nftables class configure all nftables rules works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'debian11-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101040686.EkhpXp.pp Last 10 lines of output were: Jun 27 10:10:46 debian11-64-puppet8.example.com systemd[1]: Starting nftables... Jun 27 10:10:46 debian11-64-puppet8.example.com systemd[1]: nftables.service: Main process exited, code=dumped, status=11/SEGV Jun 27 10:10:46 debian11-64-puppet8.example.com systemd[1]: nftables.service: Failed with result 'core-dump'. Jun 27 10:10:46 debian11-64-puppet8.example.com systemd[1]: Failed to start nftables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 30 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml �[mNotice: Applied catalog in 3.75 seconds

nftables class configure all nftables rules works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'debian11-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101038914.KTzFyu.pp Last 10 lines of output were: Jun 27 10:10:45 debian11-64-puppet7.example.com systemd[1]: Starting nftables... Jun 27 10:10:45 debian11-64-puppet7.example.com systemd[1]: nftables.service: Main process exited, code=dumped, status=11/SEGV Jun 27 10:10:45 debian11-64-puppet7.example.com systemd[1]: nftables.service: Failed with result 'core-dump'. Jun 27 10:10:45 debian11-64-puppet7.example.com systemd[1]: Failed to start nftables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 30 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml �[mNotice: Applied catalog in 4.07 seconds

nftables class configure all nftables rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure all nftables rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure all nftables rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class configure all nftables rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

Process completed with exit code 1.

Process completed with exit code 1.

nftables class configure all nftables rules works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101106390.oNGr98.pp Last 10 lines of output were: Jun 27 10:11:12 archlinuxrolling-64.example.com nft[1080]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 10:11:12 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 10:11:12 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 10:11:12 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 30 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml �[mNotice: Applied catalog in 3.90 seconds

nftables class configure all nftables rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure all nftables rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class configure default nftables service works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101114614.TjGrPU.pp Last 10 lines of output were: Jun 27 10:11:17 archlinuxrolling-64.example.com nft[1187]: destroy table inet filter Jun 27 10:11:17 archlinuxrolling-64.example.com nft[1187]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 10:11:17 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 10:11:17 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 10:11:17 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 9 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.92 seconds

nftables class configure default nftables service Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure default nftables service Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class with bad invalid nft rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class with bad invalid nft rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class with totally empty firewall no rules validate okay Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101121056.v5fedd.pp Last 10 lines of output were: Jun 27 10:11:23 archlinuxrolling-64.example.com nft[1312]: /etc/nftables.conf:7:1-26: Error: Could not process rule: Invalid argument Jun 27 10:11:23 archlinuxrolling-64.example.com nft[1312]: destroy table inet filter Jun 27 10:11:23 archlinuxrolling-64.example.com nft[1312]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 10:11:23 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 10:11:23 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 10:11:23 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 2 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] �[mNotice: Applied catalog in 0.60 seconds

nftables class with totally empty firewall Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables::rule on almalinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on almalinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on archlinux-rolling-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on centos-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-11-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-12-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on ubuntu-20.04-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-11-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on ubuntu-22.04-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on rocky-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on almalinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on rocky-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does