From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id +NpvNRtLcGVq0AAAauVa8A:P1 (envelope-from ) for ; Wed, 06 Dec 2023 11:21:16 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id +NpvNRtLcGVq0AAAauVa8A (envelope-from ) for ; Wed, 06 Dec 2023 11:21:15 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4F6F21655C for ; Wed, 6 Dec 2023 11:21:15 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=muradm.net header.s=mail header.b=UKsvPFZq; dmarc=fail reason="SPF not aligned (relaxed)" header.from=muradm.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1701858075; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=LRzLPllVinzrXsX/A21aG6pcOEdTm46XfGsF9dYF5kY=; b=XqC5EFn55BnursPsdu56uQJqXgfxGmPzs0c30WK3XRGAxmcUk3XDrHuSdjp27RcS0on5WI 50zwSuJKcTS2ZPMLHPOgteZDb6fhCkj0Spdrvu68ySOtlIvego81lufUygg6oqPukcgInB SI9v8uzksJKirM7O3f1X6NvQD/lTOIdg7jrGWKXVFrOindZt2bcNNQlX+MS6+TSa4qDOkt 1VWlHt2odkOF4PRk7+vB4/kTTx5f9Z3M773wf3OWDhLaEXW0bCmLi/9UzyYy7czpw+1nLM 4YxdUApOmPucWDOcE/jDBlheO6MjoWzMZoRFzNFtIF5T7QQkbKKi2Oe+BM3Aiw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1701858075; a=rsa-sha256; cv=none; b=Q85X3l/yXaPhU+hTqqwQM5m2KMFVpwbRc9+EFYSCTbQVrtnRWCehH5Sc2j9ebW1QHrj9rp 9yHZaX2SkBISB0TLdIw6vtwYWqkj/XXdUhFZu0WA35JlnURNVo/H0zeDI81xWXTS6CqujB GfmPjeWE3ZzIsS6zzA+S5yeXv4RFetEVQCYgaA5L/XU/8lkx9/HFbN3jYotCwJEz8mQx8g a1lRlEJfLuPBJZS0lZvdYJ95OcG0zxrHBE1TF3l4fE39Q5FK6TtJR4uth+7bZgK6yT0NFu KBMVzishbu0xyrrnnjZyUZ4PI+XtqHwTNhGa2yGfk4YeUaqbEeB5vS7Qc+swWg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=muradm.net header.s=mail header.b=UKsvPFZq; dmarc=fail reason="SPF not aligned (relaxed)" header.from=muradm.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rAp1Q-0005n4-0n; Wed, 06 Dec 2023 05:20:52 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rAp1O-0005mu-SR for guix-patches@gnu.org; Wed, 06 Dec 2023 05:20:50 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1rAp1O-0005co-KG for guix-patches@gnu.org; Wed, 06 Dec 2023 05:20:50 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1rAp1Z-0003dP-VV for guix-patches@gnu.org; Wed, 06 Dec 2023 05:21:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#67657] [PATCH] services: connman: Add 'connman-general-configuration'. Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 06 Dec 2023 10:21:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 67657 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 67657@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.170185800513892 (code B ref -1); Wed, 06 Dec 2023 10:21:01 +0000 Received: (at submit) by debbugs.gnu.org; 6 Dec 2023 10:20:05 +0000 Received: from localhost ([127.0.0.1]:38906 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rAp0d-0003bx-Ny for submit@debbugs.gnu.org; Wed, 06 Dec 2023 05:20:05 -0500 Received: from lists.gnu.org ([2001:470:142::17]:52024) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rAp0Z-0003bL-Tt for submit@debbugs.gnu.org; Wed, 06 Dec 2023 05:20:01 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rAp0I-0005cI-Ox for guix-patches@gnu.org; Wed, 06 Dec 2023 05:19:42 -0500 Received: from nomad-cl1.muradm.net ([139.162.159.157]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rAp0F-0005M9-A2 for guix-patches@gnu.org; Wed, 06 Dec 2023 05:19:42 -0500 Received: from localhost ([127.0.0.1]:36324) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.1) (envelope-from ) id 1rAp06-0003qV-19 for guix-patches@gnu.org; Wed, 06 Dec 2023 10:19:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Date :Subject:To:From:Sender:Reply-To:Cc:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=LRzLPllVinzrXsX/A21aG6pcOEdTm46XfGsF9dYF5kY=; b=UKsvPFZqx64+yXYu4YdeNXQEZ7 0OpWTDpa7IF8rc9rxOjxy1HUmDinI+ybPjRGUTQZZ4yX3a98JEckp8bXbl5Iqyr2IOnuCz/6mcc6L rTY6yjite/m44KTu33Dvx8TnfqACWj5o8rW6kaGyaTU5SR0JDMqjbOMaWa+6ppERzaTFy55b9pqol VU5VtKVFDCrRJdUFj+G5WXEVCwZtbjdTULxuzKDoAePrfjBfza284bD0+Kyc1JVwdqccIRIMJW+Ip 7t5V67HIueMeyKCcJWMLeyEYFs1tMKQ4gOwmVJB4wYopLNbIKE7jsHkOO61q781VP9ij3UYcJrQFW UwvoIbjdZVbnDKnLB+95Ak5wOXQ+7MbaRQ93pBP7b2aDmBa1h6/c3D+1s5j5WErLWua6+xHGtaTiu DZhPHyL5mYM4Cwc+6WsUkV5jHh2UkFcnMS+Zo4nQc4rf0jKIDAepYxbBeXHVP/1SXyGA7gI3q2usU PMPJs4XL50B/n7rbVCS+RJ0H; Received: from muradm by localhost with local (Exim 4.96.1) (envelope-from ) id 1rAp0B-0000xw-2L for guix-patches@gnu.org; Wed, 06 Dec 2023 13:19:35 +0300 From: muradm Date: Wed, 6 Dec 2023 13:19:33 +0300 Message-ID: <11f2fc968e9101842886f398465cf3b808730d7d.1701857973.git.mail@muradm.net> X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=139.162.159.157; envelope-from=mail@muradm.net; helo=nomad-cl1.muradm.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Scanner: mx11.migadu.com X-Migadu-Spam-Score: -4.05 X-Spam-Score: -4.05 X-Migadu-Queue-Id: 4F6F21655C X-TUID: TvcL9bYgyzNl For me connman in default configuration causes conflict with docker generated virtual veth* interfaces. Currently connman has no main.conf as specified in man 5 connman.conf which would allow setting NetworkInterfaceBalcklist and other useful options. This patch adds connman-general-configuration, serializes it and passes to connmad with --config= flag. All configuration fields are 'maybe-*' deliberately. This will not disturb current users. This will not require supporting configuration changes for connmand. * gnu/services/networking.scm: (): New configuration record to represent main.conf for connmand. ()[general-configuration]: New field. (connman-shepherd-service): Honor it. *doc/guix.texi (Networking Services): Add generated configuration. Change-Id: I2a3f808a101548aa35aa833cb91d43d746a18533 --- doc/guix.texi | 201 ++++++++++++++++++++++++++++ gnu/services/networking.scm | 252 +++++++++++++++++++++++++++++++++++- 2 files changed, 450 insertions(+), 3 deletions(-) diff --git a/doc/guix.texi b/doc/guix.texi index 7dde9b727b..cb1613955b 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -20784,7 +20784,208 @@ Networking Setup @item @code{disable-vpn?} (default: @code{#f}) When true, disable connman's vpn plugin. +@item @code{general-configuration} (default: @code{(connman-general-configuration)}) +Configuration serialized to @file{main.conf} and passed as @option{--config} +to @command{connmand}. + +@end table +@end deftp + +@deftp {Data Type} connman-general-configuration +Available @code{connman-general-configuration} fields are: + +@table @asis +@item @code{input-request-timeout} (type: maybe-number) +Set input request timeout. Default is 120 seconds. The request for +inputs like passphrase will timeout after certain amount of time. Use +this setting to increase the value in case of different user interface +designs. + +@item @code{browser-launch-timeout} (type: maybe-number) +Set browser launch timeout. Default is 300 seconds. The request for +launching a browser for portal pages will timeout after certain amount +of time. Use this setting to increase the value in case of different +user interface designs. + +@item @code{background-scanning?} (type: maybe-boolean) +Enable background scanning. Default is true. If wifi is disconnected, +the background scanning will follow a simple backoff mechanism from 3s +up to 5 minutes. Then, it will stay in 5 minutes unless user +specifically asks for scanning through a D-Bus call. If so, the +mechanism will start again from 3s. This feature activates also the +background scanning while being connected, which is required for roaming +on wifi. When background-scanning? is false, ConnMan will not perform +any scan regardless of wifi is connected or not, unless it is requested +by the user through a D-Bus call. + +@item @code{use-gateways-as-timeservers?} (type: maybe-boolean) +Assume that service gateways also function as timeservers. Default is +false. + +@item @code{fallback-timeservers} (type: maybe-list) +List of Fallback timeservers. These timeservers are used for NTP sync +when there are no timeservers set by the user or by the service, and +when use-gateways-as-timeservers? is @code{#f}. These can contain a +mixed combination of fully qualified domain names, IPv4 and IPv6 +addresses. + +@item @code{fallback-nameservers} (type: maybe-list) +List of fallback nameservers appended to the list of nameservers given +by the service. The nameserver entries must be in numeric format, host +names are ignored. + +@item @code{default-auto-connect-technologies} (type: maybe-list) +List of technologies that are marked autoconnectable by default. The +default value for this entry when empty is ethernet,wifi,cellular. +Services that are automatically connected must have been set up and +saved to storage beforehand. + +@item @code{default-favourite-technologies} (type: maybe-list) +List of technologies that are