RHEL 8.5 Cannot be configured with firewalld

[nhillsdonuk]

🗣️ Foreword

Thank for taking the time to fill this bug report fully. Without it we may not be able to fix the bug, and the issue may be closed without resolution.

👻 Brief Description

Standard Minimal Server ISO install of RHEL8.5 uses firewalld, enabled and running with zone public. By declaring this firewall cookbook to takeover, it always drops firewalld and installs a full set of IPTables, regardless of attributes given.

🥞 Cookbook version

Depends currently set to 4.0.0

👩‍🍳 Chef-Infra Version

17.8.25

🎩 Platform details

Self hosted RHEL8.5 from default ISO with minimal server

Steps To Reproduce

Steps to reproduce the behavior:

Depend this cookbook.
Declare:
firewall 'any' do
anything
end

Will disable firewalld and install IPTables.

🚓 Expected behavior

Firewalld to be installed/enabled (which it is by default in the OS) and then zones/rules set.

➕ Additional context

I think this code is related, lines 22..24 in libraries/provider_firewall_firewalld.rb:

provides :firewall, os: 'linux', platform_family: %w(rhel fedora amazon) do |node| (node['platform_version'].to_i == 7 && !node['firewall']['redhat7_iptables']) || (amazon_linux? && !node['firewall']['redhat7_iptables']) end

[jblaine]

This is very likely fixed in #247 but was never merged 14 months ago :(