From: Ian Kelling Date: Sun, 11 Oct 2020 12:56:19 +0000 (-0400) Subject: fix docs, minor refactor for readability X-Git-Url: https://iankelling.org/git/?a=commitdiff_plain;h=af650bf98a593ee357045b43f612b407fedcb28d;p=newns fix docs, minor refactor for readability --- diff --git a/newns b/newns index 05e1068..26874a1 100755 --- a/newns +++ b/newns @@ -38,7 +38,7 @@ Nat a network namespace. systemd friendly Also creates a mount namespace with a cloned /run/resolvconf. --c, --create Create a named network namespace. When running from +-c, --create Create or destroy a named network namespace. When running from the same network namespace as pid 1, this is set automatically. A systemd created private network is in a network namespace different than pid 1. @@ -60,9 +60,9 @@ From within a systemd network namespace, we nat it to the outside. This would be called from ExecStartPre, and or subsequent units called with JoinsNamespaceOf= and PrivateNetwork=true. -We also create a named mount namespace under /root/mount_namespaces, so we -can alter some system config for this namespace. systemd -command lines would be prefixed with: +If resolvconf is installed, we create a named mount namespace under +/root/mount_namespaces, so we can alter some system config for this +namespace. systemd command lines would be prefixed with: /usr/bin/nsenter --mount=/root/mount_namespaces/NS_NAME @@ -161,14 +161,15 @@ fi ipd() { ip -n default "$@"; } + + +# otherwise we are already in the network namespace and it's unnamed. if $create; then - # run ip in the network namespace - ipnn() { ip -n $nn "$@"; } -else - # we are already in the network namespace and it's unnamed. - # run ip in the network namespace - ipnn() { ip "$@"; } + ipnnargs="-n $nn" fi +# run ip in the network namespace +ipnn() { ip $ipnnargs "$@"; } + # default network namespace exec dexec() { ip netns exec default "$@"; } # mount namespace exec @@ -285,7 +286,7 @@ start() { ipnn route add default via $network.1 ###### begin setup resolvconf - if [[ -e /run/resolvconf ]]; then # resolvconf probably not installed + if [[ -e /run/resolvconf ]]; then # resolvconf probably installed resolv_copy=/root/resolvconf-$nn # this condition should never happen, just coding defensively