Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Set default egress IP from ifconfig.me #454

Merged
merged 2 commits into from
Feb 12, 2022
Merged

Set default egress IP from ifconfig.me #454

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
6bbc6dd
Set default egress IP from ifconfig.me
jamilbk Feb 12, 2022
4057f12
Try consume attributes
jamilbk Feb 12, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
22 changes: 15 additions & 7 deletions omnibus/cookbooks/firezone/recipes/network.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,18 +15,26 @@
include_recipe 'line::default'

require 'mixlib/shellout'
require 'net/http'

# Use ip route for finding default egress interface
awk_path = "#{node['firezone']['install_directory']}/embedded/bin/awk"
egress_int_cmd = Mixlib::ShellOut.new("ip route show default 0.0.0.0/0 | grep -oP '(?<=dev ).*' | cut -f1 -d' '")
egress_interface = egress_int_cmd.run_command.stdout.chomp
# Set default endpoint ip to default egress ip
egress_addr_cmd = "ip address show dev #{egress_interface} | grep 'inet ' | #{awk_path} '{print $2}'"
egress_ip = Mixlib::ShellOut.new(egress_addr_cmd)
egress_ip.run_command

node.default['firezone']['wireguard']['endpoint'] ||= egress_ip.stdout.chomp.gsub(%r{/.*}, '')
node.default['firezone']['egress_interface'] = egress_interface
unless node['firezone']['wireguard']['endpoint']
# Figure out a sane default endpoint IP address
egress_ip =
begin
Net::HTTP.get('ifconfig.me', '/')
rescue StandardError
nil
end
node.consume_attributes('firezone' => { 'wireguard' => { 'endpoint' => egress_ip } })
end

unless node['firezone']['egress_interface']
node.consume_attributes('firezone' => { 'egress_interface' => egress_interface })
end

replace_or_add 'IPv4 packet forwarding' do
path '/etc/sysctl.conf'
Expand Down