it works, now needs cleanup

4 files changed, 991 insertions, 102 deletions

diff --git a/Cargo.lock b/Cargo.lock
index b4d33c2..92b55d7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -199,6 +199,95 @@ dependencies = [
 ]
 
 [[package]]
+name = "futures"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7"
+
+[[package]]
+name = "futures-task"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
+
+[[package]]
+name = "futures-util"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "pin-utils",
+ "slab",
+]
+
+[[package]]
 name = "gimli"
 version = "0.31.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
@@ -313,12 +402,13 @@ dependencies = [
 ]
 
 [[package]]
-name = "oar-p2p-net"
-version = "0.1.0"
+name = "oar-p2p"
+version = "0.0.0"
 dependencies = [
  "clap",
  "color-eyre",
  "eyre",
+ "futures",
  "serde",
  "serde_json",
  "thiserror",
@@ -390,6 +480,12 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
 
 [[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
 name = "proc-macro2"
 version = "1.0.95"
 source = "registry+https://github.com/rust-lang/crates.io-index"
diff --git a/Cargo.toml b/Cargo.toml
index 86d95c8..447b346 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,12 +1,13 @@
 [package]
-name = "oar-p2p-net"
-version = "0.1.0"
+name = "oar-p2p"
+version = "0.0.0"
 edition = "2024"
 
 [dependencies]
 clap = { version = "4.5.40", features = ["derive", "env"] }
 color-eyre = "0.6.5"
 eyre = "0.6.12"
+futures = "0.3.31"
 serde = { version = "1.0.219", features = ["derive"] }
 serde_json = "1.0.140"
 thiserror = "2.0.12"
diff --git a/src/machine.rs b/src/machine.rs
index f1ad94d..f223e66 100644
--- a/src/machine.rs
+++ b/src/machine.rs
@@ -1,6 +1,17 @@
 macro_rules! define_machines {
-    ($(($name:ident, $idx:expr, $hostname:expr, $interface:expr)),*) => {
-        #[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]
+    ($(($name:ident, $idx:expr, $hostname:expr, $cpus:expr, $interface:expr)),*) => {
+        #[derive(Debug)]
+        pub struct UnknownMachine;
+
+        impl std::fmt::Display for UnknownMachine {
+            fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+                f.write_str("unknown machine")
+            }
+        }
+
+        impl std::error::Error for UnknownMachine {}
+
+        #[derive(Debug, Clone, Copy, PartialOrd, Ord, PartialEq, Eq, Hash)]
         pub enum Machine {
             $($name,)*
         }
@@ -11,6 +22,17 @@ macro_rules! define_machines {
             }
         }
 
+        impl std::str::FromStr for Machine {
+            type Err = UnknownMachine;
+
+            fn from_str(v: &str) -> Result<Self, Self::Err> {
+                match v {
+                    $($hostname => Ok(Self::$name),)*
+                    _ => Err(UnknownMachine),
+                }
+            }
+        }
+
         impl Machine {
             pub fn hostname(&self) -> &'static str {
                 match self {
@@ -31,6 +53,19 @@ macro_rules! define_machines {
                 }
             }
 
+            pub fn from_index(index: usize) -> Option<Self> {
+                match index {
+                    $($idx => Some(Self::$name),)*
+                    _ => None,
+                }
+            }
+
+            pub fn cpus(&self) -> u32 {
+                match self {
+                    $(Self::$name => $cpus,)*
+                }
+            }
+
             pub fn interface(&self) -> &'static str {
                 match self {
                     $(Self::$name => $interface,)*
@@ -40,62 +75,65 @@ macro_rules! define_machines {
     };
 }
 
