: authenticated_id: westwhdn/from_h X-Authenticated-Sender: server220.web-hosting.com: adam@westernsemico.com X-Source: X-Source-Args: X-Source-Dir: X-From-Rewrite: unmodified, already matched Message-ID-Hash: JPTQWKZDCH4VYM32Z6ESSHS5ZI7B4X52 X-Message-ID-Hash: JPTQWKZDCH4VYM32Z6ESSHS5ZI7B4X52 X-MailFrom: adam@westernsemico.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-config-1; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Ville Ilvonen , Alyssa Ross X-Mailman-Version: 3.3.5 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Quoting Ville Ilvonen (2022-07-08 04:02:15) > +++ b/Documentation/decisions/006-drivers-on-host.adoc > ... > +## Consequences > +No networking on the host. Responsibilities of the host are expected to = get > +smaller over time. I know you're probably a long, long way from worrying about wifi, but when = you get to that point, I suggest taking a look at running `eiwd` in the netvm: https://github.com/illiliti/eiwd/ https://github.com/NixOS/nixpkgs/pull/208844 - It is way more robust than wpa_supplicant. - (unlike iwd) it does not require plumbing a dbus connection from the host= vm to the netvm (nor all the attack surface that would entail). - You control it by simply editing its state files, which it watches with `inotify()`. - It has zero runtime dependencies! - `pkgsStatic.eiwd` builds (caveat: I have not tested it) - You should be able to boot a VM with `init=3D/nix/store/...-eiwd/bin/ei= wd` and run it as PID 1 (note: I have not tried this). I've been running this on my daily driver laptop for the last few weeks and= am extremely happy with it. - a