firewall: allow selecting firewall backend via env var

2023-11-03 09:34:02 +01:00
parent f643dd1f24
commit d54c747f7e
2 changed files with 30 additions and 5 deletions
@@ -573,3 +573,9 @@ SYSTEMD_HOME_DEBUG_SUFFIX=foo \

 * `$SYSTEMD_REPART_OVERRIDE_FSTYPE` – if set the value will override the file
  system type specified in Format= lines in partition definition files.
+
+`systemd-nspawn`, `systemd-networkd`:
+
+* `$SYSTEMD_FIREWALL_BACKEND` – takes a string, either `iptables` or
+  `nftables`. Selects the firewall backend to use. If not specified tries to
+  use `nftables` and falls back to `iptables` if that's not available.