[PR #1388] [MERGED] feat: add native firewalld support #397

New Issue

2026-11-11T16:41:36+01:00

Alvin-Zilverstand commented

2026-11-11 16:41:36 +01:00

📋 Pull Request Information

Original PR: https://github.com/angristan/openvpn-install/pull/1388
Author: @angristan
Created: 12/13/2025
Status: ✅ Merged
Merged: 12/13/2025
Merged by: @angristan

Base: master ← Head: feature/firewalld-support

📝 Commits (4)

210f7d0 feat: add native firewalld support
03b9666 test: add firewalld test support
fa4b6d5 docs: update README and FAQ for firewalld support
652a940 fix: use source-based firewalld rules instead of interface binding

📊 Changes

6 files changed (+148 additions, -56 deletions)

View changed files

📝 .github/workflows/docker-test.yml (+10 -0)
📝 FAQ.md (+2 -2)
📝 README.md (+2 -2)
📝 openvpn-install.sh (+57 -29)
📝 test/Dockerfile.server (+10 -0)
📝 test/server-entrypoint.sh (+67 -23)

📄 Description

Summary

Add native firewalld support for RHEL/Fedora/CentOS systems
When firewalld is active, use firewall-cmd --permanent instead of raw iptables
Rules persist across firewall-cmd --reload
Fall back to iptables when firewalld is not active
Add After=firewalld.service to iptables systemd unit for safety

Changes

Install: Detect firewalld, use firewall-cmd to add port, masquerade, and rich rules. Fall back to iptables if inactive.

Uninstall: Detect which method was used and clean up accordingly.

Tests: Add fedora-42-firewalld CI test with firewalld enabled.

Closes https://github.com/angristan/openvpn-install/issues/356
Closes https://github.com/angristan/openvpn-install/pull/1200

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/angristan/openvpn-install/pull/1388 **Author:** [@angristan](https://github.com/angristan) **Created:** 12/13/2025 **Status:** ✅ Merged **Merged:** 12/13/2025 **Merged by:** [@angristan](https://github.com/angristan) **Base:** `master` ← **Head:** `feature/firewalld-support` --- ### 📝 Commits (4) - [`210f7d0`](https://github.com/angristan/openvpn-install/commit/210f7d05b0bef9973b9eaaed6fc861c28f1563af) feat: add native firewalld support - [`03b9666`](https://github.com/angristan/openvpn-install/commit/03b966604012d611cde4fb86934c168df1eb18ae) test: add firewalld test support - [`fa4b6d5`](https://github.com/angristan/openvpn-install/commit/fa4b6d55b10cd031f074a6bdde8d3d7d4ef86c60) docs: update README and FAQ for firewalld support - [`652a940`](https://github.com/angristan/openvpn-install/commit/652a9400008e2fbd663c042a1836bb6fe6483d9a) fix: use source-based firewalld rules instead of interface binding ### 📊 Changes **6 files changed** (+148 additions, -56 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/docker-test.yml` (+10 -0) 📝 `FAQ.md` (+2 -2) 📝 `README.md` (+2 -2) 📝 `openvpn-install.sh` (+57 -29) 📝 `test/Dockerfile.server` (+10 -0) 📝 `test/server-entrypoint.sh` (+67 -23) </details> ### 📄 Description ## Summary - Add native firewalld support for RHEL/Fedora/CentOS systems - When firewalld is active, use `firewall-cmd --permanent` instead of raw iptables - Rules persist across `firewall-cmd --reload` - Fall back to iptables when firewalld is not active - Add `After=firewalld.service` to iptables systemd unit for safety ## Changes **Install:** Detect firewalld, use `firewall-cmd` to add port, masquerade, and rich rules. Fall back to iptables if inactive. **Uninstall:** Detect which method was used and clean up accordingly. **Tests:** Add `fedora-42-firewalld` CI test with firewalld enabled. --- Closes https://github.com/angristan/openvpn-install/issues/356 Closes https://github.com/angristan/openvpn-install/pull/1200 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

Alvin-Zilverstand added the pull-request label 2026-11-11 16:41:36 +01:00

Alvin-Zilverstand closed this issue

2026-11-11 16:41:36 +01:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/openvpn-install#397