<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">CCed to kimchi-devel and see the
comment line below<br>
<br>
于 2013/12/18 19:00, Mark Wu 写道:<br>
</div>
<blockquote cite="mid:52B18067.8050601@linux.vnet.ibm.com"
type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<div class="moz-cite-prefix">On 12/17/2013 02:36 PM, <a
moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:taget@linux.vnet.ibm.com">taget@linux.vnet.ibm.com</a>
wrote:<br>
</div>
<blockquote
cite="mid:1387262194-5265-1-git-send-email-taget@linux.vnet.ibm.com"
type="cite">
<pre wrap="">From: Eli Qiao <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:taget@linux.vnet.ibm.com"><taget@linux.vnet.ibm.com></a>
Signed-off-by: Eli Qiao <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:taget@linux.vnet.ibm.com"><taget@linux.vnet.ibm.com></a>
---
contrib/kimchi.spec.fedora.in | 5 +++++
contrib/kimchi.spec.suse.in | 5 +++++
2 files changed, 10 insertions(+), 0 deletions(-)
diff --git a/contrib/kimchi.spec.fedora.in b/contrib/kimchi.spec.fedora.in
index 14ec359..f21ae49 100644
--- a/contrib/kimchi.spec.fedora.in
+++ b/contrib/kimchi.spec.fedora.in
@@ -81,6 +81,11 @@ if [ $1 -eq 1 ] ; then
/bin/systemctl daemon-reload >/dev/null 2>&1 || :
fi
+# open 8000 and 8001 port for firewall
+
+iptables -I INPUT -p tcp --dport 8000 -j ACCEPT
+iptables -I INPUT -p tcp --dport 8001 -j ACCEPT
+
%if 0%{?rhel} == 6
start kimchid
%else
diff --git a/contrib/kimchi.spec.suse.in b/contrib/kimchi.spec.suse.in
index 9051284..5209e03 100644
--- a/contrib/kimchi.spec.suse.in
+++ b/contrib/kimchi.spec.suse.in
@@ -47,6 +47,11 @@ install -Dm 0755 contrib/kimchid.sysvinit %{buildroot}%{_initrddir}/kimchid
service kimchid start
chkconfig kimchid on
+# open 8000 and 8001 port for firewall
+
+iptables -I INPUT -p tcp --dport 8000 -j ACCEPT
+iptables -I INPUT -p tcp --dport 8001 -j ACCEPT
+
%preun
service kimchid stop
</pre>
</blockquote>
Eli, <br>
Thanks for the patch. But it's not a reliable configuration. This
rule will be lost after reboot.<br>
And shipping a configuration file is better than running commands
in spec file.<br>
<br>
Please take a look at firewalld and firewalld.service
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<a moz-do-not-send="true"
href="http://manpages.ubuntu.com/manpages/raring/man5/firewalld.service.5.html">http://manpages.ubuntu.com/manpages/raring/man5/firewalld.service.5.html</a><br>
<br>
It could be a better solution for the platforms where firewalld is
available.<br>
</blockquote>
Also, we should be careful about the iptbales rules position in file
to avoid it is masked by other rules. And we may need to remove
the rules in rpm remove operations.<br>
<br>
<br>
<blockquote cite="mid:52B18067.8050601@linux.vnet.ibm.com"
type="cite"> -- <br>
project-kimchi mailing list
<a class="moz-txt-link-rfc2396E" href="mailto:project-kimchi@googlegroups.com"><project-kimchi@googlegroups.com></a><br>
<a moz-do-not-send="true"
href="https://groups.google.com/forum/#%21forum/project-kimchi">https://groups.google.com/forum/#!forum/project-kimchi</a><br>
--- <br>
You received this message because you are subscribed to the Google
Groups "project-kimchi" group.<br>
To unsubscribe from this group and stop receiving emails from it,
send an email to <a class="moz-txt-link-abbreviated" href="mailto:project-kimchi+unsubscribe@googlegroups.com">project-kimchi+unsubscribe@googlegroups.com</a>.<br>
For more options, visit <a moz-do-not-send="true"
href="https://groups.google.com/groups/opt_out">https://groups.google.com/groups/opt_out</a>.<br>
</blockquote>
<br>
</body>
</html>
<p></p>
-- <br />
project-kimchi mailing list <project-kimchi@googlegroups.com><br />
<a href="https://groups.google.com/forum/#!forum/project-kimchi">https://groups.google.com/forum/#!forum/project-kimchi</a><br />
--- <br />
You received this message because you are subscribed to the Google Groups "project-kimchi" group.<br />
To unsubscribe from this group and stop receiving emails from it, send an email to project-kimchi+unsubscribe@googlegroups.com.<br />
For more options, visit <a href="https://groups.google.com/groups/opt_out">https://groups.google.com/groups/opt_out</a>.<br />