Hi Neal,
On Thu, Jan 09, 2020 at 06:44:22AM -0500, Neal Gompa wrote:
On Thu, Jan 9, 2020 at 5:15 AM Phil Sutter <psutter(a)redhat.com>
wrote:
[...]
> Yes, firewalld depends on 'iptables'. My big question is
how to make
> that dependency prefer iptables-nft (assuming it 'Provides: iptables').
>
Requires: iptables
Suggests: iptables-nft
Ah, cool. Adding the Suggests: line to firewalld didn't come to mind. In
order to gain a bit of confidence, I played with dnf: If legacy iptables
and ebtables are installed, installing firewalld doesn't pull
iptables-nft. If OTOH none of arp-, eb- or iptables* is installed,
installing firewalld pulls in iptables-nft as a dependency. Sounds like
just what I wanted to achieve!
Thanks, Phil