Révision c1bd001d
Added shell provider to execs. Hash generate now in array. Ran rubocop:autocorrect
| manifests/init.pp | ||
|---|---|---|
| 235 | 235 |
if $purge_unmanaged_rules {
|
| 236 | 236 |
# Reload the nftables ruleset from the on-disk ruleset if there are differences or it is absent. -s must be used to ignore counters |
| 237 | 237 |
exec { 'nftables_memory_state_check':
|
| 238 |
command => ['echo', 'reloading_nftables'], |
|
| 239 |
path => $facts['path'], |
|
| 240 |
unless => ["test -s ${inmem_rules_hash_file} -a \"$(nft -s list ruleset | sha1sum)\" = \"$(cat ${inmem_rules_hash_file})\""],
|
|
| 241 |
notify => Service['nftables'], |
|
| 238 |
command => ['echo', 'reloading_nftables'], |
|
| 239 |
path => $facts['path'], |
|
| 240 |
provider => shell, |
|
| 241 |
unless => ["test -s ${inmem_rules_hash_file} -a \"$(nft -s list ruleset | sha1sum)\" = \"$(cat ${inmem_rules_hash_file})\""],
|
|
| 242 |
notify => Service['nftables'], |
|
| 242 | 243 |
} |
| 243 | 244 |
|
| 244 | 245 |
# Generate nftables_hash upon any changes from the nftables service |
| 245 | 246 |
exec { 'nftables_generate_hash':
|
| 246 |
command => "nft -s list ruleset | sha1sum > ${inmem_rules_hash_file}",
|
|
| 247 |
command => ["nft -s list ruleset | sha1sum > ${inmem_rules_hash_file}"],
|
|
| 247 | 248 |
path => $facts['path'], |
| 249 |
provider => shell, |
|
| 248 | 250 |
subscribe => Service['nftables'], |
| 249 | 251 |
refreshonly => true, |
| 250 | 252 |
} |
Formats disponibles : Unified diff