marked favorite by default. The default +value for this entry when empty is ethernet. Connects to services from +this technology even if not setup and saved to storage. + +@item @code{always-connected-technologies} (type: maybe-list) +List of technoolgies which are always connected regardless of +preferred-technologies setting (auto-connect? @code{#t}). The default +value is empty and this feature is disabled unless explicitly enabled. + +@item @code{preferred-technologies} (type: maybe-list) +List of preferred technologies from the most preferred one to the least +preferred one. Services of the listed technology type will be tried one +by one in the order given, until one of them gets connected or they are +all tried. A service of a preferred technology type in state 'ready' +will get the default route when compared to another preferred type +further down the list with state 'ready' or with a non-preferred type; a +service of a preferred technology type in state 'online' will get the +default route when compared to either a non-preferred type or a +preferred type further down in the list. + +@item @code{network-interface-blacklist} (type: maybe-list) +List of blacklisted network interfaces. Found interfaces will be +compared to the list and will not be handled by ConnMan, if their first +characters match any of the list entries. Default value is +vmnet,vboxnet,virbr,ifb,veth. + +@item @code{allow-hostname-updates?} (type: maybe-boolean) +Allow ConnMan to change the system hostname. This can happen for +example if we receive DHCP hostname option. Default value is @code{#t}. + +@item @code{allow-domainname-updates?} (type: maybe-boolean) +Allow connman to change the system domainname. This can happen for +example if we receive DHCP domainname option. Default value is +@code{#t}. + +@item @code{single-connected-technology?} (type: maybe-boolean) +Keep only a single connected technology at any time. When a new service +is connected by the user or a better one is found according to +preferred-technologies, the new service is kept connected and all the +other previously connected services are disconnected. With this setting +it does not matter whether the previously connected services are in +'online' or 'ready' states, the newly connected service is the only one +that will be kept connected. A service connected by the user will be +used until going out of network coverage. With this setting enabled +applications will notice more network breaks than normal. Note this +options can't be used with VPNs. Default value is @code{#f}. + +@item @code{tethering-technologies} (type: maybe-list) +List of technologies that are allowed to enable tethering. The default +value is wifi,bluetooth,gadget. Only those technologies listed here are +used for tethering. If one wants to tether ethernet, then add +"ethernet" in the list. NOTE that if ethernet tethering is enabled, +then a DHCP server is started on all ethernet interfaces. Tethered +ethernet should never be connected to corporate or home network as it +will disrupt normal operation of these networks. Due to this ethernet +is not tethered by default. Do not activate ethernet tethering unless +you really know what you are doing. + +@item @code{persistent-tethering-mode?} (type: maybe-boolean) +Restore earlier tethering status when returning from offline mode, +re-enabling a technology, and after restarts and reboots. Default value +is @code{#f}. + +@item @code{enable-6to4?} (type: maybe-boolean) +Automatically enable anycast 6to4 if possible. This is not recommended, +as the use of 6to4 will generally lead to a severe degradation of +connection quality. See RFC6343. Default value is @code{#f} (as +recommended by RFC6343 section 4.1). + +@item @code{vendor-class-id} (type: maybe-string) +Set DHCP option 60 (Vendor Class ID) to the given string. This option +can be used by DHCP servers to identify specific clients without having +to rely on MAC address ranges, etc. + +@item @code{enable-online-check?