Re: [PATCH] Documentation: Architecture Decision Record

Adam Joseph
2023-01-03T07:00:16Z

Quoting Ville Ilvonen (2022-07-08 04:02:15)
> +++ b/Documentation/decisions/006-drivers-on-host.adoc
> ...
> +## Consequences
> +No networking on the host. Responsibilities of the host are expected to get
> +smaller over time.

I know you're probably a long, long way from worrying about wifi, but when you
get to that point, I suggest taking a look at running `eiwd` in the netvm:

https://github.com/illiliti/eiwd/
https://github.com/NixOS/nixpkgs/pull/208844

- It is way more robust than wpa_supplicant.
- (unlike iwd) it does not require plumbing a dbus connection from the hostvm to
the netvm (nor all the attack surface that would entail).
- You control it by simply editing its state files, which it watches with
`inotify()`.
- It has zero runtime dependencies!
- `pkgsStatic.eiwd` builds (caveat: I have not tested it)
- You should be able to boot a VM with `init=/nix/store/...-eiwd/bin/eiwd`
and run it as PID 1 (note: I have not tried this).

I've been running this on my daily driver laptop for the last few weeks and am
extremely happy with it.

- a