add init function

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 73005ab7bced11f6d5bb37b4de3066e7fecc87ed..667c876ce87275715ef7f77898197b7cb539cdb5 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -2928,6 +2928,16 @@ sub remove_pvefw_chains {
     iptables_restore_cmdlist($cmdlist);
 }
 
+sub init {
+    my $cluster_conf = load_clusterfw_conf();
+    my $cluster_options = $cluster_conf->{options};
+    my $enable = $cluster_options->{enable};
+
+    return if !$enable;
+
+    # load required modules here
+}
+
 sub update {
     my ($verbose) = @_;
 
@@ -2956,5 +2966,4 @@ sub update {
     run_locked($code);
 }
 
-
 1;

diff --git a/src/pve-firewall b/src/pve-firewall
index 875a753691845c03d85496530fea4a6ffb675b8b..0c929794693d4e4be9373fcdb51cd7a6346cb6a7 100755 (executable)
--- a/src/pve-firewall
+++ b/src/pve-firewall
@@ -114,6 +114,10 @@ sub run_server {
 
     delete $ENV{RESTART_PVE_FIREWALL};
 
+    PVE::Cluster::cfs_update();
+    
+    PVE::Firewall::init();
+
     if (!$param->{debug}) {
        open STDIN,  '</dev/null' || die "can't read /dev/null";
        open STDOUT, '>/dev/null' || die "can't write /dev/null";