ansible-playbook 2.9.27
config file = /etc/ansible/ansible.cfg
configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
ansible python module location = /usr/lib/python2.7/site-packages/ansible
executable location = /usr/bin/ansible-playbook
python version = 2.7.5 (default, Nov 14 2023, 16:14:06) [GCC 4.8.5 20150623 (Red Hat 4.8.5-44)]
Using /etc/ansible/ansible.cfg as config file
[WARNING]: running playbook inside collection fedora.linux_system_roles
Skipping callback 'actionable', as we already have a stdout callback.
Skipping callback 'counter_enabled', as we already have a stdout callback.
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'full_skip', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'null', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
Skipping callback 'selective', as we already have a stdout callback.
Skipping callback 'skippy', as we already have a stdout callback.
Skipping callback 'stderr', as we already have a stdout callback.
Skipping callback 'unixy', as we already have a stdout callback.
Skipping callback 'yaml', as we already have a stdout callback.
PLAYBOOK: tests_zone.yml *******************************************************
1 plays in /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml
PLAY [Test firewalld zones] ****************************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:2
Saturday 22 March 2025 01:26:00 -0400 (0:00:00.030) 0:00:00.030 ********
ok: [managed-node1]
META: ran handlers
TASK [Verify used firewalld zones] *********************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:13
Saturday 22 March 2025 01:26:01 -0400 (0:00:01.111) 0:00:01.142 ********
TASK [fedora.linux_system_roles.firewall : Setup firewalld] ********************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2
Saturday 22 March 2025 01:26:01 -0400 (0:00:00.223) 0:00:01.365 ********
included: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1
TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:2
Saturday 22 March 2025 01:26:01 -0400 (0:00:00.109) 0:00:01.475 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Check if system is ostree] **********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:10
Saturday 22 March 2025 01:26:01 -0400 (0:00:00.066) 0:00:01.541 ********
ok: [managed-node1] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:15
Saturday 22 March 2025 01:26:02 -0400 (0:00:00.578) 0:00:02.119 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_is_ostree": false
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:22
Saturday 22 March 2025 01:26:02 -0400 (0:00:00.055) 0:00:02.175 ********
ok: [managed-node1] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:27
Saturday 22 March 2025 01:26:02 -0400 (0:00:00.374) 0:00:02.549 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_is_transactional": false
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Install firewalld] ******************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:31
Saturday 22 March 2025 01:26:02 -0400 (0:00:00.056) 0:00:02.606 ********
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": [
"firewalld-0.6.3-13.el7_9.noarch providing firewalld is already installed"
]
}
lsrpackages: firewalld
TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:43
Saturday 22 March 2025 01:26:03 -0400 (0:00:00.908) 0:00:03.514 ********
skipping: [managed-node1] => {}
TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:48
Saturday 22 March 2025 01:26:03 -0400 (0:00:00.049) 0:00:03.564 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:53
Saturday 22 March 2025 01:26:03 -0400 (0:00:00.052) 0:00:03.616 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Collect service facts] **************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5
Saturday 22 March 2025 01:26:03 -0400 (0:00:00.065) 0:00:03.682 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:9
Saturday 22 March 2025 01:26:04 -0400 (0:00:00.073) 0:00:03.756 ********
skipping: [managed-node1] => (item=nftables) => {
"ansible_loop_var": "item",
"changed": false,
"item": "nftables",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=iptables) => {
"ansible_loop_var": "item",
"changed": false,
"item": "iptables",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=ufw) => {
"ansible_loop_var": "item",
"changed": false,
"item": "ufw",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] ***********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:22
Saturday 22 March 2025 01:26:04 -0400 (0:00:00.101) 0:00:03.857 ********
ok: [managed-node1] => {
"changed": false,
"name": "firewalld",
"status": {
"ActiveEnterTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"ActiveEnterTimestampMonotonic": "248513898",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "polkit.service basic.target system.slice dbus.service",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"AssertTimestampMonotonic": "248272847",
"Before": "network-pre.target multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ConditionTimestampMonotonic": "248272846",
"Conflicts": "shutdown.target ebtables.service ip6tables.service ipset.service iptables.service",
"ControlGroup": "/system.slice/firewalld.service",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DevicePolicy": "auto",
"Documentation": "man:firewalld(1)",
"EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "9534",
"ExecMainStartTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ExecMainStartTimestampMonotonic": "248273861",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2025-03-22 01:23:32 EDT] ; stop_time=[n/a] ; pid=9534 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"InactiveExitTimestampMonotonic": "248273894",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "9534",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "basic.target system.slice",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "enabled",
"WantedBy": "multi-user.target",
"Wants": "network-pre.target",
"WatchdogTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"WatchdogTimestampMonotonic": "248513656",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:28
