Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make masking Service['firewalld'] optional #20

Merged
merged 1 commit into from
Nov 24, 2020

Conversation

nbarrientos
Copy link
Collaborator

@nbarrientos nbarrientos commented Nov 24, 2020

Users might be completely removing firewalld from the system when using this module. Unfortunately masking an unexisting systemd unit leads to errors when applying the catalog:

Info: Applying configuration version '1606207933'
Error: Could not disable firewalld:
Error: /Stage[main]/Nftables/Service[firewalld]/enable: change from 'false' to 'mask' failed: Could not disable firewalld:

This patch allows module users to disable the unit masking which is enough to get a clean Puppet run if there's no trace of firewalld in the system.

@nbarrientos nbarrientos marked this pull request as draft November 24, 2020 09:03
@traylenator
Copy link
Collaborator

LGTM

The fact that enable => false is okay on a non-existent service and enable => mask is not okay is a puppet bug I would say.

@nbarrientos nbarrientos marked this pull request as ready for review November 24, 2020 09:32
@nbarrientos
Copy link
Collaborator Author

Ready to be reviewed.

@duritong duritong merged commit 587e522 into voxpupuli:master Nov 24, 2020
@traylenator traylenator added the enhancement New feature or request label Dec 10, 2020
figless pushed a commit to figless/puppet-nftables that referenced this pull request Aug 25, 2021
9246192 Merge pull request voxpupuli#16 from cernops/icmp
587e522 Merge pull request voxpupuli#20 from cernops/firewalld_mask
ae9872e Make masking Service['firewalld'] configurable
79e9a23 Move ICMP stuff to separate classes

git-subtree-dir: code
git-subtree-split: 9246192
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants