commit 5538c16344d49fab1fdce60c7c74d490753fc7dd
author Willy Tu <wltu@google.com> Wed Feb 10 11:44:57 2021 -0800
committer Willy Tu <wltu@google.com> Tue Feb 16 13:55:40 2021 -0800
tree 7fedb6a54e61b5f63eb77f2c36ca84b7ebb3443e
parent 89505a05d9c00836e3f7834901528f4f63edc289

meta-google: recipes-google: nftables: Import from gBMC

Initial recipes-google/nftables code from gBMC.

Google-Bug-Id: 179618498
Upstream: 8ac594bdf054082ca6dbe35c4345759fe4c31669
Signed-off-by: Willy Tu <wltu@google.com>
Change-Id: Ic768cd1ffeec5831063c9a0f5cdbc8fdcd36a862

meta-google/recipes-google/nftables/files/nftables.service

diff --git a/meta-google/recipes-google/nftables/files/nftables.service b/meta-google/recipes-google/nftables/files/nftables.service
new file mode 100644
index 0000000..7130dea
--- /dev/null
+++ b/meta-google/recipes-google/nftables/files/nftables.service
@@ -0,0 +1,11 @@
+[Unit]
+Before=network-pre.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/bin/bash -c 'echo /etc/nftables/*.rules | xargs -n 1 nft -f'
+ExecStop=/bin/bash -c 'nft flush ruleset'
+
+[Install]
+WantedBy=multi-user.target