+5 -2

crates/firecracker-vm/src/guest.rs

··· 1 use crate::{command::run_command, constants::BRIDGE_IP}; 2 use anyhow::Result; 3 4 - pub fn configure_guest_network(key_path: &str, guest_ip: &str) -> Result<()> { 5 println!("[+] Configuring network in guest..."); 6 const MAX_RETRIES: u32 = 500; 7 let mut retries = 0; ··· 16 "-o", 17 "UserKnownHostsFile=/dev/null", 18 &format!("root@{}", guest_ip), 19 - &format!("echo 'nameserver {}' > /etc/resolv.conf", BRIDGE_IP), 0 0 0 20 ], 21 false, 22 )

··· 1 use crate::{command::run_command, constants::BRIDGE_IP}; 2 use anyhow::Result; 3 4 + pub fn configure_guest_network(key_path: &str, guest_ip: &str, is_nixos: bool) -> Result<()> { 5 println!("[+] Configuring network in guest..."); 6 const MAX_RETRIES: u32 = 500; 7 let mut retries = 0; ··· 16 "-o", 17 "UserKnownHostsFile=/dev/null", 18 &format!("root@{}", guest_ip), 19 + &match is_nixos { 20 + true => "uname -a".into(), 21 + false => format!("echo 'nameserver {}' > /etc/resolv.conf", BRIDGE_IP), 22 + }, 23 ], 24 false, 25 )

+2 -4

crates/firecracker-vm/src/lib.rs

··· 103 104 firecracker::configure(&logfile, &kernel, &rootfs, &arch, &options)?; 105 106 - if distro != Distro::NixOS { 107 - let guest_ip = format!("{}.firecracker", name); 108 - guest::configure_guest_network(&key_name, &guest_ip)?; 109 - } 110 111 tailscale::setup_tailscale(&name, options)?; 112

··· 103 104 firecracker::configure(&logfile, &kernel, &rootfs, &arch, &options)?; 105 106 + let guest_ip = format!("{}.firecracker", name); 107 + guest::configure_guest_network(&key_name, &guest_ip, distro == Distro::NixOS)?; 0 0 108 109 tailscale::setup_tailscale(&name, options)?; 110

+18

crates/firecracker-vm/src/tailscale.rs

··· 21 get_private_key_path().with_context(|| "Failed to get SSH private key path")?; 22 23 let guest_ip = format!("{}.firecracker", name); 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 24 run_ssh_command(&key_path, &guest_ip, "rm -f /etc/security/namespace.init")?; 25 26 if config.alpine.unwrap_or(false) {

··· 21 get_private_key_path().with_context(|| "Failed to get SSH private key path")?; 22 23 let guest_ip = format!("{}.firecracker", name); 24 + 25 + if config.nixos.unwrap_or(false) { 26 + run_ssh_command( 27 + &key_path, 28 + &guest_ip, 29 + "type tailscale || nixos-rebuild switch", 30 + )?; 31 + run_ssh_command( 32 + &key_path, 33 + &guest_ip, 34 + &format!("tailscale up --auth-key {} --hostname {}", auth_key, name), 35 + )?; 36 + run_ssh_command(&key_path, &guest_ip, "systemctl status tailscaled || true")?; 37 + run_ssh_command(&key_path, &guest_ip, "tailscale status || true")?; 38 + println!("[+] Tailscale setup completed."); 39 + return Ok(()); 40 + } 41 + 42 run_ssh_command(&key_path, &guest_ip, "rm -f /etc/security/namespace.init")?; 43 44 if config.alpine.unwrap_or(false) {