iptables: Move SSH rules to post-scripts. 57/16757/1
authorAlexandru Avadanii <Alexandru.Avadanii@enea.com>
Tue, 12 Jul 2016 14:17:06 +0000 (16:17 +0200)
committerAlexandru Avadanii <Alexandru.Avadanii@enea.com>
Tue, 12 Jul 2016 14:17:08 +0000 (16:17 +0200)
commit34adae647f17b22dc686417acd7539f44615837a
tree7e71a65e8d39e7f5b524d892248e6c448a369105
parentd3e30dfb0671fede8ba867e6559f447e30a2eff3
iptables: Move SSH rules to post-scripts.

Previous change [1] introduced the addition of an iptables rule
that was supposed to allow SSH access on all ifaces (not only
admin iface) when additional ifaces are configured.

However, Fuel installer is flushing the rules after transplant
adds our SSH config, overwriting it.

Move iptables SSH config to post-install section, as standalone
script. In order to keep the same behavior, test ifcfg-eth0
(admin interface is expected to be called eth0 by convention)
for "DEFROUTE=no" and only whitelist SSH on all ifaces if it matches.

[1] https://gerrit.opnfv.org/gerrit/#/c/16571/

Change-Id: I086b75461daa62671cad10494fe34acfd77757ae
Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
patches/opnfv-fuel/0005-transplant-Generate-extra-interfaces-config-file.patch
patches/opnfv-fuel/0010-post-scripts-Allow-SSH-on-non-admin-ifaces.patch [new file with mode: 0644]