it would need a major rewrite, but given we typically query 3 facts (facterversion, OS name, OS major version) it would make sense to make a more optimized index, but I haven't had time to play with that

I think it is time for a new major release that drops those old factsets

some got manipulated so much with sed, they probably arent even correct

that might be something to poke binford2k about... make sure that there's not some looming explosion that would be caused by it

some people just want to see the build break^w^wworld burn

I am that guy some days, but usually on something less critical^H^H^H^H^H^H^H^Hpublic

Makes sense to drop old factsets to me. People needing them can always pin to old versions

my irc client can do that as well \o/

because I hate manual jobs to generate data I took a stab at automating it: https://github.com/voxpupuli/facterdb/pull/262

on a related note: I'd love to do the same with REFERENCE.md

keep it out of git and generate it when needed

perhaps make some easy CI job to preview it

ewoud: ah nice

We are installing new systems with RHEL9 which uses firewalld. We created a middle module for our firewall rules that checks whether a system should be using firewalld or iptables and creates the proper resources. We are running into an issue of having extra zones (for example, if something gets removed and leaves a zone empty). Is there a good way to purge zones that aren't being used?

@Yehuda Katz, you can configure resources to purge, and only create ones in Puppet

yep, though you do need to make sure your type (or provider really) can load all zones correctly

that is, implements, uh, what's it called

prefetch?

yes!

I think it means implementing the instances method

@Yehuda Katz I find firewalld... Difficult. Why not use nftables? The iptables mod should work.

I don't think el9 provides iptables compat layers anymore

This message was deleted.

there is https://github.com/voxpupuli/puppet-nftables

native nftables has atomic application, so you can't purge part of your rules like with iptables

certainly a reason to prefer nftables over iptables

I haven't used it in more than 2 decades and yet I still miss ipf on *bsd

Life is hard without EPEL packages