+// node cpu counts
+// oarnodes | grep '^network_address' | cut -d' ' -f3 | sort | uniq -c
+
 define_machines!(
-    (Alakazam01, 0, "alakazam-01", todo!()),
-    (Alakazam02, 1, "alakazam-02", todo!()),
-    (Alakazam03, 2, "alakazam-03", todo!()),
-    (Alakazam04, 3, "alakazam-04", todo!()),
-    (Alakazam05, 4, "alakazam-05", todo!()),
-    (Alakazam06, 5, "alakazam-06", todo!()),
-    (Alakazam07, 6, "alakazam-07", todo!()),
-    (Alakazam08, 7, "alakazam-08", todo!()),
-    (Bulbasaur1, 8, "bulbasaur-1", todo!()),
-    (Bulbasaur2, 9, "bulbasaur-2", todo!()),
-    (Bulbasaur3, 10, "bulbasaur-3", todo!()),
-    (Charmander1, 11, "charmander-1", "bond0"),
-    (Charmander2, 12, "charmander-2", "bond0"),
-    (Charmander3, 13, "charmander-3", "bond0"),
-    (Charmander4, 14, "charmander-4", "bond0"),
-    (Charmander5, 15, "charmander-5", "bond0"),
-    (Gengar1, 16, "gengar-1", "bond0"),
-    (Gengar2, 17, "gengar-2", "bond0"),
-    (Gengar3, 18, "gengar-3", "bond0"),
-    (Gengar4, 19, "gengar-4", "bond0"),
-    (Gengar5, 20, "gengar-5", "bond0"),
-    (Kadabra01, 21, "kadabra-01", todo!()),
-    (Kadabra02, 22, "kadabra-02", todo!()),
-    (Kadabra03, 23, "kadabra-03", todo!()),
-    (Kadabra04, 24, "kadabra-04", todo!()),
-    (Kadabra05, 25, "kadabra-05", todo!()),
-    (Kadabra06, 26, "kadabra-06", todo!()),
-    (Kadabra07, 27, "kadabra-07", todo!()),
-    (Kadabra08, 28, "kadabra-08", todo!()),
-    (Lugia1, 29, "lugia-1", "bond0"),
-    (Lugia2, 30, "lugia-2", "bond0"),
-    (Lugia3, 31, "lugia-3", "bond0"),
-    (Lugia4, 32, "lugia-4", "bond0"),
-    (Lugia5, 33, "lugia-5", "bond0"),
-    (Magikarp1, 34, "magikarp-1", todo!()),
-    (Moltres01, 35, "moltres-01", todo!()),
-    (Moltres02, 36, "moltres-02", todo!()),
-    (Moltres03, 37, "moltres-03", todo!()),
-    (Moltres04, 38, "moltres-04", todo!()),
-    (Moltres05, 39, "moltres-05", todo!()),
-    (Moltres06, 40, "moltres-06", todo!()),
-    (Moltres07, 41, "moltres-07", todo!()),
-    (Moltres08, 42, "moltres-08", todo!()),
-    (Moltres09, 43, "moltres-09", todo!()),
-    (Moltres10, 44, "moltres-10", todo!()),
-    (Oddish1, 45, "oddish-1", todo!()),
-    (Psyduck1, 46, "psyduck-1", todo!()),
-    (Psyduck2, 47, "psyduck-2", todo!()),
-    (Psyduck3, 48, "psyduck-3", todo!()),
-    (Shelder1, 49, "shelder-1", todo!()),
-    (Squirtle1, 50, "squirtle-1", todo!()),
-    (Squirtle2, 51, "squirtle-2", todo!()),
-    (Squirtle3, 52, "squirtle-3", todo!()),
-    (Squirtle4, 53, "squirtle-4", todo!()),
-    (Staryu1, 54, "staryu-1", todo!()),
-    (Sudowoodo1, 55, "sudowoodo-1", todo!()),
-    (Vulpix1, 56, "vulpix-1", todo!())
+    (Alakazam01, 0, "alakazam-01", 64, todo!()),
+    (Alakazam02, 1, "alakazam-02", 64, todo!()),
+    (Alakazam03, 2, "alakazam-03", 64, todo!()),
+    (Alakazam04, 3, "alakazam-04", 64, todo!()),
+    (Alakazam05, 4, "alakazam-05", 64, todo!()),
+    (Alakazam06, 5, "alakazam-06", 64, todo!()),
+    (Alakazam07, 6, "alakazam-07", 64, todo!()),
+    (Alakazam08, 7, "alakazam-08", 64, todo!()),
+    (Bulbasaur1, 8, "bulbasaur-1", 16, todo!()),
+    (Bulbasaur2, 9, "bulbasaur-2", 16, todo!()),
+    (Bulbasaur3, 10, "bulbasaur-3", 16, todo!()),
+    (Charmander1, 11, "charmander-1", 32, "bond0"),
+    (Charmander2, 12, "charmander-2", 32, "bond0"),
+    (Charmander3, 13, "charmander-3", 32, "bond0"),
+    (Charmander4, 14, "charmander-4", 32, "bond0"),
+    (Charmander5, 15, "charmander-5", 32, "bond0"),
+    (Gengar1, 16, "gengar-1", 8, "bond0"),
+    (Gengar2, 17, "gengar-2", 8, "bond0"),
+    (Gengar3, 18, "gengar-3", 8, "bond0"),
+    (Gengar4, 19, "gengar-4", 8, "bond0"),
+    (Gengar5, 20, "gengar-5", 8, "bond0"),
+    (Kadabra01, 21, "kadabra-01", 64, todo!()),
+    (Kadabra02, 22, "kadabra-02", 64, todo!()),
+    (Kadabra03, 23, "kadabra-03", 64, todo!()),
+    (Kadabra04, 24, "kadabra-04", 64, todo!()),
+    (Kadabra05, 25, "kadabra-05", 64, todo!()),
+    (Kadabra06, 26, "kadabra-06", 64, todo!()),
+    (Kadabra07, 27, "kadabra-07", 64, todo!()),
+    (Kadabra08, 28, "kadabra-08", 64, todo!()),
+    (Lugia1, 29, "lugia-1", 64, "bond0"),
+    (Lugia2, 30, "lugia-2", 64, "bond0"),
+    (Lugia3, 31, "lugia-3", 64, "bond0"),
+    (Lugia4, 32, "lugia-4", 64, "bond0"),
+    (Lugia5, 33, "lugia-5", 64, "bond0"),
+    (Magikarp1, 34, "magikarp-1", 16, todo!()),
+    (Moltres01, 35, "moltres-01", 64, todo!()),
+    (Moltres02, 36, "moltres-02", 64, todo!()),
+    (Moltres03, 37, "moltres-03", 64, todo!()),
+    (Moltres04, 38, "moltres-04", 64, todo!()),
+    (Moltres05, 39, "moltres-05", 64, todo!()),
+    (Moltres06, 40, "moltres-06", 64, todo!()),
+    (Moltres07, 41, "moltres-07", 64, todo!()),
+    (Moltres08, 42, "moltres-08", 64, todo!()),
+    (Moltres09, 43, "moltres-09", 64, todo!()),
+    (Moltres10, 44, "moltres-10", 64, todo!()),
+    (Oddish1, 45, "oddish-1", 4, todo!()),
+    (Psyduck1, 46, "psyduck-1", 8, todo!()),
+    (Psyduck2, 47, "psyduck-2", 8, todo!()),
+    (Psyduck3, 48, "psyduck-3", 8, todo!()),
+    (Shelder1, 49, "shelder-1", 64, todo!()),
+    (Squirtle1, 50, "squirtle-1", 24, todo!()),
+    (Squirtle2, 51, "squirtle-2", 24, todo!()),
+    (Squirtle3, 52, "squirtle-3", 24, todo!()),
+    (Squirtle4, 53, "squirtle-4", 24, todo!()),
+    (Staryu1, 54, "staryu-1", 12, todo!()),
+    (Sudowoodo1, 55, "sudowoodo-1", 16, todo!()),
+    (Vulpix1, 56, "vulpix-1", 112, todo!())
 );
diff --git a/src/main.rs b/src/main.rs
index dfbddc0..36c2a9b 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -1,72 +1,822 @@
-use std::collections::{HashMap, HashSet};
+#![feature(exit_status_error)]
+use std::{
+    collections::{HashMap, HashSet},
+    net::Ipv4Addr,
+    path::{Path, PathBuf},
+    process::Output,
+};
 
