Firewalld, nftables, and libvirt on Gentoo

After many and many weeks, I finally got libvirt working on this Gentoo machine. Before revealing how I’ve fixed this problem, let’s go through what the issues were. On this Gentoo I run Firewalld with nftables as backend. An alternative to nftables is iptables, but since nftables is newer and is becoming the default backend for more and more distribution including Fedora, I think it’s a good thing to adobt it early. ...

October 17, 2020 · 4 min · 801 words · kenno

Fix puppet-firewalld: puppet fails with unknown type of string error

To manage firewalld on a desktop, I use the module created by Craig Dunn available at https://github.com/crayfishx/puppet-firewalld. Recently, I came across this issue for the second time after restarting puppetserver: # puppet agent -vt Info: Using configured environment 'production' Info: Retrieving pluginfacts Info: Retrieving plugin Info: Loading facts Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Evaluation Error: Error while evaluating a Resource Statement, Could not autoload puppet/type/firewalld_rich_rule: /etc/puppetlabs/code/modules/firewalld/lib/puppet_x/firewalld/property/rich_rule_action.rb:10: unknown type of %string if value.keys.sort != %i[action type] ^ at /etc/puppetlabs/code/modules/firewalld/manifests/init.pp:135:7 on node mathtxx Warning: Not using cache on failed catalog Error: Could not retrieve catalog; skipping run Previously, the problem seem to disappear after awhile, and because I’ve been occupied with other tasks, I kinda forgot about it. ...

September 18, 2018 · 2 min · 224 words · kenno