[PVE-User] Interfaces startup and ip-up.d scripts...

Marco Gaiarin gaio at sv.lnf.it
Tue May 15 15:26:39 CEST 2018


I've to setup a little PVE server in a private but hostile network, and
i've only an IP available, so i was forced to assign the IP to the
phisical server, running latest proxmox, and i've setup a firewall
using my hand-made scripts.

I've put the script, as usual with debian, in /etc/network/if-up.d/ and
if-down.d/, but i've found that not at every boot they get started.

So, i've enabled networking debug (eg, set VERBOSE=yes in
/etc/default/networking) and found that at every boot scripts get
called with 'lo' interface, but only roughly 1 out of 10 times the
other bridge interfaces get started.

So, i got:

 May 15 10:18:25 clerk ifup[2958]: /bin/ip link set dev lo up
 May 15 10:18:25 clerk ifup[2958]: /bin/run-parts --exit-on-error --verbose /etc/network/if-up.d

but then:

 May 15 10:18:26 clerk ifup[2958]: /bin/run-parts --exit-on-error --verbose /etc/network/if-up.d

without interface name. With some more debug i discovered that is the
'--all' interface.
The strange things is that interfaces vmbr0 and vmbr1 are up, simply
the scripts get not called.

Some boot, instead:

 May 15 10:18:27 clerk ifup[4043]: /bin/ip link set dev vmbr0   up
 May 15 10:18:27 clerk ifup[4043]: /bin/run-parts --exit-on-error --verbose /etc/network/if-up.d

 May 15 10:18:28 clerk ifup[4043]: /bin/ip addr add 10.5.2.230/255.255.0.0 broadcast 10.5.255.255           dev vmbr1 label vmbr1
 May 15 10:18:28 clerk ifup[4043]: /bin/ip link set dev vmbr1   up
 May 15 10:18:28 clerk ifup[4043]:  /bin/ip route add default via 10.5.1.254  dev vmbr1 onlink
 May 15 10:18:28 clerk ifup[4043]: /bin/run-parts --exit-on-error --verbose /etc/network/if-up.d

and clearly firewalling script works.


For now, i've put 'systemctl restart networking' in /etc/rc.local.

My /etc/network/interfaces is rather simple:

 auto lo
 iface lo inet loopback
 
 iface enp2s0f0 inet manual
 
 iface enp2s0f1 inet manual
 	ethernet-autoneg on
 	link-speed 100
 	link-duplex full
 	hardware-dma-ring-tx 18
 	offload-tso off
 	offload-gso off
 	offload-gro off
 
 auto vmbr0
 iface vmbr0 inet static
 	address  10.99.25.254
	netmask  255.255.252.0
 	bridge_ports enp2s0f0 
	bridge_stp off
	bridge_fd 0
	bridge_vlan_aware yes

 auto vmbr1
 iface vmbr1 inet static
	address  10.5.2.230
	netmask  255.255.0.0
	gateway  10.5.1.254
	bridge_ports enp2s0f1
	bridge_stp off
	bridge_fd 0


There's something i can do to fix this? Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)


More information about the pve-user mailing list