From 82337cf9c4e23a9b0723916e65927bb3e48b685e Mon Sep 17 00:00:00 2001 From: Nicholas Vinson Date: Tue, 3 Nov 2015 01:07:43 -0500 Subject: net-firewall/nftables: Create systemd unit files Package-Manager: portage-2.2.23 --- .../nftables/files/systemd/nftables-restore.service | 14 ++++++++++++++ net-firewall/nftables/files/systemd/nftables-store.service | 11 +++++++++++ net-firewall/nftables/files/systemd/nftables.service | 6 ++++++ 3 files changed, 31 insertions(+) create mode 100644 net-firewall/nftables/files/systemd/nftables-restore.service create mode 100644 net-firewall/nftables/files/systemd/nftables-store.service create mode 100644 net-firewall/nftables/files/systemd/nftables.service (limited to 'net-firewall') diff --git a/net-firewall/nftables/files/systemd/nftables-restore.service b/net-firewall/nftables/files/systemd/nftables-restore.service new file mode 100644 index 000000000000..7a7eacfee9f3 --- /dev/null +++ b/net-firewall/nftables/files/systemd/nftables-restore.service @@ -0,0 +1,14 @@ +[Unit] +Description=Restore nftables firewall rules +# if both are queued for some reason, don't store before restoring :) +Before=nftables-store.service +# sounds reasonable to have firewall up before any of the services go up +Before=network.target +Conflicts=shutdown.target + +[Service] +Type=oneshot +ExecStart=/usr/libexec/nftables/nftables.sh load /var/lib/nftables/rules-save + +[Install] +WantedBy=basic.target diff --git a/net-firewall/nftables/files/systemd/nftables-store.service b/net-firewall/nftables/files/systemd/nftables-store.service new file mode 100644 index 000000000000..373f8b947d7d --- /dev/null +++ b/net-firewall/nftables/files/systemd/nftables-store.service @@ -0,0 +1,11 @@ +[Unit] +Description=Store nftables firewall rules +Before=shutdown.target +DefaultDependencies=No + +[Service] +Type=oneshot +ExecStart=/usr/libexec/nftables/nftables.sh store /var/lib/nftables/rules-save + +[Install] +WantedBy=shutdown.target diff --git a/net-firewall/nftables/files/systemd/nftables.service b/net-firewall/nftables/files/systemd/nftables.service new file mode 100644 index 000000000000..d6f05c7cf467 --- /dev/null +++ b/net-firewall/nftables/files/systemd/nftables.service @@ -0,0 +1,6 @@ +[Unit] +Description=Store and restore nftables firewall rules + +[Install] +Also=nftables-store.service +Also=nftables-restore.service -- cgit v1.2.3-65-gdbad