/manifests/init.pp - Diff - puppet nftables - Koumbit's Redmine

Révision c00bcf2d

Ajouté par canihavethisone il y a 10 mois

Changed path to use fact. Partial conversion of execs to arrays

       if $purge_unmanaged_rules {
         # Reload the nftables ruleset from the on-disk ruleset if there are differences or it is absent. -s must be used to ignore counters
         exec { 'nftables_memory_state_check':
           command => 'echo "reloading nftables"',
           path    => ['/usr/sbin', '/sbin', '/usr/bin', '/bin'],
           unless  => "/usr/bin/test -s ${inmem_rules_hash_file} -a \"$(nft -s list ruleset | sha1sum)\" = \"$(cat ${inmem_rules_hash_file})\"",
           command => ['echo', 'reloading_nftables'],
           path    => $facts['path'],
           unless  => ["test -s ${inmem_rules_hash_file} -a \"$(nft -s list ruleset | sha1sum)\" = \"$(cat ${inmem_rules_hash_file})\""],
           notify  => Service['nftables'],
+        }
         # Generate nftables_hash upon any changes from the nftables service
         exec { 'nftables_generate_hash':
           command     => "nft -s list ruleset | sha1sum > ${inmem_rules_hash_file}",
           path        => ['/usr/sbin', '/sbin', '/usr/bin', '/bin'],
           path        => $facts['path'],
           subscribe   => Service['nftables'],
           refreshonly => true,
+        }

Formats disponibles : Unified diff