balena-supervisor/test/integration
Christina Ying Wang 84a9e7e9ac Replace BALENA-FIREWALL rule in INPUT chain instead of flushing
The issue with the original Supervisor implementation of the firewall is that
on Supervisor start, the Supervisor flushes the INPUT chain of the filter table.
This doesn't play well with services that add to the INPUT chain on startup that
may start up before the Supervisor, such as certain NetworkManager connection
profiles. This change only replaces the BALENA-FIREWALL rule in the INPUT chain,
preserving the other rules as well as their order.

Closes: #1482
Change-type: patch
Signed-off-by: Christina Ying Wang <christina@balena.io>
2023-03-01 13:42:07 -08:00
..
compose Remove dependent devices content in codebase 2023-02-06 19:34:02 -08:00
config Use fatrw utility for writes to boot partition 2022-11-16 21:21:23 -03:00
device-api Update host-config, route, and action tests for host config endpoints 2023-01-11 15:48:13 -08:00
device-state Find and remove duplicate networks 2023-02-10 20:24:36 -05:00
lib Replace BALENA-FIREWALL rule in INPUT chain instead of flushing 2023-03-01 13:42:07 -08:00
.mocharc.js Migrate config module tests to integration 2022-09-28 10:37:41 -03:00
config.spec.ts Enable node16 module resolution in tsconfig to ease the ESM transition 2022-11-22 11:01:03 -03:00
db.spec.ts Remove dependent devices content in codebase 2023-02-06 19:34:02 -08:00
device-config.spec.ts Use fatrw utility for writes to boot partition 2022-11-16 21:21:23 -03:00
device-state.spec.ts Remove dependent devices content in codebase 2023-02-06 19:34:02 -08:00
host-config.spec.ts Update host-config, route, and action tests for host config endpoints 2023-01-11 15:48:13 -08:00
network.spec.ts Migrate API tests to unit/integration 2022-10-25 19:06:39 +00:00
supervisor.spec.ts Run the built supervisor as part of docker-compose tests 2022-11-03 15:45:39 -03:00