Mercurial > code > home > repos > infra
annotate net.py @ 189:ef443257ae9c
new host 'squib'
| author | drewp@bigasterisk.com |
|---|---|
| date | Mon, 12 Jun 2023 13:01:59 -0700 |
| parents | 087b84e68765 |
| children | 6583e3bb3000 |
| rev | line source |
|---|---|
| 188 | 1 |
|
7
b6fff51f8676
net.py setup. May not be safe on bang yet
drewp@bigasterisk.com
parents:
diff
changeset
|
2 from pyinfra import host |
|
103
8b8ef9d8f0fd
dead code and templates, reformat, maybe a little refactor
drewp@bigasterisk.com
parents:
100
diff
changeset
|
3 from pyinfra.operations import apt, files, server, ssh, systemd |
|
7
b6fff51f8676
net.py setup. May not be safe on bang yet
drewp@bigasterisk.com
parents:
diff
changeset
|
4 |
| 146 | 5 is_wifi = host.name in ['living', 'plus'] |
|
7
b6fff51f8676
net.py setup. May not be safe on bang yet
drewp@bigasterisk.com
parents:
diff
changeset
|
6 |
| 35 | 7 |
| 8 def cleanup(): | |
| 9 # past attempts | |
|
82
ff60853d7152
fix for bang dhclient'ing its resolv.conf sometimes
drewp@bigasterisk.com
parents:
72
diff
changeset
|
10 files.file(path='/etc/network/interfaces', present=False) |
|
7
b6fff51f8676
net.py setup. May not be safe on bang yet
drewp@bigasterisk.com
parents:
diff
changeset
|
11 |
|
22
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
12 for search_dir in [ |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
13 # search path per `man systemd.network`: |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
14 # /lib/systemd/network # These OS files are ok. |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
15 '/usr/local/lib/systemd/network/', # Probably no such dir. |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
16 '/run/systemd/network/', # Previous netplan attempts dumped in here. |
|
72
f0e59adf7b91
updates that aren't pkg or version changes
drewp@bigasterisk.com
parents:
69
diff
changeset
|
17 #'/etc/systemd/network/', # I'm going to work in here. |
|
22
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
18 ]: |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
19 files.sync( |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
20 src="files/empty_dir/", |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
21 dest=search_dir, |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
22 delete=True, |
|
301dad3cdb7b
WIP updating to use systemd networkd but it's not done or working, here
drewp@bigasterisk.com
parents:
17
diff
changeset
|
23 ) |
|
7
b6fff51f8676
net.py setup. May not be safe on bang yet
drewp@bigasterisk.com
parents:
diff
changeset
|
24 |
| 115 | 25 # On bang (now pipe): |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
26 # Now using a HW router for this firewall. No incoming connections. |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
27 # test connections from the outside: |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
28 # http://www.t1shopper.com/tools/port-scanner/ |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
29 # On prime: |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
30 # using digitalocean network config: |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
31 # https://cloud.digitalocean.com/networking/firewalls/f68899ae-1aac-4469-b379-59ce2bbc988f/droplets?i=7c5072 |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
32 apt.packages(packages=['ufw'], present=False) |
| 35 | 33 |
|
103
8b8ef9d8f0fd
dead code and templates, reformat, maybe a little refactor
drewp@bigasterisk.com
parents:
100
diff
changeset
|
34 |
| 107 | 35 # https://github.com/k3s-io/k3s/issues/1812 unclear, but more importantly, this has to be set |
| 36 # on pipe in a way that works with the commands in house_net.service (and net_routes) | |
| 37 server.shell(commands=[ | |
| 38 'update-alternatives --set iptables /usr/sbin/iptables-legacy', | |
| 39 'update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy', | |
| 40 ]) | |
| 41 # needs reboot if this changed | |
| 42 | |
| 189 | 43 if host.name in ['slash', 'dash', 'ditto', 'squib']: |
| 162 | 44 pass # don't break k3s networking! the else-part really breaks it |
| 115 | 45 else: |
| 46 server.sysctl(key='net.ipv6.conf.all.disable_ipv6', value=1, persist=True) | |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
47 |
| 146 | 48 # if is_wifi_pi: |
| 49 # files.put(dest="/etc/network/interfaces.d/wlan0", src="files/pi_wlan0_powersave") | |
| 50 # ssh.command(host.name, "iw wlan0 set power_save off") | |
| 188 | 51 |
| 115 | 52 files.directory('/etc/systemd/network') |
| 53 if host.name == 'prime': | |
| 54 cleanup() | |
| 35 | 55 |
| 115 | 56 files.template( |
| 57 src="templates/net/prime.network.j2", | |
| 58 dest="/etc/systemd/network/99-prime.network", | |
| 59 mac=host.host_data['mac'], | |
| 60 ) | |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
61 |
| 115 | 62 elif host.name == 'bang': |
| 63 cleanup() | |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
64 |
| 115 | 65 files.template(src="templates/net/bang_10.2.network.j2", dest="/etc/systemd/network/20-10.2.network") |
| 66 apt.packages(packages=['network-manager'], present=False) | |
| 67 | |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
68 |
| 115 | 69 elif host.name == 'plus': |
| 70 apt.packages(packages=['network-manager'], present=True) | |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
36
diff
changeset
|
71 |
| 115 | 72 elif host.name == 'pipe': |
| 73 cleanup() | |
| 69 | 74 |
| 115 | 75 files.template(src="templates/net/pipe_10.2.network.j2", dest="/etc/systemd/network/99-10.2.network") |
| 76 files.template(src="templates/net/pipe_isp.network.j2", dest="/etc/systemd/network/99-isp.network") | |
| 77 server.sysctl(key='net.ipv4.ip_forward', value=1, persist=True) | |
| 78 files.template(src="templates/net/house_net.service.j2", dest="/etc/systemd/system/house_net.service", out_interface='eth0') | |
| 79 systemd.service(service='house_net.service', daemon_reload=True, enabled=True, running=True, restarted=True) | |
| 69 | 80 |
| 115 | 81 else: |
| 82 cleanup() | |
|
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
22
diff
changeset
|
83 |
| 115 | 84 if is_wifi: |
| 85 files.put(src="secrets/wpa_supplicant.conf", dest="/etc/wpa_supplicant/wpa_supplicant.conf") | |
|
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
22
diff
changeset
|
86 |
| 115 | 87 files.template( |
| 88 src="templates/net/singlenic.network.j2", | |
| 89 dest="/etc/systemd/network/20-bigasterisk.network", | |
| 90 create_remote_dir=True, | |
| 91 ) | |
| 92 apt.packages(packages=['network-manager'], present=False) | |
| 188 | 93 |
| 115 | 94 systemd.service(service='systemd-networkd.service', enabled=True, running=True, restarted=True) |