File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -7,8 +7,16 @@ provision:
77 role: control_node
88 - name: managed-node1
99 role: managed_node
10+ hardware:
11+ network:
12+ - type: eth
13+ - type: eth
1014 - name: managed-node2
1115 role: managed_node
16+ hardware:
17+ network:
18+ - type: eth
19+ - type: eth
1220environment:
1321 SR_ANSIBLE_VER: 2.17
1422 SR_REPO_NAME: firewall
Original file line number Diff line number Diff line change 1+ ---
2+ standard-inventory-qcow2:
3+ qemu:
4+ # Use qemu-system-x86_64 -net nic,model=help for a list of available devices.
5+ net_nic_list:
6+ - virtio
Original file line number Diff line number Diff line change 3030 register : find_iface
3131 changed_when : false
3232
33+ - name : Debug
34+ shell : |
35+ set -euxo pipefail
36+ exec 1>&2
37+ ip addr
38+ ls -alrtF /sys/class/net
39+ ls -alrtF /sys/class/net/*/device/vendor || :
40+ ls -alrtF /sys/class/net/*/device/device || :
41+ changed_when : false
42+
3343 - name : Test interfaces with PCI ids
3444 # this can't be tested in containers or similar envs without any real
3545 # ethernet devices
3646 when : find_iface.stdout != ""
3747 block :
48+ - name : Get temp directory
49+ tempfile :
50+ prefix : lsr_
51+ suffix : _firewall_pci
52+ state : directory
53+ register : temp_dir
54+
55+ - name : Debug - get nftables ruleset before
56+ shell : |
57+ set -euo pipefail
58+ nft list ruleset > {{ temp_dir.path }}/nft_before.txt || :
59+ changed_when : false
60+
3861 - name : Determine interface vendor/product ID
3962 shell : |
4063 set -euo pipefail
6487 state : enabled
6588 permanent : true
6689
90+ - name : Debug - get nftables ruleset after and show diff
91+ shell : |
92+ set -euo pipefail
93+ nft list ruleset > {{ temp_dir.path }}/nft_after.txt || :
94+ diff -u {{ temp_dir.path }}/nft_before.txt {{ temp_dir.path }}/nft_after.txt || :
95+ rm -rf {{ temp_dir.path }}
96+ changed_when : false
97+
6798 - name : Get nftable ruleset
6899 command : nft list ruleset
69100 register : nft_list
You can’t perform that action at this time.
0 commit comments