| 1 | <?xml version="1.0" encoding="ISO-8859-1"?>
 | 
|---|
| 2 | <!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
 | 
|---|
| 3 |   "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
 | 
|---|
| 4 |   <!ENTITY % general-entities SYSTEM "../../general.ent">
 | 
|---|
| 5 |   %general-entities;
 | 
|---|
| 6 | ]>
 | 
|---|
| 7 | 
 | 
|---|
| 8 | <sect1 id="ch-scripts-network">
 | 
|---|
| 9 |   <?dbhtml filename="network.html"?>
 | 
|---|
| 10 | 
 | 
|---|
| 11 |   <title>Configuring the network Script</title>
 | 
|---|
| 12 | 
 | 
|---|
| 13 |   <indexterm zone="ch-scripts-network">
 | 
|---|
| 14 |     <primary sortas="d-network">network</primary>
 | 
|---|
| 15 |   <secondary>configuring</secondary></indexterm>
 | 
|---|
| 16 | 
 | 
|---|
| 17 |   <para>This section only applies if a network card is to be
 | 
|---|
| 18 |   configured.</para>
 | 
|---|
| 19 | 
 | 
|---|
| 20 |   <para>If a network card will not be used, there is likely no need to
 | 
|---|
| 21 |   create any configuration files relating to network cards. If that is
 | 
|---|
| 22 |   the case, remove the <filename class="symlink">network</filename>
 | 
|---|
| 23 |   symlinks from all run-level directories (<filename
 | 
|---|
| 24 |   class="directory">/etc/rc.d/rc*.d</filename>).</para>
 | 
|---|
| 25 | 
 | 
|---|
| 26 |   <sect2>
 | 
|---|
| 27 |     <title>Creating stable names for network interfaces</title>
 | 
|---|
| 28 | 
 | 
|---|
| 29 |     <para>Instructions in this section are optional if you have only one
 | 
|---|
| 30 |     network card.</para>
 | 
|---|
| 31 | 
 | 
|---|
| 32 |     <para>With Udev and modular network drivers, the network interface numbering
 | 
|---|
| 33 |     is not persistent across reboots by default, because the drivers are loaded
 | 
|---|
| 34 |     in parallel and, thus, in random order. For example, on a computer having
 | 
|---|
| 35 |     two network cards made by Intel and Realtek, the network card manufactured
 | 
|---|
| 36 |     by Intel may become <filename class="devicefile">eth0</filename> and the
 | 
|---|
| 37 |     Realtek card becomes  <filename class="devicefile">eth1</filename>. In some
 | 
|---|
| 38 |     cases, after a reboot the cards get renumbered the other way around. To
 | 
|---|
| 39 |     avoid this, create Udev rules that assign stable names to network cards
 | 
|---|
| 40 |     based on their MAC addresses or bus positions.</para>
 | 
|---|
| 41 | 
 | 
|---|
| 42 |     <para>If you are going to use MAC addresses to identify your network
 | 
|---|
| 43 |     cards, find the addresses with the following command:</para>
 | 
|---|
| 44 | 
 | 
|---|
| 45 | <screen role="nodump"><userinput>grep -H . /sys/class/net/*/address</userinput></screen>
 | 
|---|
| 46 | 
 | 
|---|
| 47 |     <para>For each network card (but not for the loopback interface),
 | 
|---|
| 48 |     invent a descriptive name, such as <quote>realtek</quote>, and create
 | 
|---|
| 49 |     Udev rules similar to the following:</para>
 | 
|---|
| 50 | 
 | 
|---|
| 51 | <screen role="nodump"><userinput>cat > /etc/udev/rules.d/26-network.rules << EOF
 | 
|---|
| 52 | <literal>ACTION=="add", SUBSYSTEM=="net", SYSFS{address}=="<replaceable>00:e0:4c:12:34:56</replaceable>", \
 | 
|---|
| 53 |     NAME="<replaceable>realtek</replaceable>"
 | 
|---|
| 54 | ACTION=="add", SUBSYSTEM=="net", SYSFS{address}=="<replaceable>00:a0:c9:78:9a:bc</replaceable>", \
 | 
|---|
| 55 |     NAME="<replaceable>intel</replaceable>"</literal>
 | 
|---|
| 56 | EOF</userinput></screen>
 | 
|---|
| 57 | 
 | 
|---|
| 58 | <!-- Yes, I know that VLANs are beyond BLFS. This is not the reason to get them
 | 
|---|
| 59 |      incorrect by default when every distro does this right. -->
 | 
|---|
| 60 | 
 | 
|---|
| 61 |     <note>
 | 
|---|
| 62 |       <para>Although the examples in this book work properly, be aware
 | 
|---|
| 63 |       that Udev does not recognize the backslash for line continuation.
