tumblr / genesis

A tool for data center automation
http://tumblr.github.io/genesis/
Apache License 2.0
155 stars 24 forks source link

undo iptables from base genesis image #38

Closed roymarantz closed 9 years ago

roymarantz commented 9 years ago

https://jira.ewr01.tumblr.net/browse/SYSSRE-3264 iptables is reported as breaking access to a booted node and since it isn't providing any protection we don't need it. Bottom line is don't start it. FYI, kickstart is unhappy with attempts to remove it because of package and selinux dependencies.

Tested on a virtual testenv node and real physical node too. This is currently the genesis test ipxe image.

@Primer42 @byxorna @defect @maddalab rfr

william-richard commented 9 years ago

LGTM

defect commented 9 years ago

lgtm