Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
cadb102781
core-agent-linux/network/setup-ip

46 lines
1.5 KiB
Plaintext
Raw Normal View History

Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP.
2014-08-13 08:58:10 +02:00
#!/bin/sh
Configure VM network iface on attach (not only on boot) (#190)
2011-04-23 02:31:54 +02:00
Check for xenstore-read in /usr/sbin as well (default on debian)
2014-04-21 17:18:29 +02:00
if [ -x /usr/sbin/xenstore-read ]; then
XENSTORE_READ="/usr/sbin/xenstore-read"
else
Use xenstore.h instead of xs.h when xen >= 4.2
2014-04-21 17:21:03 +02:00
XENSTORE_READ="/usr/bin/xenstore-read"
Check for xenstore-read in /usr/sbin as well (default on debian)
2014-04-21 17:18:29 +02:00
fi
ip=`$XENSTORE_READ qubes-ip 2> /dev/null`
Configure VM network iface on attach (not only on boot) (#190)
2011-04-23 02:31:54 +02:00
if [ x$ip != x ]; then
Check for xenstore-read in /usr/sbin as well (default on debian)
2014-04-21 17:18:29 +02:00
netmask=`$XENSTORE_READ qubes-netmask`
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP.
2014-08-13 08:58:10 +02:00
gateway=`$XENSTORE_READ qubes-gateway`
Check for xenstore-read in /usr/sbin as well (default on debian)
2014-04-21 17:18:29 +02:00
secondary_dns=`$XENSTORE_READ qubes-secondary-dns`
Connect vif's to already running VMs on NetVM/ProxyVM startup (#190) Also cleanup stale vifs using "xm network-detach ... -f" Fix iptables rules to support not only first vif of VM
2011-04-23 02:32:54 +02:00
/sbin/ifconfig $INTERFACE $ip netmask 255.255.255.255
/sbin/ifconfig $INTERFACE up
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP.
2014-08-13 08:58:10 +02:00
/sbin/route add -host $gateway dev $INTERFACE
/sbin/route add default gw $gateway
setup_ip: turn off sg Apparently vif frontend has broken sg implementation; we already worked around it in init.d script via ethtool; now do the same in setup_ip. It is relevant when attaching firewallvm to a different netvm on the fly.
2011-08-02 19:27:45 +02:00
/sbin/ethtool -K $INTERFACE sg off
vm/network: disable tx-checksumming offload (#700) It doesn't work on xen-netfront.
2013-01-08 03:03:44 +01:00
/sbin/ethtool -K $INTERFACE tx off
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP.
2014-08-13 08:58:10 +02:00
echo "nameserver $gateway" > /etc/resolv.conf
Configure VM network iface on attach (not only on boot) (#190)
2011-04-23 02:31:54 +02:00
echo "nameserver $secondary_dns" >> /etc/resolv.conf
Check for xenstore-read in /usr/sbin as well (default on debian)
2014-04-21 17:18:29 +02:00
network=$($XENSTORE_READ qubes-netvm-network 2>/dev/null)
qvm-prefs: allow on the fly netvm switch (#302) When changing netvm of a running vm, detach/attach eth0. Some functionality of qubes_core_netvm thus is duplicated in setup_ip. REQUIRES http://git.qubes-os.org/?p=rafal/xen.git;a=commit;h=42c72e6173586a807f8f153391e2e57352d362b1
2011-08-01 15:06:01 +02:00
if [ "x$network" != "x" ]; then
Check for xenstore-read in /usr/sbin as well (default on debian)
2014-04-21 17:18:29 +02:00
gateway=$($XENSTORE_READ qubes-netvm-gateway)
netmask=$($XENSTORE_READ qubes-netvm-netmask)
secondary_dns=$($XENSTORE_READ qubes-netvm-secondary-dns)
The Underscores Revolution: filenames Get rid of underscores in filenames, use dashes instead. This is first part of cleanup in filenames. "qubes_rpc" still untouched - will be in separate commit.
2013-03-13 02:26:40 +01:00
echo "NS1=$gateway" > /var/run/qubes/qubes-ns
echo "NS2=$secondary_dns" >> /var/run/qubes/qubes-ns
/usr/lib/qubes/qubes-setup-dnat-to-ns
[ -x /rw/config/qubes-ip-change-hook ] && /rw/config/qubes-ip-change-hook
# XXX: Backward compatibility
vm: allow user-define hook for IP change event This is especially useful for proxy VMs that e.g. run some transparent proxy service such as tor, and need to rebind it upon IP change (of course this assumes iptables-based transparent redirection such as DNAT).
2011-08-18 15:49:49 +02:00
[ -x /rw/config/qubes_ip_change_hook ] && /rw/config/qubes_ip_change_hook
qvm-prefs: allow on the fly netvm switch (#302) When changing netvm of a running vm, detach/attach eth0. Some functionality of qubes_core_netvm thus is duplicated in setup_ip. REQUIRES http://git.qubes-os.org/?p=rafal/xen.git;a=commit;h=42c72e6173586a807f8f153391e2e57352d362b1
2011-08-01 15:06:01 +02:00
fi
network: setup NM connection when its active in the ProxyVM
2014-05-22 01:36:15 +02:00
if [ -f /var/run/qubes-service/network-manager ]; then
cat > /etc/sysconfig/network-scripts/ifcfg-$INTERFACE <<__EOF__
DEVICE=$INTERFACE
IPADDR=$ip
NETMASK=255.255.255.255
NETWORK=$ip
ONBOOT=yes
GATEWAYDEV=$INTERFACE
GATEWAY=$gateway
__EOF__
fi
Configure VM network iface on attach (not only on boot) (#190)
2011-04-23 02:31:54 +02:00
fi
Reference in New Issue Copy Permalink