core-agent-linux/network/setup-ip

#!/bin/sh

if [ -x /usr/sbin/xenstore-read ]; then
	XENSTORE_READ="/usr/sbin/xenstore-read"
else
	XENSTORE_READ="/usr/bin/xenstore-read"
fi

ip=`$XENSTORE_READ qubes-ip 2> /dev/null`
if [ x$ip != x ]; then
    netmask=`$XENSTORE_READ qubes-netmask`
    gateway=`$XENSTORE_READ qubes-gateway`
    secondary_dns=`$XENSTORE_READ qubes-secondary-dns`
    /sbin/ifconfig $INTERFACE $ip netmask 255.255.255.255
    /sbin/ifconfig $INTERFACE up
    /sbin/route add -host $gateway dev $INTERFACE
    /sbin/route add default gw $gateway
    /sbin/ethtool -K $INTERFACE sg off
    /sbin/ethtool -K $INTERFACE tx off
    echo "nameserver $gateway" > /etc/resolv.conf
    echo "nameserver $secondary_dns" >> /etc/resolv.conf
	network=$($XENSTORE_READ qubes-netvm-network 2>/dev/null)
	if [ "x$network" != "x" ]; then
		gateway=$($XENSTORE_READ qubes-netvm-gateway)
		netmask=$($XENSTORE_READ qubes-netvm-netmask)
		secondary_dns=$($XENSTORE_READ qubes-netvm-secondary-dns)
		echo "NS1=$gateway" > /var/run/qubes/qubes-ns
		echo "NS2=$secondary_dns" >> /var/run/qubes/qubes-ns
		/usr/lib/qubes/qubes-setup-dnat-to-ns
		[ -x /rw/config/qubes-ip-change-hook ] && /rw/config/qubes-ip-change-hook
		# XXX: Backward compatibility
		[ -x /rw/config/qubes_ip_change_hook ] && /rw/config/qubes_ip_change_hook
	fi
    if [ -f /var/run/qubes-service/network-manager ]; then
        cat > /etc/NetworkManager/system-connections/qubes-uplink-$INTERFACE <<__EOF__
[802-3-ethernet]
duplex=full

[connection]
id=VM uplink $INTERFACE
uuid=de85f79b-8c3d-405f-a652-cb4c10b4f9ef
type=802-3-ethernet

[ipv6]
method=ignore

[ipv4]
method=manual
dns=$gateway;$secondary_dns
address1=$ip/32,$gateway
may-fail=false
__EOF__
    chmod 600 /etc/NetworkManager/system-connections/qubes-uplink-$INTERFACE
    fi
fi
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP. 2014-08-13 08:58:10 +02:00			`#!/bin/sh`
Configure VM network iface on attach (not only on boot) (#190) 2011-04-23 02:31:54 +02:00
Check for xenstore-read in /usr/sbin as well (default on debian) 2014-04-21 17:18:29 +02:00			`if [ -x /usr/sbin/xenstore-read ]; then`
			`XENSTORE_READ="/usr/sbin/xenstore-read"`
			`else`
Use xenstore.h instead of xs.h when xen >= 4.2 2014-04-21 17:21:03 +02:00			`XENSTORE_READ="/usr/bin/xenstore-read"`
Check for xenstore-read in /usr/sbin as well (default on debian) 2014-04-21 17:18:29 +02:00			`fi`