Saturday 22 March 2025 01:26:04 -0400 (0:00:00.737) 0:00:04.595 ********
ok: [managed-node1] => {
"changed": false,
"enabled": true,
"name": "firewalld",
"state": "started",
"status": {
"ActiveEnterTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"ActiveEnterTimestampMonotonic": "248513898",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "polkit.service basic.target system.slice dbus.service",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"AssertTimestampMonotonic": "248272847",
"Before": "network-pre.target multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ConditionTimestampMonotonic": "248272846",
"Conflicts": "shutdown.target ebtables.service ip6tables.service ipset.service iptables.service",
"ControlGroup": "/system.slice/firewalld.service",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DevicePolicy": "auto",
"Documentation": "man:firewalld(1)",
"EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "9534",
"ExecMainStartTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ExecMainStartTimestampMonotonic": "248273861",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2025-03-22 01:23:32 EDT] ; stop_time=[n/a] ; pid=9534 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"InactiveExitTimestampMonotonic": "248273894",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "9534",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "basic.target system.slice",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "enabled",
"WantedBy": "multi-user.target",
"Wants": "network-pre.target",
"WatchdogTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"WatchdogTimestampMonotonic": "248513656",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.firewall : Check if previous replaced is defined] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:34
Saturday 22 March 2025 01:26:05 -0400 (0:00:00.522) 0:00:05.117 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_previous_replaced": false,
"__firewall_python_cmd": "/usr/bin/python",
"__firewall_report_changed": true
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Get config files, checksums before and remove] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:43
Saturday 22 March 2025 01:26:05 -0400 (0:00:00.085) 0:00:05.203 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Tell firewall module it is able to report changed] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:55
Saturday 22 March 2025 01:26:05 -0400 (0:00:00.072) 0:00:05.275 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Configure firewall] *****************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:71
Saturday 22 March 2025 01:26:05 -0400 (0:00:00.073) 0:00:05.349 ********
ok: [managed-node1] => (item={u'state': u'enabled', u'zone': u'internal'}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"state": "enabled",
"zone": "internal"
}
}
ok: [managed-node1] => (item={u'state': u'enabled', u'zone': u'external'}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"state": "enabled",
"zone": "external"
}
}
ok: [managed-node1] => (item={u'state': u'enabled', u'zone': u'trusted'}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"state": "enabled",
"zone": "trusted"
}
}
TASK [fedora.linux_system_roles.firewall : Gather firewall config information] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:120
Saturday 22 March 2025 01:26:07 -0400 (0:00:02.016) 0:00:07.365 ********
skipping: [managed-node1] => (item={u'state': u'enabled', u'zone': u'internal'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"state": "enabled",
"zone": "internal"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'enabled', u'zone': u'external'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"state": "enabled",
"zone": "external"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'enabled', u'zone': u'trusted'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"state": "enabled",
"zone": "trusted"
},
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] *******
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:130
Saturday 22 March 2025 01:26:07 -0400 (0:00:00.084) 0:00:07.450 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:139
Saturday 22 March 2025 01:26:07 -0400 (0:00:00.079) 0:00:07.529 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] *******
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:144
Saturday 22 March 2025 01:26:07 -0400 (0:00:00.077) 0:00:07.607 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Get config files, checksums after] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:153
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.112) 0:00:07.719 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Calculate what has changed] *********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:163
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.074) 0:00:07.794 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Show diffs] *************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:169
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.074) 0:00:07.868 ********
skipping: [managed-node1] => {}
TASK [Fail on missing zones] ***************************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:25
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.061) 0:00:07.930 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Setup firewalld] *********************************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:32
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.053) 0:00:07.983 ********
TASK [fedora.linux_system_roles.firewall : Setup firewalld] ********************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.099) 0:00:08.083 ********
included: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1
TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:2
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.067) 0:00:08.151 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Check if system is ostree] **********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:10
