[PVE-User] Interfaces startup and ip-up.d scripts...

[Josh Knight]

Are you using the script to assign an IP address manually, or are you using
it to set firewall rules? I'm trying to determine what you're trying to
do.  Having the IP defined in /etc/network/interfaces should be enough for
it to come up correctly without any custom scripts.  Is this not the case?

Josh Knight


On Tue, May 15, 2018 at 9:26 AM, Marco Gaiarin <gaio at sv.lnf.it> wrote:

>
> I've to setup a little PVE server in a private but hostile network, and
> i've only an IP available, so i was forced to assign the IP to the
> phisical server, running latest proxmox, and i've setup a firewall
> using my hand-made scripts.
>
> I've put the script, as usual with debian, in /etc/network/if-up.d/ and
> if-down.d/, but i've found that not at every boot they get started.
>
> So, i've enabled networking debug (eg, set VERBOSE=yes in
> /etc/default/networking) and found that at every boot scripts get
> called with 'lo' interface, but only roughly 1 out of 10 times the
> other bridge interfaces get started.
>
> So, i got:
>
>  May 15 10:18:25 clerk ifup[2958]: /bin/ip link set dev lo up
>  May 15 10:18:25 clerk ifup[2958]: /bin/run-parts --exit-on-error
> --verbose /etc/network/if-up.d
>
> but then:
>
>  May 15 10:18:26 clerk ifup[2958]: /bin/run-parts --exit-on-error
> --verbose /etc/network/if-up.d
>
> without interface name. With some more debug i discovered that is the
> '--all' interface.
> The strange things is that interfaces vmbr0 and vmbr1 are up, simply
> the scripts get not called.
>
> Some boot, instead:
>
>  May 15 10:18:27 clerk ifup[4043]: /bin/ip link set dev vmbr0   up
>  May 15 10:18:27 clerk ifup[4043]: /bin/run-parts --exit-on-error
> --verbose /etc/network/if-up.d
>
>  May 15 10:18:28 clerk ifup[4043]: /bin/ip addr add 10.5.2.230/255.255.0.0
> broadcast 10.5.255.255           dev vmbr1 label vmbr1
>  May 15 10:18:28 clerk ifup[4043]: /bin/ip link set dev vmbr1   up
>  May 15 10:18:28 clerk ifup[4043]:  /bin/ip route add default via
> 10.5.1.254  dev vmbr1 onlink
>  May 15 10:18:28 clerk ifup[4043]: /bin/run-parts --exit-on-error
> --verbose /etc/network/if-up.d
>
> and clearly firewalling script works.
>
>
> For now, i've put 'systemctl restart networking' in /etc/rc.local.
>
> My /etc/network/interfaces is rather simple:
>
>  auto lo
>  iface lo inet loopback
>
>  iface enp2s0f0 inet manual
>
>  iface enp2s0f1 inet manual
>         ethernet-autoneg on
>         link-speed 100
>         link-duplex full
>         hardware-dma-ring-tx 18
>         offload-tso off
>         offload-gso off
>         offload-gro off
>
>  auto vmbr0
>  iface vmbr0 inet static
>         address  10.99.25.254
>         netmask  255.255.252.0
>         bridge_ports enp2s0f0
>         bridge_stp off
>         bridge_fd 0
>         bridge_vlan_aware yes
>
>  auto vmbr1
>  iface vmbr1 inet static
>         address  10.5.2.230
>         netmask  255.255.0.0
>         gateway  10.5.1.254
>         bridge_ports enp2s0f1
>         bridge_stp off
>         bridge_fd 0
>
>
> There's something i can do to fix this? Thanks.
>
> --
> dott. Marco Gaiarin                                     GNUPG Key ID:
> 240A3D66
>   Associazione ``La Nostra Famiglia''
> http://www.lanostrafamiglia.it/
>   Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento
> (PN)
>   marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f
> +39-0434-842797
>
>                 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
>       http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
>         (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
> _______________________________________________
> pve-user mailing list
> pve-user at pve.proxmox.com
> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>