Mikaela/mikaela.github.io
1
0
Fork 0
mirror of https://github.com/mikaela/mikaela.github.io/ synced 2025-07-18 11:27:24 +02:00
Code Issues Projects Releases Wiki Activity

n/essentialsoftware.md: note systemd socket.BindIPv6Only behaviour and firewalld configuration

Browse Source
This commit is contained in:
Aminda Suomalainen 2025-07-17 10:09:04 +03:00
parent 716d5e4954
commit 4ba8b17f1b
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
n/essentialsoftware.md
View File

@ -52,6 +52,7 @@ _{{ page.excerpt }}_
- [`/etc/xdg/autostart`](#etcxdgautostart)
- [`aminda-*.{service,socket}`](#aminda-servicesocket)
- [systemd sockets](#systemd-sockets)
- [firewalld for systemd sockets](#firewalld-for-systemd-sockets)
- [Remember!](#remember)
- [Accessing UEFI setup without key smashing](#accessing-uefi-setup-without-key-smashing)
- [Recovering selinux policy issues](#recovering-selinux-policy-issues)
@ -565,6 +566,25 @@ sudo systemctl --global enable foot-server.socket
sudo systemctl enable --now ssh.socket sshd.socket avahi-daemon.socket systemd-oomd.socket oidentd.socket
```
Remember that systemd sockets are silly and listen only to `::` by default and
since system administrators not-so-uncommonly set that to only mean IPv6 in
order to avoid dotted-decimals, it may be desirable to have a
`/etc/systemd/system/socket.d/dualstack-bind.conf` with
```ini
[Socket]
BindIPv6Only=both
```
#### firewalld for systemd sockets
```bash
sudo firewall-cmd --add-service=ssh --permanent && sudo firewall-cmd --add-service=ssh --permanent --zone=home
sudo firewall-cmd --add-service=ident --permanent && sudo firewall-cmd --add-service=ident --permanent --zone=home
sudo firewall-cmd --add-service=mdns --permanent && sudo firewall-cmd --add-service=mdns --permanent --zone=home
sudo firewall-cmd --reload
```
## Remember!
Not quite configuration, but I am not going to start inventing a new place for