} (type: maybe-boolean) +Enable or disable use of HTTP GET as an online status check. When a +service is in a READY state, and is selected as default, ConnMan will +issue an HTTP GET request to verify that end-to-end connectivity is +successful. Only then the service will be transitioned to ONLINE state. +If this setting is false, the default service will remain in READY +state. Default value is @code{#t}. + +@item @code{online-check-ipv4-url} (type: maybe-string) +IPv4 URL used during the online status check. Please refer to the +README for more detailed information. Default value is +http://ipv4.connman.net/online/status.html. + +@item @code{online-check-ipv6-url} (type: maybe-string) +IPv6 URL used during the online status check. Please refer to the +README for more detailed information. Default value is +http://ipv6.connman.net/online/status.html. + +@item @code{online-check-initial-interval} (type: maybe-number) +Range of intervals between two online check requests. Please refer to +the README for more detailed information. Default values is 1. + +@item @code{online-check-max-interval} (type: maybe-number) +Range of intervals between two online check requests. Please refer to +the README for more detailed information. Default values is 1. + +@item @code{enable-online-to-ready-transition?} (type: maybe-boolean) +WARNING: Experimental feature!!! In addition to enable-online-check +setting, enable or disable use of HTTP GET to detect the loss of +end-to-end connectivity. If this setting is @code{#f}, when the default +service transitions to ONLINE state, the HTTP GET request is no more +called until next cycle, initiated by a transition of the default +service to DISCONNECT state. If this setting is @code{#t}, the HTTP GET +request keeps beeing called to guarantee that end-to-end connectivity is +still successful. If not, the default service will transition to READY +state, enabling another service to become the default one, in +replacement. Default value is @code{#f}. + +@item @code{auto-connect-roaming-services?} (type: maybe-boolean) +Automatically connect roaming services. This is not recommended unless +you know you won't have any billing problem. Default value is +@code{#f}. + +@item @code{address-conflict-detection?} (type: maybe-boolean) +Enable or disable the implementation of IPv4 address conflict detection +according to RFC5227. ConnMan will send probe ARP packets to see if an +IPv4 address is already in use before assigning the address to an +interface. If an address conflict occurs for a statically configured +address, an IPv4LL address will be chosen instead (according to +RFC3927). If an address conflict occurs for an address offered via +DHCP, ConnMan send a DHCP DECLINE once and for the second conflict +resort to finding an IPv4LL address. Default value is @code{#f}. + +@item @code{localtime} (type: maybe-string) +Path to localtime file. Defaults to /etc/localtime. + +@item @code{regdom-follows-timezone?} (type: maybe-boolean) +Enable regdomain to be changed along timezone changes. With this option +set to true each time the timezone changes the first present ISO3166 +country code is being read from /usr/share/zoneinfo/zone1970.tab and set +as regdom value. Default value is @code{#f}. + +@item @code{resolv-conf} (type: maybe-string) +Path to resolv.conf file. If the file does not exist, but intermediate +directories exist, it will be created. If this option is not set, it +tries to write into /var/run/connman/resolv.conf if it fails +(/var/run/connman does not exist or is not writeable). If you do not +want to update resolv.conf, you can set /dev/null. + @end table + @end deftp @cindex WPA Supplicant diff --git a/gnu/services/networking.scm b/gnu/services/networking.scm index 0508a4282c..13c03cbd4f 100644 --- a/gnu/services/networking.scm +++ b/gnu/services/networking.scm @@ -21,6 +21,7 @@ ;;; Copyright © 2022, 2023 Andrew Tropin ;;; Copyright © 2023 Declan Tsien ;;; Copyright © 2023 Bruno Victal +;;; Copyright © 2023 muradm ;;; ;;; This file is part of GNU Guix. ;;; @@ -78,6 +79,7 @@ (define-module (gnu services networking) #:use-module (srfi srfi-26) #:use-module (srfi srfi-43) #:use-module (ice-9 match) + #:use-module (ice-9 string-fun) #:use-module (json) #:re-export (static-networking-service static-networking-service-type) @@ -171,6 +173,8 @@ (define-module (gnu services networking) network-manager-configuration-vpn-plugins network-manager-service-type + connman-general-configuration + connman-general-configuration? connman-configuration connman-configuration? connman-configuration-connman @@ -1326,6 +1330,238 @@ (define network-manager-service-type ;;; Connman ;;; +(define (connman-general-configuration-field-name field-name) + (let* ((str->camel (lambda (s) + (string-concatenate + (map string-capitalize (string-split s #\-))))) + (str (if (symbol? field-name) + (str->camel (symbol->string field-name)) + field-name))) + (cond + ((string-suffix? "?" str) (connman-general-configuration-field-name + (string-drop-right str 1))) + ((string-contains str "Url") (connman-general-configuration-field-name + (string-replace-substring str "Url" "URL"))) + ((string-contains str "Ip") (connman-general-configuration-field-name + (string-replace-substring str "Ip" "IP"))) + ((string-contains str "6To4") (connman-general-configuration-field-name + (string-replace-substring str "6To4" "6to4"))) + (#t str)))) + +(define (connman-general-configuration-serialize-string field-name value) + (let ((param (connman-general-configuration-field-name field-name))) + #~(string-append #$param " = " #$value "\n"))) + +(define (connman-general-configuration-serialize-number field-name value) + (connman-general-configuration-serialize-string + field-name (number->string value))) + +(define (connman-general-configuration-serialize-list field-name value) + (connman-general-configuration-serialize-string + field-name (string-join value ","))) + +(define (connman-general-configuration-serialize-boolean field-name value) + (connman-general-configuration-serialize-string + field-name (if value "true" "false"))) + +(define-maybe boolean (prefix connman-general-configuration-)) +(define-maybe number (prefix connman-general-configuration-)) +(define-maybe string (prefix connman-general-configuration-)) +(define-maybe list (prefix connman-general-configuration-)) + +(define-configuration connman-general-configuration + (input-request-timeout + maybe-number + "Set input request timeout. Default is 120 seconds. The request for inputs +like passphrase will timeout after certain amount of time. Use this setting to +increase the value in case of different user interface designs.") + (browser-launch-timeout + maybe-number + "Set browser launch timeout. Default is 300 seconds. The request for +launching a browser for portal pages will timeout after certain amount of +time. Use this setting to increase the value in case of different user +interface designs.") + (background-scanning? + maybe-boolean + "Enable background scanning. Default is true. If wifi is disconnected, the +background scanning will follow a simple backoff mechanism from 3s up to 5 +minutes. Then, it will stay in 5 minutes unless user specifically asks for +scanning through a D-Bus call. If so, the mechanism will start again from +3s. This feature activates also the background scanning while being connected, +which is required for roaming on wifi. When background-scanning? is false, +ConnMan will not perform any scan regardless of wifi is connected or not, +unless it is requested by the user through a D-Bus call.") + (use-gateways-as-timeservers? + maybe-boolean + "Assume that service gateways also function as timeservers. Default is false.") + (fallback-timeservers + maybe-list + "List of Fallback timeservers. These timeservers are used for NTP sync +when there are no timeservers set by the user or by the service, and when +use-gateways-as-timeservers? is @code{#f}. These can contain a mixed +combination of fully qualified domain names, IPv4 and IPv6 addresses.") + (fallback-nameservers + maybe-list + "List of fallback nameservers appended to the list of nameservers given +by the service. The nameserver entries must be in numeric format, +host names are ignored.") + (default-auto-connect-technologies + maybe-list + "List of technologies that are marked autoconnectable by default. The +default value for this entry when empty is ethernet,wifi,cellular. Services +that are automatically connected must have been set up and saved to +storage beforehand.") + (default-favourite-technologies + maybe-list + "List of technologies that are marked favorite by default. The default +value for this entry when empty is ethernet. Connects to services from +this technology even if not setup and saved to storage.") + (always-connected-technologies + maybe-list + "List of technoolgies which are always connected regardless of +preferred-technologies setting (auto-connect? @code{#t}). The default value +is empty and this feature is disabled unless explicitly enabled.") + (preferred-technologies + maybe-list + "List of preferred technologies from the most preferred one to the least +preferred one. Services of the listed technology type will be tried one by +one in the order given, until one of them gets connected or they are all +tried. A service of a preferred technology type in state 'ready' will get +the default route when compared to another preferred type further down the +list with state 'ready' or with a non-preferred type; a service of a +preferred technology type in state 'online' will get the default route when +compared to either a non-preferred type or a preferred type further down +in the list.") + (network-interface-blacklist + maybe-list + "List of blacklisted network interfaces. Found interfaces will be +compared to the list and will not be handled by ConnMan, if their first +characters match any of the list entries. Default value is +vmnet,vboxnet,virbr,ifb,veth.") + (allow-hostname-updates? + maybe-boolean + "Allow ConnMan to change the system hostname. This can happen for +example if we receive DHCP hostname option. Default value is @code{#t}.") + (allow-domainname-updates? + maybe-boolean + "Allow connman to change the system domainname. This can happen for +example if we receive DHCP domainname option. Default value is @code{#t}.") + (single-connected-technology? + maybe-boolean + "Keep only a single connected technology at any time. When a new +service is connected by the user or a better one is found according to +preferred-technologies, the new service is kept connected and all the +other previously connected services are disconnected. With this setting +it does not matter whether the previously connected services are +in 'online' or 'ready' states, the newly connected service is the only +one that will be kept connected. A service connected by the user will +be used until going out of network coverage. With this setting enabled +applications will notice more network breaks than normal. Note this +options can't be used with VPNs. Default value is @code{#f}.") + (tethering-technologies + maybe-list + "List of technologies that are allowed to enable tethering. The +default value is wifi,bluetooth,gadget. Only those technologies listed +here are used for tethering. If one wants to tether ethernet, then add +\"ethernet\" in the list. NOTE that if ethernet tethering is enabled, +then a DHCP server is started on all ethernet interfaces. Tethered +ethernet should never be connected to corporate or home network as it +will disrupt normal operation of these networks. Due to this ethernet +is not tethered by default. Do not activate ethernet tethering unless +you really know what you are doing.") + (persistent-tethering-mode? + maybe-boolean + "Restore earlier tethering status when returning from offline mode, +re-enabling a technology, and after restarts and reboots. Default +value is @code{#f}.") + (enable-6to4? + maybe-boolean + "Automatically enable anycast 6to4 if possible. This is not +recommended, as the use of 6to4 will generally lead to a severe +degradation of connection quality. See RFC6343. Default value +is @code{#f} (as recommended by RFC6343 section 4.1).") + (vendor-class-id + maybe-string + "Set DHCP option 60 (Vendor Class ID) to the given string. This +option can be used by DHCP servers to identify specific clients +without having to rely on MAC address ranges, etc.") + (enable-online-check? + maybe-boolean + "Enable or disable use of HTTP GET as an online status check. When +a service is in a READY state, and is selected as default, ConnMan will +issue an HTTP GET request to verify that end-to-end connectivity is +successful. Only then the service will be transitioned to ONLINE +state. If this setting is false, the default service will remain +in READY state. Default value is @code{#t}.") + (online-check-ipv4-url + maybe-string + "IPv4 URL used during the online status check. Please refer to +the README for more detailed information. Default value is +http://ipv4.connman.net/online/status.html.") + (online-check-ipv6-url + maybe-string + "IPv6 URL used during the online status check. Please refer to +the README for more detailed information. Default value is +http://ipv6.connman.net/online/status.html.") + (online-check-initial-interval + maybe-number + "Range of intervals between two online check requests. Please +refer to the README for more detailed information. Default values is 1.") + (online-check-max-interval + maybe-number + "Range of intervals between two online check requests. Please +refer to the README for more detailed information. Default values is 1.") + (enable-online-to-ready-transition? + maybe-boolean + "WARNING: Experimental feature!!! In addition to enable-online-check +setting, enable or disable use of HTTP GET to detect the loss of +end-to-end connectivity. If this setting is @code{#f}, when the default +service transitions to ONLINE state, the HTTP GET request is no more +called until next cycle, initiated by a transition of the default +service to DISCONNECT state. If this setting is @code{#t}, the HTTP GET +request keeps beeing called to guarantee that end-to-end connectivity +is still successful. If not, the default service will transition +to READY state, enabling another service to become the default one, +in replacement. Default value is @code{#f}.") + (auto-connect-roaming-services? + maybe-boolean + "Automatically connect roaming services. This is not recommended +unless you know you won't have any billing problem. Default value +is @code{#f}.") + (address-conflict-detection? + maybe-boolean + "Enable or disable the implementation of IPv4 address conflict +detection according to RFC5227. ConnMan will send probe ARP packets +to see if an IPv4 address is already in use before assigning the +address to an interface. If an address conflict occurs for a +statically configured address, an IPv4LL address will be chosen +instead (according to RFC3927). If an address conflict occurs for +an address offered via DHCP, ConnMan send a DHCP DECLINE once +and for the second conflict resort to finding an IPv4LL +address. Default value is @code{#f}.") + (localtime + maybe-string + "Path to localtime file. Defaults to /etc/localtime.") + (regdom-follows-timezone? + maybe-boolean + "Enable regdomain to be changed along timezone changes. With +this option set to true each time the timezone changes the first +present ISO3166 country code is being read from +/usr/share/zoneinfo/zone1970.tab and set as regdom value. Default +value is @code{#f}.") + (resolv-conf + maybe-string + "Path to resolv.conf file. If the file does not exist, but +intermediate directories exist, it will be created. If this option +is not set, it tries to write into /var/run/connman/resolv.conf if +it fails (/var/run/connman does not exist or is not writeable). If +you do not want to update resolv.conf, you can set /dev/null.") + (prefix connman-general-configuration-)) + +;; ,in (gnu services networking) (connman-general-configuration-generate-doc) +(define (connman-general-configuration-generate-doc) + (configuration->documentation 'connman-general-configuration)) + (define-record-type* connman-configuration make-connman-configuration connman-configuration? @@ -1337,7 +1573,9 @@ (define-record-type* (default #f)) (iwd? connman-configuration-iwd? (default #f) - (sanitize warn-iwd?-field-deprecation))) + (sanitize warn-iwd?-field-deprecation)) + (general-configuration connman-configuration-general-configuration + (default (connman-general-configuration)))) (define (connman-activation config) (let ((disable-vpn? (connman-configuration-disable-vpn? config))) @@ -1350,10 +1588,17 @@ (define (connman-activation config) (define (connman-shepherd-service config) (match-record config (connman shepherd-requirement - disable-vpn? iwd?) + disable-vpn? iwd? + general-configuration) (let ((iwd? (or iwd? ; TODO: deprecated field, remove later. (and shepherd-requirement - (memq 'iwd shepherd-requirement))))) + (memq 'iwd shepherd-requirement)))) + (config (mixed-text-file + "main.conf" + "[General]\n" + (serialize-configuration + general-configuration + connman-general-configuration-fields)))) (list (shepherd-service (documentation "Run Connman") (provision '(connman networking)) @@ -1365,6 +1610,7 @@ (define (connman-shepherd-service config) (start #~(make-forkexec-constructor (list (string-append #$connman "/sbin/connmand") + (string-append "--config=" #$config) "--nodaemon" "--nodnsproxy" #$@(if disable-vpn? '("--noplugin=vpn") '()) base-commit: 8c294e43eb0b0ea61da7c0570872e0908f64c8ed -- 2.41.0