wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-09-25 21:25:27 +02:00
Code Issues Projects Releases Wiki Activity
algo/roles/common/tasks
History
Dan Guido 315898fafb
Fix Ubuntu 22.04 compatibility issues (#14824) 
This commit addresses two critical issues preventing Algo from working
on Ubuntu 22.04:

1. Load af_key kernel module for StrongSwan
   - Ubuntu 22.04 minimal installs don't load af_key by default
   - Without this module, StrongSwan fails with namespace errors
   - Added modprobe task to ensure module is loaded persistently

2. Force iptables-legacy mode on Ubuntu 22.04+
   - Ubuntu 22.04 uses iptables-nft backend by default
   - This causes firewall rules to be reordered incorrectly
   - VPN traffic gets blocked by misplaced DROP rules
   - Switching to iptables-legacy ensures correct rule ordering

These changes restore full VPN functionality (both WireGuard and IPsec)
on Ubuntu 22.04 installations.

Closes #14820

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-08-16 13:19:59 -04:00
..
aip Fix DigitalOcean cloud-init compatibility and deprecation warnings (#14801) 2025-08-03 14:25:47 -04:00
bsd_ipv6_facts.yml Fix IPv6 address selection on BSD systems (#14786) 2025-08-03 17:15:27 -07:00
facts.yml Fix AWS Lightsail deployment error (boto3 parameter) (#14823) 2025-08-16 03:39:00 -04:00
iptables.yml Ansible upgrade 6.1 (#14500) 2022-07-30 15:01:24 +03:00
main.yml Fix AWS Lightsail deployment error (boto3 parameter) (#14823) 2025-08-16 03:39:00 -04:00
packages.yml feat: Add comprehensive performance optimizations to reduce deployment time by 30-60% 2025-08-03 16:42:17 -07:00
ubuntu.yml Fix Ubuntu 22.04 compatibility issues (#14824) 2025-08-16 13:19:59 -04:00
unattended-upgrades.yml Unattended upgrade fixes (#1485) 2019-06-24 10:23:34 +02:00