nftables class configure all nftables rules works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'debian11-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_084713103.g9EWix.pp Last 10 lines of output were: Jun 25 08:47:19 debian11-64-puppet7.example.com systemd[1]: Starting nftables... Jun 25 08:47:19 debian11-64-puppet7.example.com systemd[1]: nftables.service: Main process exited, code=dumped, status=11/SEGV Jun 25 08:47:19 debian11-64-puppet7.example.com systemd[1]: nftables.service: Failed with result 'core-dump'. Jun 25 08:47:19 debian11-64-puppet7.example.com systemd[1]: Failed to start nftables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 30 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml �[mNotice: Applied catalog in 3.99 seconds

nftables class configure all nftables rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure all nftables rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

Process completed with exit code 1.

nftables class configure all nftables rules works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'debian11-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_084716787.INvjIy.pp Last 10 lines of output were: Jun 25 08:47:23 debian11-64-puppet8.example.com systemd[1]: Starting nftables... Jun 25 08:47:23 debian11-64-puppet8.example.com systemd[1]: nftables.service: Main process exited, code=dumped, status=11/SEGV Jun 25 08:47:23 debian11-64-puppet8.example.com systemd[1]: nftables.service: Failed with result 'core-dump'. Jun 25 08:47:23 debian11-64-puppet8.example.com systemd[1]: Failed to start nftables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 30 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml �[mNotice: Applied catalog in 4.27 seconds

nftables class configure all nftables rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure all nftables rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

Process completed with exit code 1.

nftables class configure all nftables rules works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_084740572.zoffJK.pp Last 10 lines of output were: Jun 25 08:47:46 archlinuxrolling-64.example.com nft[1085]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 25 08:47:46 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 25 08:47:46 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 25 08:47:46 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 30 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml �[mNotice: Applied catalog in 3.85 seconds

nftables class configure all nftables rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure all nftables rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class configure default nftables service works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_084748772.ScveIi.pp Last 10 lines of output were: Jun 25 08:47:51 archlinuxrolling-64.example.com nft[1192]: destroy table inet filter Jun 25 08:47:51 archlinuxrolling-64.example.com nft[1192]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 25 08:47:51 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 25 08:47:51 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 25 08:47:51 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 9 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.90 seconds

nftables class configure default nftables service Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure default nftables service Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class with bad invalid nft rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class with bad invalid nft rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class with totally empty firewall no rules validate okay Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_084755025.nWhONi.pp Last 10 lines of output were: Jun 25 08:47:57 archlinuxrolling-64.example.com nft[1316]: /etc/nftables.conf:7:1-26: Error: Could not process rule: Invalid argument Jun 25 08:47:57 archlinuxrolling-64.example.com nft[1316]: destroy table inet filter Jun 25 08:47:57 archlinuxrolling-64.example.com nft[1316]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 25 08:47:57 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 25 08:47:57 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 25 08:47:57 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 2 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] �[mNotice: Applied catalog in 0.58 seconds

nftables class with totally empty firewall Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables::rule on almalinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on almalinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on archlinux-rolling-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on centos-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-11-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-12-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on ubuntu-20.04-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-11-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on ubuntu-22.04-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on rocky-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on almalinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on rocky-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does