search

goodrobots / maverick

UAV Autonomous Systems Management
https://goodrobots.github.io/maverick/
MIT License
167 stars 60 forks source link

raspbian iptables broken #1013

Closed fnoop closed 2 years ago

fnoop commented 2 years ago 
Notice: /Stage[main]/Maverick_web::Janus/Maverick_security::Firewall::Firerule[webrtc-http]/Firewall[100 allow webrtc-http access for tcp:6011 from []]/ensure: created
Warning: Firewall[100 allow webrtc-http access for tcp:6011 from []](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
Notice: /Stage[main]/Maverick_web::Janus/Maverick_security::Firewall::Firerule[webrtc-http]/Firewall[100 allow webrtc-http access for tcp:6012 from []]/ensure: created
Warning: Firewall[100 allow webrtc-http access for tcp:6012 from []](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
Notice: /Stage[main]/Maverick_web::Janus/Maverick_security::Firewall::Firerule[webrtc-rtp]/Firewall[100 allow webrtc-rtp access for udp:40000 from []]/ensure: created
Warning: Firewall[100 allow webrtc-rtp access for udp:40000 from []](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
Notice: /Stage[main]/Maverick_web::Janus/Maverick_security::Firewall::Firerule[webrtc-rtp]/Firewall[100 allow webrtc-rtp access for udp:45000 from []]/ensure: created
Warning: Firewall[100 allow webrtc-rtp access for udp:45000 from []](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service

https://tickets.puppetlabs.com/browse/MODULES-10947

fnoop commented 2 years ago

Looks to be because facter is reporting $::operatingsystem as Raspbian now, so the firewall module doesn't invoke the Debian manifests. Need to hack the firewall module to respond to Raspbian as well, and then raise it upstream.