xirixiz · August 13, 2024 07:31 · xirixiz · Jan 21, 2021 · titanbird · Feb 14, 2022
diff --git a/pihole-macvlan-synology-docker.txt b/pihole-macvlan-synology-docker.txt
 #!/bin/bash

 # NAS IP: 192.168.1.10 in this example
 # DHCP scope reservation for macvlan: 192.168.1.210/28 (Details below)
 ## Network:   192.168.1.210/28
 ## HostMin:   192.168.1.211
 ## HostMax:   192.168.1.224
 ## Hosts/Net: 14

 # Create a Synology macvlan0 bridge network attached to the physical eth0, and add the ip range scope (sudo)
 ip link add macvlan0 link eth0 type macvlan mode bridge
 # Specify part of the eth0 scope you'd like to reserve for macvlan0
 ip addr add 192.168.1.210/28 dev macvlan0
 # Bring up the macvlan0 adapter
 ip link set macvlan0 up

 # Check virtual adapter status with ifconfig
 ifconfig
 # Output should be something like this:
 macvlan0  Link encap:Ethernet  HWaddr 92:8D:43:0E:E2:D8
          inet addr:192.168.1.210  Bcast:0.0.0.0  Mask:255.255.255.240
          inet6 addr: fe80::908d:43ff:fe0e:e2d8/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:79 errors:0 dropped:0 overruns:0 frame:0
          TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1
          RX bytes:34863 (34.0 KiB)  TX bytes:16322 (15.9 KiB)

 # Create a macvlan Docker network using eth0
 docker network create --driver=macvlan --gateway=192.168.1.1 --subnet=192.168.1.0/24 --ip-range=192.168.1.210/28 -o parent=eth0 macvlan

 # It's also possible to create a scheduled task at startup as the root user, it's wise to append the following in front of the above commands
 while ! ip link show eth0 | grep -q 'state UP'; do
    sleep 1
 done

 # Perform a basic test with NGINX
 docker run --net=macvlan -dit --name nginx-test-01 --ip=192.168.1.211 nginx:alpine nginx-debug -g 'daemon off;'

 # Browse to http://192.168.1.211 in your local network, you should see the nginx welcome page! ...Don't forget to remove the container afterwards...
 docker rm nginx-test-01 --force

 # Now start PiHole on a macvlan enabled IP address f.e.
 # Also I've added a fake mac address so the container always uses the samen mac, handy to make a reservation in your DHCP scope or do whatever you like to do with it.
 DOCKERHOME=<some path>
 NAME=pihole-macvlan
 IMAGE=pihole/pihole
 docker run --detach \
           --name ${NAME} \
           --restart always \
           --volume /etc/localtime:/etc/localtime:ro \
           --volume ${DOCKERHOME}/data/${NAME}/config:/etc/pihole \
           --volume ${DOCKERHOME}/data/${NAME}/dnsmasq.d:/etc/dnsmasq.d \
           --cap-add NET_ADMIN \
           --dns=127.0.0.1 \
           --dns=1.1.1.1 \
           --env "DNS1=1.1.1.1" \
           --env "DNS2=1.0.0.1" \
           --env "ServerIP=192.168.1.212" \
           --env "DNSMASQ_LISTENING=all" \
           --env "WEBPASSWORD=<secret>" \
           --env "TZ=Europe/Amsterdam" \
           --network macvlan \
           --ip "192.168.1.212" \
           --mac-address "02:42:c0:a8:01:d7" \
           ${IMAGE}

 # Cleanup macvlan
 ip link set macvlan0 down
 ip link delete macvlan0
 docker network rm macvlan

 # Happy days!
	#!/bin/bash

	# NAS IP: 192.168.1.10 in this example
	# DHCP scope reservation for macvlan: 192.168.1.210/28 (Details below)
	## Network: 192.168.1.210/28
	## HostMin: 192.168.1.211
	## HostMax: 192.168.1.224
	## Hosts/Net: 14

	# Create a Synology macvlan0 bridge network attached to the physical eth0, and add the ip range scope (sudo)
	ip link add macvlan0 link eth0 type macvlan mode bridge
	# Specify part of the eth0 scope you'd like to reserve for macvlan0
	ip addr add 192.168.1.210/28 dev macvlan0
	# Bring up the macvlan0 adapter
	ip link set macvlan0 up

	# Check virtual adapter status with ifconfig
	ifconfig
	# Output should be something like this:
	macvlan0 Link encap:Ethernet HWaddr 92:8D:43:0E:E2:D8
	inet addr:192.168.1.210 Bcast:0.0.0.0 Mask:255.255.255.240
	inet6 addr: fe80::908d:43ff:fe0e:e2d8/64 Scope:Link
	UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
	RX packets:79 errors:0 dropped:0 overruns:0 frame:0
	TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
	collisions:0 txqueuelen:1
	RX bytes:34863 (34.0 KiB) TX bytes:16322 (15.9 KiB)

	# Create a macvlan Docker network using eth0
	docker network create --driver=macvlan --gateway=192.168.1.1 --subnet=192.168.1.0/24 --ip-range=192.168.1.210/28 -o parent=eth0 macvlan

	# It's also possible to create a scheduled task at startup as the root user, it's wise to append the following in front of the above commands
	while ! ip link show eth0 \| grep -q 'state UP'; do
	sleep 1
	done

	# Perform a basic test with NGINX
	docker run --net=macvlan -dit --name nginx-test-01 --ip=192.168.1.211 nginx:alpine nginx-debug -g 'daemon off;'

	# Browse to http://192.168.1.211 in your local network, you should see the nginx welcome page! ...Don't forget to remove the container afterwards...
	docker rm nginx-test-01 --force

	# Now start PiHole on a macvlan enabled IP address f.e.
	# Also I've added a fake mac address so the container always uses the samen mac, handy to make a reservation in your DHCP scope or do whatever you like to do with it.
	DOCKERHOME=<some path>
	NAME=pihole-macvlan
	IMAGE=pihole/pihole
	docker run --detach \
	--name ${NAME} \
	--restart always \
	--volume /etc/localtime:/etc/localtime:ro \
	--volume ${DOCKERHOME}/data/${NAME}/config:/etc/pihole \
	--volume ${DOCKERHOME}/data/${NAME}/dnsmasq.d:/etc/dnsmasq.d \
	--cap-add NET_ADMIN \
	--dns=127.0.0.1 \
	--dns=1.1.1.1 \
	--env "DNS1=1.1.1.1" \
	--env "DNS2=1.0.0.1" \
	--env "ServerIP=192.168.1.212" \
	--env "DNSMASQ_LISTENING=all" \
	--env "WEBPASSWORD=<secret>" \
	--env "TZ=Europe/Amsterdam" \
	--network macvlan \
	--ip "192.168.1.212" \
	--mac-address "02:42:c0:a8:01:d7" \
	${IMAGE}

	# Cleanup macvlan
	ip link set macvlan0 down
	ip link delete macvlan0
	docker network rm macvlan

	# Happy days!