Actions
action #129083
closed[qem][qe-core] Enhance firewall zones/services configuration in AutoYaST configuration file
Status:
Resolved
Priority:
Normal
Assignee:
Category:
Enhancement to existing tests
Target version:
Start date:
2023-05-06
Due date:
% Done:
0%
Estimated time:
Difficulty:
Description
Description¶
We may need to make sure the system installed via autoyast can get the same firewall configuration as we do with interactive installation.
However, currently we are maintaining a single configuration file for each sle15/sle12 platform.
So I will try to do some enhancement to current autoyast template file. But we may need to do enough VRs to make sure the changes don't introduce new issues.
Action items¶
- Current firewall configuration seems fine, but we may consider the service
ssh
and port22
due to different requirements on each platform [for s390x and powerVM, we need unblock it due to remote worker access needs ssh port open] - Use as few lines as we can to define firewall, then we can get default firewall setting [the same configuration as we do via interactive install]
- Don't change the default firewall behavior as interactive installation, that will cause problems and will miss test coverage.
Updated by rfan1 over 1 year ago
- Copied from action #128843: [qem][qe-core]test fails in yast2_lan_restart added
Updated by slo-gin 8 months ago
This ticket was set to Normal priority but was not updated within the SLO period. Please consider picking up this ticket or just set the ticket to the next lower priority.
Updated by rfan1 8 months ago
I think the recent changes have done :)
https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/19272
Actions