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.051) 0:00:08.203 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:15
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.055) 0:00:08.258 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:22
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.065) 0:00:08.324 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:27
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.071) 0:00:08.396 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Install firewalld] ******************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:31
Saturday 22 March 2025 01:26:08 -0400 (0:00:00.079) 0:00:08.475 ********
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": [
"firewalld-0.6.3-13.el7_9.noarch providing firewalld is already installed"
]
}
lsrpackages: firewalld
TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:43
Saturday 22 March 2025 01:26:09 -0400 (0:00:00.728) 0:00:09.204 ********
skipping: [managed-node1] => {}
TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:48
Saturday 22 March 2025 01:26:09 -0400 (0:00:00.050) 0:00:09.255 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:53
Saturday 22 March 2025 01:26:09 -0400 (0:00:00.056) 0:00:09.311 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Collect service facts] **************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5
Saturday 22 March 2025 01:26:09 -0400 (0:00:00.076) 0:00:09.387 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:9
Saturday 22 March 2025 01:26:09 -0400 (0:00:00.057) 0:00:09.444 ********
skipping: [managed-node1] => (item=nftables) => {
"ansible_loop_var": "item",
"changed": false,
"item": "nftables",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=iptables) => {
"ansible_loop_var": "item",
"changed": false,
"item": "iptables",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=ufw) => {
"ansible_loop_var": "item",
"changed": false,
"item": "ufw",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] ***********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:22
Saturday 22 March 2025 01:26:09 -0400 (0:00:00.085) 0:00:09.530 ********
ok: [managed-node1] => {
"changed": false,
"name": "firewalld",
"status": {
"ActiveEnterTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"ActiveEnterTimestampMonotonic": "248513898",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "polkit.service basic.target system.slice dbus.service",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"AssertTimestampMonotonic": "248272847",
"Before": "network-pre.target multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ConditionTimestampMonotonic": "248272846",
"Conflicts": "shutdown.target ebtables.service ip6tables.service ipset.service iptables.service",
"ControlGroup": "/system.slice/firewalld.service",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DevicePolicy": "auto",
"Documentation": "man:firewalld(1)",
"EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "9534",
"ExecMainStartTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ExecMainStartTimestampMonotonic": "248273861",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2025-03-22 01:23:32 EDT] ; stop_time=[n/a] ; pid=9534 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"InactiveExitTimestampMonotonic": "248273894",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "9534",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "basic.target system.slice",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "enabled",
"WantedBy": "multi-user.target",
"Wants": "network-pre.target",
"WatchdogTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"WatchdogTimestampMonotonic": "248513656",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:28
Saturday 22 March 2025 01:26:10 -0400 (0:00:00.459) 0:00:09.989 ********
ok: [managed-node1] => {
"changed": false,
"enabled": true,
"name": "firewalld",
"state": "started",
"status": {
"ActiveEnterTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"ActiveEnterTimestampMonotonic": "248513898",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "polkit.service basic.target system.slice dbus.service",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"AssertTimestampMonotonic": "248272847",
"Before": "network-pre.target multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ConditionTimestampMonotonic": "248272846",
"Conflicts": "shutdown.target ebtables.service ip6tables.service ipset.service iptables.service",
"ControlGroup": "/system.slice/firewalld.service",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DevicePolicy": "auto",
"Documentation": "man:firewalld(1)",
"EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "9534",
"ExecMainStartTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ExecMainStartTimestampMonotonic": "248273861",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2025-03-22 01:23:32 EDT] ; stop_time=[n/a] ; pid=9534 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"InactiveExitTimestampMonotonic": "248273894",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "9534",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "basic.target system.slice",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "enabled",
"WantedBy": "multi-user.target",
"Wants": "network-pre.target",
"WatchdogTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"WatchdogTimestampMonotonic": "248513656",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.firewall : Check if previous replaced is defined] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:34
Saturday 22 March 2025 01:26:10 -0400 (0:00:00.463) 0:00:10.453 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_previous_replaced": true,
"__firewall_python_cmd": "/usr/bin/python",
"__firewall_report_changed": true
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Get config files, checksums before and remove] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:43
Saturday 22 March 2025 01:26:10 -0400 (0:00:00.057) 0:00:10.511 ********
ok: [managed-node1] => {
"changed": false,
"rc": 0
}
STDERR:
Shared connection to 10.31.42.99 closed.
