セットアップ

group

$ 

ツール

$ sudo update-alternatives --config editor
$ sudo update-alternatives --config vi

nftables

$ sudo nft list ruleset
$ sudo nft -c -f /etc/nftables.conf
$ sudo systemctl restart nftables

• /etc/nftables.conf

#!/usr/sbin/nft -f

flush ruleset

table inet filter {
    chain input {
        type filter hook input priority filter;
        policy drop;

        iif lo accept

        ct state established,related accept

        ct state invalid drop

        # SSH
        tcp dport 22 accept

        # ICMP
        ip protocol icmp accept
        ip6 nexthdr icmpv6 accept

        # mDNS
        ip daddr 224.0.0.251 udp dport 5353 accept
        ip6 daddr ff02::fb udp dport 5353 accept
    }
    chain forward {
        type filter hook forward priority filter;
        policy drop;
    }
    chain output {
        type filter hook output priority filter;
        policy accept;
    }
}

NetworkManager

Ethernet

$ sudo nmcli connection add \
    type ethernet \
    ifname enp2s0 \
    con-name LAN

$ sudo nmcli connection modify LAN \
    ipv4.method auto \
    ipv6.method auto

$ sudo nmcli connection modify LAN \
    ipv4.method manual \
    ipv4.addresses 192.168.10.1/24 \
    ipv6.method disabled

Wi-Fi

$ nmcli dev status
$ nmcli dev show

$ sudo nmcli radio wifi on
$ nmcli dev wifi list

$ nmcli con show
$ sudo nmcli dev wifi con SSID password PASSWORD

$ sudo nmcli con modify SSID connection.autoconnect yes
$ sudo nmcli con modify SSID connection.autoconnect-priority 100

$ sudo nmcli con up SSID
$ sudo nmcli con down SSID

$ sudo nmcli con modify SSID \
    ipv4.method manual \
    ipv4.addresses 192.168.1.100/24 \
    ipv4.gateway 192.168.1.1 \
    ipv4.dns "192.168.1.1 8.8.8.8"

$ sudo nmcli con modify SSID \
    ipv4.method auto \
    ipv4.addresses "" \
    ipv4.gateway "" \
    ipv4.dns ""

systemd

systemd-networkd

metric

[DHCPv4]
RouteMetric=100

sudo networkctl reload