Uploaded image for project: 'Modules'
  1. Modules
  2. MODULES-10535

firewall: puppet run fails during kickstart (CentOS8)

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Normal
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: firewall
    • Labels:
      None
    • Environment:
      • puppet 6.11.1
      • firewall 2.2.0
      • CentOS 8.0.1905
    • Template:
      MODULES Bug Template
    • Method Found:
      Needs Assessment
    • QA Risk Assessment:
      Needs Assessment

      Description

      Basic Info
      Module Version:2.2.0
      Puppet Version:6.11.1
      OS Name/Version: CentOS 8.0.1905

      When running puppet in a kickstart %post section, it fails with:

      Error: Could not prefetch firewall provider 'iptables': Execution of '/sbin/iptables-save' returned 1: iptables-save/1.8.2 Failed to initialize nft: Protocol not supported
      Error: Failed to apply catalog: Execution of '/sbin/iptables-save' returned 1: iptables-save/1.8.2 Failed to initialize nft: Protocol not supported

      With the firewall module installed but all references to firewall rules are removed the run does not fail.

      Using tags to try and bypass the firewall rules doesn't work - if a firewall rule is anywhere in the manifest the above error occurs.

      This is causing the puppet run to fail prematurely.

      Desired behaviour:

      the puppet run should not fail - a warning should be displayed, but the run continues.

      or

      iptables should only be updated if a resource is being applied. (ie, bypassing resources with tags would work)

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            username123 Greg Wickham
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:

                Zendesk Support