Iwd - Revision history

Vater: /* eduroam */

2025-10-07T00:17:14Z

eduroam

← Older revision		Revision as of 00:17, 7 October 2025
Line 32:		Line 32:
	For a detailed and up-to-date list of available settings, please reference the [https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.network.rst network daemon configuration documentation], from kernel Git repo.		For a detailed and up-to-date list of available settings, please reference the [https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.network.rst network daemon configuration documentation], from kernel Git repo.

	=== eduroam ===		=== [[eduroam]] ===

	[[eduroam]] (WPA2 Enterprise) wireless networks need to get configured manually by creating the following file <code>/var/lib/iwd/eduroam.8021x</code>, which will not persist across NixOS rebuilds unless explicitly managed. It's often better to configure this via a NixOS module.		[[eduroam]] (WPA2 Enterprise) wireless networks need to get configured manually by creating the following file <code>/var/lib/iwd/eduroam.8021x</code>, which will not persist across NixOS rebuilds unless explicitly managed. It's often better to configure this via a NixOS module.

Vater: /* eduroam */

2025-10-07T00:01:57Z

eduroam

← Older revision		Revision as of 00:01, 7 October 2025
Line 32:		Line 32:
	For a detailed and up-to-date list of available settings, please reference the [https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.network.rst network daemon configuration documentation], from kernel Git repo.		For a detailed and up-to-date list of available settings, please reference the [https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.network.rst network daemon configuration documentation], from kernel Git repo.

	=== ~~Eduroam (WPA2 Enterprise) network~~ ===		=== eduroam ===
	[~~https://~~eduroam~~.org Eduroam~~] wireless networks need to get configured manually by creating the following file <code>/var/lib/iwd/eduroam.8021x</code>, which will not persist across NixOS rebuilds unless explicitly managed. It's often better to configure this via a NixOS module.
			[[eduroam]] (WPA2 Enterprise) wireless networks need to get configured manually by creating the following file <code>/var/lib/iwd/eduroam.8021x</code>, which will not persist across NixOS rebuilds unless explicitly managed. It's often better to configure this via a NixOS module.

	<syntaxhighlight lang="ini">		<syntaxhighlight lang="ini">

THShafi170: /* Eduroam (WPA2 Enterprise) network */

2025-09-21T12:29:16Z

Eduroam (WPA2 Enterprise) network

← Older revision		Revision as of 12:29, 21 September 2025
Line 34:		Line 34:
	=== Eduroam (WPA2 Enterprise) network ===		=== Eduroam (WPA2 Enterprise) network ===
	[https://eduroam.org Eduroam] wireless networks need to get configured manually by creating the following file <code>/var/lib/iwd/eduroam.8021x</code>, which will not persist across NixOS rebuilds unless explicitly managed. It's often better to configure this via a NixOS module.		[https://eduroam.org Eduroam] wireless networks need to get configured manually by creating the following file <code>/var/lib/iwd/eduroam.8021x</code>, which will not persist across NixOS rebuilds unless explicitly managed. It's often better to configure this via a NixOS module.

	~~Alternatively, you can create a file with the following content and place it in a persistent location, such as <code>/etc/nixos/eduroam.8021x</code>, and link to it.~~

	<syntaxhighlight lang="ini">		<syntaxhighlight lang="ini">

THShafi170: Source code clean-up and grammatical fixes.

2025-09-21T12:26:57Z

Source code clean-up and grammatical fixes.

← Older revision		Revision as of 12:26, 21 September 2025
Line 11:		Line 11:

	== Usage ==		== Usage ==
	Connections can be managed using the provided ~~{{ic\|~~iwctl}} tool.		Connections can be managed using the provided <code>iwctl</code> tool.

	== Configuration ==		== Configuration ==

	To configure iwd, you should use <code>networking.wireless.iwd.settings</code> option. An example configuration, which enables IPv6 and automatic connection to known networks, would be similar to:		To configure iwd, you should use <code>networking.wireless.iwd.settings</code> option. An example configuration, which enables IPv6 and automatic connection to known networks, would be similar to:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	{		{
Line 29:		Line 30:
	</syntaxhighlight>		</syntaxhighlight>

	For a detailed and up-to-date list of available settings, please reference the [https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.network.rst network daemon configuration ~~docummentation~~], from kernel Git repo.		For a detailed and up-to-date list of available settings, please reference the [https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.network.rst network daemon configuration documentation], from kernel Git repo.

