From: Gulsum Atici <gulsum.atici@canonical.com>
Date: Wed, 1 Feb 2023 08:15:52 +0000 (+0300)
Subject: Make iptables persistent after reboot
X-Git-Tag: v13.0.1~5
X-Git-Url: https://osm.etsi.org/gitweb/?a=commitdiff_plain;h=refs%2Fchanges%2F04%2F12904%2F1;p=osm%2Fdevops.git

Make iptables persistent after reboot

Change-Id: Ief0342cf23406622458c28cf2c65a6e6069262fc
Signed-off-by: Gulsum Atici <gulsum.atici@canonical.com>
---

diff --git a/installers/full_install_osm.sh b/installers/full_install_osm.sh
index 3160eb4a..8c651e2e 100755
--- a/installers/full_install_osm.sh
+++ b/installers/full_install_osm.sh
@@ -823,8 +823,7 @@ function install_osm() {
     add_local_k8scluster
     track final_ops add_local_k8scluster_ok
 
-    echo -e "Fixup firewall so docker and LXD can share the host."
-    sudo iptables -I DOCKER-USER -j ACCEPT
+    arrange_docker_default_network_policy
 
     wget -q -O- https://osm-download.etsi.org/ftp/osm-13.0-thirteen/README2.txt &> /dev/null
     track end
@@ -887,6 +886,13 @@ function install_to_openstack() {
     return 0
 }
 
+function arrange_docker_default_network_policy() {
+    echo -e "Fixing firewall so docker and LXD can share the same host without affecting each other."
+    sudo iptables -I DOCKER-USER -j ACCEPT
+    sudo iptables-save | sudo tee /etc/iptables/rules.v4
+    sudo ip6tables-save | sudo tee /etc/iptables/rules.v6
+}
+
 function install_k8s_monitoring() {
     [ -z "${DEBUG_INSTALL}" ] || DEBUG beginning of function
     # install OSM monitoring