mirror of
https://github.com/containers/podman.git
synced 2025-10-26 18:54:17 +08:00
CI: test nftables driver on fedora
Make sure this passes podman CI before we push out a default change. ref: https://fedoraproject.org/wiki/Changes/NetavarkNftablesDefault Signed-off-by: Paul Holzinger <pholzing@redhat.com>
This commit is contained in:
@ -147,6 +147,11 @@ case "$OS_RELEASE_ID" in
|
|||||||
msg "Enabling container_manage_cgroup"
|
msg "Enabling container_manage_cgroup"
|
||||||
showrun setsebool container_manage_cgroup true
|
showrun setsebool container_manage_cgroup true
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# Test nftables driver, https://fedoraproject.org/wiki/Changes/NetavarkNftablesDefault
|
||||||
|
# We can drop this once this implemented and pushed into fedora stable. We cannot test it on
|
||||||
|
# debian because the netavark version there is way to old for nftables support.
|
||||||
|
printf "[network]\nfirewall_driver=\"nftables\"\n" > /etc/containers/containers.conf.d/90-nftables.conf
|
||||||
;;
|
;;
|
||||||
*) die_unknown OS_RELEASE_ID
|
*) die_unknown OS_RELEASE_ID
|
||||||
esac
|
esac
|
||||||
|
|||||||
Reference in New Issue
Block a user