#!/bin/sh # # chkconfig: 345 90 90 # description: Executes Qubes core scripts at VM boot # # Source function library. . /etc/rc.d/init.d/functions start() { echo -n $"Executing Qubes Core scripts NetVM:" if ! [ -x /usr/bin/xenstore-read ] ; then echo "ERROR: /usr/bin/xenstore-read not found!" exit 1 fi name=$(/usr/bin/xenstore-read name) hostname $name # Setup gateway for all the VMs this netVM is serviceing... brctl addbr br0 gateway=$(/usr/bin/xenstore-read qubes_netvm_gateway) netmask=$(/usr/bin/xenstore-read qubes_netvm_netmask) network=$(/usr/bin/xenstore-read qubes_netvm_network) secondary_dns=$(/usr/bin/xenstore-read qubes_netvm_secondary_dns) ifconfig br0 $gateway netmask $netmask up ifconfig br0:1 $secondary_dns netmask $netmask echo "NS1=$gateway" > /var/run/qubes_ns echo "NS2=$secondary_dns" >> /var/run/qubes_ns qubes_setup_dnat_to_ns echo "1" > /proc/sys/net/ipv4/ip_forward #now no need for dnsmasq # dnsmasq --listen-address $gateway --bind-interfaces #now done by iptables rc script # iptables -t nat -A POSTROUTING -s $network/$netmask -j MASQUERADE #no, we cannot put ip-dependent stuff in sysconfig/iptables #so make it ip-independent success echo "" return 0 } stop() { return 0 } case "$1" in start) start ;; stop) stop ;; *) echo $"Usage: $0 {start|stop}" exit 3 ;; esac exit $RETVAL