From efe705ae869ea14e8636d1b50e4cbddd34c914ec Mon Sep 17 00:00:00 2001 From: Nicholas Vinson Date: Mon, 2 Nov 2015 22:54:38 -0500 Subject: [PATCH 3/4] Create systemd unit files Signed-off-by: Nicholas Vinson --- .../nftables/files/systemd/nftables-restore.service | 14 ++++++++++++++ net-firewall/nftables/files/systemd/nftables-store.service | 11 +++++++++++ net-firewall/nftables/files/systemd/nftables.service | 6 ++++++ 3 files changed, 31 insertions(+) create mode 100644 net-firewall/nftables/files/systemd/nftables-restore.service create mode 100644 net-firewall/nftables/files/systemd/nftables-store.service create mode 100644 net-firewall/nftables/files/systemd/nftables.service diff --git net-firewall/nftables/files/systemd/nftables-restore.service net-firewall/nftables/files/systemd/nftables-restore.service new file mode 100644 index 0000000..7a7eacf --- /dev/null +++ net-firewall/nftables/files/systemd/nftables-restore.service @@ -0,0 +1,14 @@ +[Unit] +Description=Restore nftables firewall rules +# if both are queued for some reason, don't store before restoring :) +Before=nftables-store.service +# sounds reasonable to have firewall up before any of the services go up +Before=network.target +Conflicts=shutdown.target + +[Service] +Type=oneshot +ExecStart=/usr/libexec/nftables/nftables.sh load /var/lib/nftables/rules-save + +[Install] +WantedBy=basic.target diff --git net-firewall/nftables/files/systemd/nftables-store.service net-firewall/nftables/files/systemd/nftables-store.service new file mode 100644 index 0000000..373f8b9 --- /dev/null +++ net-firewall/nftables/files/systemd/nftables-store.service @@ -0,0 +1,11 @@ +[Unit] +Description=Store nftables firewall rules +Before=shutdown.target +DefaultDependencies=No + +[Service] +Type=oneshot +ExecStart=/usr/libexec/nftables/nftables.sh store /var/lib/nftables/rules-save + +[Install] +WantedBy=shutdown.target diff --git net-firewall/nftables/files/systemd/nftables.service net-firewall/nftables/files/systemd/nftables.service new file mode 100644 index 0000000..d6f05c7 --- /dev/null +++ net-firewall/nftables/files/systemd/nftables.service @@ -0,0 +1,6 @@ +[Unit] +Description=Store and restore nftables firewall rules + +[Install] +Also=nftables-store.service +Also=nftables-restore.service -- 2.6.2