	=== Eduroam (WPA2 Enterprise) network ===		=== Eduroam (WPA2 Enterprise) network ===
	[https://eduroam.org Eduroam] wireless networks need to get configured manually by creating following file <code>/var/lib/iwd/eduroam.8021x:</code><syntaxhighlight lang="ini">		[https://eduroam.org Eduroam] wireless networks need to get configured manually by creating the following file <code>/var/lib/iwd/eduroam.8021x</code>, which will not persist across NixOS rebuilds unless explicitly managed. It's often better to configure this via a NixOS module.
	[Security]
			Alternatively, you can create a file with the following content and place it in a persistent location, such as <code>/etc/nixos/eduroam.8021x</code>, and link to it.

			<syntaxhighlight lang="ini">
			[Security]
	EAP-Method=PEAP		EAP-Method=PEAP
	EAP-Identity=eduroamHDcat2024@uni-heidelberg.de		EAP-Identity=eduroamHDcat2024@uni-heidelberg.de
Line 42:		Line 47:
	EAP-PEAP-Phase2-Password=mypassword		EAP-PEAP-Phase2-Password=mypassword

	[Settings]		[Settings]
	Autoconnect=true		Autoconnect=true
	</syntaxhighlight>Replace the ~~value~~ in <code>EAP-Identity</code>, <code>EAP-PEAP-ServerDomainMask</code>, <code>EAP-PEAP-Phase2-Identity</code> and <code>EAP-PEAP-Phase2-Password</code> according to your university presets which can be acquired at [https://cat.eduroam.org cat.eduroam.org]. After entering your university name there the site will offer you a download link to a Python script which contains most of the required default values. The script also contains a certificate string which can be copied into the file <code>/var/lib/iwd/ca.pem</code>.		</syntaxhighlight>

			Replace the values in <code>EAP-Identity</code>, <code>EAP-PEAP-ServerDomainMask</code>, <code>EAP-PEAP-Phase2-Identity</code> and <code>EAP-PEAP-Phase2-Password</code> according to your university presets which can be acquired at [https://cat.eduroam.org cat.eduroam.org]. After entering your university name there the site will offer you a download link to a Python script which contains most of the required default values. The script also contains a certificate string which can be copied into the file <code>/var/lib/iwd/ca.pem</code>.

	=== iwd as backend for NetworkManager ===		=== iwd as backend for NetworkManager ===

	If iwd is present, it can be used as a backend for NetworkManager through the following snippet.		If iwd is present, it can be used as a backend for [[NetworkManager]] through the following snippet.

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	networking.networkmanager.wifi.backend = "iwd";		networking.networkmanager.wifi.backend = "iwd";
	</syntaxhighlight>{{Warning\|Setting this will silently turn off MAC address randomization as Networkmanager does not control the MAC address randomization features of `iwd` for which it is turned off by default.<ref>https://bbs.archlinux.org/viewtopic.php?id=280657</ref><ref>https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1111</ref>		</syntaxhighlight>

			{{Warning\|Setting this will silently turn off MAC address randomization as Networkmanager does not control the MAC address randomization features of `iwd` for which it is turned off by default.<ref>https://bbs.archlinux.org/viewtopic.php?id=280657</ref><ref>https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1111</ref>
	To remediate this, configure iwd directly using the `AddressRandomization` option.}}		To remediate this, configure iwd directly using the `AddressRandomization` option.}}

	=== iwd as backend for Connman ===		=== iwd as backend for Connman ===

	~~Iwd~~ could be ~~use~~ as a backend for Connman too.		iwd could be used as a backend for Connman too.

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
Line 69:		Line 78:
	=== org.freedesktop.service failed ===		=== org.freedesktop.service failed ===
	When connecting to a protected network it could happen that no password window appears and the following message is written in the journal:		When connecting to a protected network it could happen that no password window appears and the following message is written in the journal:
	<~~pre~~>
			<syntaxhighlight lang="text">
	dbus-daemon[1732]: [session uid=9001 pid=1730] Activated service 'org.freedesktop.secrets' failed: Failed to execute program org.freedesktop.secrets: No such file or directory		dbus-daemon[1732]: [session uid=9001 pid=1730] Activated service 'org.freedesktop.secrets' failed: Failed to execute program org.freedesktop.secrets: No such file or directory
	</~~pre~~>		</syntaxhighlight>

	Your desktop manager may not enable some secrets management service you may need to enable one:		Your desktop manager may not enable some secrets management service you may need to enable one:

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	{		{
Line 80:		Line 92:

	=== rfkill blocks wireless device ===		=== rfkill blocks wireless device ===
	If the wi-fi connection is blocked by ~~rf-kill~~, it ~~it is needed~~ to unblock ~~the~~ the wireless device. A way to do that ~~with Nix~~ is by using system.activationScripts.		If the Wi-Fi connection is blocked by <code>rfkill</code>, it needs to unblock the wireless device. A way to do that in NixOS is by using <code>system.activationScripts</code>, although it is not the most idiomatic solution.
	<~~syntaxHighlight~~ lang=nix>
			<syntaxhighlight lang="nix">
	{		{
	system.activationScripts = {		system.activationScripts = {
	rfkillUnblockWlan = {		rfkillUnblockWlan = {
	text = ''		text = ''
	rfkill unblock wlan		rfkill unblock wlan
	'';		'';
	deps = [];		deps = [];
Line 92:		Line 105:
	};		};
	}		}
	</~~syntaxHighlight~~>		</syntaxhighlight>

			=== event: disconnect-info reason: 2 ===
			When using certain chipsets, such as the Qualcomm <code>qcncm865</code><ref>https://community.frame.work/t/guide-successful-wi-fi-7-802-11be-on-framework-13-amd-with-qualcomm-qcncm865-and-arch-linux/44723</ref>, you need to use legacy EAPoL packets<ref>https://lkml.org/lkml/2020/10/14/1101</ref> to prevent a disconnect loop. In <code>iwd.service</code> this issue shows up as:

	~~=== desconnect-info reason: 2 ===~~		<syntaxhighlight lang="text">
	When using certain chipsets, such as the Qualcomm qcncm865<ref>https://community.frame.work/t/guide-successful-wi-fi-7-802-11be-on-framework-13-amd-with-qualcomm-qcncm865-and-arch-linux/44723</ref>, you need to use legacy EAPoL packets<ref>https://lkml.org/lkml/2020/10/14/1101</ref> to prevent a disconnect loop. In <code>iwd.service</code> this issue shows up as:<syntaxhighlight>
	SA Query timed out, connection is invalid. Disconnecting...		SA Query timed out, connection is invalid. Disconnecting...
	Feb 26 10:17:10 probook iwd[4486]: event: disconnect-info, reason: 2		Feb 26 10:17:10 probook iwd[4486]: event: disconnect-info, reason: 2
	</syntaxhighlight>If you are using systemd-networkd, this shows up in <code>systemd-networkd.service</code> as repeated <code>Carrier Gained. Carrier Lost.</code> messages. On ~~nixos~~, this can be resolved by setting the matching iwd settings option.<syntaxhighlight lang="nix">		</syntaxhighlight>

			If you are using systemd-networkd, this shows up in <code>systemd-networkd.service</code> as repeated <code>Carrier Gained. Carrier Lost.</code> messages. On NixOS, this can be resolved by setting the matching iwd settings option.

			<syntaxhighlight lang="nix">
	{		{
	networking.wireless.iwd.settings.General.ControlPortOverNL80211 = false;		networking.wireless.iwd.settings.General.ControlPortOverNL80211 = false;
	}		}
	</syntaxhighlight>		</syntaxhighlight>

	[[Category:Applications]][[Category: Networking]]		[[Category:Applications]][[Category: Networking]]

Silk: Fixed an error in prior change (forgot Network)

2025-07-11T04:13:08Z

Fixed an error in prior change (forgot Network)

← Older revision		Revision as of 04:13, 11 July 2025
Line 19:		Line 19:
	{		{
	networking.wireless.iwd.settings = {		networking.wireless.iwd.settings = {
	EnableIPv6 = true;		Network = {
			EnableIPv6 = true;
			};
	Settings = {		Settings = {
	AutoConnect = true;		AutoConnect = true;