			ip=`$XENSTORE_READ qubes-ip 2> /dev/null`
Configure VM network iface on attach (not only on boot) (#190) 2011-04-23 02:31:54 +02:00			`if [ x$ip != x ]; then`
Check for xenstore-read in /usr/sbin as well (default on debian) 2014-04-21 17:18:29 +02:00			netmask=`$XENSTORE_READ qubes-netmask`
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP. 2014-08-13 08:58:10 +02:00			gateway=`$XENSTORE_READ qubes-gateway`
Check for xenstore-read in /usr/sbin as well (default on debian) 2014-04-21 17:18:29 +02:00			secondary_dns=`$XENSTORE_READ qubes-secondary-dns`
Connect vif's to already running VMs on NetVM/ProxyVM startup (#190) Also cleanup stale vifs using "xm network-detach ... -f" Fix iptables rules to support not only first vif of VM 2011-04-23 02:32:54 +02:00			`/sbin/ifconfig $INTERFACE $ip netmask 255.255.255.255`
			`/sbin/ifconfig $INTERFACE up`
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP. 2014-08-13 08:58:10 +02:00			`/sbin/route add -host $gateway dev $INTERFACE`
			`/sbin/route add default gw $gateway`
setup_ip: turn off sg Apparently vif frontend has broken sg implementation; we already worked around it in init.d script via ethtool; now do the same in setup_ip. It is relevant when attaching firewallvm to a different netvm on the fly. 2011-08-02 19:27:45 +02:00			`/sbin/ethtool -K $INTERFACE sg off`
vm/network: disable tx-checksumming offload (#700) It doesn't work on xen-netfront. 2013-01-08 03:03:44 +01:00			`/sbin/ethtool -K $INTERFACE tx off`
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP. 2014-08-13 08:58:10 +02:00			`echo "nameserver $gateway" > /etc/resolv.conf`
Configure VM network iface on attach (not only on boot) (#190) 2011-04-23 02:31:54 +02:00			`echo "nameserver $secondary_dns" >> /etc/resolv.conf`
Check for xenstore-read in /usr/sbin as well (default on debian) 2014-04-21 17:18:29 +02:00			`network=$($XENSTORE_READ qubes-netvm-network 2>/dev/null)`
qvm-prefs: allow on the fly netvm switch (#302) When changing netvm of a running vm, detach/attach eth0. Some functionality of qubes_core_netvm thus is duplicated in setup_ip. REQUIRES http://git.qubes-os.org/?p=rafal/xen.git;a=commit;h=42c72e6173586a807f8f153391e2e57352d362b1 2011-08-01 15:06:01 +02:00			`if [ "x$network" != "x" ]; then`
Check for xenstore-read in /usr/sbin as well (default on debian) 2014-04-21 17:18:29 +02:00			`gateway=$($XENSTORE_READ qubes-netvm-gateway)`
			`netmask=$($XENSTORE_READ qubes-netvm-netmask)`
			`secondary_dns=$($XENSTORE_READ qubes-netvm-secondary-dns)`
The Underscores Revolution: filenames Get rid of underscores in filenames, use dashes instead. This is first part of cleanup in filenames. "qubes_rpc" still untouched - will be in separate commit. 2013-03-13 02:26:40 +01:00			`echo "NS1=$gateway" > /var/run/qubes/qubes-ns`
			`echo "NS2=$secondary_dns" >> /var/run/qubes/qubes-ns`
			`/usr/lib/qubes/qubes-setup-dnat-to-ns`
			`[ -x /rw/config/qubes-ip-change-hook ] && /rw/config/qubes-ip-change-hook`
			`# XXX: Backward compatibility`
vm: allow user-define hook for IP change event This is especially useful for proxy VMs that e.g. run some transparent proxy service such as tor, and need to rebind it upon IP change (of course this assumes iptables-based transparent redirection such as DNAT). 2011-08-18 15:49:49 +02:00			`[ -x /rw/config/qubes_ip_change_hook ] && /rw/config/qubes_ip_change_hook`
qvm-prefs: allow on the fly netvm switch (#302) When changing netvm of a running vm, detach/attach eth0. Some functionality of qubes_core_netvm thus is duplicated in setup_ip. REQUIRES http://git.qubes-os.org/?p=rafal/xen.git;a=commit;h=42c72e6173586a807f8f153391e2e57352d362b1 2011-08-01 15:06:01 +02:00			`fi`
network: setup NM connection when its active in the ProxyVM 2014-05-22 01:36:15 +02:00			`if [ -f /var/run/qubes-service/network-manager ]; then`
network: do not use ifcfg-rh NM plugin Apparently eth0 in ProxyVM can be configured using plain keyfile plugin, which is present on all distributions. 2014-11-09 05:31:22 +01:00			`cat > /etc/NetworkManager/system-connections/qubes-uplink-$INTERFACE <<__EOF__`
			`[802-3-ethernet]`
			`duplex=full`

			`[connection]`
			`id=VM uplink $INTERFACE`
			`uuid=de85f79b-8c3d-405f-a652-cb4c10b4f9ef`
			`type=802-3-ethernet`

			`[ipv6]`
			`method=ignore`

			`[ipv4]`
			`method=manual`
			`dns=$gateway;$secondary_dns`
			`address1=$ip/32,$gateway`
			`may-fail=false`
network: setup NM connection when its active in the ProxyVM 2014-05-22 01:36:15 +02:00			`__EOF__`
network: fix NM uplink config permissions Otherwise NM will not use the file. 2014-11-09 05:35:07 +01:00			`chmod 600 /etc/NetworkManager/system-connections/qubes-uplink-$INTERFACE`
network: setup NM connection when its active in the ProxyVM 2014-05-22 01:36:15 +02:00			`fi`
Configure VM network iface on attach (not only on boot) (#190) 2011-04-23 02:31:54 +02:00			`fi`