Hi,
Tom Eastep wrote:
>> [...]
>>
>> So we have to use a wrapper script, which will be called from systemd.
>>
>> [...]
>
> Does the additional script need to do anything differently from what
> /sbin/shorewall-init does currently? I created that file just to be able
> to support systemd.
First I have to admit, that I am not a systemd user, so I can't actual
test if this will work or not.
And yes, this script looks like something similar, I would install in
"SYSSTEMSCRIPT" ("/usr/libexec/shorewall-init/shorewall-init.init").
On Gentoo, we would have to replace this with our own script, because we
don't support saving/restoring the ipsets using shorewall-init (this
would add another dependency for the ipset package, which can be
avoided; people who want to use ipsets, will have to install this
package anyway so they can (and should) use the same functionality from
our ipset package, so no need for shorewall to do the same thing on
Gentoo) for example.
=> I would really like to see support in installer.sh for installing a
custom script for systemd. But if you don't want to add something, this
would be OK. We can do that in our ebuild on our own.
Finally I noticed a difference between /sbin/shorewall-init (which you
said should be used by systemd) and the init.d script: Why doesn't
/sbin/shorewall-init call "/sbin/$PRODUCT compile" if $VARDIR/firewall
wasn't found but setstatedir() in the init.d script does? Is that
difference wanted?
Also, the VARDIR check isn't in equal: The init.d versions honors values
from shorewallrc, the systemd version doesn't.
-Thomas
------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and
AppDynamics. Performance Central is your source for news, insights,
analysis and resources for efficient Application Performance Management.
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel
