[673b0d8] | 1 | <?xml version="1.0" encoding="ISO-8859-1"?>
|
---|
[b06ca36] | 2 | <!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
|
---|
| 3 | "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
---|
[673b0d8] | 4 | <!ENTITY % general-entities SYSTEM "../general.ent">
|
---|
| 5 | %general-entities;
|
---|
| 6 | ]>
|
---|
[d781ffb] | 7 |
|
---|
[3be4d97] | 8 | <sect1 id="ch-scripts-network">
|
---|
[d781ffb] | 9 | <?dbhtml filename="network.html"?>
|
---|
| 10 |
|
---|
| 11 | <title>Configuring the network Script</title>
|
---|
| 12 |
|
---|
| 13 | <indexterm zone="ch-scripts-network">
|
---|
| 14 | <primary sortas="d-network">network</primary>
|
---|
| 15 | <secondary>configuring</secondary></indexterm>
|
---|
| 16 |
|
---|
| 17 | <para>This section only applies if a network card is to be
|
---|
| 18 | configured.</para>
|
---|
| 19 |
|
---|
| 20 | <para>If a network card will not be used, there is likely no need to
|
---|
| 21 | create any configuration files relating to network cards. If that is
|
---|
| 22 | the case, remove the <filename class="symlink">network</filename>
|
---|
| 23 | symlinks from all run-level directories (<filename
|
---|
| 24 | class="directory">/etc/rc.d/rc*.d</filename>).</para>
|
---|
| 25 |
|
---|
[d2c332bc] | 26 | <sect2>
|
---|
| 27 | <title>Creating stable names for network interfaces</title>
|
---|
| 28 |
|
---|
| 29 | <para>With Udev and modular network drivers, the network interface numbering
|
---|
| 30 | is not persistent across reboots by default, because the drivers are loaded
|
---|
| 31 | in parallel and, thus, in random order. For example, on a computer having
|
---|
| 32 | two network cards made by Intel and Realtek, the network card manufactured
|
---|
| 33 | by Intel may become <filename class="devicefile">eth0</filename> and the
|
---|
| 34 | Realtek card becomes <filename class="devicefile">eth1</filename>. In some
|
---|
| 35 | cases, after a reboot the cards get renumbered the other way around. To
|
---|
[80640a49] | 36 | avoid this, Udev comes with a script and some rules to assign stable names
|
---|
| 37 | to network cards based on their MAC address.</para>
|
---|
| 38 |
|
---|
| 39 | <para>Pre-generate the rules to ensure the same names get assigned to the
|
---|
| 40 | same devices at every boot, including the first:</para>
|
---|
| 41 |
|
---|
[61e63d3] | 42 | <screen><userinput>for NIC in /sys/class/net/* ; do
|
---|
| 43 | INTERFACE=${NIC##*/} udevadm test --action=add --subsystem=net $NIC
|
---|
| 44 | done</userinput></screen>
|
---|
[80640a49] | 45 |
|
---|
| 46 | <para>Now, inspect the <filename>/etc/udev/rules.d/70-persistent-net.rules</filename>
|
---|
| 47 | file, to find out which name was assigned to which network device:</para>
|
---|
| 48 |
|
---|
| 49 | <screen><userinput>cat /etc/udev/rules.d/70-persistent-net.rules</userinput></screen>
|
---|
| 50 |
|
---|
[f801e9ea] | 51 | <para>The file begins with a comment block followed by two lines for each
|
---|
| 52 | NIC. The first line for each NIC is a commented description showing its
|
---|
[61e63d3] | 53 | hardware IDs (e.g. its PCI vendor and device IDs, if it's a PCI card),
|
---|
[f801e9ea] | 54 | along with its driver in parentheses, if the driver can be found. Neither
|
---|
[80640a49] | 55 | the hardware ID nor the driver is used to determine which name to give an
|
---|
[61e63d3] | 56 | interface; this information is only for reference. The second line is the
|
---|
| 57 | Udev rule that matches this NIC and actually assigns it a name.</para>
|
---|
[80640a49] | 58 |
|
---|
| 59 | <para>All Udev rules are made up of several keys, separated by commas and
|
---|
[61e63d3] | 60 | optional whitespace. This rule's keys and an explanation of each of them
|
---|
[80640a49] | 61 | are as follows:</para>
|
---|
| 62 |
|
---|
| 63 | <itemizedlist>
|
---|
| 64 | <listitem>
|
---|
| 65 | <para><literal>SUBSYSTEM=="net"</literal> - This tells Udev to ignore
|
---|
| 66 | devices that are not network cards.</para>
|
---|
| 67 | </listitem>
|
---|
[61e63d3] | 68 | <listitem>
