This message was deleted.
# puppet-enterprises
Slackbot
05/18/2023, 7:36 PMThis message was deleted.
m
Mike Langhorst
05/18/2023, 7:37 PMclass caiso_unix_firewalld {
package { 'firewalld':
ensure => present,
}
service { 'firewalld':
ensure => running,
enable => true,
}
file { '/etc/firewalld/zones':
ensure => directory,
owner => 'root',
group => 'root',
mode => '0750',
}
}
Mike Langhorst
05/18/2023, 7:37 PMclass caiso_unix_firewalld::nrpe {
require caiso_unix_firewalld
$zonefile = $facts['caiso_environment'] ? {
'caiso_dev' => 'nrpe_zone.dev',
default => 'nrpe_zone.prod',
}
file { '/etc/firewalld/zones/CAISO-nrpe.xml':
ensure => file,
owner => 'root',
group => 'root',
mode => '0640',
source => "puppet:///modules/caiso_unix_firewalld/${zonefile}",
notify => Service['firewalld'],
}
}
Mike Langhorst
05/18/2023, 7:38 PMError: Found 1 dependency cycle:
(File[/etc/firewalld/zones/CAISO-nrpe.xml] => Service[firewalld] => Class[Caiso_unix_firewalld] => Class[Caiso_unix_firewalld::Nrpe] => File[/etc/firewalld/zones/CAISO-nrpe.xml])\nTry the '--graph' option and opening the resulting '.dot' file in OmniGraffle or GraphViz
Error: Failed to apply catalog: One or more resource dependency cycles detected in graph
b
bastelfreak
05/18/2023, 7:39 PMa) there's a firewalld module, I highly recommend using that instead of reinventing the wheel
bastelfreak
05/18/2023, 7:39 PMb) in
caiso_unix_firewalld::nrpebastelfreak
05/18/2023, 7:40 PMI don't see why the
requirebastelfreak
05/18/2023, 7:40 PMhttps://github.com/voxpupuli/puppet-firewalld I recommend that, if you need to use firewalld
m
Mike Langhorst
05/18/2023, 7:40 PMrequire is so that the package & service is there
b
bastelfreak
05/18/2023, 7:41 PMno. require means that the package and service is defined before caiso_unix_firewalld::nrpe. that doesn't make sense in your usecase
bastelfreak
05/18/2023, 7:41 PMyou can switch to
include👍 1
bastelfreak
05/18/2023, 7:41 PMthen it will float through the catalog
m
Mike Langhorst
05/18/2023, 7:41 PMyea, now that you mention that, include would be better
c
csharpsteen
05/18/2023, 7:43 PMYup,
require caiso_unix_firewalldcaiso_unix_firewalldcaiso_unix_firewalld::nrpecaiso_unix_firewalld::nrpecaiso_unix_firewalldnotify => Service['firewalld']m
Mike Langhorst
05/18/2023, 7:43 PMI was looking at the firewalld module, and had started with a rich rule, rather than a zone. first time dealing with firewalld/nftables in rhel9, other admins preferred defining in zones rather than rich rules
Mike Langhorst
05/18/2023, 7:43 PMahhh, thanks for the explanation there @csharpsteen
c
csharpsteen
05/18/2023, 7:44 PMinclude caiso_unix_firewalldService['firewalld']m
Mike Langhorst
05/18/2023, 7:47 PMre: firewalld, so needed a bit more time to figure out the module, when I have a couple dev/test hosts that "need it now"
Mike Langhorst
05/18/2023, 7:51 PMthanks everyone