mirror of
https://github.com/PrivSec-dev/privsec.dev
synced 2024-09-07 19:53:30 -04:00
Fix IVPN for chaining ProxyVMs
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
5bf6e2133e
commit
121f5e3913
@ -31,7 +31,22 @@ sudo dnf config-manager --add-repo https://repo.ivpn.net/stable/fedora/generic/i
|
||||
sudo dnf install -y ivpn-ui
|
||||
```
|
||||
|
||||
IVPN needs `/usr/lib/qubes/qubes-setup-dnat-to-ns` to be run at boot and when the daemon changes `/etc/resolv.conf`. Create the following files:
|
||||
IVPN needs to restart `systemd-resolved` and run `/usr/lib/qubes/qubes-setup-dnat-to-ns` at boot to work properly, especially if you want to chain ProxyVMs. `/usr/lib/qubes/qubes-setup-dnat-to-ns` also needs to be run every time IVPN modifies `/etc/resolv.conf`. Create the following files:
|
||||
|
||||
- `/etc/systemd/system/dnat-to-ns-boot.service`
|
||||
```
|
||||
[Unit]
|
||||
Description=Run /usr/lib/qubes/qubes-setup-dnat-to-ns 10 seconds after boot
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=/usr/bin/sleep 10
|
||||
ExecStart=/usr/bin/systemctl restart systemd-resolved
|
||||
ExecStart=/usr/lib/qubes/qubes-setup-dnat-to-ns
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
```
|
||||
|
||||
- `/etc/systemd/system/dnat-to-ns.service`
|
||||
```
|
||||
@ -41,9 +56,6 @@ Description=Run /usr/lib/qubes/qubes-setup-dnat-to-ns
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=/usr/lib/qubes/qubes-setup-dnat-to-ns
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
```
|
||||
|
||||
- `/etc/systemd/system/dnat-to-ns.path`
|
||||
@ -63,7 +75,7 @@ WantedBy=multi-user.target
|
||||
Next, enable both the systemd service and the systemd path:
|
||||
|
||||
```bash
|
||||
sudo systemctl enable dnat-to-ns.service
|
||||
sudo systemctl enable dnat-to-ns-boot.service
|
||||
sudo systemctl enable dnat-to-ns.path
|
||||
```
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user