qyliss changed the topic of #spectrum to: A compartmentalized operating system | https://spectrum-os.org/ | Logs: https://logs.spectrum-os.org/spectrum/
jb55 has quit [Ping timeout: 240 seconds]
jb55 has joined #spectrum
tilpner_ has joined #spectrum
tilpner has quit [Ping timeout: 256 seconds]
tilpner_ is now known as tilpner
cole-h has quit [Quit: Goodbye]
<IdleBot_cef0f9d0> I feel that calling the host side of virtio-net «virtio-net network driver» is a bit confusing…
<IdleBot_cef0f9d0> Then again, if there are VM-to-VM sockets, maybe one could even tunnel all the traffic via sockets to a VM dedicated just to multiplexing the network traffic
<IdleBot_cef0f9d0> (but I do not understand if there is any option for zero-copy VM-to-VM socket)
<qyliss> Sorry, that was an error
<qyliss> Host side should be virtio-net device, and the only driver it would need would be TAP
<qyliss> I decided to just spend a little more time finishing up what I was trying with the first attempt before I started over
<qyliss> And I got it to work!
<alj[m]> nice!
<qyliss> Was able to curl an HTTP server on the host from the VM
<qyliss> Talking to the actual internet would mostly involve messing around with host routing, so not very interesting to the problem domain despite being a cooler demo
<qyliss> So I'll leave it with this.
<leah2> yay :)
<IdleBot_cef0f9d0> qyliss: want the magic lines for quick kind-of-acceptable NAT setup?
<qyliss> IdleBot_cef0f9d0: sure if you want!
<IdleBot_cef0f9d0> iptables -t nat -A POSTROUTING -o $internet_interface -j MASQUERADE; echo 1 > /proc/sys/net/ipv4/ip_forward
<IdleBot_cef0f9d0> I happen to have this since forever, originally used it for setups like PDA — ad-hoc WiFi — laptop — Ethernet — external connection
<qyliss> Thanks!
<qyliss> Cool, confirmed I can curl
philipp[m] has joined #spectrum
<leah2> really useful this ip also has http :)
<IdleBot_cef0f9d0> Well, you can always tell curl to skip certificate validation
<leah2> i mean, compared to other ip's one knows by heart
<IdleBot_cef0f9d0> If only there was a tool that you could ask to send a DNS request to a specific target…
beniwtv[m]1 has joined #spectrum
beniwtv[m]1 has left #spectrum [#spectrum]
<qyliss> I think I'll spend some time reading about virtio-fs now.
<qyliss> I'm not sure yet if it'll be a good fit but definitely seems worth knowing about.
<philipp[m]> Since joining the room on matrix.org is kinda broken: I aliased it to #spectrum:matrix.org. Two people tried to get in and one made it.
<qyliss> philipp[m]: that sounds cool! Can you explain a little more what that means to somebody who has never used Matrix?
jb55 has quit [Ping timeout: 240 seconds]
<philipp[m]> qyliss: matrix rooms are more like a federated db, if that makes sense. All Servers that have users joined try to keep all the state and talk to each other. A room can have as many pretty names as you like on as many servers as you like.
<philipp[m]> Since the thing that seems to be broken is the pretty name -> internal name translation on matrix.org, I added another pretty name on my own server to the same distributed db room.
<philipp[m]> The irc bridge is still hosted by matrix.org, of course.
jb55 has joined #spectrum
<qyliss> Oh, cool!
<qyliss> philipp[m]: So people should be able to join #spectrum:matrix.org, and get exactly the same thing as if they'd done it the normal way through the freenode bridge?
<philipp[m]> should...
<philipp[m]> And they need to join #spectrum:xndr.de since I don't have access to the matrix.org namespace.
<philipp[m]> Yeah, typo up there. Sorry for the confusion.
<qyliss> AIUI, even if that server went away, the room would still exist?
<philipp[m]> The room, yes. The pretty name: No.
<philipp[m]> It was more of a test what exactly is wrong with the room.
<qyliss> mmm, right
<philipp[m]> I wouldn't reccomend using that name in official documentation, even though this matrix server should not go down for years to come.
<qyliss> hmm, okay
<philipp[m]> I'll poke around some more and try to find you something that could be used in that way, if you want me to.
<qyliss> Yeah, that would be great!
<qyliss> I am watching this talk by stefanha (who came up with virtio-vhost-user) about virtio-fs. It's very good so far: https://video.fosdem.org/2020/H.1309/vai_virtio_fs.webm
dani[m] has joined #spectrum
<philipp[m]> qyliss: I created a throwaway user on matrix.org and added the alias #spectrumos:matrix.org joining via that seems to work and only depends on matrix.org.
<qyliss> philipp[m]: okay, shall we put that in the documentation?
<philipp[m]> Can't hurt to add it as an alternative method, I think.
<qyliss> Would you be willing to send a patch that updates it here? https://spectrum-os.org/git/www/tree/participating.html
<qyliss> I think as a Matrix user you'd be better able to describe it than me
<philipp[m]> Will do when my brain cooled down a little.
<qyliss> thanks! :)
<philipp[m]> Love the talk. Also love that the redhat engineers have no idea whether their stuff works with selinux.
<philipp[m]> It's not that i dislike selinux, it's just that I have this "I need to talk to an adult now" feeling, when I work with it.
ehmry_ has joined #spectrum
<qyliss> yeah :)
cole-h has joined #spectrum
ehmry_ has quit [Quit: https://quassel-irc.org - Chat comfortably. Anywhere.]
cole-h has quit [Quit: Goodbye]
cole-h has joined #spectrum
cole-h_ has joined #spectrum
cole-h has quit [Ping timeout: 260 seconds]
klltkr has joined #spectrum
<philipp[m]> Is there a feature set defined anywhere that the minimal vm kernel needs to have except being bootable via kvm? For example you could probably do without usb support, but that is probably needed down the line.
<philipp[m]> I'm thinking of cubes-like passthrough scenarios here.
<philipp[m]> Or is the idea to have a barely bootable kernel and add features as needed?
cole-h_ has quit [Quit: Goodbye]
dani[m] has left #spectrum ["User left"]
drakonis has quit [Quit: ZNC 1.8.1 - https://znc.in]
drakonis has joined #spectrum
abbradar[m] has joined #spectrum
abbradar[m] has left #spectrum [#spectrum]
awordnot has quit [Read error: Connection reset by peer]
awordnot has joined #spectrum
acertain has joined #spectrum
ehmry_ has joined #spectrum
klltkr has quit [Ping timeout: 265 seconds]