Keep baseline lock outside writable system lock directory
This commit is contained in:
@@ -142,8 +142,8 @@ main() {
|
|||||||
preflight
|
preflight
|
||||||
if [[ "$action" == --preflight ]]; then echo 'Network baseline preflight passed; no configuration changed.'; return; fi
|
if [[ "$action" == --preflight ]]; then echo 'Network baseline preflight passed; no configuration changed.'; return; fi
|
||||||
umask 077
|
umask 077
|
||||||
trusted /run/lock/platform-host-baseline.lock
|
trusted /run/platform-host-baseline.lock
|
||||||
exec 9>>/run/lock/platform-host-baseline.lock; flock -n 9 || { fail 'Baseline maintenance already running'; return 1; }
|
exec 9>>/run/platform-host-baseline.lock; flock -n 9 || { fail 'Baseline maintenance already running'; return 1; }
|
||||||
[[ ! -e /var/lib/platform-bootstrap/ssh/pending && ! -e /run/platform-firewall/pending.nft ]] || { fail 'Resolve pending SSH/firewall maintenance before network tuning'; return 1; }
|
[[ ! -e /var/lib/platform-bootstrap/ssh/pending && ! -e /run/platform-firewall/pending.nft ]] || { fail 'Resolve pending SSH/firewall maintenance before network tuning'; return 1; }
|
||||||
preflight
|
preflight
|
||||||
if [[ $(sysctl -n net.ipv4.tcp_congestion_control) == bbr && $(sysctl -n net.core.default_qdisc) == fq &&
|
if [[ $(sysctl -n net.ipv4.tcp_congestion_control) == bbr && $(sysctl -n net.core.default_qdisc) == fq &&
|
||||||
|
|||||||
Reference in New Issue
Block a user