Skip to content

fix: prevent losing SSH connection during CNS uninstall - #125

Merged
7 commits merged into
NVIDIA:25.7.0from
singh-kalpana:fix/safer-iptables-cleanup
Aug 25, 2025
Merged

fix: prevent losing SSH connection during CNS uninstall#125
7 commits merged into
NVIDIA:25.7.0from
singh-kalpana:fix/safer-iptables-cleanup

Conversation

@singh-kalpana

Copy link
Copy Markdown
Contributor

What this PR does / why we need it?

Issue: While uninstalling CNS, system is going unreachable at this step:

TASK [IPTables Cleanup] **************************************************************************************************************************************
changed: [localhost] => (item=iptables -F)
changed: [localhost] => (item=ip link delete cni0)
changed: [localhost] => (item=ip link delete flannel.1)

TASK [Check docker is installed] *****************************************************************************************************************************

After rebooting the machine, everything returns to normal. The issue is that the user has to be physically present at their dev machine whenever it occurs to reboot the system

Reason: IPTables Cleanup task clearing the iptables rules, which can cause the system to become unreachable. As mentioned in this doc, safer approach is to accept all traffic first to avoid ssh lockdown

Changes:
Added new task Reset iptables default policies to ACCEPT before the existing IPTables Cleanup task

Anurag Guda and others added 7 commits April 24, 2025 13:46
Merge pull request NVIDIA#112 from NVIDIA/25.4.0
Merge pull request NVIDIA#114 from NVIDIA/25.4.0
Merge pull request NVIDIA#115 from NVIDIA/25.4.0
 Merge pull request NVIDIA#121 from NVIDIA/25.7.0
Merge pull request NVIDIA#122 from NVIDIA/25.7.0
@singh-kalpana
singh-kalpana changed the base branch from master to 25.7.0 August 14, 2025 15:12
@ghost
ghost merged commit e6a840b into NVIDIA:25.7.0 Aug 25, 2025
This pull request was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant