it-team/lmn-client
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: it-team:1f45184d0c272529e9d68d98b223a111424169e0
Branches Tags
it-team:main
it-team:bookworm
it-team:tpm2
it-team:dev
it-team:fvs
...
compare: it-team:cdfc7c2d9c7338afc46302254d012bd5b6208f18
Branches Tags
it-team:main
it-team:bookworm
it-team:tpm2
it-team:dev
it-team:fvs

2 commits
1f45184d0c ... cdfc7c2d9c

Author SHA1 Message Date
Raphael Dannecker
cdfc7c2d9c Set the environment variable for the path to KiCad's 3D models (NFS) 2025-12-17 19:43:54 +01:00
Raphael Dannecker
04a5e8b455 Enable ARP support in nftable for outbound restriction in exam_mode 2025-12-17 19:43:33 +01:00
2 changed files with 13 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
roles/custom/fvs/tasks/main.yml
View file

@ -251,5 +251,12 @@
KERNEL=="mmcblk[0-9]", ENV{ID_NAME}=="?*", ENV{ID_SERIAL}=="?*", GROUP="domain users" KERNEL=="mmcblk[0-9]", ENV{ID_NAME}=="?*", ENV{ID_SERIAL}=="?*", GROUP="domain users"
KERNEL=="mmcblk[0-9]p[0-9]*", ENV{ID_NAME}=="?*", ENV{ID_SERIAL}=="?*", GROUP="domain users" KERNEL=="mmcblk[0-9]p[0-9]*", ENV{ID_NAME}=="?*", ENV{ID_SERIAL}=="?*", GROUP="domain users"
- name: Set KiCad 3Dmodel path
ansible.builtin.lineinfile:
path: /etc/environment.d/90lmn-kicad.conf
create: true
mode: '0644'
line: KICAD9_3DMODEL_DIR=/lmn/tools/KiCad/kicad-packages3D
- name: Include sync - name: Include sync
ansible.builtin.include_tasks: sync.yml ansible.builtin.include_tasks: sync.yml

10
roles/lmn_exam/templates/no-way-out-nftable.j2
View file

@ -13,15 +13,17 @@ ${filterchain}
chain filterin_${interface} { chain filterin_${interface} {
type filter hook ingress device ${interface} priority filter; policy drop; type filter hook ingress device ${interface} priority filter; policy drop;
ip saddr \$allowed_ipv4 accept ip saddr \$allowed_ipv4 accept
ip saddr ${gateway} accept; ip saddr ${gateway} accept
ip saddr 255.255.255.255 accept; ip saddr 255.255.255.255 accept
ether type arp accept
} }
chain filterout_${interface} { chain filterout_${interface} {
type filter hook egress device ${interface} priority filter; policy drop; type filter hook egress device ${interface} priority filter; policy drop;
ip daddr \$allowed_ipv4 accept ip daddr \$allowed_ipv4 accept
ip daddr ${gateway} accept; ip daddr ${gateway} accept
ip daddr 255.255.255.255 accept; ip daddr 255.255.255.255 accept
ether type arp accept
} }
EOF EOF
) )