disable firewalld.  it and docker like to get into fights
horrific way to set up routable networking....
restart etcd if it was updated
don't count the file 'touch' to keep imdepotence as a 'change'