Ensure iptables-services is installed when persisting firewall config

iptables-services might not be installed and is required if we're
expecting to be able to start a service called "iptables".

Installing that package is what provides the 'iptables' systemd unit
file.

Change-Id: Ic4ccbc3a0fb531d3d3b7924d22ed0b993a689622
This commit is contained in:
David Moreau Simard 2018-06-29 16:46:00 -04:00
parent 0c7d1aa3af
commit c5a5b6b3f7

View File

@ -10,6 +10,13 @@
content: "{{ ip6tables_rules.stdout }}"
dest: "/etc/sysconfig/ip6tables"
# This provides the systemd unit file for iptables which might not be installed
- name: Ensure iptables-services is installed
become: yes
package:
name: iptables-services
state: present
- name: Ensure iptables is started
become: yes
service: