diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-17 21:42:38 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-10-17 21:42:38 +0200 |
| commit | 07febc39a4c82d6e5f41aa28c85fef153b98f402 (patch) | |
| tree | 1bd3cd3f42d11002d32e10cb2c984c88afb4909f /src | |
| parent | cc9e15daa0a8e766b32ad6aa0baea26675eaf9a6 (diff) | |
| download | vyos-1x-07febc39a4c82d6e5f41aa28c85fef153b98f402.tar.gz vyos-1x-07febc39a4c82d6e5f41aa28c85fef153b98f402.zip | |
conntrack: T9474: rebuild conntrack tables when rule file and table drift apart
The conntrack ruleset only deleted the existing tables when its rule file in
/run was present. A table removed while the file stayed made the delete,
and with it every following commit, fail.
The tables are now declared right before they are deleted, so each commit
rebuilds them regardless of what is currently loaded.
Diffstat (limited to 'src')
| -rwxr-xr-x | src/conf_mode/system_conntrack.py | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/src/conf_mode/system_conntrack.py b/src/conf_mode/system_conntrack.py index 559aebcc8..7e659d1f6 100755 --- a/src/conf_mode/system_conntrack.py +++ b/src/conf_mode/system_conntrack.py @@ -180,9 +180,6 @@ def verify(conntrack): return None def generate(conntrack): - if not os.path.exists(nftables_ct_file): - conntrack['first_install'] = True - if 'log' not in conntrack: # Remove old conntrack-logger config and return if os.path.exists(vyos_conntrack_logger_config): |