mirror of
https://github.com/tommytran732/QubesOS-Scripts.git
synced 2024-10-01 00:55:37 -04:00
Use systemd path for dnat-to-ns
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
c828eaea34
commit
3f4df9dc25
9
etc/systemd/system/dnat-to-ns.path
Normal file
9
etc/systemd/system/dnat-to-ns.path
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Run /usr/lib/qubes/qubes-setup-dnat-to-ns when /etc/resolv.conf changes
|
||||||
|
|
||||||
|
[Path]
|
||||||
|
PathChanged=/etc/resolv.conf
|
||||||
|
Unit=dns-to-ns.service
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
6
etc/systemd/system/dnat-to-ns.service
Normal file
6
etc/systemd/system/dnat-to-ns.service
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Run /usr/lib/qubes/qubes-setup-dnat-to-ns
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=oneshot
|
||||||
|
ExecStart=/usr/lib/qubes/qubes-setup-dnat-to-ns
|
@ -14,12 +14,17 @@
|
|||||||
# License for the specific language governing permissions and limitations under
|
# License for the specific language governing permissions and limitations under
|
||||||
# the License.
|
# the License.
|
||||||
|
|
||||||
|
unpriv(){
|
||||||
|
sudo -u nobody "$@"
|
||||||
|
}
|
||||||
|
|
||||||
sudo dnf config-manager --add-repo https://repository.mullvad.net/rpm/stable/mullvad.repo
|
sudo dnf config-manager --add-repo https://repository.mullvad.net/rpm/stable/mullvad.repo
|
||||||
sudo dnf install -y mullvad-vpn
|
sudo dnf install -y mullvad-vpn
|
||||||
|
|
||||||
sudo mkdir -p /etc/qubes-bind-dirs.d
|
sudo mkdir -p /etc/qubes-bind-dirs.d
|
||||||
echo 'binds+=( '\'''/etc/mullvad-vpn''\'' )' | sudo tee /etc/qubes-bind-dirs.d/50_user.conf
|
echo 'binds+=( '\'''/etc/mullvad-vpn''\'' )' | sudo tee /etc/qubes-bind-dirs.d/50_user.conf
|
||||||
|
|
||||||
# Run these in the AppVM:
|
unpriv curl --proxy http://127.0.0.1:8082 https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns.service | sudo tee /etc/systemd/system/dnat-to-ns.service
|
||||||
# echo "sleep 10 # Waiting a bit so that Mullvad can establish connection
|
unpriv curl --proxy http://127.0.0.1:8082 https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/systemd/system/dnat-to-ns.path | sudo tee /etc/systemd/system/dnat-to-ns.path
|
||||||
# /usr/lib/qubes/qubes-setup-dnat-to-ns" | sudo tee -a /rw/config/rc.local
|
|
||||||
|
sudo systemctl enable dnat-to-ns.path
|
Loading…
Reference in New Issue
Block a user