Uploaded image for project: 'Modules'
  1. Modules
  2. MODULES-8736

puppetlabs-firewall : RHEL8 iptables-services package requires

    Details

    • Type: Bug
    • Status: In Progress
    • Priority: Normal
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: firewall
    • Labels:
      None
    • Environment:
      • RHEL8
      • puppet 5.5.x
      • puppetlabs-firewall from git master
    • QA Risk Assessment:
      Needs Assessment

      Description

      Basic Info
      Module Version: git from master branch
      *Puppet Version: 5.5.x *
      OS Name/Version: RHEL8 Beta

      Currently on rhel8 the firewall module requires the nftables package name:
      https://github.com/puppetlabs/puppetlabs-firewall/blob/master/manifests/params.pp#L27

      default: {
      if versioncmp($::operatingsystemrelease, '8.0') >= 0

      { $service_name = 'nftables' $service_name_v6 = undef $package_name = 'nftables' $sysconfig_manage = false }

      But in order to persist the rules the it needs the init scripts:
      "Warning: Firewall[998 log all ipv4](provider=iptables): Unable to persist firewall rules: Execution of '/usr/libexec/iptables/iptables.init save' returned 1: Error: Could not execute posix command: No such file or directory - /usr/libexec/iptables/iptables.init",

      Those are contained in the iptables-services package

      Desired Behavior:
      Package pulled in automatically and persistence working out of the box

      Actual Behavior:
      iptables-services is not installed and hence persisting them errors out

        Attachments

          Activity

            People

            • Assignee:
              emacchi Emilien Macchi
              Reporter:
              mbaldessari Michele Baldessari
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:

                Zendesk Support