-
Notifications
You must be signed in to change notification settings - Fork 1.5k
adding details regarding using firewalld instead of the iptables #284
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
/cc @crawford |
wking
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
And can you also squash your typo fix in, so you have a single commit?
Documentation/dev/libvirt-howto.md
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you strip the trailing whitespace here (and in other places) to make Git happy:
$ git log -2 --check --oneline origin/pr/284
c66b9c9 fixed a small typo
2ce46b2 adding details regarding using firewalld instead of the iptables
Documentation/dev/libvirt-howto.md:88: trailing whitespace.
+If using `firewalld`, simply optain the name of the existing active zone which
Documentation/dev/libvirt-howto.md:99: trailing whitespace.
+unless otherwise specified.
Documentation/dev/libvirt-howto.md
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The example looks like a shell session, in which case, can you add a prompt and:
```console
for highlighting? That would be:
$ sudo firewall-cmd --get-active-zones
FedoraWorkstation
interfaces: enp0s25 tun0
Documentation/dev/libvirt-howto.md
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You don't have any output here, and for shell examples without output we prefer no prompts and:
```sh
syntax highlighting (more on this in #27).
wking
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some more minor copy-edit suggestions ;)
Documentation/dev/libvirt-howto.md
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you backtick the literal --permanent?
Documentation/dev/libvirt-howto.md
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe reword to something like:
Restart
firewalldto remove your temporary changes:
or:
With the cluster removed, you no longer need to allow libvirt nodes to reach your
libvirtd. Restartfirewalldto remove your temporary changes:
Documentation/dev/libvirt-howto.md
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe "a simple reload of firewalld" -> firewalld --reload.
|
Ok, I think I'm done :p. This looks great, thanks :). |
|
Adding all let me know if its good, squashed as well |
wking
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
One nit, everything else looks great :).
Documentation/dev/libvirt-howto.md
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
With console highlighting (which I think we want because you're showing output), you need a $ prompt here.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do you not want prompts on the others as well?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do you not want prompts on the others as well?
Prompts belong in console blocks (to differentiate between commands and output), but not in sh blocks (because they're not part of the shell input). In this project, sh was more popular where we don't need to show output, so that's the pattern I'm trying to stick to (more on this in #27).
crawford
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: crawford, rlopez133 The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
| sudo firewall-cmd --zone=FedoraWorkstation --list-sources | ||
| ``` | ||
|
|
||
| NOTE: When the firewall rules are no longer needed, `firewalld --reload` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oops, looks like this should have been firewall-cmd --reload, based on the example below :/.
The typo is from af6d904 (fixing cmd and typo, 2018-09-20, openshift#293), which was itself fixing typos from 21ef0d4 (adding details regarding using of firewalld instead of iptables, 2018-09-19, openshift#284).
Adding some documentation on how to use firewalld instead of the iptables command provided in the original document.