TASK [fedora.linux_system_roles.firewall : Tell firewall module it is able to report changed] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:55
Saturday 22 March 2025 01:26:11 -0400 (0:00:00.372) 0:00:10.883 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_report_changed": true
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Configure firewall] *****************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:71
Saturday 22 March 2025 01:26:11 -0400 (0:00:00.065) 0:00:10.949 ********
changed: [managed-node1] => (item={u'state': u'enabled', u'service': [u'tftp', u'ftp'], u'port': [u'443/tcp', u'443/udp'], u'zone': u'internal', u'forward_port': [u'447/tcp;;1.2.3.4', u'448/tcp;;1.2.3.5']}) => {
"__firewall_changed": true,
"ansible_loop_var": "item",
"changed": true,
"item": {
"forward_port": [
"447/tcp;;1.2.3.4",
"448/tcp;;1.2.3.5"
],
"port": [
"443/tcp",
"443/udp"
],
"service": [
"tftp",
"ftp"
],
"state": "enabled",
"zone": "internal"
}
}
ok: [managed-node1] => (item={u'state': u'enabled', u'service': [u'tftp', u'ftp'], u'port': [u'443/tcp', u'443/udp'], u'zone': u'internal', u'forward_port': [u'447/tcp;;1.2.3.4', u'448/tcp;;1.2.3.5']}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"forward_port": [
"447/tcp;;1.2.3.4",
"448/tcp;;1.2.3.5"
],
"port": [
"443/tcp",
"443/udp"
],
"service": [
"tftp",
"ftp"
],
"state": "enabled",
"zone": "internal"
}
}
changed: [managed-node1] => (item={u'state': u'present', u'permanent': True, u'zone': u'customzone'}) => {
"__firewall_changed": true,
"ansible_loop_var": "item",
"changed": true,
"item": {
"permanent": true,
"state": "present",
"zone": "customzone"
}
}
changed: [managed-node1] => (item={u'masquerade': True, u'state': u'enabled', u'permanent': True, u'zone': u'customzone'}) => {
"__firewall_changed": true,
"ansible_loop_var": "item",
"changed": true,
"item": {
"masquerade": true,
"permanent": true,
"state": "enabled",
"zone": "customzone"
}
}
changed: [managed-node1] => (item={u'state': u'enabled', u'set_default_zone': u'dmz'}) => {
"__firewall_changed": true,
"ansible_loop_var": "item",
"changed": true,
"item": {
"set_default_zone": "dmz",
"state": "enabled"
}
}
changed: [managed-node1] => (item={u'state': u'enabled', u'service': u'http'}) => {
"__firewall_changed": true,
"ansible_loop_var": "item",
"changed": true,
"item": {
"service": "http",
"state": "enabled"
}
}
TASK [fedora.linux_system_roles.firewall : Gather firewall config information] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:120
Saturday 22 March 2025 01:26:14 -0400 (0:00:03.680) 0:00:14.629 ********
skipping: [managed-node1] => (item={u'state': u'enabled', u'service': [u'tftp', u'ftp'], u'port': [u'443/tcp', u'443/udp'], u'zone': u'internal', u'forward_port': [u'447/tcp;;1.2.3.4', u'448/tcp;;1.2.3.5']}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"forward_port": [
"447/tcp;;1.2.3.4",
"448/tcp;;1.2.3.5"
],
"port": [
"443/tcp",
"443/udp"
],
"service": [
"tftp",
"ftp"
],
"state": "enabled",
"zone": "internal"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'enabled', u'service': [u'tftp', u'ftp'], u'port': [u'443/tcp', u'443/udp'], u'zone': u'internal', u'forward_port': [u'447/tcp;;1.2.3.4', u'448/tcp;;1.2.3.5']}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"forward_port": [
"447/tcp;;1.2.3.4",
"448/tcp;;1.2.3.5"
],
"port": [
"443/tcp",
"443/udp"
],
"service": [
"tftp",
"ftp"
],
"state": "enabled",
"zone": "internal"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'present', u'permanent': True, u'zone': u'customzone'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"permanent": true,
"state": "present",
"zone": "customzone"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'masquerade': True, u'state': u'enabled', u'permanent': True, u'zone': u'customzone'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"masquerade": true,
"permanent": true,
"state": "enabled",
"zone": "customzone"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'enabled', u'set_default_zone': u'dmz'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"set_default_zone": "dmz",
"state": "enabled"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'enabled', u'service': u'http'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"service": "http",
"state": "enabled"
},
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] *******
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:130
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.202) 0:00:14.831 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:139