-use clap::Parser;
+use clap::{Args, Parser, Subcommand};
 use eyre::Context as _;
+use eyre::Result;
+use futures::{StreamExt as _, stream::FuturesUnordered};
 use machine::Machine;
 use serde::Deserialize;
-use tokio::process::Command;
+use tokio::{
+    io::{AsyncReadExt as _, AsyncWriteExt as _},
+    process::Command,
+    task::JoinSet,
+};
+
+use crate::latency_matrix::LatencyMatrix;
 
 pub mod latency_matrix;
 pub mod machine;
 
+const CONTAINER_IMAGE_NAME: &'static str = "local/oar-p2p-networking";
+
 #[derive(Debug, Parser)]
-pub struct Args {
+struct Cli {
+    #[clap(subcommand)]
+    cmd: SubCmd,
+}
+
+#[derive(Debug, Args)]
+struct Common {
     #[clap(long, env = "OAR_JOB_ID")]
-    pub job_id: Option<u32>,
+    job_id: Option<u32>,
+
     #[clap(long, env = "FRONTEND_HOSTNAME")]
-    pub frontend_hostname: Option<String>,
+    frontend_hostname: Option<String>,
+}
+
+#[derive(Debug, Subcommand)]
+enum SubCmd {
+    Net(NetArgs),
+    Run(RunArgs),
+}
+
+#[derive(Debug, Args)]
+struct NetArgs {
+    #[clap(subcommand)]
+    cmd: NetSubCmd,
+}
+
+#[derive(Debug, Subcommand)]
+enum NetSubCmd {
+    Up(NetUpArgs),
+    Down(NetDownArgs),
+    Show(NetShowArgs),
+    Preview(NetPreviewArgs),
+}
+
+#[derive(Debug, Args)]
+struct NetUpArgs {
+    #[clap(flatten)]
+    common: Common,
+    #[clap(long)]
+    addr_per_cpu: u32,
+    #[clap(long)]
+    latency_matrix: PathBuf,
+}
+
+#[derive(Debug, Args)]
+struct NetDownArgs {
+    #[clap(flatten)]
+    common: Common,
+}
+
+#[derive(Debug, Args)]
+struct NetShowArgs {
+    #[clap(flatten)]
+    common: Common,
+}
+
+#[derive(Debug, Args)]
+struct NetPreviewArgs {
+    #[clap(long)]
+    machine: Vec<Machine>,
+
+    #[clap(long)]
+    addr_per_cpu: u32,
+
+    #[clap(long)]
+    latency_matrix: PathBuf,
+}
+
+#[derive(Debug, Args)]
+struct RunArgs {
+    #[clap(flatten)]
+    common: Common,
+
+    #[clap(long)]
+    output_dir: PathBuf,
+
+    schedule: Option<PathBuf>,
 }
 
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]
-pub enum ExecutionNode {
+enum ExecutionNode {
     Frontend,
     Machine(Machine),
     Unknown,
 }
 
-pub struct Context {
-    pub node: ExecutionNode,
-    pub job_id: Option<u32>,
-    pub frontend_hostname: Option<String>,
+#[derive(Debug, Clone)]
+struct Context {
+    node: ExecutionNode,
+    job_id: Option<u32>,
+    frontend_hostname: Option<String>,
 }
 
-pub struct MachineConfig {
-    machine
+#[derive(Debug, Clone)]
+struct MachineConfig {
+    machine: Machine,
+    addresses: Vec<Ipv4Addr>,
+    nft_script: String,
+    tc_commands: Vec<String>,
+    ip_commands: Vec<String>,
 }
 
 #[tokio::main]
-async fn main() -> eyre::Result<()> {
-    tracing_subscriber::fmt::init();
+async fn main() -> Result<()> {
+    tracing_subscriber::fmt()
+        .with_env_filter(
+            tracing_subscriber::EnvFilter::try_from_default_env()
+                .unwrap_or_else(|_| tracing_subscriber::EnvFilter::new("info")),
+        )
+        .with_writer(std::io::stderr)
+        .init();
     color_eyre::install()?;
 
