require "ipaddr"
+network_packages = []
+
node[:networking][:interfaces].each do |name, interface|
+ network_packages |= ["vlan"] if interface[:interface] =~ /\.\d+$/
+ network_packages |= ["ifenslave"] if interface[:bond]
+
if interface[:role] && (role = node[:networking][:roles][interface[:role]])
if role[interface[:family]]
node.set[:networking][:interfaces][name][:prefix] = role[interface[:family]][:prefix]
prefix = node[:networking][:interfaces][name][:prefix]
- # rubocop:disable Style/RedundantParentheses
node.set[:networking][:interfaces][name][:netmask] = (~IPAddr.new(interface[:address]).mask(0)).mask(prefix)
node.set[:networking][:interfaces][name][:network] = IPAddr.new(interface[:address]).mask(prefix)
- # rubocop:enable Style/RedundantParentheses
end
+package network_packages
+
template "/etc/network/interfaces" do
source "interfaces.erb"
owner "root"
rate_limit "s:1/sec:5"
end
-%w(ucl ic bm).each do |zone|
+%w(ucl ic bm aws).each do |zone|
firewall_rule "accept-openvpn-#{zone}" do
action :accept
family :inet