Revert "module-eval: four containers left on the host netns"
This reverts commit 03fc548b0a.
This commit is contained in:
parent
196161654a
commit
04214a6afa
1 changed files with 1 additions and 3 deletions
|
|
@ -617,14 +617,12 @@ let
|
||||||
}
|
}
|
||||||
{
|
{
|
||||||
# Both values come from ../container-modules/swarm-container.nix.
|
# Both values come from ../container-modules/swarm-container.nix.
|
||||||
# Four of the 14 service containers share the host netns (hive-forge, bao,
|
|
||||||
# the queue, the log store) and ten have one of their own.
|
|
||||||
name = "a service container on the host netns runs no firewall or resolvconf of its own";
|
name = "a service container on the host netns runs no firewall or resolvconf of its own";
|
||||||
ok =
|
ok =
|
||||||
let
|
let
|
||||||
shared = lib.filter (c: !c.privateNetwork) (lib.attrValues serviceContainers);
|
shared = lib.filter (c: !c.privateNetwork) (lib.attrValues serviceContainers);
|
||||||
in
|
in
|
||||||
lib.length shared == 4
|
lib.length shared == 5
|
||||||
&& lib.all (
|
&& lib.all (
|
||||||
c: !c.config.networking.firewall.enable && !c.config.networking.resolvconf.enable
|
c: !c.config.networking.firewall.enable && !c.config.networking.resolvconf.enable
|
||||||
) shared;
|
) shared;
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue