add script that prepares system for use of our wrapper script

1 files changed, 22 insertions, 0 deletions

diff --git a/install.sh b/install.sh
new file mode 100755
index 0000000..3b3d4e2
--- /dev/null
+++ b/install.sh
@@ -0,0 +1,22 @@
+#!/bin/sh
+
+# run this script as root
+
+# more could go here (e.g. initialization of postgres database)
+
+mkdir -p /var/lib/0tdns/
+
+mkdir -p /etc/netns/0tdns/
+
+# in case we want some process in the namespace to be able
+# to resolve domain names via libc we put some random public
+# dns in namespace sepcific's resolv.conf;
+# note, that while libunbound we're using will probably have
+# dns addresses provided by us, it is still possible to pass
+# a domain name as forwarder address to unbound, in which case
+# it will try to resolve it first using libc
+echo nameserver 23.253.163.53 > /etc/netns/0tdns/resolv.conf
+
+# part of the program running inside network namespace
+# will run under this user
+sudo useradd --system 0tdns