[ovirt-users] using Network_Custom_Properties for firewalld zone?

[Dan Kenigsberg]

On Sun, May 10, 2015 at 03:18:08AM -0400, Genadi Chereshnya wrote:
> Hi Jorick,
> 
> I am not sure that Network_Custom_Properties is what you are looking for.
> With network custom properties you can only configure bridge or ethtool opts.
> So bridge opts doesn't suit you as it is only for specific configuration of the bridge on the specific NIC
> and with ethtool you don't configure firewall as well, unless there is a command that I am not familiar with.
> 
> 
> Regards,
>   Genadi
> 
> 
> ----- Original Message -----
> From: "Jorick Astrego" <j.astrego at netbulae.eu>
> To: users at ovirt.org
> Sent: Friday, May 8, 2015 1:24:46 PM
> Subject: [ovirt-users] using Network_Custom_Properties for firewalld zone?
> 
> 
> Hi, 
> 
> Trying to add the ZONE field to the NIC's in oVirt as I'm trying to use Firewalld instead of iptables. 
> 
> Manually it works fine but when I try to set a custom property, it doesn't apply. 
> 
> 
> 
> http://www.ovirt.org/Features/Network_Custom_Properties 
> 
> I can't figure out if this should work or I should use a different method. 


When you add a "zone" custom property to the network, you should also 
add something in Vdsm to handle it. This something is usually a hook 
script, possibly the after_network_setup one.

There, you could edit the ifcfg file, and take it up again.

This would be a bit cumbersome and slow. Alternatively, you can modify 
vdsm's ifcfg.py configurator to include this "zone".

Regards,
Dan.