2021-06-03 11:57:50 +00:00
|
|
|
if node.has_bundle('pacman'):
|
|
|
|
package = 'pkg_pacman:nftables'
|
|
|
|
else:
|
|
|
|
package = 'pkg_apt:nftables'
|
|
|
|
|
|
|
|
directories = {
|
|
|
|
# used by other bundles
|
|
|
|
'/etc/nftables-rules.d': {
|
|
|
|
'purge': True,
|
|
|
|
'triggers': {
|
|
|
|
'svc_systemd:nftables:reload',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
}
|
|
|
|
|
|
|
|
files = {
|
|
|
|
'/etc/nftables.conf': {
|
|
|
|
'content_type': 'mako',
|
|
|
|
'needs': {
|
|
|
|
'directory:/etc/nftables-rules.d',
|
|
|
|
},
|
|
|
|
'triggers': {
|
|
|
|
'svc_systemd:nftables:reload',
|
|
|
|
},
|
|
|
|
},
|
2021-06-04 05:27:49 +00:00
|
|
|
'/etc/systemd/system/nftables.service.d/bundlewrap.conf': {
|
|
|
|
'source': 'override.conf',
|
|
|
|
'triggers': {
|
|
|
|
'action:systemd-reload',
|
|
|
|
'svc_systemd:nftables:reload',
|
|
|
|
},
|
|
|
|
},
|
|
|
|
|
2021-06-03 11:57:50 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
svc_systemd = {
|
|
|
|
'nftables': {
|
|
|
|
'needs': {
|
|
|
|
'file:/etc/nftables.conf',
|
|
|
|
package,
|
|
|
|
},
|
|
|
|
},
|
|
|
|
}
|