Support direct socks proxy without ssh

README.md

@@ -13,12 +13,12 @@ Create network namespace where all¹ network requests go via ssh connection.
 1. Create a simple ssh config at `/etc/nnss/<namespace_name>/config`. This will
    be included with [other settings][0].
 2. Copy your ssh private key to `/etc/nnss/<namespace_name>/privatekey`
-3. [Edit][1] your service file to include below properties
+3. [Edit][1] your application's service file to include below properties
 
 ```systemd
 [Unit]
-Requires=nnss-tunsocks@<namespace_name>.service
-After=nnss-tunsocks@<namespace_name>.service
+Requires=nnssA@<namespace_name>.service
+After=nnssA@<namespace_name>.service
 [Service]
 NetworkNamespacePath=/run/netns/<namespace_name>ns
 ```
@@ -43,8 +43,8 @@ Port 8822 # If the ssh server is not on default port 22
 ❯ sudo systemd-run \
     --property=NetworkNamespacePath=/run/netns/vps1ns \
     --property=User=$USER \
-    --property=Requires=nnss-tunsocks@vps1.service \
-    --property=After=nnss-tunsocks@vps1.service  \
+    --property=Requires=nnssA@vps1.service \
+    --property=After=nnssA@vps1.service  \
     --shell
 [sudo] password for balki:
 Running as unit: run-p233279-i233579.service

nnssA@.service

@@ -9,7 +9,7 @@ StopWhenUnneeded=yes
 Type=notify
 NotifyAccess=all
 
-RuntimeDirectory=nnss-tunsocks%i
+RuntimeDirectory=nnssA%i
 
 ExecStart=/usr/lib/nnss/tunsocks.sh "%i" setup
 ExecStop=/usr/lib/nnss/tunsocks.sh "%i" cleanup

nnssB@.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Create network namespace and tun device to %I
+StopWhenUnneeded=yes
+
+[Service]
+
+Type=notify
+NotifyAccess=all
+
+RuntimeDirectory=nnssB%i
+
+# Add SOCKS_PROXY environment variable to below file. E.g.
+# SOCKS_PROXY=socks5://127.0.0.1:9050
+EnvironmentFile=/etc/nnss/env_%i
+
+ExecStart=/usr/lib/nnss/tunsocks.sh "%i" use_env setup
+ExecStop=/usr/lib/nnss/tunsocks.sh "%i" use_env cleanup

tunsocks.sh

@@ -7,13 +7,19 @@ pidfile=${RUNTIME_DIRECTORY:-/tmp}/tunsocks.pid
 nsname="$1"
 device="tun${nsname}"
 ns="${nsname}ns"
-socketpath="/run/nnss-${nsname}/sock"
+
+if [ "$2" = use_env ];then
+		proxy="$SOCKS_PROXY"
+		shift
+else
+		proxy="socks5:///run/nnss-${nsname}/sock"
+fi
 
 setup()
 {
 		ip tuntap add mode tun dev "$device"
 
-		/usr/bin/tun2socks -device "$device" -proxy "socks5://$socketpath" &
+		/usr/bin/tun2socks -device "$device" -proxy "$proxy" &
 		echo "$!" > "$pidfile"
 		sleep 5