From 5a8e60918911049bd90b58cec11cbeef5e33cf43 Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Mon, 27 Sep 2021 13:10:49 -0400
Subject: [PATCH] tests: add ext.config.firewall.iptables-legacy test

Let's confirm for now that we're using iptables-legacy by default
until we switch to defaulting to iptables-nft.

See https://github.com/coreos/fedora-coreos-tracker/issues/676
---
 tests/kola/firewall/iptables-legacy | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100755 tests/kola/firewall/iptables-legacy

diff --git a/tests/kola/firewall/iptables-legacy b/tests/kola/firewall/iptables-legacy
new file mode 100755
index 0000000000..c21373026e
--- /dev/null
+++ b/tests/kola/firewall/iptables-legacy
@@ -0,0 +1,20 @@
+#!/bin/bash
+# kola: { "exclusive": false }
+set -xeuo pipefail
+
+ok() {
+    echo "ok" "$@"
+}
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+# Make sure we're still on legacy iptables for now
+# https://github.com/coreos/fedora-coreos-tracker/issues/676#issuecomment-928028451
+if ! iptables --version | grep legacy; then
+    iptables --version # output for logs
+    fatal "iptables version is not legacy"
+fi
+ok "iptables still in legacy mode"