bundles/vmhost: prepare for arch linux
Some checks failed
kunsi/bundlewrap/pipeline/head There was a failure building this commit
Some checks failed
kunsi/bundlewrap/pipeline/head There was a failure building this commit
This commit is contained in:
parent
29f7aef27a
commit
757f1cb3cd
3 changed files with 30 additions and 3 deletions
|
@ -4,10 +4,10 @@ files = {
|
|||
},
|
||||
}
|
||||
|
||||
if node.has_bundle('nftables'):
|
||||
if node.has_bundle('nftables') and node.has_bundle('apt'):
|
||||
# libvirt on debian depends on either iptables or firewalld. Since
|
||||
# we're managing firewall rules using bundlewrap, we don't want either
|
||||
# of thos to interfere. So we install firewalld, then ensure it is
|
||||
# of those to interfere. So we install firewalld, then ensure it is
|
||||
# never running. After that, we ensure the bundlewrap managed rules
|
||||
# are active.
|
||||
svc_systemd['firewalld'] = {
|
||||
|
@ -24,3 +24,9 @@ if node.has_bundle('nftables'):
|
|||
'svc_systemd:nftables:reload',
|
||||
},
|
||||
}
|
||||
|
||||
if node.has_bundle('pacman'):
|
||||
svc_systemd['libvirtd'] = {}
|
||||
svc_systemd['virtlogd'] = {
|
||||
'enabled': None, # triggered via .socket
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue