65 lines
1.4 KiB
Bash
Executable File
65 lines
1.4 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# chkconfig: 345 90 90
|
|
# description: Executes Qubes core scripts at VM boot
|
|
#
|
|
# Source function library.
|
|
. /etc/rc.d/init.d/functions
|
|
|
|
start()
|
|
{
|
|
echo -n $"Executing Qubes Core scripts NetVM:"
|
|
|
|
if ! [ -x /usr/bin/xenstore-read ] ; then
|
|
echo "ERROR: /usr/bin/xenstore-read not found!"
|
|
exit 1
|
|
fi
|
|
|
|
name=$(/usr/bin/xenstore-read name)
|
|
hostname $name
|
|
|
|
# Setup gateway for all the VMs this netVM is serviceing...
|
|
brctl addbr br0
|
|
brctl stp br0 off
|
|
brctl setfd br0 1
|
|
gateway=$(/usr/bin/xenstore-read qubes_netvm_gateway)
|
|
netmask=$(/usr/bin/xenstore-read qubes_netvm_netmask)
|
|
network=$(/usr/bin/xenstore-read qubes_netvm_network)
|
|
secondary_dns=$(/usr/bin/xenstore-read qubes_netvm_secondary_dns)
|
|
ifconfig br0 $gateway netmask $netmask up
|
|
ifconfig br0:1 $secondary_dns netmask $netmask
|
|
echo "NS1=$gateway" > /var/run/qubes/qubes_ns
|
|
echo "NS2=$secondary_dns" >> /var/run/qubes/qubes_ns
|
|
/usr/lib/qubes/qubes_setup_dnat_to_ns
|
|
echo "1" > /proc/sys/net/ipv4/ip_forward
|
|
#now no need for dnsmasq
|
|
# dnsmasq --listen-address $gateway --bind-interfaces
|
|
#now done by iptables rc script
|
|
# iptables -t nat -A POSTROUTING -s $network/$netmask -j MASQUERADE
|
|
#no, we cannot put ip-dependent stuff in sysconfig/iptables
|
|
#so make it ip-independent
|
|
success
|
|
echo ""
|
|
return 0
|
|
}
|
|
|
|
stop()
|
|
{
|
|
return 0
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
start
|
|
;;
|
|
stop)
|
|
stop
|
|
;;
|
|
*)
|
|
echo $"Usage: $0 {start|stop}"
|
|
exit 3
|
|
;;
|
|
esac
|
|
|
|
exit $RETVAL
|