nftables class configure all nftables rules works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101439720.0mhHi4.pp Last 10 lines of output were: Jun 27 10:14:46 archlinuxrolling-64.example.com nft[1081]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 10:14:46 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 10:14:46 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 10:14:46 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 30 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml �[mNotice: Applied catalog in 3.92 seconds

nftables class configure all nftables rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure all nftables rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class configure default nftables service works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101447873.H2dq9V.pp Last 10 lines of output were: Jun 27 10:14:50 archlinuxrolling-64.example.com nft[1188]: destroy table inet filter Jun 27 10:14:50 archlinuxrolling-64.example.com nft[1188]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 10:14:50 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 10:14:50 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 10:14:50 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 7 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.87 seconds

nftables class configure default nftables service Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure default nftables service Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class with bad invalid nft rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class with bad invalid nft rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class with totally empty firewall no rules validate okay Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101454081.W1jNWq.pp Last 10 lines of output were: Jun 27 10:14:56 archlinuxrolling-64.example.com nft[1312]: /etc/nftables.conf:7:1-26: Error: Could not process rule: Invalid argument Jun 27 10:14:56 archlinuxrolling-64.example.com nft[1312]: destroy table inet filter Jun 27 10:14:56 archlinuxrolling-64.example.com nft[1312]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 10:14:56 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 10:14:56 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 10:14:56 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 2 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] �[mNotice: Applied catalog in 0.58 seconds

nftables class with totally empty firewall Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure an nftables set works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'debian11-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101447419.o6sKtl.pp Last 10 lines of output were: Jun 27 10:14:39 debian11-64-puppet7.example.com systemd[1]: Reloaded nftables. Jun 27 10:14:43 debian11-64-puppet7.example.com systemd[1]: Reloading nftables. Jun 27 10:14:43 debian11-64-puppet7.example.com systemd[1]: Reloaded nftables. Jun 27 10:14:50 debian11-64-puppet7.example.com systemd[1]: Reloading nftables. Jun 27 10:14:50 debian11-64-puppet7.example.com systemd[1]: nftables.service: Control process exited, code=dumped, status=11/SEGV Jun 27 10:14:50 debian11-64-puppet7.example.com systemd[1]: Reload failed for nftables. Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.07 seconds

nftables class configure an nftables set works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'debian11-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_101455677.ya4jgj.pp Last 10 lines of output were: Jun 27 10:14:47 debian11-64-puppet8.example.com systemd[1]: Reloaded nftables. Jun 27 10:14:51 debian11-64-puppet8.example.com systemd[1]: Reloading nftables. Jun 27 10:14:51 debian11-64-puppet8.example.com systemd[1]: Reloaded nftables. Jun 27 10:14:59 debian11-64-puppet8.example.com systemd[1]: Reloading nftables. Jun 27 10:14:59 debian11-64-puppet8.example.com systemd[1]: nftables.service: Control process exited, code=dumped, status=11/SEGV Jun 27 10:14:59 debian11-64-puppet8.example.com systemd[1]: Reload failed for nftables. Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.19 seconds

nftables::rule on almalinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on almalinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on archlinux-rolling-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on centos-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-11-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-12-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on ubuntu-20.04-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-11-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on ubuntu-22.04-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on rocky-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on almalinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on rocky-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does