Skip to content

Commit 371cbfe

Browse files
committed
package "iptables" has been replaced by "iptables-nft" on EL9
There are some pointers given by dnf about "iptables", but these confuse Puppet into aborting with the error message: ```console Error: /Stage[main]/Firewall::Linux/Package[iptables]: Could not evaluate: no implicit conversion of Array into Hash ``` Fedora had a similar patch in commit 486e4b5 which I think fixed the bug https://tickets.puppetlabs.com/browse/MODULES-11147 but the same issue rared its head here on AlmaLinux 9.0. The RPM for iptables-legacy states: > This package contains the legacy tools which are obsoleted by > nft-variants in iptables-nft package for backwards compatibility reasons. > If you need to set up firewalls and/or IP masquerading, you should not install > this package but either nftables or iptables-nft instead.
1 parent e536564 commit 371cbfe

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

manifests/params.pp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
$service_name = 'nftables'
3434
$service_name_v6 = 'ip6tables'
3535
$package_name = ['iptables-services', 'nftables', 'iptables-nft-services']
36-
$iptables_name = 'iptables'
36+
$iptables_name = 'iptables-nft'
3737
$sysconfig_manage = false
3838
$firewalld_manage = false
3939
} elsif versioncmp($::operatingsystemrelease, '8.0') >= 0 {

0 commit comments

Comments
 (0)