From 9fe2d240159d2c9f40221a22a6098fd9aa8a19ec Mon Sep 17 00:00:00 2001
From: Mischa Taylor <taylor@linux.com>
Date: Thu, 19 Sep 2024 16:03:08 -0400
Subject: [PATCH] Remove chain before executing recipe

---
 cookbooks/boxcutter_init/recipes/default.rb | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/cookbooks/boxcutter_init/recipes/default.rb b/cookbooks/boxcutter_init/recipes/default.rb
index 683a56a..1e8ec1f 100644
--- a/cookbooks/boxcutter_init/recipes/default.rb
+++ b/cookbooks/boxcutter_init/recipes/default.rb
@@ -130,8 +130,7 @@
 
   node.default['fb_ipset']['auto_cleanup'] = false
   include_recipe 'fb_ipset'
-
-  include_recipe 'fb_iptables'
+  
   if node['kernel']['machine'] == 'aarch64'
     # tegras don't include the iptable_raw module by default
     ruby_block 'remove iptables raw dynamic chain' do
@@ -140,6 +139,8 @@
       end
     end
   end
+
+  include_recipe 'fb_iptables'
 end
 # if node.linux? && !node.container?
 #   include_recipe 'fb_chrony'