kojibuilder / iptables: also allow buildvm-s390x 15 and 16 sshfs

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2019-07-16 15:58:57 +00:00
parent acec94c633
commit 56e229734b

View file

@ -74,7 +74,7 @@
# SSH
-A INPUT -p tcp -m tcp -s 10.5.0.0/16 --dport 22 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.5.0.0/16 --sport 22 -j ACCEPT
{% if inventory_hostname == "buildvm-s390x-01.s390.fedoraproject.org" %}
{% if inventory_hostname.startswith (('buildvm-s390x-01.s390', 'buildvm-s390x-15', 'buildvm-s390x-16')) %}
# Allow SSHFS binding to koji01
-A OUTPUT -p tcp -m tcp -d 10.5.125.61 --dport 22 -j ACCEPT
{% endif %}