dougvj

From e3f1af9e14f8311fb40f09057e5578e7121b346f Mon Sep 17 00:00:00 2001
From: Doug Johnson <[email protected]>
Date: Tue, 2 Jul 2019 03:29:31 -0600
Subject: [PATCH] overlayfs: disable in-use check

---
 fs/overlayfs/super.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/fs/overlayfs/super.c b/fs/overlayfs/super.c

dougvj

// This function returns the string representation of an IP address in an IPv6
// stack. Connections from IPv4 addresses are mapped to IPv6 addresses under
// the ::FFFF prefix. This checks for that mapping and if it exists returns the
// conversion as though the addresss were a native IPv4 Address.
//
// addr is a pointer to a valid sockaddr_in6 struct.
//
// dest must be a buffer of at least size INET6_ADDRSTRLEN
//
// The return is a pointer to dest, otherwise if NULL then errno is set, see

dougvj

# Adapted from github comment:
# https://github.com/dimitri/pgloader/issues/782#issuecomment-1136067634

if [ -z "$3" ]; then
    echo "Usage: $0 <db name> <mysql dump> <psql dump output>"
    echo "Requirements: docker"
    exit 1
fi

if ! command -v docker &> /dev/null

dougvj

set -e
WAN_IF=br0.2
LAN_IF=br0
WAN_IP=$(ip -4 -o addr show dev $WAN_IF | awk '{print $4}' | cut -d/ -f1)
echo "WAN IP: $WAN_IP"
# Block incoming connection on WAN except port 22
iptables -F INPUT
iptables -A INPUT -i $WAN_IF -p tcp --dport 22 -j ACCEPT
# Allow 80 and 443 (currently via docker)
#iptables -A INPUT -i $WAN_IF -p tcp --dport 80 -j ACCEPT