+1 for more deprecation on networking.useDHCP (cc @globin) :)

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/go-no-go-meeting-nixos-20-03-markhor/6495/19

@erictapen Thanks for illustrating how to test this in the OP.

cc @samueldr maybe

Should the assertion maybe be cfg.useDHCP -> cfg.bridges == []? Since a bridge may be created in networking.bridges without being configured in networking.interfaces.

@lheckemann Yeah I think that makes sense. I rewrote the code a few times and missed this case when I didn't fully understood the problem.

I just changed the assertion to cfg.useDHCP -> cfg.bridges == {} and changed the error message, so the user will see a list of all bridges that are configured:

error:                   
Failed assertions:                                                
-             There are the bridges [ br0 br1 ] configured while `networking.useDHCP` is enabled.
            dhcpcd doesn't give IPv4 addresses to bridges by default anymore,
            so you have to set `networking.useDHCP = false` and then whitelist
            every interface you need DHCP on with
            `networking.interfaces.<name?>.useDHCP = true`.
                                                                                                                                     
(use '--show-trace' to show detailed location information)

@erictapen It looks like the indentation is a little skewed. Could you fix that?

@worldofpeace Right, I really need to get my tabs under control… It now looks like this:

error: 
Failed assertions:
- There are the bridges [ br0 ] configured while `networking.useDHCP` is enabled.
dhcpcd doesn't give IPv4 addresses to bridges by default anymore,
so you have to set `networking.useDHCP = false` and then whitelist
every interface you need DHCP on with
`networking.interfaces.<name?>.useDHCP = true`.

(use '--show-trace' to show detailed location information)

Yay! I'm very happy this went through. Thanks for all the reviews!

(Extremely late)

I am sure the change is required, and good in the end, but it was extremely confusing to me. I'm not a networking person. I hate networking, the further away I can be from networking the better I am.

So to my surprise I have this thick assertion failing and telling me I should change a value to something I haven't set, and pick my interfaces where I want this to happen manually?

The error message was far from being easy to action upon, and I had to find the commit, read the PR to get a better understanding of what to do.

This scares me a bit about being locked out of my machine. The default, setting DHCP for all interfaces, is much more comforting for someone that does not grok at all networking options. Considering the mentions of "deprecating useDHCP", what does it mean?

Is there no way to get the default implicit behaviour of dhcpcd for interfaces, while requiring bridges and other "not-interfaces" to be configured?

Oh, it looks like I understood things wrong anyway.

I do not want useDHCP on my br0 interface I think, since my NixOS containers all have localAddress set. Or do I?

If I didn't that means that this assertion broke what was already working.

EDIT: and it looks like that, yes, this assertion is completely breaking my setup that was entirely working. DHCP was not involved with my bridge, and I'm fine with it not being involved with my bridge, but I can't simply say "DHCP all the things" and move along as I could before.

So I was pushed into enabling an option I didn't want by the confusing phrasing and context around the assertion.

When I wrote this code I didn't have in mind, that there may be bridges in networks without a DHCP server. So I agree the error message could have addressed that use case better.

Still I think this assertion makes things better.

• You may not need DHCP on your bridge, but if there was a DHCP server running in that network, it would have leased an IP to your bridge pre-20.03 and would have stopped doing so post-20.03. It's impossible to tell wether you actually need DHCP at eval/buildtime. In my case where I needed DHCP, it locked me out of my machine.
• networking.useDHCP is messy and should be further deprecated for edge cases like this. It relies on dhcpcds internal distinction between "interfaces" and "not-interfaces" and as we've seen this actually changes between versions.

DHCP was not involved with my bridge, and I'm fine with it not being involved with my bridge, but I can't simply say "DHCP all the things" and move along as I could before.

I agree that it would be nice to have a "DHCP all the things" NixOS option, but only if it would work on eval time. This is not possible atm, as we never know wether networking.interfaces contains all the interfaces on the running system. So we have to rely on a program that is out of our control and has to run on run time. Too unstable for DHCP imho.

Edit: @worldofpeace I just noticed that this commit wasn't forwardported to master. Could you do that? I guess improving the error message could be done in a separate PR, this one was already reviewed and approved.

@erictapen make the new PR, it should have gone through master anyway, even if the intent was to make sure it was going in 20.03 in time for the release.

If we ever get anywhere with networkd-as-default, maybe it would make sense to ship a network definition that matches on en* and wl* and enables DHCP on all of those to function as a "DHCP all the things" and a reasonable default.