From 03b84dd80f531820bacc80ee5bb7395e9eba7b9c Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Jan 09 2018 19:25:13 +0000
Subject: tell anaconda to leave firewall alone


Take advantage of `firewall --use-system-defaults` [1]
so that we can embed firewalld [2] but leave it disabled.

[1] https://github.com/rhinstaller/anaconda/pull/1271
[2] https://pagure.io/fedora-atomic/pull-request/103

Signed-off-by: Dusty Mabe <dusty@dustymabe.com>

---

diff --git a/ostree-based-installer/lorax-configure-repo.tmpl b/ostree-based-installer/lorax-configure-repo.tmpl
index 4aedea5..a7addb6 100644
--- a/ostree-based-installer/lorax-configure-repo.tmpl
+++ b/ostree-based-installer/lorax-configure-repo.tmpl
@@ -1,6 +1,7 @@
 ## Lorax template to configure Anaconda to:
 ##  1) Use the repository we embedded in the ISO
 ##  2) Work around https://bugzilla.redhat.com/show_bug.cgi?id=1193590
+##  3) Tell anaconda to leave the firewall set up as it was in the ostree
 
 ## Args:
 ##  - ostree_osname      - the name of the os/name of remote
@@ -11,6 +12,7 @@
 
 <%page args="ostree_osname, ostree_install_repo, ostree_update_repo, ostree_install_ref, ostree_update_ref"/>
 append usr/share/anaconda/interactive-defaults.ks "ostreesetup --nogpg --osname=${ostree_osname} --remote=${ostree_osname} --url=file:///ostree/repo --ref=${ostree_update_ref}"
+append usr/share/anaconda/interactive-defaults.ks "firewall --use-system-defaults"
 
 append usr/share/anaconda/interactive-defaults.ks "%post --erroronfail"
 append usr/share/anaconda/interactive-defaults.ks "rm -f /etc/ostree/remotes.d/${ostree_osname}.conf"