nftables class configure an nftables set works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'debian11-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_110336212.GEqWBL.pp Last 10 lines of output were: Jun 27 11:03:29 debian11-64-puppet7.example.com systemd[1]: Reloaded nftables. Jun 27 11:03:32 debian11-64-puppet7.example.com systemd[1]: Reloading nftables. Jun 27 11:03:32 debian11-64-puppet7.example.com systemd[1]: Reloaded nftables. Jun 27 11:03:38 debian11-64-puppet7.example.com systemd[1]: Reloading nftables. Jun 27 11:03:39 debian11-64-puppet7.example.com systemd[1]: nftables.service: Control process exited, code=dumped, status=11/SEGV Jun 27 11:03:39 debian11-64-puppet7.example.com systemd[1]: Reload failed for nftables. Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.03 seconds

Process completed with exit code 1.

nftables class configure an nftables set works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'debian11-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_110342490.zb4mSy.pp Last 10 lines of output were: Jun 27 11:03:35 debian11-64-puppet8.example.com systemd[1]: Reloaded nftables. Jun 27 11:03:39 debian11-64-puppet8.example.com systemd[1]: Reloading nftables. Jun 27 11:03:39 debian11-64-puppet8.example.com systemd[1]: Reloaded nftables. Jun 27 11:03:45 debian11-64-puppet8.example.com systemd[1]: Reloading nftables. Jun 27 11:03:45 debian11-64-puppet8.example.com systemd[1]: nftables.service: Control process exited, code=dumped, status=11/SEGV Jun 27 11:03:45 debian11-64-puppet8.example.com systemd[1]: Reload failed for nftables. Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.06 seconds

Process completed with exit code 1.

nftables class configure all nftables rules works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_110337303.YTaxr0.pp Last 10 lines of output were: Jun 27 11:03:43 archlinuxrolling-64.example.com nft[1078]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 11:03:43 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 11:03:43 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 11:03:43 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 30 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml �[mNotice: Applied catalog in 3.97 seconds

nftables class configure all nftables rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure all nftables rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class configure default nftables service works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_110345512.u69U5F.pp Last 10 lines of output were: Jun 27 11:03:48 archlinuxrolling-64.example.com nft[1185]: destroy table inet filter Jun 27 11:03:48 archlinuxrolling-64.example.com nft[1185]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 11:03:48 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 11:03:48 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 11:03:48 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 7 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.87 seconds

nftables class configure default nftables service Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class configure default nftables service Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class with bad invalid nft rules Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

nftables class with bad invalid nft rules Service "nftables" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "nftables" to be enabled

nftables class with totally empty firewall no rules validate okay Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'archlinuxrolling-64.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_110351629.Mx280Y.pp Last 10 lines of output were: Jun 27 11:03:53 archlinuxrolling-64.example.com nft[1309]: /etc/nftables.conf:7:1-26: Error: Could not process rule: Invalid argument Jun 27 11:03:53 archlinuxrolling-64.example.com nft[1309]: destroy table inet filter Jun 27 11:03:53 archlinuxrolling-64.example.com nft[1309]: ^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 27 11:03:53 archlinuxrolling-64.example.com systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE Jun 27 11:03:53 archlinuxrolling-64.example.com systemd[1]: nftables.service: Failed with result 'exit-code'. Jun 27 11:03:53 archlinuxrolling-64.example.com systemd[1]: Failed to start Netfilter Tables. �[mNotice: /Stage[main]/Nftables/Service[nftables]: Triggered 'refresh' from 2 events Info: Class[Nftables]: Unscheduling all events on Class[Nftables] �[mNotice: Applied catalog in 0.58 seconds

nftables class with totally empty firewall Service "nftables" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "nftables" to be running

Canceling since a higher priority waiting request for '248/merge' exists

The operation was canceled.

Canceling since a higher priority waiting request for '248/merge' exists

The operation was canceled.

nftables::rule on almalinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on almalinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on archlinux-rolling-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on centos-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-11-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-12-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on ubuntu-20.04-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on debian-11-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on redhat-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on ubuntu-22.04-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on rocky-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on almalinux-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on rocky-9-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does

nftables::rule on oraclelinux-8-x86_64 with title set to <CHAIN_NAME>-<RULE> with source and content both set is expected not to compile into a catalogue without dependency cycles Failure/Error: expect(subject).not_to compile expected that the catalogue would not compile but it does