InTheForest/moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2026-01-11 18:51:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

hack/dind-systemd: enable firewalld debug logs

Browse Source 
Signed-off-by: Albin Kerouanton <albinker@gmail.com>
This commit is contained in:
Albin Kerouanton
2025-08-30 09:36:43 +02:00
parent 578ce11a56
commit 03df89b84a
1 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
hack/dind-systemd
View File

@@ -63,10 +63,10 @@ if [ -d /sys/kernel/security ] && ! mountpoint -q /sys/kernel/security; then
}
fi
# Allow connections coming from the host (through eth0). This is needed to
# access the daemon port (independently of which port is used), or run a
# 'remote' Delve session, etc...
if [ "${FIREWALLD:-}" = "true" ]; then
# Allow connections coming from the host (through eth0). This is needed to
# access the daemon port (independently of which port is used), or run a
# 'remote' Delve session, etc...
cat > /etc/firewalld/zones/trusted.xml << EOF
<?xml version="1.0" encoding="utf-8"?>
<zone target="ACCEPT">
@@ -75,6 +75,13 @@ if [ "${FIREWALLD:-}" = "true" ]; then
<interface name="eth0"/>
<forward/>
</zone>
EOF
# Increase firewalld log verbosity to help debug issues
cat > /etc/systemd/system/firewalld.service << EOF
[Service]
ExecStart=
ExecStart=/usr/sbin/firewalld --nofork --nopid --debug=4
EOF
fi