From 371cbfeea9e36d3a391b8674ee2bf704facb9c70 Mon Sep 17 00:00:00 2001 From: Kjetil Torgrim Homme Date: Sun, 6 Nov 2022 17:00:40 +0100 Subject: [PATCH] package "iptables" has been replaced by "iptables-nft" on EL9 There are some pointers given by dnf about "iptables", but these confuse Puppet into aborting with the error message: ```console Error: /Stage[main]/Firewall::Linux/Package[iptables]: Could not evaluate: no implicit conversion of Array into Hash ``` Fedora had a similar patch in commit 486e4b5779f5069e which I think fixed the bug https://tickets.puppetlabs.com/browse/MODULES-11147 but the same issue rared its head here on AlmaLinux 9.0. The RPM for iptables-legacy states: > This package contains the legacy tools which are obsoleted by > nft-variants in iptables-nft package for backwards compatibility reasons. > If you need to set up firewalls and/or IP masquerading, you should not install > this package but either nftables or iptables-nft instead. --- manifests/params.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifests/params.pp b/manifests/params.pp index bbd0a56..8add42f 100644 --- a/manifests/params.pp +++ b/manifests/params.pp @@ -33,7 +33,7 @@ class firewall::params { $service_name = 'nftables' $service_name_v6 = 'ip6tables' $package_name = ['iptables-services', 'nftables', 'iptables-nft-services'] - $iptables_name = 'iptables' + $iptables_name = 'iptables-nft' $sysconfig_manage = false $firewalld_manage = false } elsif versioncmp($::operatingsystemrelease, '8.0') >= 0 { -- 2.45.2