zuul/zuul-jobs
Code Issues Proposed changes

Ensure iptables-services is installed when persisting firewall config

Browse Source 
iptables-services might not be installed and is required if we're
expecting to be able to start a service called "iptables".

Installing that package is what provides the 'iptables' systemd unit
file.

Change-Id: Ic4ccbc3a0fb531d3d3b7924d22ed0b993a689622
This commit is contained in:
David Moreau Simard 2018-06-29 16:46:00 -04:00
parent 0c7d1aa3af
commit c5a5b6b3f7
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
roles/persistent-firewall/tasks/persist/RedHat.yaml
View File

@ -10,6 +10,13 @@
content: "{{ ip6tables_rules.stdout }}" content: "{{ ip6tables_rules.stdout }}"
dest: "/etc/sysconfig/ip6tables" dest: "/etc/sysconfig/ip6tables"
# This provides the systemd unit file for iptables which might not be installed
- name: Ensure iptables-services is installed
become: yes
package:
name: iptables-services
state: present
- name: Ensure iptables is started - name: Ensure iptables is started
become: yes become: yes
service: service: