Remove chain before executing recipe

boxcutter · Sep 19, 2024 · 9fe2d24 · 9fe2d24
1 parent 8dfcd49
commit 9fe2d24
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/cookbooks/boxcutter_init/recipes/default.rb b/cookbooks/boxcutter_init/recipes/default.rb
@@ -130,8 +130,7 @@
 
   node.default['fb_ipset']['auto_cleanup'] = false
   include_recipe 'fb_ipset'
-
-  include_recipe 'fb_iptables'
+
   if node['kernel']['machine'] == 'aarch64'
     # tegras don't include the iptable_raw module by default
     ruby_block 'remove iptables raw dynamic chain' do
@@ -140,6 +139,8 @@
       end
     end
   end
+
+  include_recipe 'fb_iptables'
 end
 # if node.linux? && !node.container?
 #   include_recipe 'fb_chrony'