 | 
|---|
| 64 |       If modifying Udev rules with an editor, be sure to leave each rule
 | 
|---|
| 65 |       on one physical line.</para>
 | 
|---|
| 66 |     </note>
 | 
|---|
| 67 | 
 | 
|---|
| 68 |     <para>If you are going to use the bus position as a key, create
 | 
|---|
| 69 |     Udev rules similar to the following:</para>
 | 
|---|
| 70 | 
 | 
|---|
| 71 | <screen role="nodump"><userinput>cat > /etc/udev/rules.d/26-network.rules << EOF
 | 
|---|
| 72 | <literal>ACTION=="add", SUBSYSTEM=="net", BUS=="<replaceable>pci</replaceable>", ID=="<replaceable>0000:00:0c.0</replaceable>", \
 | 
|---|
| 73 |     NAME="<replaceable>realtek</replaceable>"
 | 
|---|
| 74 | ACTION=="add", SUBSYSTEM=="net", BUS=="<replaceable>pci</replaceable>", ID=="<replaceable>0000:00:0d.0</replaceable>", \
 | 
|---|
| 75 |     NAME="<replaceable>intel</replaceable>"</literal>
 | 
|---|
| 76 | EOF</userinput></screen>
 | 
|---|
| 77 | 
 | 
|---|
| 78 |     <para>These rules will always rename the network cards to
 | 
|---|
| 79 |     <quote>realtek</quote> and <quote>intel</quote>, independently
 | 
|---|
| 80 |     of the original numbering provided by the kernel (i.e.: the original
 | 
|---|
| 81 |     <quote>eth0</quote> and <quote>eth1</quote> interfaces will no longer
 | 
|---|
| 82 |     exist, unless you put such <quote>descriptive</quote> names in the NAME
 | 
|---|
| 83 |     key). Use the descriptive names from the Udev rules instead
 | 
|---|
| 84 |     of <quote>eth0</quote> in the network interface configuration files
 | 
|---|
| 85 |     below.</para>
 | 
|---|
| 86 | 
 | 
|---|
| 87 |     <para>Note that the rules above don't work for every setup. For example,
 | 
|---|
| 88 |     MAC-based rules break when bridges or VLANs are used, because bridges and
 | 
|---|
| 89 |     VLANs have the same MAC address as the network card. One wants to rename
 | 
|---|
| 90 |     only the network card interface, not the bridge or VLAN interface, but the
 | 
|---|
| 91 |     example rule matches both. If you use such virtual interfaces, you have two
 | 
|---|
| 92 |     potential solutions. One is to add the DRIVER=="?*" key after
 | 
|---|
| 93 |     SUBSYSTEM=="net" in MAC-based rules which will stop matching the virtual
 | 
|---|
| 94 |     interfaces.  This is known to fail with some older Ethernet cards because
 | 
|---|
| 95 |     they don't have the DRIVER variable in the uevent and thus the rule does
 | 
|---|
| 96 |     not match with such cards. Another solution is to switch to rules that use
 | 
|---|
| 97 |     the bus position as a key.</para>
 | 
|---|
| 98 | 
 | 
|---|
| 99 |     <para>The second known non-working case is with wireless cards using the
 | 
|---|
| 100 |     MadWifi or HostAP drivers, because they create at least two interfaces with
 | 
|---|
| 101 |     the same MAC address and bus position. For example, the Madwifi driver
 | 
|---|
| 102 |     creates both an athX and a wifiX interface where X is a digit.  To
 | 
|---|
| 103 |     differentiate these interfaces, add an appropriate KERNEL parameter such as
 | 
|---|
| 104 |     KERNEL=="ath*" after SUBSYSTEM=="net".</para>
 | 
|---|
| 105 | 
 | 
|---|
| 106 |     <para>There may be other cases where the rules above don't work. Currently,
 | 
|---|
| 107 |     bugs on this topic are still being reported to Linux distributions, and no
 | 
|---|
| 108 |     solution that covers every case is available.</para>
 | 
|---|
| 109 | 
 | 
|---|
