Firewall: Difference between revisions
Appearance
No edit summary |
→Configuring the kernel to support nftables: FW will not only be enabled in new installs, also existing ones |
||
Line 16: | Line 16: | ||
* Boot it and verify that the firewall works | * Boot it and verify that the firewall works | ||
* Create a merge request to pmaports.git with your changes | * Create a merge request to pmaports.git with your changes | ||
== See also == | == See also == |
Revision as of 21:11, 10 June 2021
Firewall is currently being implemented in pmbootstrap!2042 and pmaports!2060. This wiki page explains how it will be once both MRs are merged. |
New postmarketOS installations have nftables configured if the device's kernel has support for it.
Default rules
(explain default rules here)
Usage
(explain how to enable / disable it, explain -openusb)
Configuring the kernel to support nftables
- Run
pmbootstrap kconfig check --nftables kernel-name
to get a list of kernel config options that need to be changed - Fix them up with
pmbootstrap kconfig edit
- Add
pmb:kconfigcheck-nftables
tooptions=
in your kernel's APKBUILD - Create a test install with
pmbootstrap install
- Boot it and verify that the firewall works
- Create a merge request to pmaports.git with your changes
See also
- pmbootstrap!2042: add support for firewall
- pmaports!2060: postmarketos-firewall: add package for installing/configuring default fw
- build.postmarketos.org#100: build all main and community devices with firewall enabled