Hello Joost.

On Tue, Dec 22, 2015 at 03:29:34PM +0100, Joost van Baal-Ilić wrote:
[...]
> > If help is needed, feel free to reach out!
> 
> Well, as the saying goes: patches welcome :)
> 
> Thanks for your interest, Bye,

If you could please come up with a plain english description of the main
things you try to accomplish in the init script then it will be much
simpler to help out with the equivalent systemd syntax and/or
suggestions on how to do it differently (ie. some parts are best done by
the daemon itself rather than in the service file).

It would be much easier than me trying to reverse engineer the init
script and possibly miss some detail because I'm not familiar with all
the details of your service.

Regarding the fixme message:

> # FIXME  how do we handle network interfaces getting assigned IPs? ifupdown?

network events are best caught via netlink messages (which is not very
easy to deal with from shell scripts). Even ifupdown isn't driven
by netlink so doesn't know this very well, the ifupdown hooks only
gets executed on interfaces being brought up or down by ifup/ifdown
(or NetworkManager ifupdown compatibility). This will for example miss
interfaces being manually brought up via ip/ifconfig, or via
systemd-networkd, etc. I'd say this is out of scope for the
service file completely.
Whis this an issue for the service file? Do you have something in
the init script handling similar case?

> # shouldn't we load the block-all-traffic ruleset here?

This part seems completely specific to uruk which I know nothing about.
Could you please explain what you need and/or why you need it?

Are there any specific parts missing except the FIXME comment?


An additional suggestion is that it seems to have worked well for others
is to start a thread on [email protected]
to get help from multiple people (more qualified than me).

Regards,
Andreas Henriksson

Reply via email to