fix: bypass router

modules/nixos/base/misc.nix

@@ -60,15 +60,57 @@
   # List packages installed in system profile. To search, run:
   # $ nix search wget
   environment.systemPackages = with pkgs; [
-    parted
-    psmisc # killall/pstree/prtstat/fuser/...
+    neofetch
     neovim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
-    wget
-    curl
-    aria2
     git # used by nix flakes
     git-lfs # used by huggingface models
 
+    # archives
+    zip
+    xz
+    zstd
+    unzip
+    p7zip
+
+    # Text Processing
+    # Docs: https://github.com/learnbyexample/Command-line-text-processing
+    gnugrep # GNU grep, provides `grep`/`egrep`/`fgrep`
+    gnused # GNU sed, very powerful(mainly for replacing text in files)
+    gawk # GNU awk, a pattern scanning and processing language
+    jq # A lightweight and flexible command-line JSON processor
+
+    # system call monitoring
+    strace # system call monitoring
+    ltrace # library call monitoring
+    bpftrace # powerful tracing tool
+    tcpdump # network sniffer
+    lsof # list open files
+
+    # system monitoring
+    sysstat
+    iotop
+    iftop
+    btop
+    nmon
+
+    # system tools
+    psmisc # killall/pstree/prtstat/fuser/...
+    lm_sensors # for `sensors` command
+    ethtool
+    pciutils # lspci
+    usbutils # lsusb
+    hdparm # for disk performance, command
+    dmidecode # a tool that reads information about your system's hardware from the BIOS according to the SMBIOS/DMI standard
+    parted
+
+    # misc
+    file
+    findutils
+    which
+    tree
+    gnutar
+    rsync
+
     # create a fhs environment by command `fhs`, so we can run non-nixos packages in nixos!
     (
       let

modules/nixos/base/networking.nix

@@ -1,8 +1,23 @@
 {
   lib,
+  pkgs,
   vars_networking,
   ...
 }: {
+  environment.systemPackages = with pkgs; [
+    # networking tools
+    mtr # A network diagnostic tool
+    iperf3
+    dnsutils # `dig` + `nslookup`
+    ldns # replacement of `dig`, it provide the command `drill`
+    wget
+    curl
+    aria2 # A lightweight multi-protocol & multi-source command-line download utility
+    socat # replacement of openbsd-netcat
+    nmap # A utility for network discovery and security auditing
+    ipcalc # it is a calculator for the IPv4/v6 addresses
+  ];
+
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];
   # Or disable the firewall altogether.

modules/nixos/base/virtualisation.nix

@@ -1,25 +0,0 @@
-{pkgs, ...}: {
-  ###################################################################################
-  #
-  #  Virtualisation - Libvirt(QEMU/KVM) / Docker / LXD / WayDroid
-  #
-  ###################################################################################
-
-  virtualisation = {
-    docker = {
-      enable = true;
-      daemon.settings = {
-        # enables pulling using containerd, which supports restarting from a partial pull
-        # https://docs.docker.com/storage/containerd/
-        "features" = {"containerd-snapshotter" = true;};
-      };
-
-      # start dockerd on boot.
-      # This is required for containers which are created with the `--restart=always` flag to work.
-      enableOnBoot = true;
-    };
-
-    waydroid.enable = true;
-    lxd.enable = true;
-  };
-}

modules/nixos/desktop/virtualisation.nix

@@ -9,7 +9,7 @@
   # This should be set per host in /hosts, not here.
   #
   ## For AMD CPU, add "kvm-amd" to kernelModules.
-  # boot.kernelModules = ["kvm-amd" "kvm-intel"];
+  # boot.kernelModules = ["kvm-amd"];
   # boot.extraModprobeConfig = "options kvm_amd nested=1";  # for amd cpu
   #
   ## For Intel CPU, add "kvm-intel" to kernelModules.
@@ -19,6 +19,19 @@
   boot.kernelModules = ["vfio-pci"];
 
   virtualisation = {
+    docker = {
+      enable = true;
+      daemon.settings = {
+        # enables pulling using containerd, which supports restarting from a partial pull
+        # https://docs.docker.com/storage/containerd/
+        "features" = {"containerd-snapshotter" = true;};
+      };
+
+      # start dockerd on boot.
+      # This is required for containers which are created with the `--restart=always` flag to work.
+      enableOnBoot = true;
+    };
+
     libvirtd = {
       enable = true;
       # hanging this option to false may cause file permission issues for existing guests.