nerves-project / nerves

Craft and deploy bulletproof embedded software in Elixir
http://nerves-project.org
Apache License 2.0
2.26k stars 193 forks source link

Feature: Add firewall support? #970

Closed icefoxen closed 2 months ago

icefoxen commented 5 months ago

Environment

N/A

Current behavior

No firewall on target system, iptables not even installed.

Expected behavior

I'm making this because I was just like "oh there has to be SOME way of setting it up easily in my target.exs or something", but it appears that iptables binaries aren't even installed on the target. I can sympathize with wanting to keep the base image small and simple, but is there an easy guide or such somewhere on how to build a nerves system with iptables included?

fhunleth commented 2 months ago

Ideally, there would be a hex package that you could depend on to get firewall configuration tools. In the mean time, adding it via a Buildroot config in a custom Nerves system is the way to go. See https://hexdocs.pm/nerves/customizing-systems.html.