Silk: /* Configuration */ Updated IPv6 declaration

2025-07-11T04:09:58Z

Configuration: Updated IPv6 declaration

← Older revision		Revision as of 04:09, 11 July 2025
Line 19:		Line 19:
	{		{
	networking.wireless.iwd.settings = {		networking.wireless.iwd.settings = {
	~~IPv6 = {~~		EnableIPv6 = true;
	~~Enabled~~ = true;
	};
	Settings = {		Settings = {
	AutoConnect = true;		AutoConnect = true;

DoggoBit: remove leading newline :)

2025-06-07T22:27:13Z

remove leading newline :)

← Older revision		Revision as of 22:27, 7 June 2025
Line 1:		Line 1:
	{{DISPLAYTITLE:iwd}}		{{DISPLAYTITLE:iwd}}

	[https://archive.kernel.org/oldwiki/iwd.wiki.kernel.org/ iwd] (iNet wireless daemon) is a Linux-only wireless daemon aiming to decrease the time spent making connections.		[https://archive.kernel.org/oldwiki/iwd.wiki.kernel.org/ iwd] (iNet wireless daemon) is a Linux-only wireless daemon aiming to decrease the time spent making connections.

DoggoBit: Change page name to lowercase

2025-06-07T22:26:56Z

Change page name to lowercase

← Older revision		Revision as of 22:26, 7 June 2025
Line 1:		Line 1:
			{{DISPLAYTITLE:iwd}}

	[https://archive.kernel.org/oldwiki/iwd.wiki.kernel.org/ iwd] (iNet wireless daemon) is a Linux-only wireless daemon aiming to decrease the time spent making connections.		[https://archive.kernel.org/oldwiki/iwd.wiki.kernel.org/ iwd] (iNet wireless daemon) is a Linux-only wireless daemon aiming to decrease the time spent making connections.

Lcchy: /* iwd as backend for NetworkManager */Added some refs to warning about mac randomisation.

2025-06-07T15:28:35Z

iwd as backend for NetworkManager: Added some refs to warning about mac randomisation.

← Older revision		Revision as of 15:28, 7 June 2025
Line 51:		Line 51:
	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	networking.networkmanager.wifi.backend = "iwd";		networking.networkmanager.wifi.backend = "iwd";
	</syntaxhighlight>{{Warning\|Setting this will silently turn off MAC address randomization as Networkmanager does not control the MAC address randomization features of `iwd` for which it is turned off by default.		</syntaxhighlight>{{Warning\|Setting this will silently turn off MAC address randomization as Networkmanager does not control the MAC address randomization features of `iwd` for which it is turned off by default.<ref>https://bbs.archlinux.org/viewtopic.php?id=280657</ref><ref>https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1111</ref>
	~~Use~~ the `AddressRandomization` option ~~in the iwd settings to remediate this~~.}}		To remediate this, configure iwd directly using the `AddressRandomization` option.}}

	=== iwd as backend for Connman ===		=== iwd as backend for Connman ===

Lcchy: Add a warning about a default privacy feature of Networkmanager being silently turned off when using iwd as a backend. Refs: https://bbs.archlinux.org/viewtopic.php?id=280657 https://gitlab.com/postmarketOS/pmaports/-/issues/2502

2025-06-07T15:14:08Z

Add a warning about a default privacy feature of Networkmanager being silently turned off when using iwd as a backend. Refs: https://bbs.archlinux.org/viewtopic.php?id=280657 https://gitlab.com/postmarketOS/pmaports/-/issues/2502

← Older revision		Revision as of 15:14, 7 June 2025
Line 51:		Line 51:
	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
	networking.networkmanager.wifi.backend = "iwd";		networking.networkmanager.wifi.backend = "iwd";
	</syntaxhighlight>		</syntaxhighlight>{{Warning\|Setting this will silently turn off MAC address randomization as Networkmanager does not control the MAC address randomization features of `iwd` for which it is turned off by default.
			Use the `AddressRandomization` option in the iwd settings to remediate this.}}

	=== iwd as backend for Connman ===		=== iwd as backend for Connman ===