use ufw to configure iptable in ubuntu for mgmt server ports

frank-zhang · frank-zhang · commit f19e9252a4ba · 2011-09-12T16:44:20.000-07:00
diff --git a/python/lib/cloudutils/serviceConfig.py b/python/lib/cloudutils/serviceConfig.py
@@ -651,3 +651,23 @@ def __init__(self, syscfg):
             self.ports = "443 8080 8096 8250 8443 9090".split()
         else:
             self.ports = "8080 8096 8250 9090".split()
+
+class ubuntuFirewallConfigServer(firewallConfigServer):
+    def allowPort(self, port):
+        status = False
+        try:
+            status = bash("iptables-save|grep INPUT|grep -w %s"%port).isSuccess()
+        except:
+            pass
+        
+        if not status: 
+            bash("ufw allow %s/tcp"%port)
+            
+    def config(self):
+        try:
+            for port in self.ports:
+                self.allowPort(port)
+                
+            return True
+        except:
+            raise
diff --git a/python/lib/cloudutils/syscfg.py b/python/lib/cloudutils/syscfg.py
@@ -178,4 +178,4 @@ def __init__(self, glbEnv):
         super(sysConfigServerUbuntu, self).__init__(glbEnv)
         self.svo = serviceOpsUbuntu()
         self.services = [sudoersConfig(self), 
-                         firewallConfigServer(self)]
+                         ubuntuFirewallConfigServer(self)]
diff --git a/python/lib/cloudutils/utilities.py b/python/lib/cloudutils/utilities.py
@@ -155,7 +155,7 @@ def isKVMEnabled(self):
 class serviceOpsUbuntu(serviceOps):
     def isServiceRunning(self, servicename):
         try:
-            o = bash("service " + servicename + " status")
+            o = bash("/usr/sbin/service " + servicename + " status")
             if "running" in o.getStdout() or "start" in o.getStdout():
                 return True
             else:
@@ -165,7 +165,7 @@ def isServiceRunning(self, servicename):
 
     def stopService(self, servicename,force=False):
         if self.isServiceRunning(servicename) or force:
-            return bash("service " + servicename +" stop").isSuccess()
+            return bash("/usr/sbin/service " + servicename +" stop").isSuccess()
 
     def disableService(self, servicename):
         result = self.stopService(servicename)
