Debian buster lxc vpn: Unterschied zwischen den Versionen
V (Diskussion | Beiträge) Die Seite wurde neu angelegt: „== VPN LXC Container Config== ## lxc.mount.entry = /sys/kernel/debug sys/kernel/debug none bind,optional 0 0 lxc.mount.entry = /sys/kernel/security sys/kernel/…“ |
V (Diskussion | Beiträge) Keine Bearbeitungszusammenfassung |
||
| Zeile 27: | Zeile 27: | ||
==== Linux Networkmanager Problem ==== | ==== Linux Networkmanager Problem ==== | ||
Ändere Script | Ändere Script | ||
< | <code lang=bash> | ||
if [[ $CUSTOMIZE_ENC == "n" ]];then | if [[ $CUSTOMIZE_ENC == "n" ]];then | ||
# Use default, sane and fast parameters | # Use default, sane and fast parameters | ||
| Zeile 33: | Zeile 33: | ||
#TLS_SIG="1" # tls-crypt | #TLS_SIG="1" # tls-crypt | ||
TLS_SIG="2" # tls-auth | TLS_SIG="2" # tls-auth | ||
</ | </code> | ||
Version vom 25. März 2020, 16:20 Uhr
VPN LXC Container Config
lxc.mount.entry = /sys/kernel/debug sys/kernel/debug none bind,optional 0 0 lxc.mount.entry = /sys/kernel/security sys/kernel/security none bind,optional 0 0 lxc.mount.entry = /sys/fs/pstore sys/fs/pstore none bind,optional 0 0 lxc.mount.entry = mqueue dev/mqueue mqueue rw,relatime,create=dir,optional 0 0
lxc.arch = linux64 lxc.mount.entry = /dev/net/tun dev/net/tun none bind,create=file lxc.rootfs.path = dir:/var/lib/lxc/xxxx/rootfs lxc.uts.name = xxxx
- Network configuration
lxc.net.0.type = veth lxc.net.0.hwaddr = xx:xx:xx:xx:xx:xx lxc.net.0.link = vmbr1 lxc.net.0.flags = up lxc.net.0.ipv4.address = XXX.XXX.XXX.2/32 lxc.net.0.ipv4.gateway = XXX.XXX.XXX.1
- vpn specific
lxc.apparmor.profile = unconfined lxc.cgroup.devices.allow = c 10:200 rwm
VPN IN LXC Container
Script
wget https://raw.githubusercontent.com/Angristan/openvpn-install/master/openvpn-install.sh -O debian10-vpn.sh
Linux Networkmanager Problem
Ändere Script
if $CUSTOMIZE_ENC == "n" ;then
# Use default, sane and fast parameters
...
#TLS_SIG="1" # tls-crypt
TLS_SIG="2" # tls-auth