tree 7bc78b3c09eb720b2390ae4a256577b116f7aefa
parent dcb59e326e10fc6c51f81ee11a9b833d4c68f060
author Robert Kolchmeyer <rkolchmeyer@google.com> 1613164207 -0800
committer Robert Kolchmeyer <rkolchmeyer@google.com> 1613183061 +0000

project-lakitu: Wait for xtables lock

All iptables/ip6tables commands that we run should be run with "-w".
This tells iptables to block until the xtables lock is available.

Since iptables commands are usually fast and often run without any other
external synchronization, using "-w" will avoid erroneous iptables
failures due to lock contention.

BUG=b/177344770
TEST=presubmit
RELEASE_NOTE=None

Change-Id: Iee2c1f99189cc280d18d088867e07cd8765c5b77
Reviewed-on: https://cos-review.googlesource.com/c/cos/overlays/board-overlays/+/12390
Reviewed-by: Dexter Rivera <riverade@google.com>
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>