Capture the catalogue modules' remaining files directories and templates at mesh-catalog bb0fe93b for the moved catalogue tests (issue 1379)

Part 4 of 4 of go/testdata/beside.
2026-10-20 08:20:05 +00:00
parent 013d6231ed
commit 781ba6aeb4
163 changed files with 3255 additions and 0 deletions
@@ -0,0 +1,14 @@
+[Unit]
+Description=The mesh's packet filter, derived from what is assigned to this node
+Wants=network-pre.target
+Before=network-pre.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=nft -f /etc/nftables.conf
+ExecReload=nft -f /etc/nftables.conf
+ExecStop=nft delete table inet mesh
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,5 @@
+# The mesh: stopping the stock unit deletes only the mesh's table, never the whole ruleset
+# (novox/hq ADR 0100) — a flush would take the container runtime's rules and any firewall with it.
+[Service]
+ExecStop=
+ExecStop=nft delete table inet mesh