config_local_arch/home/xyz/.config/myconf, branch ibDevice dependent config files for Arch Linux, managed by https://git.flylightning.xyz/fsh/tree/sh/cfg (git bare repo method)https://git.flylightning.xyz/config_local_arch/atom?h=ib2026-01-30T03:24:52Zremove tinyxxd due to conflict with ex-vi-compat2026-01-30T03:24:52ZXiao Panxyz@flylightning.xyz2026-01-30T03:24:52Zurn:sha1:7843dd02486525189946c601e0ce6a658e04d870paru-bin has issues with libalpm, temp swtich to paru2025-12-23T14:07:20ZXiao Panxyz@flylightning.xyz2025-12-23T14:07:20Zurn:sha1:461a03db8817b19873a778d3c43ae619cdfd8b24maybe upstream change xdg-user-dirs-update.service name to xdg-user-dirs.service2025-11-11T01:42:25ZXiao Panxyz@flylightning.xyz2025-11-11T01:38:25Zurn:sha1:e51265c00d1651ca0274a595262632eda9f1adb3use bsdtar instead of atool2-git2025-09-02T05:38:03ZXiao Panxyz@flylightning.xyz2025-09-02T05:38:03Zurn:sha1:24f9539fc939359e29a27a0651628e0c5baefb52remove swgp because I now wg swgp mimic thru ba then forward to ib2025-08-29T08:48:28ZXiao Panxyz@flylightning.xyz2025-08-29T08:48:28Zurn:sha1:754fdb165528f335648413d66c4bd834511f96f9ibb netns also run sshd, so when I vpn to ibb I can ssh to it2025-08-29T06:30:36ZXiao Panxyz@flylightning.xyz2025-08-29T06:30:36Zurn:sha1:4fb621933387c21f6f09676850e6f0ce0dd7cd3fdisable swgp because insp only swgp to ba now, but keep swgp config because in the future I may need it2025-07-15T04:21:18ZXiao Panxyz@flylightning.xyz2025-07-15T04:21:18Zurn:sha1:30abd028be59204ae40f45bd2bae50a457c8af07update2024-12-29T10:49:05ZXiao Panxyz@flylightning.xyz2024-12-29T10:49:05Zurn:sha1:0482e8fa95634bc035feba7e61a27cd4079a6c87Better ns0 network namespace configs2024-12-29T10:17:35ZXiao Panxyz@flylightning.xyz2024-12-29T10:12:50Zurn:sha1:a03e816d9d49c7f23be39f3cda19e02b37237832
Enable nft. Use different nft config for ns0. Host open emails port. ns0
open wireguard and qbt ports. ns0 configure wireguard. host not
configure wiregurad, so also no need ip forwarding sysctl kernel
parameters. ns0 use /etc/netns/ns0/nftables.conf that will bind mount to
ns0.
Host and ns0 both run dnsmasq for dns cache. ns0 dnsmasq I disable dbus
because it will conficts with host dnsmasq dbus. Dnsmasq use dbus for
config cahnge?
I disable systemd-resolved and switch to dnsmasq because
systemd-resolved use dbus for dns query? which is maybe easy for dns
leak, e.g., when systemd-resolved is only running on host, ns0 with
different /etc/resolv.conf still get dns from host open public ip when
run resolvectl query, although drill does not leak.
sye add enabled systemd units
update2024-12-25T11:51:11ZXiao Panxyz@flylightning.xyz2024-12-25T11:51:11Zurn:sha1:d686e5da426c57b63ec16909a3b50f807a17e321