|
---|
| 69 | <para><literal>ACTION=="add"</literal> - This tells Udev to ignore this
|
---|
| 70 | rule for a uevent that isn't an add ("remove" and "change" uevents also
|
---|
| 71 | happen, but don't need to rename network interfaces).</para>
|
---|
| 72 | </listitem>
|
---|
[80640a49] | 73 | <listitem>
|
---|
| 74 | <para><literal>DRIVERS=="?*"</literal> - This exists so that Udev will
|
---|
| 75 | ignore VLAN or bridge sub-interfaces (because these sub-interfaces do
|
---|
| 76 | not have drivers). These sub-interfaces are skipped because the name
|
---|
| 77 | that would be assigned would collide with their parent devices.</para>
|
---|
| 78 | </listitem>
|
---|
| 79 | <listitem>
|
---|
[61e63d3] | 80 | <para><literal>ATTR{address}</literal> - The value of this key is the
|
---|
| 81 | NIC's MAC address.</para>
|
---|
| 82 | </listitem>
|
---|
| 83 | <listitem>
|
---|
| 84 | <para><literal>ATTR{type}=="1"</literal> - This ensures the rule only
|
---|
| 85 | matches the primary interface in the case of certain wireless drivers,
|
---|
| 86 | which create multiple virtual interfaces. The secondary interfaces are
|
---|
| 87 | skipped for the same reason that VLAN and bridge sub-interfaces are
|
---|
| 88 | skipped: there would be a name collision otherwise.</para>
|
---|
[80640a49] | 89 | </listitem>
|
---|
| 90 | <listitem>
|
---|
[61e63d3] | 91 | <para><literal>KERNEL=="eth*"</literal> - This key was added to the
|
---|
| 92 | Udev rule generator to handle machines that have multiple network
|
---|
| 93 | interfaces, all with the same MAC address (the PS3 is one such
|
---|
| 94 | machine). If the independent interfaces have different basenames,
|
---|
| 95 | this key will allow Udev to tell them apart. This is generally not
|
---|
| 96 | necessary for most Linux From Scratch users, but does not hurt.</para>
|
---|
[80640a49] | 97 | </listitem>
|
---|
| 98 | <listitem>
|
---|
| 99 | <para><literal>NAME</literal> - The value of this key is the name that
|
---|
| 100 | Udev will assign to this interface.</para>
|
---|
| 101 | </listitem>
|
---|
| 102 | </itemizedlist>
|
---|
[a3b689f] | 103 |
|
---|
[80640a49] | 104 | <para>The value of <literal>NAME</literal> is the important part. Make sure
|
---|
| 105 | you know which name has been assigned to each of your network cards before
|
---|
| 106 | proceeding, and be sure to use that <literal>NAME</literal> value when
|
---|
| 107 | creating your configuration files below.</para>
|
---|
[c226182] | 108 |
|
---|
[d2c332bc] | 109 | </sect2>
|
---|
| 110 |
|
---|
[d781ffb] | 111 | <sect2>
|
---|
| 112 | <title>Creating Network Interface Configuration Files</title>
|
---|
| 113 |
|
---|
| 114 | <para>Which interfaces are brought up and down by the network script
|
---|
| 115 | depends on the files and directories in the <filename
|
---|
| 116 | class="directory">/etc/sysconfig/network-devices</filename> hierarchy.
|
---|
| 117 | This directory should contain a sub-directory for each interface to be
|
---|
| 118 | configured, such as <filename>ifconfig.xyz</filename>, where
|
---|
| 119 | <quote>xyz</quote> is a network interface name. Inside this directory
|
---|
| 120 | would be files defining the attributes to this interface, such as its IP
|
---|
| 121 | address(es), subnet masks, and so forth.</para>
|
---|
| 122 |
|
---|
| 123 | <para>The following command creates a sample <filename>ipv4</filename>
|
---|
| 124 | file for the <emphasis>eth0</emphasis> device:</para>
|
---|
[00a2bd12] | 125 |
|
---|
[ad83f72] | 126 | <screen><userinput>cd /etc/sysconfig/network-devices
|
---|
| 127 | mkdir -v ifconfig.eth0
|
---|
[a088964] | 128 | cat > ifconfig.eth0/ipv4 << "EOF"
|
---|
[d72e04a] | 129 | <literal>ONBOOT=yes
|
---|
[a088964] | 130 | SERVICE=ipv4-static
|
---|
[00a2bd12] | 131 | IP=192.168.1.1
|
---|
[ba85054d] | 132 | GATEWAY=192.168.1.2
|
---|
[c0155c7] | 133 | PREFIX=24
|
---|
[d72e04a] | 134 | BROADCAST=192.168.1.255</literal>
|
---|
[f67f5cf] | 135 | EOF</userinput></screen>
|
---|
[00a2bd12] | 136 |
|
---|
