ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

testing: Use legacy iptables on Debian buster 

The iptables-nft wrapper that uses the nftables framework can't handle
the CLUSTERIP target (plus we'd require nftables in the kernel).
This commit is contained in:
Tobias Brunner 2020-08-24 16:14:07 +02:00
parent 5c4ebbdde8
commit 94eebc9c2c
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
testing/scripts/build-baseimage
View File

@ -135,5 +135,14 @@ do
execute_chroot "systemctl disable $service"
done
case "$BASEIMGSUITE" in
buster)
log_action "Switching from iptables-nft to iptables-legacy"
execute_chroot "update-alternatives --set iptables /usr/sbin/iptables-legacy" 0
execute_chroot "update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy" 0
log_status 0
;;
esac
log_action "Disabling root password"
execute_chroot "passwd -d root"