particle-os/debian-forge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Extend firewall stage to set the default zone

Browse source 
Extend the firewall stage to allow setting the default firewall zone.
Modify the stage unit test accordingly.

Signed-off-by: Tomas Hozza <thozza@redhat.com>
This commit is contained in:
Tomas Hozza 2022-02-28 16:39:34 +01:00 • committed by Achilleas Koutsou
parent 3eb91401cf
commit e71a91f5d0
4 changed files with 21 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
stages/org.osbuild.firewall
View file

@ -59,6 +59,10 @@ SCHEMA = """
"type": "string",
"description": "Service name (from /{lib,etc}/firewalld/services/*.xml)"
}
},
"default_zone": {
"description": "Set default zone for connections and interfaces where no zone has been selected.",
"type": "string"
}
}
"""
@ -72,7 +76,14 @@ def main(tree, options):
enabled_services = options.get("enabled_services", [])
disabled_services = options.get("disabled_services", [])
default_zone = options.get("default_zone", "")
# firewall-offline-cmd does not implement --root option so we must chroot it
if default_zone:
subprocess.run(["chroot", tree, "firewall-offline-cmd", f"--set-default-zone={default_zone}"], check=True)
# The options below are "lokkit" compatibility options and can not be used
# with other options.
subprocess.run(["chroot",
tree,
"firewall-offline-cmd"] +