WIP

hosts/backstage/boot.nix

@@ -0,0 +1,51 @@
+{config, lib, ...}:
+{
+  # Use the systemd-boot EFI boot loader.
+  boot = {
+    loader = {
+      systemd-boot.enable = true;
+      efi = {
+        canTouchEfiVariables = true;
+        efiSysMountPoint = "/boot/efi";
+      };
+    };
+    initrd = {
+      network = {
+        enable = true;
+        ssh = {
+          enable = true;
+          port = 22;
+          authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
+          hostKeys = [
+            "/boot/efi/initrd_id_ed25519"
+            "/boot/efi/initrd_id_rsa4096"
+          ];
+        };
+      };
+      systemd = {
+        enable = true;
+        network.enable = true;
+        network.networks.enp1s0 = config.systemd.network.networks.enp1s0;
+        targets.initrd.wants = [
+          "systemd-networkd-wait-online@enp1s0.service"
+        ];
+        users.root.shell = "/bin/systemd-tty-ask-password-agent";
+      };
+      availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" "virtio_pci" "r8169" ];
+      kernelModules = [ "dm-snapshot" ];
+      luks.devices."backstage" = {
+        preLVM = true;
+        device = "/dev/disk/by-uuid/7f3ccd2d-8022-491e-baa1-675805919fd7";
+      };
+    };
+    kernelModules = [ "kvm-intel" ];
+    kernelParams = [
+      "zfs.zfs_arc_max=1024000000"
+      "intel_iommu=on"
+      "pci=assign-busses"
+    ];
+#    extraModprobeConfig = ''
+#      options ixgbe max_vfs=4 allow_unsupported_sfp=1 debug=2
+#    '';
+  };
+}

hosts/backstage/configuration.nix

@@ -6,45 +6,6 @@
       ../../services/sshd
     ];
 
-  # Use the systemd-boot EFI boot loader.
-  boot = {
-    loader = {
-      systemd-boot.enable = true;
-      efi = {
-        canTouchEfiVariables = true;
-        efiSysMountPoint = "/boot/efi";
-      };
-    };
-    initrd = {
-      network = {
-        enable = true;
-        ssh = {
-          enable = true;
-          port = 22;
-          authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
-          hostKeys = [
-            "/boot/efi/initrd_id_ed25519"
-            "/boot/efi/initrd_id_rsa4096"
-          ];
-        };
-      };
-      systemd = {
-        enable = true;
-        network = {
-          enable = true;
-          networks."10-dhcp" = {
-            matchConfig.Name = "enp1s0";
-            DHCP = "yes";
-          };
-        };
-        targets.initrd.wants = [
-          "systemd-networkd-wait-online@enp1s0.service"
-        ];
-        users.root.shell = "/bin/systemd-tty-ask-password-agent";
-      };
-    };
-  };
-
   # Set your time zone.
   time.timeZone = "Europe/Berlin";
 
@@ -61,6 +22,8 @@
     git
     tmux
     htop
+    pciutils
+    ethtool
   ];
 
   users.users.root = {

hosts/backstage/default.nix

@@ -5,5 +5,6 @@
     ./hardware-configuration.nix
     ./configuration.nix
     ./network.nix
+    ./boot.nix
   ];
 }

hosts/backstage/hardware-configuration.nix

@@ -5,21 +5,6 @@
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
-  boot = {
-    initrd = {
-      availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" "virtio_pci" "r8169" ];
-      kernelModules = [ "dm-snapshot" ];
-      luks.devices."backstage" = {
-        preLVM = true;
-        device = "/dev/disk/by-uuid/7f3ccd2d-8022-491e-baa1-675805919fd7";
-      };
-    };
-    kernelModules = [ "kvm-intel" ];
-    kernelParams = [
-      "zfs.zfs_arc_max=1024000000"
-    ];
-  };
-
   fileSystems."/" =
     { device = "zpool/root";
       fsType = "zfs";

hosts/backstage/network.nix

@@ -1,10 +1,51 @@
-{ config, lib, pkgs, modulesPath, ... }:
+{ config, lib, ... }:
 
 {
   networking = {
     useNetworkd = true;
-    useDHCP = lib.mkDefault true;
     hostName = "backstage";
     hostId = "0ccd2304";
   };
+
+  systemd.network = {
+    enable = true;
+    links = {
+      "enp1s0" = {
+        enable = true;
+        matchConfig = {
+          Type = "ether";
+          MACAddress = "9c:6b:00:8d:d0:8f";
+        };
+        linkConfig = {
+          Name = "enp1s0";
+          NamePolicy = "";
+        };
+      };
+      "enp2s0f0" = {
+        enable = true;
+        matchConfig = {
+          Type = "ether";
+          MACAddress = "90:e2:ba:2e:ea:70";
+        };
+        linkConfig.MTUBytes = "9710";
+       };
+      "enp2s0f1" = {
+        enable = true;
+        matchConfig = {
+          Type = "ether";
+          MACAddress = "90:e2:ba:2e:ea:71";
+        };
+        linkConfig.MTUBytes = "9710";
+       };
+    };
+    networks = {
+      "enp1s0" = {
+        matchConfig.Name = "enp1s0";
+        DHCP = "yes";
+      };
+    };
+    netdevs = {
+
+    };
+  };
 }

hosts/backstage/radvd.nix

@@ -0,0 +1,7 @@
+{config, pkgs, ...}:
+{
+#  services.radvd.enable = true;
+#  services.radvd.config = ''
+#    interface br-infra
+#  '';
+}