-    let args = Args::parse();
-    let node = get_execution_node()?;
-    let context = Context {
+    let cli = Cli::parse();
+    match cli.cmd {
+        SubCmd::Net(args) => match args.cmd {
+            NetSubCmd::Up(args) => cmd_net_up(args).await,
+            NetSubCmd::Down(args) => cmd_net_down(args).await,
+            NetSubCmd::Show(args) => cmd_net_show(args).await,
+            NetSubCmd::Preview(args) => cmd_net_preview(args).await,
+        },
+        SubCmd::Run(args) => cmd_run(args).await,
+    }
+}
+
+async fn context_from_common(common: &Common) -> Result<Context> {
+    let node = get_execution_node().await?;
+    Ok(Context {
         node,
-        job_id: args.job_id,
-        frontend_hostname: args.frontend_hostname,
+        job_id: common.job_id,
+        frontend_hostname: common.frontend_hostname.clone(),
+    })
+}
+
+async fn cmd_net_up(args: NetUpArgs) -> Result<()> {
+    let context = context_from_common(&args.common).await?;
+    let matrix_content = tokio::fs::read_to_string(&args.latency_matrix)
+        .await
+        .context("reading latecy matrix")?;
+    let matrix = LatencyMatrix::parse(&matrix_content, latency_matrix::TimeUnit::Milliseconds)
+        .context("parsing latency matrix")?;
+    let machines = job_list_machines(&context).await?;
+    let configs = machine_generate_configs(&matrix, &machines, args.addr_per_cpu);
+    machines_net_container_build(&context, &machines).await?;
+    machines_clean(&context, &machines).await?;
+    machines_configure(&context, &configs).await?;
+    Ok(())
+}
+
+async fn cmd_net_down(args: NetDownArgs) -> Result<()> {
+    let context = context_from_common(&args.common).await?;
+    let machines = job_list_machines(&context).await?;
+    machines_net_container_build(&context, &machines).await?;
+    machines_clean(&context, &machines).await?;
+    Ok(())
+}
+
+async fn cmd_net_show(args: NetShowArgs) -> Result<()> {
+    let context = context_from_common(&args.common).await?;
+    let machines = job_list_machines(&context).await?;
+    let mut set = JoinSet::default();
+    for machine in machines {
+        let context = context.clone();
+        set.spawn(async move { (machine, machine_list_addresses(&context, machine).await) });
+    }
+    let mut addresses = Vec::default();
+    for (machine, result) in set.join_all().await {
+        let addrs = result?;
+        for addr in addrs {
+            addresses.push((machine, addr));
+        }
+    }
+    addresses.sort();
+    for (machine, addr) in addresses {
+        println!("{} {}", machine, addr);
+    }
+    Ok(())
+}
+
+async fn cmd_net_preview(args: NetPreviewArgs) -> Result<()> {
+    let matrix_content = tokio::fs::read_to_string(&args.latency_matrix)
+        .await
+        .context("reading latecy matrix")?;
+    let matrix = LatencyMatrix::parse(&matrix_content, latency_matrix::TimeUnit::Milliseconds)
+        .context("parsing latency matrix")?;
+    let machines = args.machine;
+    let configs = machine_generate_configs(&matrix, &machines, args.addr_per_cpu);
+
+    for config in configs {
+        (0..20).for_each(|_| print!("-"));
+        print!(" {} ", config.machine);
+        (0..20).for_each(|_| print!("-"));
+        println!();
+        println!("{}", machine_configuration_script(&config));
+    }
+    Ok(())
+}
+
+fn machine_from_addr(addr: Ipv4Addr) -> Result<Machine> {
+    let machine_index = usize::from(addr.octets()[1]);
+    Machine::from_index(machine_index)
+        .ok_or_else(|| eyre::eyre!("failed to resolve machine from address {addr}"))
+}
+
+#[derive(Debug, Clone)]
+struct ScheduledContainer {
+    name: String,
+    image: String,
+    machine: Machine,
+    address: Ipv4Addr,
+    variables: HashMap<String, String>,
+}
+
+fn parse_schedule(schedule: &str) -> Result<Vec<ScheduledContainer>> {
+    #[derive(Debug, Deserialize)]
+    struct ScheduleItem {
+        name: Option<String>,
+        address: Ipv4Addr,
+        image: String,
+        env: HashMap<String, String>,
+    }
+
+    let items = serde_json::from_str::<Vec<ScheduleItem>>(schedule)?;
+    let mut containers = Vec::default();
+    for item in items {
+        let name = match item.name {
+            Some(name) => name,
+            None => item.address.to_string(),
+        };
+        let machine = machine_from_addr(item.address)?;
+
+        containers.push(ScheduledContainer {
+            name,
+            image: item.image,
+            machine,
+            address: item.address,
+            variables: item.env,
+        });
+    }
+    Ok(containers)
+}
+
+async fn cmd_run(args: RunArgs) -> Result<()> {
+    let ctx = context_from_common(&args.common).await?;
+    let machines = job_list_machines(&ctx).await?;
+    let schedule = match args.schedule {
+        Some(path) => tokio::fs::read_to_string(&path)
+            .await
+            .with_context(|| format!("reading schedule file: {}", path.display()))?,
+        None => {
+            let mut stdin = String::default();
+            tokio::io::stdin()
+                .read_to_string(&mut stdin)
+                .await
+                .context("reading schedule from stdin")?;
+            stdin
+        }
+    };
+    let containers = parse_schedule(&schedule)?;
+
+    machines_foreach(&machines, |machine| machine_containers_clean(&ctx, machine)).await?;
+    machines_foreach(&machines, |machine| {
+        let ctx = ctx.clone();
+        let containers = containers
+            .iter()
+            .filter(|c| c.machine == machine)
+            .cloned()
+            .collect::<Vec<_>>();
+        let mut script = String::default();
+        for (idx, container) in containers.iter().enumerate() {
+            script.push_str("docker create \\\n");
+            script.push_str("\t--pull=always \\\n");
+            script.push_str("\t--network=host \\\n");
+            script.push_str("\t--restart=no \\\n");
+            script.push_str(&format!("\t--name {} \\\n", container.name));
+            for (key, val) in container.variables.iter() {
+                script.push_str("\t-e ");
+                script.push_str(key);
+                script.push_str("=");
+                script.push_str(val);
+                script.push_str(" \\\n");
+            }
+            script.push_str("\t");
+            script.push_str(&container.image);
+            script.push_str(" &\n");
+            script.push_str(&format!("pid_{idx}=$!\n\n"));
+        }
+
+        for (idx, container) in containers.iter().enumerate() {
+            let name = &container.name;
+            script.push_str(&format!(
+                "wait $pid_{idx} || {{ echo Failed to create container {name} ; exit 1 ; }}\n"
+            ));
+        }
+        tracing::debug!("container creation script:\n{script}");
+        async move { machine_run_script(&ctx, machine, &script).await }
+    })
+    .await?;
+
+    tracing::info!("starting all containers on all machines");
+    machines_foreach(
+        machines
+            .iter()
+            .filter(|&machine| containers.iter().any(|c| c.machine == *machine)),
+        |machine| {
+            machine_run_script(
+                &ctx,
+                machine,
+                "docker container ls -aq | xargs docker container start",
+            )
+        },
+    )