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.065) 0:00:14.897 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] *******
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:144
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.063) 0:00:14.960 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Get config files, checksums after] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:153
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.054) 0:00:15.014 ********
ok: [managed-node1] => {
"changed": false,
"rc": 0
}
STDOUT:
e2b071ca9b919b8fd60a4fe1e00e4f792ec2245359e8c48027020970791176d1 /etc/firewalld/zones/internal.xml
df2e066f9b8c0677c4887aa9a7032c4f94480408ff740036d98e648d11dd84c5 /etc/firewalld/zones/dmz.xml
610e6e9bafe289c126adb751e772cd0224012f12738a8b8011454b1da8865c18 /etc/firewalld/zones/customzone.xml
958dce439fe299ce0b0fdb10c4c18412269fbab3f09660e4b210962728554953 /etc/firewalld/firewalld.conf
STDERR:
Shared connection to 10.31.42.99 closed.
TASK [fedora.linux_system_roles.firewall : Calculate what has changed] *********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:163
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.398) 0:00:15.412 ********
changed: [managed-node1] => {
"ansible_facts": {
"firewall_lib_result": {
"changed": true
}
},
"changed": true
}
TASK [fedora.linux_system_roles.firewall : Show diffs] *************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:169
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.060) 0:00:15.473 ********
skipping: [managed-node1] => {}
TASK [Fail if no changes are done] *********************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:60
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.053) 0:00:15.526 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Setup firewalld again] ***************************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:67
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.049) 0:00:15.575 ********
TASK [fedora.linux_system_roles.firewall : Setup firewalld] ********************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2
Saturday 22 March 2025 01:26:15 -0400 (0:00:00.097) 0:00:15.673 ********
included: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1
TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:2
Saturday 22 March 2025 01:26:16 -0400 (0:00:00.067) 0:00:15.741 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Check if system is ostree] **********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:10
Saturday 22 March 2025 01:26:16 -0400 (0:00:00.051) 0:00:15.792 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:15
Saturday 22 March 2025 01:26:16 -0400 (0:00:00.055) 0:00:15.848 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:22
Saturday 22 March 2025 01:26:16 -0400 (0:00:00.053) 0:00:15.901 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:27
Saturday 22 March 2025 01:26:16 -0400 (0:00:00.105) 0:00:16.007 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Install firewalld] ******************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:31
Saturday 22 March 2025 01:26:16 -0400 (0:00:00.050) 0:00:16.057 ********
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": [
"firewalld-0.6.3-13.el7_9.noarch providing firewalld is already installed"
]
}
lsrpackages: firewalld
TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:43
Saturday 22 March 2025 01:26:16 -0400 (0:00:00.623) 0:00:16.681 ********
skipping: [managed-node1] => {}
TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:48
Saturday 22 March 2025 01:26:17 -0400 (0:00:00.049) 0:00:16.731 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:53
Saturday 22 March 2025 01:26:17 -0400 (0:00:00.050) 0:00:16.782 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Collect service facts] **************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5
Saturday 22 March 2025 01:26:17 -0400 (0:00:00.050) 0:00:16.832 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:9
Saturday 22 March 2025 01:26:17 -0400 (0:00:00.057) 0:00:16.890 ********
skipping: [managed-node1] => (item=nftables) => {
"ansible_loop_var": "item",
"changed": false,
"item": "nftables",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=iptables) => {
"ansible_loop_var": "item",
"changed": false,
"item": "iptables",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=ufw) => {
"ansible_loop_var": "item",
"changed": false,
"item": "ufw",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] ***********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:22
Saturday 22 March 2025 01:26:17 -0400 (0:00:00.071) 0:00:16.962 ********
ok: [managed-node1] => {
"changed": false,
"name": "firewalld",
"status": {
"ActiveEnterTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"ActiveEnterTimestampMonotonic": "248513898",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "polkit.service basic.target system.slice dbus.service",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"AssertTimestampMonotonic": "248272847",
"Before": "network-pre.target multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ConditionTimestampMonotonic": "248272846",
"Conflicts": "shutdown.target ebtables.service ip6tables.service ipset.service iptables.service",
"ControlGroup": "/system.slice/firewalld.service",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DevicePolicy": "auto",
"Documentation": "man:firewalld(1)",
"EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "9534",
"ExecMainStartTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ExecMainStartTimestampMonotonic": "248273861",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2025-03-22 01:23:32 EDT] ; stop_time=[n/a] ; pid=9534 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"InactiveExitTimestampMonotonic": "248273894",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "9534",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "basic.target system.slice",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "enabled",
"WantedBy": "multi-user.target",
"Wants": "network-pre.target",
"WatchdogTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"WatchdogTimestampMonotonic": "248513656",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:28
Saturday 22 March 2025 01:26:17 -0400 (0:00:00.420) 0:00:17.382 ********
ok: [managed-node1] => {
"changed": false,
"enabled": true,
"name": "firewalld",
"state": "started",
"status": {
"ActiveEnterTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"ActiveEnterTimestampMonotonic": "248513898",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "polkit.service basic.target system.slice dbus.service",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"AssertTimestampMonotonic": "248272847",
"Before": "network-pre.target multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ConditionTimestampMonotonic": "248272846",
"Conflicts": "shutdown.target ebtables.service ip6tables.service ipset.service iptables.service",
"ControlGroup": "/system.slice/firewalld.service",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DevicePolicy": "auto",
"Documentation": "man:firewalld(1)",
"EnvironmentFile": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "9534",
"ExecMainStartTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"ExecMainStartTimestampMonotonic": "248273861",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Sat 2025-03-22 01:23:32 EDT] ; stop_time=[n/a] ; pid=9534 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-03-22 01:23:32 EDT",
"InactiveExitTimestampMonotonic": "248273894",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "9534",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "basic.target system.slice",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "enabled",
"WantedBy": "multi-user.target",
"Wants": "network-pre.target",
"WatchdogTimestamp": "Sat 2025-03-22 01:23:33 EDT",
"WatchdogTimestampMonotonic": "248513656",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.firewall : Check if previous replaced is defined] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:34
Saturday 22 March 2025 01:26:18 -0400 (0:00:00.419) 0:00:17.802 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_previous_replaced": true,
"__firewall_python_cmd": "/usr/bin/python",
"__firewall_report_changed": true
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Get config files, checksums before and remove] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:43
Saturday 22 March 2025 01:26:18 -0400 (0:00:00.058) 0:00:17.861 ********
ok: [managed-node1] => {
"changed": false,
"rc": 0
}
STDOUT:
e2b071ca9b919b8fd60a4fe1e00e4f792ec2245359e8c48027020970791176d1 /etc/firewalld/zones/internal.xml
df2e066f9b8c0677c4887aa9a7032c4f94480408ff740036d98e648d11dd84c5 /etc/firewalld/zones/dmz.xml
610e6e9bafe289c126adb751e772cd0224012f12738a8b8011454b1da8865c18 /etc/firewalld/zones/customzone.xml
958dce439fe299ce0b0fdb10c4c18412269fbab3f09660e4b210962728554953 /etc/firewalld/firewalld.conf
STDERR:
Shared connection to 10.31.42.99 closed.
