nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-01-21 07:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

container: Assign virtual network interface to trusted firewall zone

Browse Source 
If firewalld is running, the virtual network interface created by
systemd-nspawn gets assigned to the home zone by default. Because
of this, DHCP server is not availabe for the container and most
of the incoming ports are closed.

This commit assigns the network interface created by systemd-nspawn to
the trusted network zone if firewalld is running, so that all network
connections are accepted.

Signed-off-by: Veiko Aasa veiko17@disroot.org
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
This commit is contained in:
Veiko Aasa 2020-10-05 13:53:49 +03:00 committed by Sunil Mohan Adapa
parent 6bb5d34132
commit 819520466a
No known key found for this signature in database
GPG Key ID: 43EA1CFF0AA7C5F2
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
container
View File

@ -480,6 +480,7 @@ def _setup_nm_connection(distribution):
'connection.type': '802-3-ethernet',
'connection.interface-name': _get_interface_name(distribution),
'connection.autoconnect': 'yes',
'connection.zone': 'trusted',
'ipv4.method': 'shared',
}
subprocess.run(['sudo', 'nmcli', 'connection', 'add'] +
@ -695,6 +696,11 @@ def _destroy(distribution):
except FileNotFoundError:
pass
connection_name = f'fbx-{distribution}-shared'
logger.info('Removing Network Manager connection %s', connection_name)
subprocess.run(['sudo', 'nmcli', 'connection', 'delete', connection_name],
stdout=subprocess.DEVNULL)
logger.info('Keeping downloaded image: %s',
_get_compressed_image_path(distribution))