Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-26 Thread Marc Haber
On Thu, Sep 26, 2019 at 09:16:53AM +, Susant Sahani wrote:
> On 26/09/19, 11:49 AM, "Marc Haber"  wrote:
> > 
> > Did you tried with KeepConfiguration=?
> 
> That is not yet in the Man Page on my system. Is it alreay there in
> systemd 242?
> 
> This is in 243.

I'll have to wait then. Thanks.

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-26 Thread Susant Sahani
Hi Mark,

On 26/09/19, 11:49 AM, "Marc Haber"  wrote:
> 
> Did you tried with KeepConfiguration=?

That is not yet in the Man Page on my system. Is it alreay there in
systemd 242?

This is in 243.


Susant
-- 

-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421


___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-26 Thread Mantas Mikulėnas
On Mon, Sep 16, 2019 at 2:14 PM Marc Haber 
wrote:

> Hi,
>
> when I run an OpenVPN interface, OpenVPN manages the interface itself:
> It handles creation, destruction and assignment of the IP address. The
> IP address can be controlled by the remote site, so the OpenVPN daemon
> is kind of the only thing that can configured the Interface.
>
> I would, however, like systemd-resolved to ask DNS servers that are
> reachable over the VPN for certain domains, such as ka51.zugschlus.de.
>
> [...]
>
> Can I have the advantages of systemd-resolved on an Interface that is
> not fully managed by systemd-networkd?
>

There are post-up scripts for OpenVPN which can load DNS configuration into
systemd-resolved:

https://github.com/jonathanio/update-systemd-resolved
https://packages.debian.org/sid/openvpn-systemd-resolved


-- 
Mantas Mikulėnas
___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-26 Thread Marc Haber
Hi Susant,

On Wed, Sep 25, 2019 at 05:56:23PM +, Susant Sahani wrote:
> On 22/09/19, 5:35 PM, "systemd-devel on behalf of Marc Haber" 
>  mh+systemd-de...@zugschlus.de> wrote:
> On Mon, Sep 16, 2019 at 12:54:23PM +0200, Marc Haber wrote:
> > when I run an OpenVPN interface, OpenVPN manages the interface itself:
> > It handles creation, destruction and assignment of the IP address. The
> > IP address can be controlled by the remote site, so the OpenVPN daemon
> > is kind of the only thing that can configured the Interface.
> > 
> > I would, however, like systemd-resolved to ask DNS servers that are
> > reachable over the VPN for certain domains, such as ka51.zugschlus.de.
> > 
> > Dumping a tun0.network containing:
> > [Match]
> > Name=tun0
> > 
> > [Network]
> > Domains=~ka51.zugschlus.de
> > DNS=2a01:238:4071:3281::35:100
> > DNS=2a01:238:4071:328e::35:100
> > DHCP=no
> > IPv6AcceptRA=no
> > 
> > into /e/s/n doesn't work since that clears up the IP addresses that
> > OpenVPN has correctly assigned.
> 
> No hints? Is this behavior - maybe - a bug?
> 
> Did you tried with KeepConfiguration=?

That is not yet in the Man Page on my system. Is it alreay there in
systemd 242?

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-25 Thread Susant Sahani


On 22/09/19, 5:35 PM, "systemd-devel on behalf of Marc Haber" 
 wrote:

Hi,

On Mon, Sep 16, 2019 at 12:54:23PM +0200, Marc Haber wrote:
> when I run an OpenVPN interface, OpenVPN manages the interface itself:
> It handles creation, destruction and assignment of the IP address. The
> IP address can be controlled by the remote site, so the OpenVPN daemon
> is kind of the only thing that can configured the Interface.
> 
> I would, however, like systemd-resolved to ask DNS servers that are
> reachable over the VPN for certain domains, such as ka51.zugschlus.de.
> 
> Dumping a tun0.network containing:
> [Match]
> Name=tun0
> 
> [Network]
> Domains=~ka51.zugschlus.de
> DNS=2a01:238:4071:3281::35:100
> DNS=2a01:238:4071:328e::35:100
> DHCP=no
> IPv6AcceptRA=no
> 
> into /e/s/n doesn't work since that clears up the IP addresses that
> OpenVPN has correctly assigned.

No hints? Is this behavior - maybe - a bug?

Did you tried with KeepConfiguration=?

-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org

https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.freedesktop.org%2Fmailman%2Flistinfo%2Fsystemd-develdata=02%7C01%7Cssahani%40vmware.com%7Ca1042d3fdd6644a7d53a08d73f5526f7%7Cb39138ca3cee4b4aa4d6cd83d9dd62f0%7C0%7C0%7C637047507269625407sdata=%2Fu2cyfmbygDu9kU1bAec%2BGi%2FIRocE9fFMazLDIw%2FvQk%3Dreserved=0

___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Re: [systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-22 Thread Marc Haber
Hi,

On Mon, Sep 16, 2019 at 12:54:23PM +0200, Marc Haber wrote:
> when I run an OpenVPN interface, OpenVPN manages the interface itself:
> It handles creation, destruction and assignment of the IP address. The
> IP address can be controlled by the remote site, so the OpenVPN daemon
> is kind of the only thing that can configured the Interface.
> 
> I would, however, like systemd-resolved to ask DNS servers that are
> reachable over the VPN for certain domains, such as ka51.zugschlus.de.
> 
> Dumping a tun0.network containing:
> [Match]
> Name=tun0
> 
> [Network]
> Domains=~ka51.zugschlus.de
> DNS=2a01:238:4071:3281::35:100
> DNS=2a01:238:4071:328e::35:100
> DHCP=no
> IPv6AcceptRA=no
> 
> into /e/s/n doesn't work since that clears up the IP addresses that
> OpenVPN has correctly assigned.

No hints? Is this behavior - maybe - a bug?

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

[systemd-devel] networkd - how to (partially) manage OpenVPN interfaces?

2019-09-16 Thread Marc Haber
Hi,

when I run an OpenVPN interface, OpenVPN manages the interface itself:
It handles creation, destruction and assignment of the IP address. The
IP address can be controlled by the remote site, so the OpenVPN daemon
is kind of the only thing that can configured the Interface.

I would, however, like systemd-resolved to ask DNS servers that are
reachable over the VPN for certain domains, such as ka51.zugschlus.de.

Dumping a tun0.network containing:
[Match]
Name=tun0

[Network]
Domains=~ka51.zugschlus.de
DNS=2a01:238:4071:3281::35:100
DNS=2a01:238:4071:328e::35:100
DHCP=no
IPv6AcceptRA=no

into /e/s/n doesn't work since that clears up the IP addresses that
OpenVPN has correctly assigned.

Can I have the advantages of systemd-resolved on an Interface that is
not fully managed by systemd-networkd?

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/systemd-devel