mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 18:45:54 +02:00
7b616db4e2
This change make it possible to use a macvtap interface as a standard interface (green0). This is required by libvirt, because libvirt adds macvtap interfaces to the physical interface, but this causes a problem. A VM with this configuration can communicate with the whole network, but not with the Host (IPFire). To solve this problem, the host interface must be also a macvtap interface. This is achieved by: 1. In /var/ipfire/ethernet/settings the mode of a interface could set with GREEN_MODE= ... When the mode is macvtap the physical interface is renamed to green0phys instead of green0. If the mode is not set the normal configuration is applied . 2. The network-hotplug-macvtap script checks if a physical nic ends with "phys". When the interface ends with "phys", the script adds a macvtap interface to the physical nic which is named green0. The MAC address of this interface is set to the MAC address of the physical nic. The MAC address of the physical is set to a random value. We do this because the MAC address of green0 should not change. All services, IP addresses then binds to the macvatap interface, the physical nic is not used. PS.: The script works also with the orange or blue interface, just replace green with orange or blue. Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
128 lines
4.7 KiB
Plaintext
128 lines
4.7 KiB
Plaintext
###############################################################################
|
|
# #
|
|
# IPFire.org - A linux based firewall #
|
|
# Copyright (C) 2007-2013 IPFire Team <info@ipfire.org> #
|
|
# #
|
|
# This program is free software: you can redistribute it and/or modify #
|
|
# it under the terms of the GNU General Public License as published by #
|
|
# the Free Software Foundation, either version 3 of the License, or #
|
|
# (at your option) any later version. #
|
|
# #
|
|
# This program is distributed in the hope that it will be useful, #
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
|
|
# GNU General Public License for more details. #
|
|
# #
|
|
# You should have received a copy of the GNU General Public License #
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
|
|
# #
|
|
###############################################################################
|
|
|
|
###############################################################################
|
|
# Definitions
|
|
###############################################################################
|
|
|
|
include Config
|
|
|
|
VER = 208
|
|
|
|
THISAPP = udev-$(VER)
|
|
DL_FILE = systemd-$(VER).tar.xz
|
|
DL_FROM = $(URL_IPFIRE)
|
|
DIR_APP = $(DIR_SRC)/systemd-$(VER)
|
|
TARGET = $(DIR_INFO)/$(THISAPP)
|
|
|
|
###############################################################################
|
|
# Top-level Rules
|
|
###############################################################################
|
|
|
|
objects = $(DL_FILE) udev-lfs-208-1.tar.bz2
|
|
|
|
|
|
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
|
|
udev-lfs-$(VER)-1.tar.bz2 = $(DL_FROM)/udev-lfs-$(VER)-1.tar.bz2
|
|
|
|
$(DL_FILE)_MD5 = df64550d92afbffb4f67a434193ee165
|
|
udev-lfs-$(VER)-1.tar.bz2_MD5 = 67a5339e7ef1fa08f5db8315a5ea69e7
|
|
|
|
install : $(TARGET)
|
|
|
|
check : $(patsubst %,$(DIR_CHK)/%,$(objects))
|
|
|
|
download :$(patsubst %,$(DIR_DL)/%,$(objects))
|
|
|
|
md5 : $(subst %,%_MD5,$(objects))
|
|
|
|
###############################################################################
|
|
# Downloading, checking, md5sum
|
|
###############################################################################
|
|
|
|
$(patsubst %,$(DIR_CHK)/%,$(objects)) :
|
|
@$(CHECK)
|
|
|
|
$(patsubst %,$(DIR_DL)/%,$(objects)) :
|
|
@$(LOAD)
|
|
|
|
$(subst %,%_MD5,$(objects)) :
|
|
@$(MD5)
|
|
|
|
###############################################################################
|
|
# Installation Details
|
|
###############################################################################
|
|
|
|
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
|
|
@$(PREBUILD)
|
|
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
|
|
cd $(DIR_APP) && tar axf $(DIR_DL)/udev-lfs-$(VER)-1.tar.bz2
|
|
|
|
cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/udev-208_remove_systemd_log.patch
|
|
|
|
cd $(DIR_APP)/udev-lfs-$(VER)-1 && sed -i "s/HANDLE_AT 1/HANDLE_AT 0/g" cfg.h
|
|
|
|
rm -rf /lib/udev/devices
|
|
install -dv /lib/firmware
|
|
|
|
cd $(DIR_APP) && make -f udev-lfs-$(VER)-1/Makefile.lfs $(MAKETUNING)
|
|
cd $(DIR_APP) && make -f udev-lfs-$(VER)-1/Makefile.lfs install
|
|
|
|
# Make some compat symlinks
|
|
ln -sf /lib/udev/udevd /sbin/udevd
|
|
ln -sf /sbin/udevadm /bin/udevadm
|
|
|
|
# Disable net generator rule. This does not work with the setup.
|
|
rm -f /lib/udev/rules.d/75-persistent-net-generator.rules
|
|
rm -f /lib/udev/rules.d/80-net-name-slot.rules
|
|
|
|
# Blacklist some modules
|
|
cp -vf $(DIR_SRC)/config/udev/blacklist.conf /etc/modprobe.d/blacklist.conf
|
|
|
|
# Install config file
|
|
install -v -m 644 $(DIR_SRC)/config/udev/udev.conf \
|
|
/etc/udev/
|
|
|
|
# Install alsa rules.
|
|
install -v -m 644 $(DIR_SRC)/config/udev/25-alsa.rules \
|
|
/lib/udev/rules.d
|
|
|
|
# Install network rules.
|
|
install -v -m 755 $(DIR_SRC)/config/udev/network-hotplug-rename \
|
|
/lib/udev/network-hotplug-rename
|
|
install -v -m 755 $(DIR_SRC)/config/udev/network-hotplug-vlan \
|
|
/lib/udev/network-hotplug-vlan
|
|
install -v -m 755 $(DIR_SRC)/config/udev/network-hotplug-macvtap \
|
|
/lib/udev/network-hotplug-macvtap
|
|
install -v -m 644 $(DIR_SRC)/config/udev/60-net.rules \
|
|
/lib/udev/rules.d
|
|
|
|
# Install hwrng rules.
|
|
install -v -m 644 $(DIR_SRC)/config/udev/90-hwrng.rules \
|
|
/lib/udev/rules.d
|
|
|
|
# Install codel rules.
|
|
install -v -m 644 $(DIR_SRC)/config/udev/99-codel.rules \
|
|
/lib/udev/rules.d
|
|
install -m 755 $(DIR_SRC)/config/udev/enable_codel \
|
|
/lib/udev/enable_codel
|
|
@rm -rf $(DIR_APP)
|
|
@$(POSTBUILD)
|