Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#49292 - [nftables] Please consider moving nftables.conf away from /etc

Attached to Project: Arch Linux
Opened by Earnestly (Earnest) - Tuesday, 10 May 2016, 23:04 GMT
Last edited by Sébastien Luttringer (seblu) - Thursday, 12 May 2016, 19:44 GMT
Task Type Feature Request
Category Packages: Extra
Status Closed
Assigned To Sébastien Luttringer (seblu)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

I realise that you provide a helper script to be used with a systemd service to load this file but it would be helpful if the nftables.conf file was placed somewhere else such as /usr/share/nftables along with the other examples and the user prompted in the post-install to copy it over.

The main reason I'm requesting this is I try to provide system configuration across various machines as packages making my job a lot easier; however I would like to avoid stepping on official packages toes as much as possible.

Fortuantely lots of software these days uses locations such as /usr/lib or provide defaults as part of the software itself with /etc configuration acting as override so my scheme of packages is fairly successful for most packages.
This task depends upon

Closed by  Sébastien Luttringer (seblu)
Thursday, 12 May 2016, 19:44 GMT
Reason for closing:  Won't implement
Comment by Doug Newgard (Scimmia) - Wednesday, 11 May 2016, 06:45 GMT
Unless the software provides a way to override a default config, this really doesn't work.
Comment by Earnestly (Earnest) - Wednesday, 11 May 2016, 11:14 GMT
Upstream doesn't provide any such mechanism as there is no concept of a "default config". This behaviour is purely downstream; although I'm not really suggesting removing the script or service (although removing the script would be okay too, having the service just run the #!/bin/nft directly.)

nft (un)fortunately doesn't appear to have the ability to do conditional includes so implementing the same kind of /usr/lib vs. /etc fallback isn't possible.

Depending on what the maintainer thinks I can just maintain my own package of nftables as I do with many of Arch's packages which don't quite suit my needs.
Comment by Earnestly (Earnest) - Wednesday, 11 May 2016, 11:18 GMT
Oh I just realised, I can exploit pacman's NoExtract for this purpose too. (Pacman is another package which has its default config in /etc/pacman.conf :-P). So whatever the outcome I can workaround it with varying degrees of ease.

[Side rant: I wish every piece of software had the concept of internal defaults with /usr/lib distro override leading to /etc admin override and finally CONFIG_HOME user override, alas.]

Loading...