From af650bf98a593ee357045b43f612b407fedcb28d Mon Sep 17 00:00:00 2001 From: Ian Kelling Date: Sun, 11 Oct 2020 08:56:19 -0400 Subject: [PATCH] fix docs, minor refactor for readability --- newns | 23 ++++++++++++----------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/newns b/newns index 05e1068..26874a1 100755 --- a/newns +++ b/newns @@ -38,7 +38,7 @@ Nat a network namespace. systemd friendly Also creates a mount namespace with a cloned /run/resolvconf. --c, --create Create a named network namespace. When running from +-c, --create Create or destroy a named network namespace. When running from the same network namespace as pid 1, this is set automatically. A systemd created private network is in a network namespace different than pid 1. @@ -60,9 +60,9 @@ From within a systemd network namespace, we nat it to the outside. This would be called from ExecStartPre, and or subsequent units called with JoinsNamespaceOf= and PrivateNetwork=true. -We also create a named mount namespace under /root/mount_namespaces, so we -can alter some system config for this namespace. systemd -command lines would be prefixed with: +If resolvconf is installed, we create a named mount namespace under +/root/mount_namespaces, so we can alter some system config for this +namespace. systemd command lines would be prefixed with: /usr/bin/nsenter --mount=/root/mount_namespaces/NS_NAME @@ -161,14 +161,15 @@ fi ipd() { ip -n default "$@"; } + + +# otherwise we are already in the network namespace and it's unnamed. if $create; then - # run ip in the network namespace - ipnn() { ip -n $nn "$@"; } -else - # we are already in the network namespace and it's unnamed. - # run ip in the network namespace - ipnn() { ip "$@"; } + ipnnargs="-n $nn" fi +# run ip in the network namespace +ipnn() { ip $ipnnargs "$@"; } + # default network namespace exec dexec() { ip netns exec default "$@"; } # mount namespace exec @@ -285,7 +286,7 @@ start() { ipnn route add default via $network.1 ###### begin setup resolvconf - if [[ -e /run/resolvconf ]]; then # resolvconf probably not installed + if [[ -e /run/resolvconf ]]; then # resolvconf probably installed resolv_copy=/root/resolvconf-$nn # this condition should never happen, just coding defensively -- 2.30.2