Re: [Puppet Users] Firewall module during kickstart

2013-11-05 Thread Joshua Hoblitt
Adam,

I haven't tried that myself but you have to keep in mind that the EL
kickstart environment is not the same as a fully functional
installation.  A number of things are oddly broken, like there's no
valid runlevel.

It might be possible to use a fact to tell if iptables is working if
your in a kickstart env and branch on that.  You could also uses the
tags feature to only apply a subset of modules in your post script.

-Josh

--
On 11/05/2013 09:47 AM, Adam wrote:
> Has anyone had success implementing the puppet firewall module during
> the kickstart of a RHEL6 server?  I'm getting the following error:
> // 
> /can't initialize iptables table `filter': Table does not exist (do
> you need to insmod?)
> Perhaps iptables or your kernel needs to be upgraded./
> Research revealed the iptables_filter is not found during kickstart:
>  
> / /sbin/modprobe iptables_filter
> FATAL: Module iptables_filter not found./
> One option i was considering was implementing a tag to essentially
> ignore the firewall module and all "firewall" resources if a
> "kickstart" tag is present, but i have no idea how to implement that. 
> Any help would be most appreciated!
>  
> - Adam
>  
> -- 
> You received this message because you are subscribed to the Google
> Groups "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to puppet-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/puppet-users/d2f93c78-1f99-4f69-b15a-9add8178acac%40googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/5279464B.5000807%40cpan.org.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Firewall module during kickstart

2013-11-05 Thread Adam
Has anyone had success implementing the puppet firewall module during the 
kickstart of a RHEL6 server?  I'm getting the following error:
** 
*can't initialize iptables table `filter': Table does not exist (do you 
need to insmod?) 
Perhaps iptables or your kernel needs to be upgraded.*
Research revealed the iptables_filter is not found during kickstart:
 
* /sbin/modprobe iptables_filter
FATAL: Module iptables_filter not found.*
One option i was considering was implementing a tag to essentially 
ignore the firewall module and all "firewall" resources if a "kickstart" 
tag is present, but i have no idea how to implement that.  Any help would 
be most appreciated!
 
- Adam
 

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/d2f93c78-1f99-4f69-b15a-9add8178acac%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.