How do I enable iptables in a Beaker recipe? -
in default rhel6.5 install, iptables configured (rules exist in /etc/sysconfig/iptables) , service enabled. in beaker recipe, iptables not running , not configured. /etc/sysconfig/iptables not exist , ports open.
why different in beaker recipe? how enable iptables?
(this based on question asked 2014-03-27 ondrej ptak on mailing list.)
beaker disables firewall default make multi-host testing easier.
the generated kickstart contains firewall --disabled causes anaconda not configure or enable iptables (see firewall in anaconda docs).
you can override default behaviour setting firewall ksmeta variable recipe. example, open ports 22, 80, , 8080:
<recipe ks_meta="firewall=ssh:tcp,http:tcp,8080:tcp"> ... refer kickstart metadata section in beaker's docs.
Comments
Post a Comment