do not abort if security groups does not exists

Simply create an empty chain instead.

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index bd17ee6d4b9663892c81e617a1a3fec19d67b583..fd83ba32438ae3787f61a7884eb83a7fb1ee4dc9 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -1728,10 +1728,14 @@ sub enable_host_firewall {
 
 sub generate_group_rules {
     my ($ruleset, $cluster_conf, $group) = @_;
 
 sub generate_group_rules {
     my ($ruleset, $cluster_conf, $group) = @_;

-    die "no such security group '$group'\n" if !$cluster_conf->{groups}->{$group};

 
     my $rules = $cluster_conf->{groups}->{$group};
 
 
     my $rules = $cluster_conf->{groups}->{$group};
 

+    if (!$rules) {
+       warn "no such security group '$group'\n";
+       $rules = []; # create empty chain
+    }
+

     my $chain = "GROUP-${group}-IN";
 
     ruleset_create_chain($ruleset, $chain);
     my $chain = "GROUP-${group}-IN";
 
     ruleset_create_chain($ruleset, $chain);