Historique | Voir | Annoter | Télécharger (8,14 ko)
Reload rules atomically
Background: The unit file for nftables on CentOS 8 contains:
```ExecStart=/sbin/nft -f /etc/sysconfig/nftables.confExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'ExecStop=/sbin/nft flush ruleset```...
Switch $order$fragmenta/b to $order-$fragment-a/b
Add comments for all the nftable::rules entries
For each nftable::rule this adds an extra concat fragment toadd a comment containing the name and order number for the rule.
The motivation here is to make the mapping from resulting rules backto puppet code more obvious. When adding a new rule it should be more...
Use concat for table conf generation
This way other components of the module will be able to add extra stuffto the table definitions like sets.
Add basic ip6 nat chains
Styling to make tests green
Add spec tests for ip nat chain policies
Fix nat hooks
Rename to snake cases
