puppet nftables

Merge pull request #160 from nbarrientos/alma

Declare AlmaLinux8 and AlmaLinux9 support

Add acceptance test covering tables of type netdev

Merge pull request #159 from voxpupuli/maint/systemd-4.0.0

bump puppet/systemd to < 5.0.0

Merge pull request #157 from duritong/set-file-dir-mode-to-what-rpm-has

Align filemode on RedHat to distro default

Merge pull request #156 from voxpupuli/modulesync

modulesync 5.4.0

[blacksmith] Bump version to 2.6.1-rc0

Release 2.6.0

Add class for outgoing HKP firewalling

Add Ubuntu support

modulesync 5.3.0

Merge pull request #148 from duritong/split-conntrack-mgmt

split conntrack management into dedicated classes

Merge pull request #147 from traylenator/file

New nftables::file type to include raw file

[blacksmith] Bump version to 2.5.1-rc0

Release 2.5.0

Merge pull request #142 from luisfdez/feat/noflush-bridge

Add all nftables families as a valid noflush pattern

remove duplicate expect

this is handled by the next - more specific - expect anyways

[blacksmith] Bump version to 2.4.1-rc0

Release 2.4.0

chrony: Allow filtering for outgoing NTP servers

Add rule to allow outgoing whois queries

Update manifests/rules/pxp_agent.pp

Co-authored-by: Steve Traylen <steve.traylen@cern.ch>

Add class for pxp-agent firewalling

Merge pull request #137 from bastelfreak/rel230

Release 2.3.0

Merge pull request #134 from bastelfreak/dev-debian_support

Add Debian support

Merge pull request #136 from bastelfreak/debian2

systemctl: Use relative path

Merge pull request #133 from bastelfreak/echo

make path to echo configureable

Merge pull request #132 from bastelfreak/binary

make path to `nft` binary configureable

Merge pull request #131 from nbarrientos/next_rc

Prepare next release candidate

Merge pull request #130 from nbarrientos/release_221

Prepare release 2.2.1

Merge pull request #128 from traylenator/systemd

rspec mock systemd process on docker

rspec mock systemd process on docker

On docker rspec the service provider is autodetected as redhat
rather than systemd.

https://tickets.puppetlabs.com/browse/PUP-11167

That causes

```
error during compilation: Parameter enable failed on Service[firewalld]: Provider redhat must have features 'maskable' to set 'enable' to 'mask' (file: /builds/ai/it-puppet-module-nftables/code/spec/fixtures/modules/nftables/manifests/init.pp, line: 186)...

modulesync 5.2.0

Merge pull request #127 from nbarrientos/ibarrien_tw

[blacksmith] Bump version to 2.2.1-rc0

Prepare release 2.2.0

Add support for Arch Linux

Arch Linux stores the configuration in a different path and does not
provide firewalld without explicit installation.

This basically the same as #66 – I've reused their code since it hasn't
been merged in a while.

Ensure that nftables.service remains active after it exits

Some system-packages don't include it in the service-file and we expect
it. See #124.

Merge pull request #122 from hashworks/fix/referenceInitialExamples

Fix typos in initial reference examples

Merge pull request #121 from traylenator/paramdocs

vp-puppet-lint-plugin enables param-docs already

Make sure that the list of interfaces is mocked

If 'networking' is not removed from the facts, the values declared in
`default_module_facts.yml` win (the fact set contains two keys:
`:networking` and `'networking'`)

This test has always been wrong as the interfaces were never been...

Declare support for RHEL9, CentOS9 and OL9

rubocop - RSpec/RepeatedExampleGroupBody

rubocop:auto_correct results

Use protocol number instead of label

The label was `ospf` and will be `ospfigp` in the future. Instead of
creating a map use the protocol number to be compatible with newer
versions.

Pet rubocop

Fix .sync.yml

Typo introduced in 09cba1822af345c6fe7d4db1a49921f12a53cb31

Release 2.1.1-rc0

Prepare release 2.1.0

support a different table name for 'nat'
- Some applications (such as libvirt) still use iptables to inject firewall
rules
- iptables will refuse to update tables that were initially created with nft
- This commit allows defining the name of the 'nat' table in order to avoid...

Allow stdlib 8.0.0