+    .await?;
+
+    tracing::info!("waiting for all containers to exit");
+    machines_foreach(&machines, |machine| {
+        let ctx = ctx.clone();
+        let containers = containers
+            .iter()
+            .filter(|c| c.machine == machine)
+            .cloned()
+            .collect::<Vec<_>>();
+        let mut script = String::default();
+        for container in containers {
+            let name = &container.name;
+            script.push_str(&format!("if [ \"$(docker wait {name})\" -ne \"0\" ] ; then\n"));
+            script.push_str(&format!("\techo Container {name} failed\n"));
+            script.push_str(&format!("\tdocker logs {name} 2>1\n"));
+            script.push_str("\texit 1\n");
+            script.push_str("fi\n\n");
+        }
+        script.push_str("exit 0\n");
+        async move { machine_run_script(&ctx, machine, &script).await }
+    })
+    .await?;
+
+    tracing::info!("saving logs to disk on all machines");
+    machines_foreach(&machines, |machine| {
+        let ctx = ctx.clone();
+        let containers = containers
+            .iter()
+            .filter(|c| c.machine == machine)
+            .cloned()
+            .collect::<Vec<_>>();
+        let mut script = String::default();
+        script.push_str("set -e\n");
+        script.push_str("mkdir -p /tmp/oar-p2p-logs\n");
+        script.push_str("find /tmp/oar-p2p-logs -maxdepth 1 -type f -delete\n");
+        for container in containers {
+            let name = &container.name;
+            script.push_str(&format!("docker logs {name} 1> /tmp/oar-p2p-logs/{name}.stdout 2> /tmp/oar-p2p-logs/{name}.stderr\n"));
+        }
+        script.push_str("exit 0\n");
+        async move { machine_run_script(&ctx, machine, &script).await }
+    })
+    .await?;
+
+    machines_foreach(
+        machines
+            .iter()
+            .filter(|&machine| containers.iter().any(|c| c.machine == *machine)),
+        |machine| machine_copy_logs_dir(&ctx, machine, &args.output_dir),
+    )
+    .await?;
+
+    Ok(())
+}
+
+async fn machine_copy_logs_dir(ctx: &Context, machine: Machine, output_dir: &Path) -> Result<()> {
+    let scp_common = &[
+        "-o",
+        "StrictHostKeyChecking=no",
+        "-o",
+        "UserKnownHostsFile=/dev/null",
+    ];
+
+    let mut args = vec![];
+    args.extend(scp_common);
+    if ctx.node == ExecutionNode::Unknown {
+        args.push("-J");
+        args.push(ctx.frontend_hostname.as_ref().expect("TODO"));
+    }
+    args.push("-r");
+
+    let source_path = format!("{}:/tmp/oar-p2p-logs", machine.hostname());
+    let destination_path = output_dir.display().to_string();
+    args.push(&source_path);
+    args.push(&destination_path);
+
+    let output = Command::new("scp").args(args).output().await?;
+    output.exit_ok()?;
+    Ok(())
+}
+
+async fn machines_foreach<F, FUT, RET>(
+    machines: impl IntoIterator<Item = &Machine>,
+    f: F,
+) -> Result<()>
+where
+    F: Fn(Machine) -> FUT,
+    FUT: std::future::Future<Output = Result<RET>>,
+{
+    let mut futures = FuturesUnordered::new();
+
+    for &machine in machines {
+        let fut = f(machine);
+        let fut = async move { (machine, fut.await) };
+        futures.push(fut);
+    }
+
+    while let Some((machine, result)) = futures.next().await {
+        if let Err(err) = result {
+            tracing::error!("error on machine {machine}: {err}");
+            return Err(err);
+        }
+    }
+    Ok(())
+}
+
+#[tracing::instrument(ret, err, skip_all, fields(machine = machine.to_string()))]
+async fn machine_containers_clean(ctx: &Context, machine: Machine) -> Result<()> {
+    tracing::info!("removing all containers...");
+    machine_run_script(ctx, machine, "docker ps -aq | xargs -r docker rm -f").await?;
+    Ok(())
+}
+
+#[tracing::instrument(ret, err, skip_all)]
+async fn machines_clean(ctx: &Context, machines: &[Machine]) -> Result<()> {
+    tracing::info!("cleaning machines: {machines:?}");
+    let mut set = JoinSet::default();
+    for &machine in machines {
+        let ctx = ctx.clone();
+        set.spawn(async move { machine_clean(&ctx, machine).await });
+    }
+    let results = set.join_all().await;
+    for result in results {
+        result?;
+    }
+    Ok(())
+}
+
+#[tracing::instrument(ret, err, skip_all)]
+async fn machines_net_container_build(ctx: &Context, machines: &[Machine]) -> Result<()> {
+    tracing::info!("building networking container for machines: {machines:?}");
+    let mut set = JoinSet::default();
+    for &machine in machines {
+        let ctx = ctx.clone();
+        set.spawn(async move { machine_net_container_build(&ctx, machine).await });
+    }
+    for result in set.join_all().await {
+        result?;
+    }
+    Ok(())
+}
+
+#[tracing::instrument(ret, err, skip_all)]
+async fn machines_configure(ctx: &Context, configs: &[MachineConfig]) -> Result<()> {
+    tracing::info!("configuring machines");
+    let mut set = JoinSet::default();
+    for config in configs {
+        let ctx = ctx.clone();
+        let config = config.clone();
+        set.spawn(async move { machine_configure(&ctx, &config).await });
+    }
+    for result in set.join_all().await {
+        result?;
+    }
+    Ok(())
+}
+
+async fn machine_list_addresses(ctx: &Context, machine: Machine) -> Result<Vec<Ipv4Addr>> {
+    let interface = machine.interface();
+    let script = format!("ip addr show {interface} | grep -oE '10\\.[0-9]+\\.[0-9]+\\.[0-9]+'");
+    let output = machine_run_script(ctx, machine, &script).await?;
+    let stdout = std::str::from_utf8(&output.stdout)?;
+    let mut addresses = Vec::default();
+    for line in stdout.lines().map(str::trim).filter(|l| !l.is_empty()) {
+        tracing::trace!("parsing address from line: '{line}'");
+        addresses.push(line.parse()?);
+    }
+    Ok(addresses)
+}
+
+async fn machine_run(
+    ctx: &Context,
+    machine: Machine,
+    args: &[&str],
+    stdin: Option<&str>,
+) -> Result<Output> {
+    let ssh_common = &[
+        "-o",
+        "StrictHostKeyChecking=no",
+        "-o",
+        "UserKnownHostsFile=/dev/null",
+    ];
+
+    let mut arguments = match ctx.node {
+        ExecutionNode::Frontend => {
+            let mut arguments = Vec::default();
+            arguments.push("ssh");
+            arguments.extend(ssh_common);
+            arguments.push(machine.hostname());
+            arguments
+        }
+        ExecutionNode::Machine(m) => {
+            if m == machine {
+                vec![]
+            } else {
+                let mut arguments = Vec::default();
+                arguments.push("ssh");
+                arguments.extend(ssh_common);
+                arguments.push(machine.hostname());
+                arguments
+            }
+        }
+        ExecutionNode::Unknown => {
+            let frontend = ctx.frontend_hostname.as_ref().unwrap();
+            let mut arguments = Vec::default();
+            arguments.push("ssh");
+            arguments.extend(ssh_common);
+            arguments.push("-J");
+            arguments.push(frontend);
+            arguments.push(machine.hostname());
+            arguments
+        }
     };
-    let machines = list_job_machines(&context).await?;
+    if args.is_empty() {
+        arguments.push("bash");
+    }
+    arguments.extend(args);
 
-    // listing oar job machines
-    // if we are in the frontend we use oarstat
-    // if we are in a job machine we read the cpuset file
-    // if we are outside the cluster we use ssh cluster oarstat
+    let mut proc = Command::new(arguments[0])
+        .args(&arguments[1..])
+        .stdout(std::process::Stdio::piped())
+        .stderr(std::process::Stdio::piped())
+        .stdin(std::process::Stdio::piped())
+        .spawn()
+        .context("spawning process")?;
 
-    // machine generate configurations
-    // this does not require any connections
+    if let Some(stdin) = stdin {
+        let proc_stdin = proc.stdin.as_mut().unwrap();
+        proc_stdin
+            .write_all(stdin.as_bytes())
+            .await
+            .context("writing stdin")?;
+    }
 
-    // machine cleanup interface
-    // requires running commands inside a container inside a machine
-    // we could generate a cleanup bash script and execute that in oneshot
+    let output = proc
+        .wait_with_output()
+        .await
+        .context("waiting for process to exit")?;
 
-    // machine apply configuration
-    // this also requires running some scripts inside a container inside the machine
+    Ok(output)
+}
 
+async fn machine_run_script(ctx: &Context, machine: Machine, script: &str) -> Result<Output> {
+    tracing::trace!("running script on machine {machine}:\n{script}");
+    let output = machine_run(ctx, machine, &[], Some(script)).await?;
+    tracing::trace!(
+        "stdout:\n{}",
+        std::str::from_utf8(&output.stdout).unwrap_or("<invalid utf-8>")
+    );
+    tracing::trace!(
+        "stderr:\n{}",
+        std::str::from_utf8(&output.stderr).unwrap_or("<invalid utf-8>")
+    );
+    Ok(output.exit_ok()?)
+}
+
+async fn machine_net_container_run_script(
+    ctx: &Context,
+    machine: Machine,
+    script: &str,
+) -> Result<Output> {
+    machine_run(
+        ctx,
+        machine,
+        &[
+            "docker",
+            "run",
+            "--rm",
+            "-i",
+            "--net=host",
+            "--privileged",
+            CONTAINER_IMAGE_NAME,
+        ],
+        Some(script),
+    )
+    .await
+}
+
+#[tracing::instrument(ret, err, skip_all, fields(machine = machine.to_string()))]
+async fn machine_net_container_build(ctx: &Context, machine: Machine) -> Result<()> {
+    let script = r#"
+set -e
+cat << EOF > /tmp/oar-p2p.containerfile
+FROM alpine:latest
+RUN apk update && \
+    apk add --no-cache bash grep iproute2 iproute2-tc nftables && \
+    rm -rf /var/cache/apk/*
+
+WORKDIR /work
+EOF
+
+docker build -t local/oar-p2p-networking:latest -f /tmp/oar-p2p.containerfile .
+"#;
+    machine_run_script(ctx, machine, script).await?;
     Ok(())
 }
 
