xCAT/xcat-core
2
0
Fork 0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-05-30 09:36:41 +00:00
Code Issues Releases Wiki Activity

Merge pull request #6590 from cxhong/firewall

Browse Source 
Disable firewalld on rhels8 compute node
This commit is contained in:
Mark Gurevich 2020-02-26 16:09:11 -05:00 committed by GitHub
commit db41d7503a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
xCAT-server/share/xcat/netboot/rh/compute.rhels8.ppc64le.postinstall
View File

@ -40,6 +40,18 @@ then
sed -i 's/SELINUX=enforcing\|permissive/SELINUX=disabled/' $installroot/etc/selinux/config
fi
#--for redhat 8 and 8.1
#-- Need to disable firewalld, otherwise, the remoteshell script will not able to get all the SSH keys
if [ -f "$installroot/etc/systemd/system/multi-user.target.wants/firewalld.service" ]
then
rm -rf $installroot/etc/systemd/system/multi-user.target.wants/firewalld.service
fi
if [ -f "$installroot/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service" ]
then
rm -rf $installroot/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service
fi
#-- Example of booted image versioning
#-- We want to know, with what configuration (version of the image) each node was booted.
#-- Hence, we keep image definition files and postscripts in CVS. During image generation we create file /etc/IMGVERSION and fill it with CVS "$Id$" of files with image definition (.pkglist, .exlist, .repolist, .postinstall). Then, during boot, each "CVS enabled" postscript (see /install/postscripts/cvs_template.sh and /install/postscripts/cvs_template.pl) adds one line to /etc/IMGVERSION. Then you can determine in any time what image you are running and what postscipts in which versions were run.

11
xCAT-server/share/xcat/netboot/rh/compute.rhels8.x86_64.postinstall
View File

@ -39,6 +39,17 @@ if [ -f "$installroot/etc/selinux/config" ]
then
sed -i 's/SELINUX=enforcing\|permissive/SELINUX=disabled/' $installroot/etc/selinux/config
fi
#--for redhat 8 and 8.1
#-- Need to disable firewalld, otherwise, the remoteshell script will not able to get all the SSH keys
if [ -f "$installroot/etc/systemd/system/multi-user.target.wants/firewalld.service" ]
then
rm -rf $installroot/etc/systemd/system/multi-user.target.wants/firewalld.service
fi
if [ -f "$installroot/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service" ]
then
rm -rf $installroot/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service
fi
#-- Example of booted image versioning
#-- We want to know, with what configuration (version of the image) each node was booted.