install: add --no-firewall / print firewall status (MR 2042)

The option, --no-firewall, will disable nftables on boot in the image,
and print a warning message if it's being disabled in a device image
where the device's kernel should support running the firewall.

Co-Authored-By: Oliver Smith <ollieparanoid@postmarketos.org>
This commit is contained in:
Clayton Craft 2021-03-31 11:31:37 -07:00 committed by Oliver Smith
parent 21c9e38162
commit f8fa80e20e
No known key found for this signature in database
GPG key ID: 5AE7F5513E0885CB
2 changed files with 65 additions and 0 deletions

View file

@ -53,6 +53,8 @@ def arguments_install(subparser):
# Other arguments (that don't fit categories below)
ret.add_argument("--no-sshd", action="store_true",
help="do not enable the SSH daemon by default")
ret.add_argument("--no-firewall", action="store_true",
help="do not enable the firewall by default")
# Image type
group_desc = ret.add_argument_group(