Shorewall on Opensuse MicroOS (immutable distro)

"Nicola Ferrari (#554252)" <[email protected]> Tue, 2 Jan 2024 13:10:37 +0000
Newsgroups gmane.comp.security.shorewall
Message-ID <[email protected]>
Hi guys and happy new year!

Just in case if someone will need this...

To install shorewall on MicroOS, since it's an immutable distro and you 
cannot modify the system root directly, you have to use the 
transactional-update command which allows you to temporary access a 
read-write shell on the system, install packages, and apply modifications.

You'll have to:

transactional-update pkg install shorewall
transactional-update apply

It automatically takes shorewall from the zypper repos as a normal Suse 
will do, install it and create a snapshot of the current state. By the 
"apply" command you ask the system to activate the new snapshot without 
having to reboot.

Anyway this install approach should be used only for a minimum set of 
system packages since normal software is supposed to be installed using 
flatpak.. But I though shorewall is one of these rare cases.

HtH, happy new year!
nik