openstack
/
tripleo-puppet-elements
Code Issues Proposed changes

Add nftables to the OC images 

In order to properly switch the firewall to nftables, we of course need
its actual package to be installed. Currently, only iptables-nft wrapper
is present - this includes the `nft' binary, but not the service.

Note that we can live with both binaries - this is needed anyway, since
services such as neutron are still calling `iptables' directly.

Change-Id: Ie2443668fea175537b500da6f70e25ab82f59a46
This commit is contained in:
Cédric Jeanneret 2022-08-16 08:04:09 +02:00
parent f03ba6830f
commit 207b457c46
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
elements/overcloud-base/install.d/package-installs-overcloud-base
View File

@ -6,6 +6,7 @@ podman
libreswan
openstack_selinux
net_snmp
nftables
numactl
iptables_services
tmpwatch