Explain that encrypting passwords requires nm-applet (or equivalent?) to be running
When using Gnome Keyring to encrypt passwords, several interfaces to NetworkManager (at least nmcli and nm-connection-editor) will only have access to the passwords if nm-applet is running (as apparently it is the entity communicating with the keyring, through libsecret). This can be surprising when trying to use NetworkManager outside of Gnome (e.g. in Sway, or without a graphical user interface), see https://bbs.archlinux.org/viewtopic.php?id=246698 for more details.
Correct/Updated dnsmasq with NetworkManager
So I just set this up to enable ad blocking on my laptop regardless of which network I connect to. So far it seems to be working. This config presented on the site dns=none and so forth does not work as desired. create me:
resolv-file=/run/NetworkManager/no-stub-resolv.conf strict-order interface=lo cache-size=1000 conf-file=/etc/NetworkManager/dnsmasq-shared.d/bad_domains.txt #https://github.com/notracking/hosts-blocklists (https://raw.githubusercontent.com/notracking/hosts-blocklists/master/domains.txt) addn-hosts=/etc/NetworkManager/dnsmasq-shared.d/bad_hostnames.txt #https://github.com/notracking/hosts-blocklists (https://raw.githubusercontent.com/notracking/hosts-blocklists/master/hostnames.txt) domain-needed bogus-priv
# Configuration file for NetworkManager. # See "man 5 NetworkManager.conf" for details. [main] dns=dnsmasq
I'm created by NetworkManager, just FYI of what I contain:
# Generated by NetworkManager nameserver DHCP_PROVIDED_DNS_1 nameserver DHCP_PROVIDED_DNS_2 nameserver DHCP_PROVIDED_DNS_3
- That looks overcomplicated. This should work:
- You don't need to include
/run/NetworkManager/no-stub-resolv.conf, NetworkManager will send the DNS server addresses to dnsmasq over dbus.
- -- nl6720 (talk) 11:08, 1 November 2019 (UTC)
- Explanation for parameters:
I'll try to make this update correct. Didn't know, or expect, that username wouldn't be added and i'm kind of surprised this isn't designed to be indepent messages. Updated what I had before to match your better formatting.
From what I just tested resolv-file=/run/NetworkManager/no-stub-resolv.conf is required, commented it out->restarted NM->ping google->fail; dbus didn't seem to do it.
I also included interface lo to prevent external usage of my laptop being used for DNS.
I used NetworkManager.conf as it already existed, no need to create more that the minimum number of new configuration files.
domain-needed and bogus-priv are recommended for safety.
conf-file and addn-hosts are for ad domain blocking, should have mentioned; those can be excluded but perhaps should be mentioned.
Set this up to work around need for pihole at work or any network i'm connected to. But the documentation I found to be lacking.
- If the DNS servers are not send over dbus, then something is broken on your end, check
journalctl -u NetworkManager.service. It should contain
dnsmasq[#]: setting upstream servers from DBusand
dnsmasq[#]: using nameserver address#port(via interface).
- I tested with:
cache-size=1500 conf-file=/etc/NetworkManager/dnsmasq-shared.d/bad_domains.txt addn-hosts=/etc/NetworkManager/dnsmasq-shared.d/bad_hostnames.txt domain-needed bogus-priv
Currently, Network configuration and Wireless network configuration are listed in the related articles. Some time ago, information wired-connection specifics moved to Network configuration/Ethernet and wireless-connection specifics moved to Network configuration/Wireless.
Warn about that nm-applet installs libappindicator-gtk3 which breaks several applications?
Nm-applet installs libappindicator-gtk3 as a dependency. Some applications like blueman-tray as well as all electron-based applications use libappindicator if pressent in system. This breaks functionality in the tray area for all this applications (left mouse click stop to work and other clik/menu related issues).
This is clearly not an issue with nm-applet (maybe even not with libappindicator since nm-applet's tra icon seems to work properly) but nm-applet is one of the few applications that installs libappindicator as their dependency.
Edit: just figured out that if the nm-applet is started with "--indicator", if also has the same tray issues as described above.