From 4a8163b499c775408acc380e0c2ba3d40fab78c4 Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Mon, 17 Jun 2024 15:16:50 +0200 Subject: [PATCH] r1 --- .github/workflows/deploy-gh.yaml | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 2081cd2..570578b 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -30,8 +30,13 @@ jobs: ssh-keygen -q -b 2048 -t rsa -N '' -C 'cluster key' -f ~/.ssh/id_rsa cp ~/.ssh/id_rsa.pub ~/.ssh/authorized_keys cp ~/.ssh/id_rsa.pub . - sudo iptables -S - sudo iptables -D -P FORWARD DROP + sudo iptables -P INPUT ACCEPT + sudo iptables -P FORWARD ACCEPT + sudo iptables -P OUTPUT ACCEPT + sudo iptables -t nat -F + sudo iptables -t mangle -F + sudo iptables -F + sudo cat /var/log/auth.log - name: Upload control node data @@ -69,10 +74,13 @@ jobs: - run: | set -vx - # sudo iptables -P INPUT ACCEPT - # sudo iptables -P OUTPUT ACCEPT - # sudo iptables -P FORWARD ACCEPT - # sudo iptables -F + sudo iptables -P INPUT ACCEPT + sudo iptables -P FORWARD ACCEPT + sudo iptables -P OUTPUT ACCEPT + sudo iptables -t nat -F + sudo iptables -t mangle -F + sudo iptables -F + sudo iptables -S echo ${{ matrix.id }} ip=$(cat control-node-ip.txt)