----- Original Message ----- > From: "Garrett Holmstrom" <[email protected]> > To: "Fedora Cloud SIG" <[email protected]> > Sent: Thursday, October 17, 2013 5:29:06 PM > Subject: Re: please help test beta test candidate cloud images > > On Thu, Oct 17, 2013 at 12:26 PM, Sandro "red" Mathys > <[email protected]> wrote: > > Crazy idea: disable the Firewall by default but allow users to enable > > it through cloud-init (i.e. user-data)? Just in case there are people > > who prefer the instance's firewall over security groups and open the > > latter up a lot / completely. Probably a stupid thought, but I thought > > I'd share it for the lulz. > > If nothing else, if you pass a script as user-data cloud-init will > execute it late in the system's startup process. It looks for "#!".
Yep, that'd work although it's a little hacky. Writing cloud-init modules is super easy so we could also ship our own cloud-init module that would activate the instance's firewall based on some user data. > > -- > Garrett Holmstrom > _______________________________________________ > cloud mailing list > [email protected] > https://admin.fedoraproject.org/mailman/listinfo/cloud > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct > _______________________________________________ cloud mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/cloud Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
