NetVM: 1:1 profile:node mapping — hashed iface names, netvm-enter + netvm-chrome launcher
This commit is contained in:
@@ -1,16 +1,14 @@
|
||||
#!/usr/bin/env bash
|
||||
# netvm-node-down.sh <node> — tear down a node's Warp egress. Run as root.
|
||||
set -euo pipefail
|
||||
NODE="${1:?usage: netvm-node-down.sh <node>}"
|
||||
NETNS="warp-${NODE}"
|
||||
VETH="veth-${NODE}"
|
||||
IDX=$(( $(echo -n "$NODE" | cksum | cut -d' ' -f1) % 60 + 10 ))
|
||||
SUB="10.201.${IDX}.0/30"
|
||||
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
||||
. "$SCRIPT_DIR/netvm-names.sh"
|
||||
netvm_names "${1:?usage: netvm-node-down.sh <node>}"
|
||||
nsexec() { ip netns exec "$NETNS" "$@"; }
|
||||
nsexec ip link del "wg-${NODE}" 2>/dev/null || true # inside netns first
|
||||
ip link del "$VETH" 2>/dev/null || true # also drops the netns-side peer
|
||||
ip link del "wg-${NODE}" 2>/dev/null || true # stray host-side copy
|
||||
nsexec ip link del "$WG" 2>/dev/null || true # inside netns first
|
||||
ip link del "$VETH" 2>/dev/null || true # also drops the netns-side peer
|
||||
ip link del "$WG" 2>/dev/null || true # stray host-side copy
|
||||
iptables -t nat -D POSTROUTING -s "$SUB" -j MASQUERADE 2>/dev/null || true
|
||||
ip netns del "$NETNS" 2>/dev/null || true
|
||||
ip link del "wg-${NODE}" 2>/dev/null || true # final sweep post-reap
|
||||
ip link del "$WG" 2>/dev/null || true # final sweep post-reap
|
||||
echo "node=$NODE down"
|
||||
|
||||
Reference in New Issue
Block a user