hosted engine from appliance and firewalld/iptables-services
Hi, I installedHE form the appliance and need to switch the from firewalld to iptables-services. Does the HE /4.1.0/ depends on firewalld or could be switched to iptables services? IS there any templte for iptables-servicec like for the nodes `engine-config -a | grep -i iptables` best regards Peter Hudec -- *Peter Hudec* Infraštruktúrny architekt phudec@cnc.sk <mailto:phudec@cnc.sk> *CNC, a.s.* Borská 6, 841 04 Bratislava Recepcia: +421 2 35 000 100 Mobil:+421 905 997 203 *www.cnc.sk* <http:///www.cnc.sk>
On Thu, Feb 23, 2017 at 12:24 PM, Peter Hudec <phudec@cnc.sk> wrote:
Hi,
I installedHE form the appliance and need to switch the from firewalld to iptables-services.
Does the HE /4.1.0/ depends on firewalld or could be switched to iptables services? IS there any templte for iptables-servicec like for the nodes `engine-config -a | grep -i iptables`
I assume you refer to the engine machine. On hosts, only iptables is supported currently [1]. You can install and activate iptables-services, remove (or at least disable) firewalld, and then run engine-setup again. It should ask you if you want to configure iptables. Whatever you reply, it should also create a file /etc/ovirt-engine/iptables.example you can use. Best, [1] https://bugzilla.redhat.com/show_bug.cgi?id=995362
best regards Peter Hudec -- *Peter Hudec* Infraštruktúrny architekt phudec@cnc.sk <mailto:phudec@cnc.sk>
*CNC, a.s.* Borská 6, 841 04 Bratislava Recepcia: +421 2 35 000 100
Mobil:+421 905 997 203 *www.cnc.sk* <http:///www.cnc.sk>
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Didi
Thx, very helpfull. Peter On 23/02/2017 11:49, Yedidyah Bar David wrote:
On Thu, Feb 23, 2017 at 12:24 PM, Peter Hudec <phudec@cnc.sk> wrote:
Hi,
I installedHE form the appliance and need to switch the from firewalld to iptables-services.
Does the HE /4.1.0/ depends on firewalld or could be switched to iptables services? IS there any templte for iptables-servicec like for the nodes `engine-config -a | grep -i iptables`
I assume you refer to the engine machine. On hosts, only iptables is supported currently [1].
You can install and activate iptables-services, remove (or at least disable) firewalld, and then run engine-setup again. It should ask you if you want to configure iptables.
Whatever you reply, it should also create a file /etc/ovirt-engine/iptables.example you can use.
Best,
[1] https://bugzilla.redhat.com/show_bug.cgi?id=995362
best regards Peter Hudec -- *Peter Hudec* Infraštruktúrny architekt phudec@cnc.sk <mailto:phudec@cnc.sk>
*CNC, a.s.* Borská 6, 841 04 Bratislava Recepcia: +421 2 35 000 100
Mobil:+421 905 997 203 *www.cnc.sk* <http:///www.cnc.sk>
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- *Peter Hudec* Infraštruktúrny architekt phudec@cnc.sk <mailto:phudec@cnc.sk> *CNC, a.s.* Borská 6, 841 04 Bratislava Recepcia: +421 2 35 000 100 Mobil:+421 905 997 203 *www.cnc.sk* <http:///www.cnc.sk>
participants (2)
-
Peter Hudec -
Yedidyah Bar David