Debian buster lxc vpn: Unterschied zwischen den Versionen

Aus Vosp.info
Wechseln zu:Navigation, Suche
(Die Seite wurde neu angelegt: „== VPN LXC Container Config== ## lxc.mount.entry = /sys/kernel/debug sys/kernel/debug none bind,optional 0 0 lxc.mount.entry = /sys/kernel/security sys/kernel/…“)
 
Zeile 27: Zeile 27:
 
==== Linux Networkmanager Problem ====
 
==== Linux Networkmanager Problem ====
 
Ändere Script  
 
Ändere Script  
<script>
+
<code lang=bash>
 
         if [[ $CUSTOMIZE_ENC == "n" ]];then
 
         if [[ $CUSTOMIZE_ENC == "n" ]];then
 
                 # Use default, sane and fast parameters
 
                 # Use default, sane and fast parameters
Zeile 33: Zeile 33:
 
                 #TLS_SIG="1" # tls-crypt
 
                 #TLS_SIG="1" # tls-crypt
 
                 TLS_SIG="2" # tls-auth
 
                 TLS_SIG="2" # tls-auth
</script>
+
</code>

Version vom 25. März 2020, 16:20 Uhr

VPN LXC Container Config

lxc.mount.entry = /sys/kernel/debug sys/kernel/debug none bind,optional 0 0 lxc.mount.entry = /sys/kernel/security sys/kernel/security none bind,optional 0 0 lxc.mount.entry = /sys/fs/pstore sys/fs/pstore none bind,optional 0 0 lxc.mount.entry = mqueue dev/mqueue mqueue rw,relatime,create=dir,optional 0 0

lxc.arch = linux64 lxc.mount.entry = /dev/net/tun dev/net/tun none bind,create=file lxc.rootfs.path = dir:/var/lib/lxc/xxxx/rootfs lxc.uts.name = xxxx

    1. Network configuration

lxc.net.0.type = veth lxc.net.0.hwaddr = xx:xx:xx:xx:xx:xx lxc.net.0.link = vmbr1 lxc.net.0.flags = up lxc.net.0.ipv4.address = XXX.XXX.XXX.2/32 lxc.net.0.ipv4.gateway = XXX.XXX.XXX.1

    1. vpn specific

lxc.apparmor.profile = unconfined lxc.cgroup.devices.allow = c 10:200 rwm

VPN IN LXC Container

Script

wget https://raw.githubusercontent.com/Angristan/openvpn-install/master/openvpn-install.sh -O debian10-vpn.sh

Linux Networkmanager Problem

Ändere Script

       if $CUSTOMIZE_ENC == "n" ;then
               # Use default, sane and fast parameters
               ...
               #TLS_SIG="1" # tls-crypt
               TLS_SIG="2" # tls-auth