path: root/bootstrap.d/20-networking.sh

#
# Setup Networking
#

# Load utility functions
. ./functions.sh

# Set up IPv4 hosts
install_readonly files/network/hostname $R/etc/hostname
sed -i -e "s/^rpi2-jessie/${HOSTNAME}/" $R/etc/hostname

install_readonly files/network/hosts $R/etc/hosts
sed -i -e "s/rpi2-jessie/${HOSTNAME}/" $R/etc/hosts

if [ "$NET_ADDRESS" != "" ] ; then
  NET_IP=$(echo ${NET_ADDRESS} | cut -f 1 -d'/')
  sed -i "s/^127.0.1.1/${NET_IP}/" $R/etc/hosts
fi

# Set up IPv6 hosts
if [ "$ENABLE_IPV6" = true ] ; then
  cat <<EOM >>$R/etc/hosts

::1             localhost ip6-localhost ip6-loopback
ff02::1         ip6-allnodes
ff02::2         ip6-allrouters
EOM
fi

# Place hint about network configuration
install_readonly files/network/interfaces $R/etc/network/interfaces

if [ "$ENABLE_DHCP" = true ] ; then
# Enable systemd-networkd DHCP configuration for interface eth0
install_readonly files/network/eth.network $R/etc/systemd/network/eth.network

# Set DHCP configuration to IPv4 only
  if [ "$ENABLE_IPV6" = false ] ; then
    sed -i "s/^DHCP=yes/DHCP=v4/" $R/etc/systemd/network/eth.network
  fi
else # ENABLE_DHCP=false
  cat <<EOM >$R/etc/systemd/network/eth.network
[Match]
Name=eth0

[Network]
DHCP=no
Address=${NET_ADDRESS}
Gateway=${NET_GATEWAY}
DNS=${NET_DNS_1}
DNS=${NET_DNS_2}
Domains=${NET_DNS_DOMAINS}
NTP=${NET_NTP_1}
NTP=${NET_NTP_2}
EOM
fi

# Enable systemd-networkd service
chroot_exec systemctl enable systemd-networkd

# Enable network stack hardening
if [ "$ENABLE_HARDNET" = true ] ; then
  install_readonly files/sysctl.d/82-rpi-net-hardening.conf $R/etc/sysctl.d/82-rpi-net-hardening.conf

# Enable resolver warnings about spoofed addresses
  cat <<EOM >>$R/etc/host.conf
spoof warn
EOM
fi