[pve-devel] [PATCH v2 pve-firewall 0/5] improve update
Alexandre DERUMIER
aderumier at odiso.com
Wed Jan 30 11:31:25 CET 2019
Hi,
did you have time to review/improve it ?
Alexandre
----- Mail original -----
De: "Tim Marx" <t.marx at proxmox.com>
À: "pve-devel" <pve-devel at pve.proxmox.com>, "aderumier" <aderumier at odiso.com>
Envoyé: Lundi 14 Janvier 2019 14:41:04
Objet: Re: [pve-devel] [PATCH v2 pve-firewall 0/5] improve update
Thanks for the v2, just to let you know, I'll go through your patches this week and probably adjust them, as Thomas suggested in his response, anyway I will keep you up to date.
Thanks!
> Alexandre Derumier <aderumier at odiso.com> hat am 14. Januar 2019 um 10:15 geschrieben:
>
>
> This patch improve firewall update.
> We want to be sure that an update of a config file don't happen
> when update is running or pmxcfs is reloaded when firewall update is running.
>
> Changelog v2:
> - use noerr in PVE::Cluster::check_cfs_is_mounted
> - split read_config from compile
> - on update, read all configs twice at 1second interval, and compare values
> to be sure of consistency
>
> Alexandre Derumier (5):
> don't update if /etc/pve is not mounted
> remove_pvefw_chains_iptables : don't commit if rules are already
> removed.
> add syslog on pvefw chains removal
> split read_configuration from compile sub
> update: read config twice at 1second interval
>
> debian/control | 1 +
> src/PVE/Firewall.pm | 39 ++++++++++++++++++++++++++++++++-------
> src/PVE/Service/pve_firewall.pm | 10 ++++++----
> src/pvefw-logger.c | 6 ++++--
> test/fwtester.pl | 3 ++-
> 5 files changed, 45 insertions(+), 14 deletions(-)
>
> --
> 2.11.0
>
> _______________________________________________
> pve-devel mailing list
> pve-devel at pve.proxmox.com
> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
Best Regards,
Tim Marx
t.marx at proxmox.com
https://www.proxmox.com
_______________________________________________
Proxmox Server Solutions GmbH
Bräuhausgasse 37, 1050 Vienna
Austria Commercial register no.: FN 258879 f
Registration office: Handelsgericht Wien
More information about the pve-devel
mailing list