Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
dbd19698b3
core-agent-linux/network/setup-ip

50 lines
1.7 KiB
Plaintext
Raw Normal View History

Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP.
2014-08-13 08:58:10 +02:00
#!/bin/sh
Configure VM network iface on attach (not only on boot) (#190)
2011-04-23 02:31:54 +02:00
Use Qubes DB instead of Xenstore
2013-06-07 05:20:55 +02:00
ip=`/usr/bin/qubesdb-read /qubes-ip 2> /dev/null`
Configure VM network iface on attach (not only on boot) (#190)
2011-04-23 02:31:54 +02:00
if [ x$ip != x ]; then
Use Qubes DB instead of Xenstore
2013-06-07 05:20:55 +02:00
netmask=`/usr/bin/qubesdb-read /qubes-netmask`
gateway=`/usr/bin/qubesdb-read /qubes-gateway`
secondary_dns=`/usr/bin/qubesdb-read /qubes-secondary-dns`
Connect vif's to already running VMs on NetVM/ProxyVM startup (#190) Also cleanup stale vifs using "xm network-detach ... -f" Fix iptables rules to support not only first vif of VM
2011-04-23 02:32:54 +02:00
/sbin/ifconfig $INTERFACE $ip netmask 255.255.255.255
/sbin/ifconfig $INTERFACE up
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP.
2014-08-13 08:58:10 +02:00
/sbin/route add -host $gateway dev $INTERFACE
/sbin/route add default gw $gateway
setup_ip: turn off sg Apparently vif frontend has broken sg implementation; we already worked around it in init.d script via ethtool; now do the same in setup_ip. It is relevant when attaching firewallvm to a different netvm on the fly.
2011-08-02 19:27:45 +02:00
/sbin/ethtool -K $INTERFACE sg off
vm/network: disable tx-checksumming offload (#700) It doesn't work on xen-netfront.
2013-01-08 03:03:44 +01:00
/sbin/ethtool -K $INTERFACE tx off
Revert "network: use the same gateway IP generation method as backend" This reverts commit 4ef785a01683fa638149fb55fdfbfbb2d23a7671. Actually this change was wrong - the frontend IP was correct, the problem was with backend IP.
2014-08-13 08:58:10 +02:00
echo "nameserver $gateway" > /etc/resolv.conf
Configure VM network iface on attach (not only on boot) (#190)
2011-04-23 02:31:54 +02:00
echo "nameserver $secondary_dns" >> /etc/resolv.conf
Use Qubes DB instead of Xenstore
2013-06-07 05:20:55 +02:00
network=$(/usr/bin/qubesdb-read /qubes-netvm-network 2>/dev/null)
qvm-prefs: allow on the fly netvm switch (#302) When changing netvm of a running vm, detach/attach eth0. Some functionality of qubes_core_netvm thus is duplicated in setup_ip. REQUIRES http://git.qubes-os.org/?p=rafal/xen.git;a=commit;h=42c72e6173586a807f8f153391e2e57352d362b1
2011-08-01 15:06:01 +02:00
if [ "x$network" != "x" ]; then
Use Qubes DB instead of Xenstore
2013-06-07 05:20:55 +02:00
gateway=$(/usr/bin/qubesdb-read /qubes-netvm-gateway)
netmask=$(/usr/bin/qubesdb-read /qubes-netvm-netmask)
secondary_dns=$(/usr/bin/qubesdb-read /qubes-netvm-secondary-dns)
The Underscores Revolution: filenames Get rid of underscores in filenames, use dashes instead. This is first part of cleanup in filenames. "qubes_rpc" still untouched - will be in separate commit.
2013-03-13 02:26:40 +01:00
echo "NS1=$gateway" > /var/run/qubes/qubes-ns
echo "NS2=$secondary_dns" >> /var/run/qubes/qubes-ns
/usr/lib/qubes/qubes-setup-dnat-to-ns
[ -x /rw/config/qubes-ip-change-hook ] && /rw/config/qubes-ip-change-hook
# XXX: Backward compatibility
vm: allow user-define hook for IP change event This is especially useful for proxy VMs that e.g. run some transparent proxy service such as tor, and need to rebind it upon IP change (of course this assumes iptables-based transparent redirection such as DNAT).
2011-08-18 15:49:49 +02:00
[ -x /rw/config/qubes_ip_change_hook ] && /rw/config/qubes_ip_change_hook
qvm-prefs: allow on the fly netvm switch (#302) When changing netvm of a running vm, detach/attach eth0. Some functionality of qubes_core_netvm thus is duplicated in setup_ip. REQUIRES http://git.qubes-os.org/?p=rafal/xen.git;a=commit;h=42c72e6173586a807f8f153391e2e57352d362b1
2011-08-01 15:06:01 +02:00
fi
network: setup NM connection when its active in the ProxyVM
2014-05-22 01:36:15 +02:00
if [ -f /var/run/qubes-service/network-manager ]; then
network: do not use ifcfg-rh NM plugin Apparently eth0 in ProxyVM can be configured using plain keyfile plugin, which is present on all distributions.
2014-11-09 05:31:22 +01:00
cat > /etc/NetworkManager/system-connections/qubes-uplink-$INTERFACE <<__EOF__
[802-3-ethernet]
duplex=full
[connection]
id=VM uplink $INTERFACE
uuid=de85f79b-8c3d-405f-a652-cb4c10b4f9ef
type=802-3-ethernet
[ipv6]
method=ignore
[ipv4]
method=manual
dns=$gateway;$secondary_dns
address1=$ip/32,$gateway
may-fail=false
network: setup NM connection when its active in the ProxyVM
2014-05-22 01:36:15 +02:00
__EOF__
network: fix indentation
2014-11-13 23:19:34 +01:00
chmod 600 /etc/NetworkManager/system-connections/qubes-uplink-$INTERFACE
network: setup NM connection when its active in the ProxyVM
2014-05-22 01:36:15 +02:00
fi
Configure VM network iface on attach (not only on boot) (#190)
2011-04-23 02:31:54 +02:00
fi
Reference in New Issue Copy Permalink