Dieses Wiki ist ein Archiv bis 2023. Das aktuelle Wiki findet sich unter https://wiki.hamburg.ccc.de/
Difference between revisions of "ChaosVPN:FreeBSDHowto"
m |
(Adapted, and removed steps that should not be needed anymore.) |
||
| Line 6: | Line 6: | ||
There is only one port you need to install: '''tinc'''. Any dependencies ought to be automatically installed when this port is installed. You can find the port in the following directory: <code>/usr/ports/security/tinc</code>. | There is only one port you need to install: '''tinc'''. Any dependencies ought to be automatically installed when this port is installed. You can find the port in the following directory: <code>/usr/ports/security/tinc</code>. | ||
| − | |||
| − | |||
= Download the ChaosVPN source = | = Download the ChaosVPN source = | ||
| Line 15: | Line 13: | ||
git clone git://github.com/ryd/chaosvpn.git | git clone git://github.com/ryd/chaosvpn.git | ||
cd chaosvpn | cd chaosvpn | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
== Build ChaosVPN == | == Build ChaosVPN == | ||
| Line 99: | Line 20: | ||
$ gmake | $ gmake | ||
$ su - | $ su - | ||
| − | # gmake | + | # gmake bsdinstall |
= Additional information = | = Additional information = | ||
| − | Configuring ChaosVPN on FreeBSD is very similar to configuring it on Linux, but here are some FreeBSD-specific options to set in the file <code>/etc/tinc/chaosvpn.conf</code> | + | Configuring ChaosVPN on FreeBSD is very similar to configuring it on Linux, but here are some FreeBSD-specific options to set in the file <code>/usr/local/etc/tinc/chaosvpn.conf</code>: |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | + | The "gmake bsdinstall" installs a FreeBSD specific default config that should cover most of the specialities. | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
== Post-shutdown commands == | == Post-shutdown commands == | ||
| Line 138: | Line 38: | ||
== Security concerns == | == Security concerns == | ||
| − | It’s best to create a new, non-root user specifically for running ChaosVPN. This user will need to be listed in the '''sudoers''' file, and will need to be a member of the '''wheel''' group, so you can run the <code>sudo</code> and <code>su</code> commands, respectively. In the file <code>/etc/tinc/chaosvpn.conf</code>, change the option '''$tincd_user''' to that new user. | + | It’s best to create a new, non-root user specifically for running ChaosVPN. This user will need to be listed in the '''sudoers''' file, and will need to be a member of the '''wheel''' group, so you can run the <code>sudo</code> and <code>su</code> commands, respectively. In the file <code>/usr/local/etc/tinc/chaosvpn.conf</code>, change the option '''$tincd_user''' to that new user. |
Revision as of 22:56, 17 July 2012
The following is a quick tutorial on setting up ChaosVPN on a FreeBSD machine.
These instructions ought to work on any BSD machine, including Mac OS X, but this article is specifically for FreeBSD.
Contents
Install tinc
There is only one port you need to install: tinc. Any dependencies ought to be automatically installed when this port is installed. You can find the port in the following directory: /usr/ports/security/tinc.
Download the ChaosVPN source
Fetch the latest version of ChaosVPN by running the following command:
git clone git://github.com/ryd/chaosvpn.git cd chaosvpn
Build ChaosVPN
Compiling and installing ChaosVPN is a fairly straightforward process:
$ gmake $ su - # gmake bsdinstall
Additional information
Configuring ChaosVPN on FreeBSD is very similar to configuring it on Linux, but here are some FreeBSD-specific options to set in the file /usr/local/etc/tinc/chaosvpn.conf:
The "gmake bsdinstall" installs a FreeBSD specific default config that should cover most of the specialities.
Post-shutdown commands
ChaosVPN may not automatically remove the tunnel interface once it shuts down. If you notice that a tunX interface with no IP address remains after killing the ChaosVPN process, run the following command:
/sbin/ifconfig tunX destroy
(Replace “tunX” with the actual tunnel name.)
Security concerns
It’s best to create a new, non-root user specifically for running ChaosVPN. This user will need to be listed in the sudoers file, and will need to be a member of the wheel group, so you can run the sudo and su commands, respectively. In the file /usr/local/etc/tinc/chaosvpn.conf, change the option $tincd_user to that new user.