-async fn list_job_machines(ctx: &Context) -> eyre::Result<Vec<Machine>> {
+#[tracing::instrument(ret, err, skip_all, fields(machine = machine.to_string()))]
+async fn machine_clean(ctx: &Context, machine: Machine) -> Result<()> {
+    let interface = machine.interface();
+    let mut script = String::default();
+    script.push_str(&format!(
+        "ip route del 10.0.0.0/8 dev {interface} || true\n"
+    ));
+    script.push_str(&format!("ip addr show {interface} | grep -oE '10\\.[0-9]+\\.[0-9]+\\.[0-9]+/32' | sed 's/\\(.*\\)/addr del \\1 dev {interface}/' | ip -b -\n"));
+    script.push_str(&format!(
+        "tc qdisc del dev {interface} root 2>/dev/null || true\n"
+    ));
+    script.push_str(&format!(
+        "tc qdisc del dev {interface} ingress 2>/dev/null || true\n"
+    ));
+    script.push_str("tc qdisc del dev lo root 2>/dev/null || true\n");
+    script.push_str("tc qdisc del dev lo ingress 2>/dev/null || true\n");
+    script.push_str("nft delete table oar-p2p 2>/dev/null || true\n");
+    let output = machine_net_container_run_script(&ctx, machine, &script).await?;
+    Ok(())
+}
+
+fn machine_configuration_script(config: &MachineConfig) -> String {
+    let mut script = String::default();
+    // ip configuration
+    script.push_str("cat << EOF | ip -b -\n");
+    for command in config.ip_commands.iter() {
+        script.push_str(command);
+        script.push_str("\n");
+    }
+    script.push_str("\nEOF\n");
+
+    // tc configuration
+    script.push_str("cat << EOF | tc -b -\n");
+    for command in config.tc_commands.iter() {
+        script.push_str(command);
+        script.push_str("\n");
+    }
+    script.push_str("\nEOF\n");
+
+    // nft configuration
+    script.push_str("cat << EOF | nft -f -\n");
+    script.push_str(&config.nft_script);
+    script.push_str("\nEOF\n");
+    script
+}
+
+#[tracing::instrument(ret, err, skip_all, fields(machine = config.machine.to_string()))]
+async fn machine_configure(ctx: &Context, config: &MachineConfig) -> Result<()> {
+    let script = machine_configuration_script(config);
+    tracing::debug!("configuration script:\n{script}");
+    machine_net_container_run_script(ctx, config.machine, &script).await?;
+    Ok(())
+}
+
+fn machine_address_for_idx(machine: Machine, idx: u32) -> Ipv4Addr {
+    let c = u8::try_from(idx / 254).unwrap();
+    let d = u8::try_from(idx % 254 + 1).unwrap();
+    Ipv4Addr::new(10, machine.index().try_into().unwrap(), c, d)
+}
+
+fn machine_generate_configs(
+    matrix: &LatencyMatrix,
+    machines: &[Machine],
+    addr_per_cpu: u32,
+) -> Vec<MachineConfig> {
+    let mut configs = Vec::default();
+    let mut addresses = Vec::default();
+    let mut address_to_index = HashMap::<Ipv4Addr, usize>::default();
+
+    // gather all addresses across all machines
+    for &machine in machines {
+        for i in 0..(addr_per_cpu * machine.cpus()) {
+            let address = machine_address_for_idx(machine, i);
+            addresses.push(address);
+            address_to_index.insert(address, addresses.len() - 1);
+        }
+    }
+
+    for &machine in machines {
+        let mut machine_addresses = Vec::default();
+        let mut machine_ip_commands = Vec::default();
+        let mut machine_tc_commands = Vec::default();
+        let mut machine_nft_script = String::default();
+
+        machine_ip_commands.push(format!("route add 10.0.0.0/8 dev {}", machine.interface()));
+        for i in 0..(addr_per_cpu * machine.cpus()) {
+            let address = machine_address_for_idx(machine, i);
+            machine_addresses.push(address);
+            machine_ip_commands.push(format!("addr add {address}/32 dev {}", machine.interface()));
+        }
+
+        let mut latencies_set = HashSet::<u32>::default();
+        let mut latencies_buckets = Vec::<u32>::default();
+        let mut latencies_addr_pairs = HashMap::<u32, Vec<(Ipv4Addr, Ipv4Addr)>>::default();
+        for &addr in &machine_addresses {
+            let addr_idx = address_to_index[&addr];
+            for other_idx in (0..addresses.len()).filter(|i| *i != addr_idx) {
+                let other = addresses[other_idx];
+                let latency = matrix.latency(addr_idx, other_idx);
+                let latency_millis = u32::try_from(latency.as_millis()).unwrap();
+                if !latencies_set.contains(&latency_millis) {
+                    latencies_set.insert(latency_millis);
+                    latencies_buckets.push(latency_millis);
+                }
+                latencies_addr_pairs
+                    .entry(latency_millis)
+                    .or_default()
+                    .push((addr, other));
+            }
+        }
+
+        for iface in &["lo", machine.interface()] {
+            machine_tc_commands.push(format!(
+                "qdisc add dev {iface} root handle 1: htb default 9999"
+            ));
+            machine_tc_commands.push(format!(
+                "class add dev {iface} parent 1: classid 1:9999 htb rate 10gbit"
+            ));
+            for (idx, &latency_millis) in latencies_buckets.iter().enumerate() {
+                // tc class for latency at idx X is X + 1
+                let latency_class_id = idx + 1;
+                // mark for latency at idx X is X + 1
+                let latency_mark = idx + 1;
+
+                machine_tc_commands.push(format!(
+                    "class add dev {iface} parent 1: classid 1:{} htb rate 10gbit",
+                    latency_class_id
+                ));
+                // why idx + 2 here? I dont remember anymore and forgot to comment
+                machine_tc_commands.push(format!(
+                    "qdisc add dev {iface} parent 1:{} handle {}: netem delay {latency_millis}ms",
+                    latency_class_id,
+                    idx + 2
+                ));
+                // TODO: is the order of these things correct?
+                machine_tc_commands.push(format!(
+                    "filter add dev {iface} parent 1:0 prio 1 handle {} fw flowid 1:{}",
+                    latency_mark, latency_class_id,
+                ));
+            }
+        }
+
+        machine_nft_script.push_str("table ip oar-p2p {\n");
+        machine_nft_script.push_str("\tmap mark_pairs {\n");
+        machine_nft_script.push_str("\t\ttype ipv4_addr . ipv4_addr : mark\n");
+        machine_nft_script.push_str("\t\telements = {\n");
+        for (latency_idx, &latency_millis) in latencies_buckets.iter().enumerate() {
+            let latency_mark = latency_idx + 1;
+            let pairs = match latencies_addr_pairs.get(&latency_millis) {
+                Some(pairs) => pairs,
+                None => continue,
+            };
+
+            for (src, dst) in pairs {
+                assert_ne!(src, dst);
+                machine_nft_script.push_str(&format!("\t\t\t{src} . {dst} : {latency_mark},\n"));
+            }
+        }
+        machine_nft_script.push_str("\t\t}\n");
+        machine_nft_script.push_str("\t}\n");
+        machine_nft_script.push_str("\n");
+        machine_nft_script.push_str("\tchain postrouting {\n");
+        machine_nft_script.push_str("\t\ttype filter hook postrouting priority mangle -1\n");
+        machine_nft_script.push_str("\t\tpolicy accept\n");
+        machine_nft_script
+            .push_str("\t\tmeta mark set ip saddr . ip daddr map @mark_pairs counter\n");
+        machine_nft_script.push_str("\t}\n");
+        machine_nft_script.push_str("}\n");
+
+        configs.push(MachineConfig {
+            machine,
+            addresses: machine_addresses,
+            nft_script: machine_nft_script,
+            tc_commands: machine_tc_commands,
+            ip_commands: machine_ip_commands,
+        });
+    }
+    configs
+}
+
+async fn job_list_machines(ctx: &Context) -> Result<Vec<Machine>> {
     match ctx.node {
         ExecutionNode::Frontend => {
             let job_id = match ctx.job_id {
@@ -101,7 +851,7 @@ async fn list_job_machines(ctx: &Context) -> eyre::Result<Vec<Machine>> {
                 Some(hostname) => hostname,
                 None => {
                     return Err(eyre::eyre!(
-                        "frontend hostname is requiredwhen running from outside the cluster"
+                        "frontend hostname is required when running from outside the cluster"
                     ));
                 }
             };
@@ -148,7 +898,7 @@ async fn list_job_machines(ctx: &Context) -> eyre::Result<Vec<Machine>> {
     }
 }
 
