Remove nftables cron and disable service, when using iptables (for backout).
Signed-off-by: James Antill <james@and.org>
This commit is contained in:
parent
af90bbb6c5
commit
50d04f6e95
2 changed files with 17 additions and 0 deletions
|
@ -271,6 +271,16 @@
|
||||||
- baseiptables|bool
|
- baseiptables|bool
|
||||||
- nftables
|
- nftables
|
||||||
|
|
||||||
|
- name: Nftables service disabled
|
||||||
|
service: name=nftables state=started enabled=false
|
||||||
|
tags:
|
||||||
|
- iptables
|
||||||
|
- service
|
||||||
|
- base
|
||||||
|
when:
|
||||||
|
- baseiptables|bool
|
||||||
|
- not nftables
|
||||||
|
|
||||||
- name: Ip6tables
|
- name: Ip6tables
|
||||||
ansible.builtin.template: src={{ item }} dest=/etc/sysconfig/ip6tables mode=0600 backup=yes
|
ansible.builtin.template: src={{ item }} dest=/etc/sysconfig/ip6tables mode=0600 backup=yes
|
||||||
with_first_found:
|
with_first_found:
|
||||||
|
|
|
@ -415,6 +415,13 @@
|
||||||
- koji_builder
|
- koji_builder
|
||||||
- koji_builder/osbuildapi
|
- koji_builder/osbuildapi
|
||||||
|
|
||||||
|
- name: Remove cron job to run osbuild api ip update script every minute. (nftables)
|
||||||
|
ansible.builtin.file: path=/etc/cron.d/osbuildapi-update-nft.cron state=absent
|
||||||
|
when: not nftables
|
||||||
|
tags:
|
||||||
|
- koji_builder
|
||||||
|
- koji_builder/osbuildapi
|
||||||
|
|
||||||
- name: Create override dir for systemd-nspawn containers config
|
- name: Create override dir for systemd-nspawn containers config
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
state: directory
|
state: directory
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue