Firewalld, nftables, and libvirt on Gentoo

Sat, 17 Oct 2020 11:35:30 +1100

After many and many weeks, I finally got libvirt working on this Gentoo machine. Before revealing how I’ve fixed this problem, let’s go through what the issues were.

On this Gentoo I run Firewalld with nftables as backend. An alternative to nftables is iptables, but since nftables is newer and is becoming the default backend for more and more distribution including Fedora, I think it’s a good thing to adobt it early.

Fix puppet-firewalld: puppet fails with unknown type of string error

Tue, 18 Sep 2018 12:00:21 +0000

To manage firewalld on a desktop, I use the module created by Craig Dunn available at https://github.com/crayfishx/puppet-firewalld. Recently, I came across this issue for the second time after restarting puppetserver:

# puppet agent -vt
Info: Using configured environment 'production'
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Loading facts
Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Evaluation Error: Error while evaluating a Resource Statement, Could not autoload puppet/type/firewalld_rich_rule: /etc/puppetlabs/code/modules/firewalld/lib/puppet_x/firewalld/property/rich_rule_action.rb:10: unknown type of %string
            if value.keys.sort != %i[action type]
                                    ^ at /etc/puppetlabs/code/modules/firewalld/manifests/init.pp:135:7 on node mathtxx
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run

Previously, the problem seem to disappear after awhile, and because I’ve been occupied with other tasks, I kinda forgot about it.

Firewalld on Kenno's Open Note

Firewalld, nftables, and libvirt on Gentoo

Fix puppet-firewalld: puppet fails with unknown type of string error