Commit 2b725a5d by Czémán Arnold

fwdriver: disable os firewall

parent 3413a430
......@@ -3,6 +3,16 @@ include:
- fwdriver.virtualenv
- fwdriver.configuration
disable_os_firewall:
cmd.run:
{% if grains['os_family'] == 'RedHat' %}
- name: >
systemctl disable firewalld ;
systemctl stop firewalld
{% else %}
- name: ufw disable
{% endif %}
firewall:
pkg.installed:
- pkgs:
......
......@@ -105,17 +105,17 @@ apparmor:
{% if pillar["deployment_mode"] == "multinode" %}
open_libvirt_ports:
cmd.run:
{% if grains['os_family'] == 'RedHat' %}
{% if grains['os_family'] == 'RedHat' %}
- name: >
firewall-cmd --complete-reload ;
firewall-cmd --permanent --zone=public --add-port=49152-49215/tcp ;
firewall-cmd --permanent --zone=public --add-port=16509/tcp ;
firewall-cmd --reload
{% else %}
{% else %}
- name: >
ufw allow 49152:49215/tcp ;
ufw allow 16509/tcp
{% endif %}
{% endif %}
{% endif %}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or sign in to comment