Add systemd daemon, add make install target

This commit is contained in:
Vadim Vetrov 2024-07-22 10:55:05 +03:00
parent 20b80b32dc
commit 06733025a8
No known key found for this signature in database
GPG Key ID: E8A308689D7A73A5
3 changed files with 38 additions and 4 deletions

View File

@ -8,12 +8,19 @@ APP:=$(BUILD_DIR)/youtubeUnblock
SRCS := youtubeUnblock.c
OBJS := $(SRCS:%.c=$(BUILD_DIR)/%.o)
# PREFIX is environment variable, if not set default to /usr/local
ifeq ($(PREFIX),)
PREFIX := /usr/local
else
PREFIX := $(DESTDIR)
endif
.PHONY: default all dev dev_attrs prepare_dirs
default: all
run_dev: dev
bash -c "sudo ./$(APP) 2"
bash -c "sudo ./$(APP) 537"
dev: dev_attrs all
@ -35,5 +42,19 @@ $(BUILD_DIR)/%.o: %.c
@echo 'CC $@'
@$(CC) -c $(CC_FLAGS) $^ -o $@
install: all
install -d $(PREFIX)/bin/
install -m 755 $(APP) $(PREFIX)/bin/
install -d $(PREFIX)/lib/systemd/system/
@cp youtubeUnblock.service $(BUILD_DIR)
@sed -i 's/$$(PREFIX)/$(subst /,\/,$(PREFIX))/g' $(BUILD_DIR)/youtubeUnblock.service
install -m 644 $(BUILD_DIR)/youtubeUnblock.service $(PREFIX)/lib/systemd/system/
uninstall:
rm $(PREFIX)/bin/youtubeUnblock
systemctl disable youtubeUnblock.service
rm $(PREFIX)/lib/systemd/system/youtubeUnblock.service
clean:
rm -rf $(BUILD_DIR)

View File

@ -14,13 +14,15 @@ So we aims to somehow hide the SNI from them. How?
You may read further in an [yt-dlp issue page](https://github.com/yt-dlp/yt-dlp/issues/10443) and in [ntc party forum](https://ntc.party/t/%D0%BE%D0%B1%D1%81%D1%83%D0%B6%D0%B4%D0%B5%D0%BD%D0%B8%D0%B5-%D0%B7%D0%B0%D0%BC%D0%B5%D0%B4%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5-youtube-%D0%B2-%D1%80%D0%BE%D1%81%D1%81%D0%B8%D0%B8/8074).
## Usage:
Compile with `make`. The package requires `libnetfilter_queue` library and the kernel built with the netfilter support.
Compile with `make`. Install with `make install`. The package requires `libnetfilter_queue` library and the kernel built with the netfilter support.
You should also configure iptables for this to start working:
```iptables -A OUTPUT -p tcp --dport 443 -j NFQUEUE --queue-num 2 --queue-bypass```
```iptables -A OUTPUT -p tcp --dport 443 -j NFQUEUE --queue-num 537 --queue-bypass```
Here iptables serves every tcp packet, destinating port 443 for this userspace packet analyzer (via netfilter kernel module) queue-num may be any number from 0 to 65565. --queue-bypass allows traffic to pass if the application is down.
Run an application with `./build/youtubeUnblock 2` where `2` stands for the queue-num (must be the same as in the iptables rule). The daemon service is unavailable now and in **TODO** state. Note that the root access is needed for both iptables and application.
Run an application with `youtubeUnblock 537` where `537` stands for the queue-num (must be the same as in the iptables rule).
Systemd daemon is also available. Do `systemctl enable --now youtubeUnblock.service` after installation.
Also DNS over HTTPS (DOH) is preferred for additional anonimity.

11
youtubeUnblock.service Normal file
View File

@ -0,0 +1,11 @@
[Unit]
Description=youtubeUnblock
[Service]
StandardError=journal
StandardOutput=journal
StandardInput=null
ExecStart=$(PREFIX)/bin/youtubeUnblock 537
[Install]
WantedBy=multi-user.target