| 110 |   </sect2>
 | 
|---|
| 111 | 
 | 
|---|
| 112 |   <sect2>
 | 
|---|
| 113 |     <title>Creating Network Interface Configuration Files</title>
 | 
|---|
| 114 | 
 | 
|---|
| 115 |     <para>Which interfaces are brought up and down by the network script
 | 
|---|
| 116 |     depends on the files and directories in the <filename
 | 
|---|
| 117 |     class="directory">/etc/sysconfig/network-devices</filename> hierarchy.
 | 
|---|
| 118 |     This directory should contain a sub-directory for each interface to be
 | 
|---|
| 119 |     configured, such as <filename>ifconfig.xyz</filename>, where
 | 
|---|
| 120 |     <quote>xyz</quote> is a network interface name. Inside this directory
 | 
|---|
| 121 |     would be files defining the attributes to this interface, such as its IP
 | 
|---|
| 122 |     address(es), subnet masks, and so forth.</para>
 | 
|---|
| 123 | 
 | 
|---|
| 124 |     <para>The following command creates a sample <filename>ipv4</filename>
 | 
|---|
| 125 |     file for the <emphasis>eth0</emphasis> device:</para>
 | 
|---|
| 126 | 
 | 
|---|
| 127 | <screen><userinput>cd /etc/sysconfig/network-devices &&
 | 
|---|
| 128 | mkdir -v ifconfig.eth0 &&
 | 
|---|
| 129 | cat > ifconfig.eth0/ipv4 << "EOF"
 | 
|---|
| 130 | <literal>ONBOOT=yes
 | 
|---|
| 131 | SERVICE=ipv4-static
 | 
|---|
| 132 | IP=192.168.1.1
 | 
|---|
| 133 | GATEWAY=192.168.1.2
 | 
|---|
| 134 | PREFIX=24
 | 
|---|
| 135 | BROADCAST=192.168.1.255</literal>
 | 
|---|
| 136 | EOF</userinput></screen>
 | 
|---|
| 137 | 
 | 
|---|
| 138 |     <para>The values of these variables must be changed in every file to match
 | 
|---|
| 139 |     the proper setup. If the <envar>ONBOOT</envar> variable is set to
 | 
|---|
| 140 |     <quote>yes</quote> the network script will bring up the Network Interface
 | 
|---|
| 141 |     Card (NIC) during booting of the system. If set to anything but
 | 
|---|
| 142 |     <quote>yes</quote> the NIC will be ignored by the network script and not
 | 
|---|
| 143 |     be brought up.</para>
 | 
|---|
| 144 | 
 | 
|---|
| 145 |     <para>The <envar>SERVICE</envar> variable defines the method used for
 | 
|---|
| 146 |     obtaining the IP address. The CLFS-Bootscripts package has a modular IP
 | 
|---|
| 147 |     assignment format, and creating additional files in the <filename
 | 
|---|
| 148 |     class="directory">/etc/sysconfig/network-devices/services</filename>
 | 
|---|
| 149 |     directory allows other IP assignment methods. This is commonly used for
 | 
|---|
| 150 |     Dynamic Host Configuration Protocol (DHCP), which is addressed in the
 | 
|---|
| 151 |     BLFS book.</para>
 | 
|---|
| 152 | 
 | 
|---|
| 153 |     <para>The <envar>GATEWAY</envar> variable should contain the default
 | 
|---|
| 154 |     gateway IP address, if one is present. If not, then comment out the
 | 
|---|
| 155 |     variable entirely.</para>
 | 
|---|
| 156 | 
 | 
|---|
| 157 |     <para>The <envar>PREFIX</envar> variable needs to contain the number of
 | 
|---|
| 158 |     bits used in the subnet. Each octet in an IP address is 8 bits. If the
 | 
|---|
| 159 |     subnet's netmask is 255.255.255.0, then it is using the first three octets
 | 
|---|
| 160 |     (24 bits) to specify the network number. If the netmask is 255.255.255.240,
 | 
|---|
| 161 |     it would be using the first 28 bits.  Prefixes longer than 24 bits are
 | 
|---|
| 162 |     commonly used by DSL and cable-based Internet Service Providers (ISPs).
