Git-Mirrors/privsec.dev
1
0
Fork 0
mirror of https://github.com/PrivSec-dev/privsec.dev.git synced 2025-01-13 08:09:32 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add dnat-to-ns-boot.service for IVPN (#305)

Browse Source
This commit is contained in:
Tommy 2024-12-23 03:53:40 -07:00 committed by GitHub
parent 6e98b40914
commit d032b11dbd
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
content/posts/qubes/Using IVPN on Qubes OS.md
View File

@ -59,6 +59,22 @@ Unit=dnat-to-ns.service
WantedBy=multi-user.target WantedBy=multi-user.target
``` ```
- `/etc/systemd/system/dnat-to-ns-boot.service`
```
[Unit]
Description=Run /usr/lib/qubes/qubes-setup-dnat-to-ns
StartLimitIntervalSec=0
[Service]
Type=oneshot
ExecStart=sleep 10
ExecStart=/usr/lib/qubes/qubes-setup-dnat-to-ns
[Install]
WantedBy=multi-user.target
```
Create `/etc/systemd/system/systemd-resolved.conf.d/override.conf` to disable rate limiting on systemd-resolved restarting: Create `/etc/systemd/system/systemd-resolved.conf.d/override.conf` to disable rate limiting on systemd-resolved restarting:
``` ```
@ -66,10 +82,11 @@ Create `/etc/systemd/system/systemd-resolved.conf.d/override.conf` to disable ra
StartLimitIntervalSec=0 StartLimitIntervalSec=0
``` ```
Next, enable the systemd path: Next, enable the systemd path and service to run at boot:
```bash ```bash
sudo systemctl enable dnat-to-ns.path sudo systemctl enable dnat-to-ns.path
sudo systemctl enable dnat-to-ns-boot.service
``` ```
Finally, shut down the TemplateVM: Finally, shut down the TemplateVM: