-
Notifications
You must be signed in to change notification settings - Fork 84
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support none parameter on NETAVARK_FW #597
Support none parameter on NETAVARK_FW #597
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the PR, to pass CI you have to run cargo fmt
to fix formatting issues.
Could you also add a new test file for the none driver in test/ directory?
Something like this should be enough to check
netavark/test/100-bridge-iptables.bats
Lines 10 to 13 in 70eee07
@test "check iptables driver is in use" { | |
RUST_LOG=netavark=info run_netavark --file ${TESTSDIR}/testfiles/simplebridge.json setup $(get_container_netns_path) | |
assert "${lines[0]}" "==" "[INFO netavark::firewall] Using iptables firewall driver" "iptables driver is in use" | |
} |
make sure you set NETAVARK_FW=none
@Luap99 |
looks good, could you squash the commits please. @mheon PTAL |
Unfortunately I do not know how to do it properly- I do know how to rebase, issue is that I should had made the PR some time ago, when we talked about this on issues- now I have synced it- so there's a merge commit in between where I synced it before doing this PR- It looks a bit like this:
So I could squash them to cargo fmt commit, but if I squash to sync commit, or even to my work here-commit, it will be a problem... Any good ideas, except make a new branch? That would be easiest solution for me, but if you know a "magic trick" to make it happen, I am all ears.. |
LGTM. I do start to wonder if we should add a way for Podman to request a specific driver so it can actually request this on a per-network basis. |
@mheon I have already requested it for some time ago.. Until that, I'll go with a wrapper script. |
cd3c8d9
to
1d495ee
Compare
1d495ee
to
ca13687
Compare
ca13687
to
9deb91b
Compare
Passing environment valuepair NETAVARK_FW=none disables all firewall/portmapper related features leaving configuration of firewall to user. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
PR has been rebased succesfully to single commit. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: Luap99, oskarirauta The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/lgtm |
/hold cancel |
Passing environment valuepair NETAVARK_FW=none disables all firewall/portmapper related features leaving configuration of firewall to user.