[d781ffb] | 137 | <para>The values of these variables must be changed in every file to match
|
---|
| 138 | the proper setup. If the <envar>ONBOOT</envar> variable is set to
|
---|
| 139 | <quote>yes</quote> the network script will bring up the Network Interface
|
---|
| 140 | Card (NIC) during booting of the system. If set to anything but
|
---|
| 141 | <quote>yes</quote> the NIC will be ignored by the network script and not
|
---|
| 142 | be brought up.</para>
|
---|
| 143 |
|
---|
| 144 | <para>The <envar>SERVICE</envar> variable defines the method used for
|
---|
| 145 | obtaining the IP address. The LFS-Bootscripts package has a modular IP
|
---|
| 146 | assignment format, and creating additional files in the <filename
|
---|
| 147 | class="directory">/etc/sysconfig/network-devices/services</filename>
|
---|
| 148 | directory allows other IP assignment methods. This is commonly used for
|
---|
| 149 | Dynamic Host Configuration Protocol (DHCP), which is addressed in the
|
---|
| 150 | BLFS book.</para>
|
---|
| 151 |
|
---|
| 152 | <para>The <envar>GATEWAY</envar> variable should contain the default
|
---|
| 153 | gateway IP address, if one is present. If not, then comment out the
|
---|
| 154 | variable entirely.</para>
|
---|
| 155 |
|
---|
| 156 | <para>The <envar>PREFIX</envar> variable needs to contain the number of
|
---|
| 157 | bits used in the subnet. Each octet in an IP address is 8 bits. If the
|
---|
| 158 | subnet's netmask is 255.255.255.0, then it is using the first three octets
|
---|
| 159 | (24 bits) to specify the network number. If the netmask is 255.255.255.240,
|
---|
| 160 | it would be using the first 28 bits. Prefixes longer than 24 bits are
|
---|
| 161 | commonly used by DSL and cable-based Internet Service Providers (ISPs).
|
---|
| 162 | In this example (PREFIX=24), the netmask is 255.255.255.0. Adjust the
|
---|
| 163 | <envar>PREFIX</envar> variable according to your specific subnet.</para>
|
---|
| 164 |
|
---|
| 165 | </sect2>
|
---|
| 166 |
|
---|
| 167 | <sect2 id="resolv.conf">
|
---|
| 168 | <title>Creating the /etc/resolv.conf File</title>
|
---|
| 169 |
|
---|
| 170 | <indexterm zone="resolv.conf">
|
---|
| 171 | <primary sortas="e-/etc/resolv.conf">/etc/resolv.conf</primary>
|
---|
| 172 | </indexterm>
|
---|
| 173 |
|
---|
| 174 | <para>If the system is going to be connected to the Internet, it will
|
---|
| 175 | need some means of Domain Name Service (DNS) name resolution to
|
---|
| 176 | resolve Internet domain names to IP addresses, and vice versa. This is
|
---|
| 177 | best achieved by placing the IP address of the DNS server, available
|
---|
| 178 | from the ISP or network administrator, into
|
---|
| 179 | <filename>/etc/resolv.conf</filename>. Create the file by running the
|
---|
| 180 | following:</para>
|
---|
[45340ae] | 181 |
|
---|
[f67f5cf] | 182 | <screen><userinput>cat > /etc/resolv.conf << "EOF"
|
---|
[d72e04a] | 183 | <literal># Begin /etc/resolv.conf
|
---|
[45340ae] | 184 |
|
---|
[4b51ca76] | 185 | domain <replaceable><Your Domain Name></replaceable>
|
---|
[0090db5] | 186 | nameserver <replaceable><IP address of your primary nameserver></replaceable>
|
---|
| 187 | nameserver <replaceable><IP address of your secondary nameserver></replaceable>
|
---|
[45340ae] | 188 |
|
---|
[d72e04a] | 189 | # End /etc/resolv.conf</literal>
|
---|
[f67f5cf] | 190 | EOF</userinput></screen>
|
---|
[45340ae] | 191 |
|
---|
[0090db5] | 192 | <para>Replace <replaceable><IP address of the nameserver></replaceable>
|
---|
[d781ffb] | 193 | with the IP address of the DNS most appropriate for the setup. There will
|
---|
| 194 | often be more than one entry (requirements demand secondary servers for
|
---|
| 195 | fallback capability). If you only need or want one DNS server, remove the
|
---|
| 196 | second <emphasis>nameserver</emphasis> line from the file. The IP address
|
---|
| 197 | may also be a router on the local network.</para>
|
---|
[45340ae] | 198 |
|
---|
[d781ffb] | 199 | </sect2>
|
---|
[81fd230] | 200 |
|
---|
[d781ffb] | 201 | </sect1>
|
---|