Set default_zone and log_denied when firewalld is offline

voxpupuli / puppet-firewalld

Puppet module for managing firewalld

Apache License 2.0

40 stars 77 forks source link

Set default_zone and log_denied when firewalld is offline #317

Closed jameslikeslinux closed 1 year ago

jameslikeslinux commented 2 years ago

Pull Request (PR) description

Change the exec resources that set default_zone and log_denied to fallback to the firewall-offline-cmd when firewalld is not running. This is useful, for example, in container environments or kickstart post-installs where the firewalld service can't be run but we still want these settings configured.

This Pull Request (PR) fixes the following issues

The bug this PR fixes does not have an associated issue.

jameslikeslinux commented 2 years ago

For what it's worth, my use case is building container images and you can see this change working at line 384 in this build log: https://gitlab.james.tl/nest/stage2/-/jobs/2349#L384