diff options
author | Daniil Baturin <daniil@vyos.io> | 2025-05-20 15:28:12 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2025-05-20 15:28:12 +0100 |
commit | 37598a366e8d17fc7a546b23d3a4d8ff097272ce (patch) | |
tree | a4e6e35705a11366fe9d5e055697687b30434514 /src/conf_mode/firewall.py | |
parent | d15000b645c690c4d67dc6bb6bc924f16703e352 (diff) | |
parent | ab602253d57c1fb4a01a9c84f75bbbc480a66189 (diff) | |
download | vyos-1x-37598a366e8d17fc7a546b23d3a4d8ff097272ce.tar.gz vyos-1x-37598a366e8d17fc7a546b23d3a4d8ff097272ce.zip |
Merge pull request #4468 from sarthurdev/T5707
wireguard: T7387: Optimise wireguard peer handling
Diffstat (limited to 'src/conf_mode/firewall.py')
-rwxr-xr-x | src/conf_mode/firewall.py | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/src/conf_mode/firewall.py b/src/conf_mode/firewall.py index 274ca2ce6..348eaeba3 100755 --- a/src/conf_mode/firewall.py +++ b/src/conf_mode/firewall.py @@ -17,6 +17,8 @@ import os import re +from glob import glob + from sys import exit from vyos.base import Warning from vyos.config import Config @@ -30,6 +32,7 @@ from vyos.firewall import geoip_update from vyos.template import render from vyos.utils.dict import dict_search_args from vyos.utils.dict import dict_search_recursive +from vyos.utils.file import write_file from vyos.utils.process import call from vyos.utils.process import cmd from vyos.utils.process import rc_cmd @@ -37,7 +40,6 @@ from vyos.utils.network import get_vrf_members from vyos.utils.network import get_interface_vrf from vyos import ConfigError from vyos import airbag -from pathlib import Path from subprocess import run as subp_run airbag.enable() @@ -626,10 +628,11 @@ def apply(firewall): domain_action = 'restart' if dict_search_args(firewall, 'group', 'remote_group') or dict_search_args(firewall, 'group', 'domain_group') or firewall['ip_fqdn'].items() or firewall['ip6_fqdn'].items(): text = f'# Automatically generated by firewall.py\nThis file indicates that vyos-domain-resolver service is used by the firewall.\n' - Path(domain_resolver_usage).write_text(text) + write_file(domain_resolver_usage, text) else: - Path(domain_resolver_usage).unlink(missing_ok=True) - if not Path('/run').glob('use-vyos-domain-resolver*'): + if os.path.exists(domain_resolver_usage): + os.unlink(domain_resolver_usage) + if not glob('/run/use-vyos-domain-resolver*'): domain_action = 'stop' call(f'systemctl {domain_action} vyos-domain-resolver.service') |