Re: [atomic-devel] firewalld in atomic host

[Colin Walters <walters verbum org>]

On Fri, Apr 21, 2017, at 10:16 AM, Dusty Mabe wrote:
> NOTE: if you respond to this message please 'reply-all'.
> 
> I'd like to discuss firewalld on atomic host. 

I think there here are two cases:

AH-as-Kube/OpenShift host:  In this I'd turn the conversation around - do
 Kube/OpenShift want to depend on firewalld?   This has come up before,
 see https://bugzilla.redhat.com/show_bug.cgi?id=1403331

Standalone/"pet" AH: I think that package layering solves
this today (and other "pet" cases), and ideally we would also provide a container.

Basically I don't have a definitive answer myself, but hopefully at
least the above bz link is useful.