tinc - Sep 2015 - tinc initialization (in both Red Hat and Debian families)

Hello again,

>From the point of view of a Red Hat *user*, the standardised way of doing
things would be to have
an /etc/sysconfig/tinc file containing something like:

NETWORKS="vpn1 vpn2 vpn3"   (one or more names separated by spaces)

At initialization, each name should launch a separate tinc instance (a
different VPN)

tinc service should not start until the user adds at least one VPN name
(say "vpn1")  in the /etc/sysconfig/tinc and the corresponding
/etc/tinc/vpn1 directory


As for the tinc.service file itself, a good start would be, IMHO:

https://leesjohn.wordpress.com/2013/03/13/how-to-automatically-start-tinc-on-fedora-17/

Best regards,
R?zvan
-------------- partea urm?toare --------------
Un ata?ament HTML a fost eliminat   
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20150925/60e665e2/attachment.html>

On Fri, Sep 25, 2015 at 09:31:09AM +0300, R?zvan Sandu wrote:
> From the point of view of a Red Hat *user*, the standardised way of doing
> things would be to have
> an /etc/sysconfig/tinc file containing something like:
> 
> NETWORKS="vpn1 vpn2 vpn3"   (one or more names separated by
spaces)
> 
> At initialization, each name should launch a separate tinc instance (a
> different VPN)
Unfortunately, this is not something that maps well to systemd. It would
require a systemd to run a script that parses the sysconfig file and
start all the tinc daemons. Systemd will then put all those daemons in
the same control group and won't recognize something is wrong if only
one of the daemons fail. So backwards compatibility with the old way Red
Hat did it is not really the way to go.
> As for the tinc.service file itself, a good start would be, IMHO:
> 
>
https://leesjohn.wordpress.com/2013/03/13/how-to-automatically-start-tinc-on-fedora-17/
That one has the drawback that it only starts one tinc daemon, and you
have to edit the service file to specify the netname.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20150925/5b58d63b/attachment.sig>