 | 
|---|
| 163 |     In this example (PREFIX=24), the netmask is 255.255.255.0. Adjust the
 | 
|---|
| 164 |     <envar>PREFIX</envar> variable according to your specific subnet.</para>
 | 
|---|
| 165 | 
 | 
|---|
| 166 |   </sect2>
 | 
|---|
| 167 | 
 | 
|---|
| 168 |   <sect2 id="resolv.conf">
 | 
|---|
| 169 |     <title>Creating the /etc/resolv.conf File</title>
 | 
|---|
| 170 | 
 | 
|---|
| 171 |     <indexterm zone="resolv.conf">
 | 
|---|
| 172 |       <primary sortas="e-/etc/resolv.conf">/etc/resolv.conf</primary>
 | 
|---|
| 173 |     </indexterm>
 | 
|---|
| 174 | 
 | 
|---|
| 175 |     <para>If the system is going to be connected to the Internet, it will
 | 
|---|
| 176 |     need some means of Domain Name Service (DNS) name resolution to
 | 
|---|
| 177 |     resolve Internet domain names to IP addresses, and vice versa. This is
 | 
|---|
| 178 |     best achieved by placing the IP address of the DNS server, available
 | 
|---|
| 179 |     from the ISP or network administrator, into
 | 
|---|
| 180 |     <filename>/etc/resolv.conf</filename>. Create the file by running the
 | 
|---|
| 181 |     following:</para>
 | 
|---|
| 182 | 
 | 
|---|
| 183 | <screen><userinput>cat > /etc/resolv.conf << "EOF"
 | 
|---|
| 184 | <literal># Begin /etc/resolv.conf
 | 
|---|
| 185 | 
 | 
|---|
| 186 | domain <replaceable>[Your Domain Name]</replaceable>
 | 
|---|
| 187 | nameserver <replaceable>[IP address of your primary nameserver]</replaceable>
 | 
|---|
| 188 | nameserver <replaceable>[IP address of your secondary nameserver]</replaceable>
 | 
|---|
| 189 | 
 | 
|---|
| 190 | # End /etc/resolv.conf</literal>
 | 
|---|
| 191 | EOF</userinput></screen>
 | 
|---|
| 192 | 
 | 
|---|
| 193 |     <para>Replace <replaceable>[IP address of the nameserver]</replaceable>
 | 
|---|
| 194 |     with the IP address of the DNS most appropriate for the setup. There will
 | 
|---|
| 195 |     often be more than one entry (requirements demand secondary servers for
 | 
|---|
| 196 |     fallback capability). If you only need or want one DNS server, remove the
 | 
|---|
| 197 |     second <emphasis>nameserver</emphasis> line from the file. The IP address
 | 
|---|
| 198 |     may also be a router on the local network.</para>
 | 
|---|
| 199 | 
 | 
|---|
| 200 |   </sect2>
 | 
|---|
| 201 | 
 | 
|---|
| 202 | </sect1>
 | 
|---|