forked from
lass.pds.lassul.us/superconfig
This repository has no description
yello: fix namespace beeing broken
author
Jörg Thalheim
date
(Apr 25, 2024, 2:33 PM CEST)
commit
0fffa46c
0fffa46c20680028adc39a88636b9773e4c5457e
parent
137257fc
137257fc8703a0897a9647e2d64ebfb5fbe22f9c
+18
-3
+18
-3
machines/yellow/config.nix
+18
-3
machines/yellow/config.nix
···
29
29
'';
30
30
services.resolved.enable = lib.mkForce false;
31
31
32
+
systemd.services."netns@" = {
33
+
description = "%I network namespace";
34
+
before = [ "network.target" ];
35
+
serviceConfig = {
36
+
Type = "oneshot";
37
+
RemainAfterExit = true;
38
+
ExecStart = "${pkgs.iproute}/bin/ip netns add %I";
39
+
ExecStop = "${pkgs.iproute}/bin/ip netns del %I";
40
+
};
41
+
};
42
+
32
43
systemd.services.transmission-netns = {
33
-
wantedBy = [ "multi-user.target" ];
44
+
bindsTo = [ "netns@transmission.service" ];
45
+
after = [ "netns@transmission.service" ];
34
46
path = [
35
47
pkgs.iproute2
36
48
pkgs.wireguard-tools
37
49
];
38
50
script = ''
39
51
set -efux
40
-
ip netns delete transmission || :
41
52
ip link del t2 || :
42
-
ip netns add transmission
43
53
ip -n transmission link set lo up
44
54
ip link add airvpn type wireguard
55
+
ip -n transmission link del airvpn || :
45
56
ip link set airvpn netns transmission
46
57
ip -n transmission addr add 10.176.43.231/32 dev airvpn
47
58
ip -n transmission addr add fd7d:76ee:e68f:a993:41b3:846b:d271:30d8/128 dev airvpn
···
50
61
ip -n transmission route add default dev airvpn
51
62
ip -6 -n transmission route add default dev airvpn
52
63
ip link add t1 type veth peer name t2
64
+
65
+
ip -n transmission link del t1 || :
53
66
ip link set t1 netns transmission
54
67
55
68
ip addr add 128.0.0.2/30 dev t2
···
84
97
85
98
systemd.services.transmission = {
86
99
after = [ "transmission-netns.service" ];
100
+
wants = [ "transmission-netns.service" ];
101
+
bindsTo = [ "netns@transmission.service" ];
87
102
serviceConfig = {
88
103
NetworkNamespacePath = "/var/run/netns/transmission";
89
104
# https://github.com/NixOS/nixpkgs/issues/258793