Qubes component: core-agent-linux
d5fb315a4e
qubes-setup-dnat-to-ns is called multiple times during boot. Of particular interest are the two invocations done by:
1. `/usr/lib/qubes/init/network-proxy.setup.sh` (`qubes-network.service`)
2. `/usr/lib/qubes/init/misc-post.sh` (`qubes-misc-post.service`)
These can, and do often, run in parallel. Often enough that the `PR-QBS` `nat` chain can end up with eight rules instead of four, or (worse) zero rules.
This commit represents the proper boot ordering of these services, where the post startup *must* happen after Qubes has already started its iptables, firewall, network setup and netwatcher.
This eliminates the race.
(cherry picked from commit
|
||
|---|---|---|
| archlinux | ||
| autostart-dropins | ||
| debian | ||
| doc | ||
| misc | ||
| network | ||
| pkgs | ||
| qrexec | ||
| qubes-rpc | ||
| rpm_spec | ||
| vm-init.d | ||
| vm-systemd | ||
| .gitignore | ||
| debian-quilt | ||
| LICENSE | ||
| Makefile | ||
| Makefile.builder | ||
| series-debian-vm.conf | ||
| version | ||