enable correct service for EL9 using legacy IPv4

kjetilho · kjetilho · commit 88e4d098e82e · 2023-02-14T14:52:56.000+01:00
probably not many people still using IPv4 in their systems, after all
IPv6 is soon 25 years old, but... we still want to support it.

nftables.service loads nft rules from /etc/sysconfig/nftables.conf,
but this module generates classic iptables rules.  The service to load
these on boot is simply "iptables.service".

IPv6 rules are loaded correctly by ip6tables.service.
diff --git a/manifests/params.pp b/manifests/params.pp
@@ -30,7 +30,7 @@
         }
         default: {
           if versioncmp($::operatingsystemrelease, '9') >= 0 {
-            $service_name = ['nftables','iptables']
+            $service_name = 'iptables'
             $service_name_v6 = 'ip6tables'
             $package_name = ['iptables-services', 'nftables', 'iptables-nft-services']
             $iptables_name = 'iptables-nft'

Original file line number	Diff line number	Diff line change
`@@ -30,7 +30,7 @@`
`30`	`30`	`}`
`31`	`31`	`default: {`
`32`	`32`	`if versioncmp($::operatingsystemrelease, '9') >= 0 {`
`33`		`- $service_name = ['nftables','iptables']`
	`33`	`+ $service_name = 'iptables'`
`34`	`34`	`$service_name_v6 = 'ip6tables'`
`35`	`35`	`$package_name = ['iptables-services', 'nftables', 'iptables-nft-services']`
`36`	`36`	`$iptables_name = 'iptables-nft'`