b7d8d66bb1
qubes-setup-dnat-to-ns is called multiple times during boot. Of particular interest are the two invocations done by: 1. `/usr/lib/qubes/init/network-proxy.setup.sh` (`qubes-network.service`) 2. `/usr/lib/qubes/init/misc-post.sh` (`qubes-misc-post.service`) These can, and do often, run in parallel. Often enough that the `PR-QBS` `nat` chain can end up with eight rules instead of four, or (worse) zero rules. This commit represents the proper boot ordering of these services, where the post startup *must* happen after Qubes has already started its iptables, firewall, network setup and netwatcher. This eliminates the race.
13 lines
358 B
Desktop File
13 lines
358 B
Desktop File
[Unit]
|
|
Description=Qubes misc post-boot actions
|
|
After=network-pre.target qubes-dvm.service qubes-mount-dirs.service qubes-network.service qubes-firewall.service qubes-netwatcher.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
ExecStart=/usr/lib/qubes/init/misc-post.sh
|
|
ExecStop=/usr/lib/qubes/init/misc-post-stop.sh
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|