Re: Post-firewall hook to insert custom rules?
On 8/17/20 5:15 AM, Gunnar Niels wrote:
Hello, I have a set of iptables rules that I need to insert *after*
libvirt
has set up all of its firewall rules. Is there a hook that I can tap
into in
order to run something like a custom script to make sure this happens?
Any ideas?
-GN
You should be able to use a libvirt network hook script to do this:
https://libvirt.org/hooks.html
Basically you put an executable script in /etc/libvirt/hooks/network
Once the network is started, the hook will be called with this commandline:
/etc/libvirt/hooks/network network_name started begin -
stdin will contain the entire network XML definition in case you want
details, or want to extract some task-specific metadata from the network
definition (syntax for that is here:
https://libvirt.org/formatnetwork.html#elementsMetadata )
The same script will be called before the network is started, after it's
shut down, and whenever a guest interface is attached or detached from
the network - the details are in the web page linked above.