diff options
Diffstat (limited to 'src')
| -rwxr-xr-x | src/conf_mode/system_conntrack.py | 20 | ||||
| -rwxr-xr-x | src/op_mode/image_installer.py | 4 | ||||
| -rw-r--r-- | src/system/grub_update.py | 4 | 
3 files changed, 18 insertions, 10 deletions
| diff --git a/src/conf_mode/system_conntrack.py b/src/conf_mode/system_conntrack.py index e075bc928..2a55daed4 100755 --- a/src/conf_mode/system_conntrack.py +++ b/src/conf_mode/system_conntrack.py @@ -42,33 +42,33 @@ nftables_ct_file = r'/run/nftables-ct.conf'  module_map = {      'ftp': {          'ko': ['nf_nat_ftp', 'nf_conntrack_ftp'], -        'nftables': ['ct helper set "ftp_tcp" tcp dport {21} return'] +        'nftables': ['tcp dport {21} ct helper set "ftp_tcp" return']      },      'h323': {          'ko': ['nf_nat_h323', 'nf_conntrack_h323'], -        'nftables': ['ct helper set "ras_udp" udp dport {1719} return', -                     'ct helper set "q931_tcp" tcp dport {1720} return'] +        'nftables': ['udp dport {1719} ct helper set "ras_udp" return', +                     'tcp dport {1720} ct helper set "q931_tcp" return']      },      'nfs': { -        'nftables': ['ct helper set "rpc_tcp" tcp dport {111} return', -                     'ct helper set "rpc_udp" udp dport {111} return'] +        'nftables': ['tcp dport {111} ct helper set "rpc_tcp" return', +                     'udp dport {111} ct helper set "rpc_udp" return']      },      'pptp': {          'ko': ['nf_nat_pptp', 'nf_conntrack_pptp'], -        'nftables': ['ct helper set "pptp_tcp" tcp dport {1723} return'], +        'nftables': ['tcp dport {1723} ct helper set "pptp_tcp" return'],          'ipv4': True       },      'sip': {          'ko': ['nf_nat_sip', 'nf_conntrack_sip'], -        'nftables': ['ct helper set "sip_tcp" tcp dport {5060,5061} return', -                     'ct helper set "sip_udp" udp dport {5060,5061} return'] +        'nftables': ['tcp dport {5060,5061} ct helper set "sip_tcp" return', +                     'udp dport {5060,5061} ct helper set "sip_udp" return']       },      'sqlnet': { -        'nftables': ['ct helper set "tns_tcp" tcp dport {1521,1525,1536} return'] +        'nftables': ['tcp dport {1521,1525,1536} ct helper set "tns_tcp" return']      },      'tftp': {          'ko': ['nf_nat_tftp', 'nf_conntrack_tftp'], -        'nftables': ['ct helper set "tftp_udp" udp dport {69} return'] +        'nftables': ['udp dport {69} ct helper set "tftp_udp" return']       },  } diff --git a/src/op_mode/image_installer.py b/src/op_mode/image_installer.py index 85ebd19ba..b0567305a 100755 --- a/src/op_mode/image_installer.py +++ b/src/op_mode/image_installer.py @@ -786,6 +786,10 @@ def install_image() -> None:              grub.install(install_target.name, f'{DIR_DST_ROOT}/boot/',                           f'{DIR_DST_ROOT}/boot/efi') +        # sort inodes (to make GRUB read config files in alphabetical order) +        grub.sort_inodes(f'{DIR_DST_ROOT}/{grub.GRUB_DIR_VYOS}') +        grub.sort_inodes(f'{DIR_DST_ROOT}/{grub.GRUB_DIR_VYOS_VERS}') +          # umount filesystems and remove temporary files          if is_raid_install(install_target):              cleanup([install_target.name], diff --git a/src/system/grub_update.py b/src/system/grub_update.py index 5a7d8eb72..5a0534195 100644 --- a/src/system/grub_update.py +++ b/src/system/grub_update.py @@ -105,4 +105,8 @@ if __name__ == '__main__':      else:          render(grub_cfg_main, grub.TMPL_GRUB_MAIN, {}) +    # sort inodes (to make GRUB read config files in alphabetical order) +    grub.sort_inodes(f'{root_dir}/{grub.GRUB_DIR_VYOS}') +    grub.sort_inodes(f'{root_dir}/{grub.GRUB_DIR_VYOS_VERS}') +      exit(0) | 