-fn extract_machines_from_oar_stat_json(output: &str, job_id: u32) -> eyre::Result<Vec<Machine>> {
+fn extract_machines_from_oar_stat_json(output: &str, job_id: u32) -> Result<Vec<Machine>> {
     #[derive(Debug, Deserialize)]
     struct JobSchema {
         assigned_network_address: Vec<String>,
@@ -168,8 +918,8 @@ fn extract_machines_from_oar_stat_json(output: &str, job_id: u32) -> eyre::Resul
     Ok(machines)
 }
 
-fn get_execution_node() -> eyre::Result<ExecutionNode> {
-    let hostname = get_hostname()?;
+async fn get_execution_node() -> Result<ExecutionNode> {
+    let hostname = get_hostname().await?;
     let node = match hostname.as_str() {
         "frontend" => ExecutionNode::Frontend,
         _ => match Machine::from_hostname(&hostname) {
@@ -180,8 +930,12 @@ fn get_execution_node() -> eyre::Result<ExecutionNode> {
     Ok(node)
 }
 
-fn get_hostname() -> eyre::Result<String> {
-    std::env::var("HOSTNAME").context("reading HOSTNAME env var")
+async fn get_hostname() -> Result<String> {
+    if let Ok(hostname) = tokio::fs::read_to_string("/etc/hostname").await {
+        Ok(hostname)
+    } else {
+        std::env::var("HOSTNAME").context("reading HOSTNAME env var")
+    }
 }
 
 #[cfg(test)]