编辑配置文件:
basj
sudo nano /etc/netplan/01-network-manager-all.yaml
修改内容(注意缩进,YAML 对空格敏感):
yml
# Let NetworkManager manage all devices on this system
network:
version: 2
# renderer: NetworkManager
ethernets:
ens33:
dhcp4: false
addresses:
- 192.168.1.11/24
routes:
- to: default
via: 192.168.1.2
nameservers:
addresses: [8.8.8.8, 8.8.4.4]
应用配置:
bash
sudo netplan apply
如果配置有误,apply 会报错,你可以先测试:
bash
sudo netplan try
该命令会应用配置并等待确认,如果网络连接中断,超时后会自动回滚,避免你被锁在 SSH 外。
如果报
bash
** (process:5206): WARNING **: 00:04:45.678: Permissions for /etc/netplan/01-network-manager-all.yaml are too open. Netplan configuration should NOT be accessible by others.
** (generate:5208): WARNING **: 00:04:45.685: Permissions for /etc/netplan/01-network-manager-all.yaml are too open. Netplan configuration should NOT be accessible by others.
** (process:5206): WARNING **: 00:04:46.072: Permissions for /etc/netplan/01-network-manager-all.yaml are too open. Netplan configuration should NOT be accessible by others.
** (process:5206): WARNING **: 00:04:46.159: Permissions for /etc/netplan/01-network-manager-all.yaml are too open. Netplan configuration should NOT be accessible by others.
Do you want to keep these settings?
Press ENTER before the timeout to accept the new configuration
Changes will revert in 85 seconds
Reverting.
** (process:5206): WARNING **: 00:05:23.045: Permissions for /etc/netplan/01-network-manager-all.yaml are too open. Netplan configuration should NOT be accessible by others.
** (process:5206): WARNING **: 00:05:23.045: Permissions for /tmp/tmplfzk4vli/etc/netplan/01-network-manager-all.yaml are too open. Netplan configuration should NOT be accessible by others.
** (process:5206): WARNING **: 00:05:23.139: Permissions for /etc/netplan/01-network-manager-all.yaml are too open. Netplan configuration should NOT be accessible by others.
执行以下命令,将配置文件权限改为 600(仅 root 可读写)或 644(root 可读写,其他人只读),并确保所有者为 root:
bash
sudo chmod 600 /etc/netplan/01-network-manager-all.yaml
sudo chown root:root /etc/netplan/01-network-manager-all.yaml
如果希望保留组可读(比如允许特定组查看配置),也可以使用 640,但 600 是最严格的。
重新应用配置
修复权限后,再次尝试应用配置:
bash
sudo netplan apply
或者如果你想先测试配置(try 会自动回滚以防断网):
bash
sudo netplan try