project-config/nodepool/elements/nodepool-base/finalise.d
Colleen Murphy 587b85ba36 Use iptables for openSUSE
In openSUSE Tumbleweed, the SuSEfirewall2 package was removed in favor
of firewalld[1]. This commit updates the openSUSE nodeset to use plain
iptables rather than injecting iptables rules into the SuSEfirewall2
service. This will work on both Tumbleweed and Leap nodesets.

openSUSE provides no iptables-service package the way the RHEL family
does, so we can't fall back to that. Rather than try to convert iptables
rules to firewalld syntax, this change leverages init.d to ensure
iptables rules are loaded at boot. The 89-unbound script has been
coopted for this purpose since it already creates
/etc/init.d/boot.local. Switched from `dd` to `cat` which makes
conditionally composing the file more natural.

[1] https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html

Change-Id: Ia2b72e25078efa68019f1bf7c7a0b77e6ff702fd
2019-09-20 12:05:09 -07:00
..
89-boot-settings Use iptables for openSUSE 2019-09-20 12:05:09 -07:00
89-glean Create glean@.service.d/override.conf 2017-08-18 16:28:54 -04:00
89-journald-persistent Make journald log collection persistent 2017-01-03 09:39:06 -08:00
99-nodepool-dir diskimage-builder element cleanups for dib-lint 2015-10-08 11:33:03 +11:00