nixosTests.firewall-firewalld: wait until state is running

2026-06-12 15:23:42 +08:00
parent df041989dc
commit 04b8fdb00a
1 changed files with 5 additions and 0 deletions
@@ -89,12 +89,17 @@
        else
          "nixos-firewall-tool open tcp 80";
      reset = if backend == "firewalld" then "firewall-cmd --reload" else "nixos-firewall-tool reset";
+      # https://github.com/firewalld/firewalld/issues/1571
+      waitForFirewalld = lib.optionalString (backend == "firewalld") ''
+        walled.wait_until_succeeds("firewall-cmd --state")
+      '';
    in
    ''
      start_all()

      walled.wait_for_unit("${unit}")
      walled.wait_for_unit("httpd")
+      ${waitForFirewalld}
      attacker.wait_for_unit("network.target")

      # Local connections should still work.