TASK [fedora.linux_system_roles.firewall : Tell firewall module it is able to report changed] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:55
Saturday 22 March 2025 01:26:19 -0400 (0:00:00.885) 0:00:18.746 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_report_changed": false
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Configure firewall] *****************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:71
Saturday 22 March 2025 01:26:19 -0400 (0:00:00.057) 0:00:18.804 ********
ok: [managed-node1] => (item={u'state': u'enabled', u'service': [u'tftp', u'ftp'], u'port': [u'443/tcp', u'443/udp'], u'zone': u'internal', u'forward_port': [u'447/tcp;;1.2.3.4', u'448/tcp;;1.2.3.5']}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"forward_port": [
"447/tcp;;1.2.3.4",
"448/tcp;;1.2.3.5"
],
"port": [
"443/tcp",
"443/udp"
],
"service": [
"tftp",
"ftp"
],
"state": "enabled",
"zone": "internal"
}
}
ok: [managed-node1] => (item={u'state': u'enabled', u'service': [u'tftp', u'ftp'], u'port': [u'443/tcp', u'443/udp'], u'zone': u'internal', u'forward_port': [u'447/tcp;;1.2.3.4', u'448/tcp;;1.2.3.5']}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"forward_port": [
"447/tcp;;1.2.3.4",
"448/tcp;;1.2.3.5"
],
"port": [
"443/tcp",
"443/udp"
],
"service": [
"tftp",
"ftp"
],
"state": "enabled",
"zone": "internal"
}
}
ok: [managed-node1] => (item={u'state': u'present', u'permanent': True, u'zone': u'customzone'}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"permanent": true,
"state": "present",
"zone": "customzone"
}
}
ok: [managed-node1] => (item={u'masquerade': True, u'state': u'enabled', u'permanent': True, u'zone': u'customzone'}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"masquerade": true,
"permanent": true,
"state": "enabled",
"zone": "customzone"
}
}
ok: [managed-node1] => (item={u'state': u'enabled', u'set_default_zone': u'dmz'}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"set_default_zone": "dmz",
"state": "enabled"
}
}
ok: [managed-node1] => (item={u'state': u'enabled', u'service': u'http'}) => {
"__firewall_changed": false,
"ansible_loop_var": "item",
"changed": false,
"item": {
"service": "http",
"state": "enabled"
}
}
TASK [fedora.linux_system_roles.firewall : Gather firewall config information] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:120
Saturday 22 March 2025 01:26:22 -0400 (0:00:03.568) 0:00:22.372 ********
skipping: [managed-node1] => (item={u'state': u'enabled', u'service': [u'tftp', u'ftp'], u'port': [u'443/tcp', u'443/udp'], u'zone': u'internal', u'forward_port': [u'447/tcp;;1.2.3.4', u'448/tcp;;1.2.3.5']}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"forward_port": [
"447/tcp;;1.2.3.4",
"448/tcp;;1.2.3.5"
],
"port": [
"443/tcp",
"443/udp"
],
"service": [
"tftp",
"ftp"
],
"state": "enabled",
"zone": "internal"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'enabled', u'service': [u'tftp', u'ftp'], u'port': [u'443/tcp', u'443/udp'], u'zone': u'internal', u'forward_port': [u'447/tcp;;1.2.3.4', u'448/tcp;;1.2.3.5']}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"forward_port": [
"447/tcp;;1.2.3.4",
"448/tcp;;1.2.3.5"
],
"port": [
"443/tcp",
"443/udp"
],
"service": [
"tftp",
"ftp"
],
"state": "enabled",
"zone": "internal"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'present', u'permanent': True, u'zone': u'customzone'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"permanent": true,
"state": "present",
"zone": "customzone"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'masquerade': True, u'state': u'enabled', u'permanent': True, u'zone': u'customzone'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"masquerade": true,
"permanent": true,
"state": "enabled",
"zone": "customzone"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'enabled', u'set_default_zone': u'dmz'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"set_default_zone": "dmz",
"state": "enabled"
},
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item={u'state': u'enabled', u'service': u'http'}) => {
"ansible_loop_var": "item",
"changed": false,
"item": {
"service": "http",
"state": "enabled"
},
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] *******
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:130
Saturday 22 March 2025 01:26:22 -0400 (0:00:00.183) 0:00:22.556 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:139
Saturday 22 March 2025 01:26:22 -0400 (0:00:00.067) 0:00:22.623 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] *******
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:144
Saturday 22 March 2025 01:26:22 -0400 (0:00:00.059) 0:00:22.683 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Get config files, checksums after] ***
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:153
Saturday 22 March 2025 01:26:23 -0400 (0:00:00.061) 0:00:22.745 ********
ok: [managed-node1] => {
"changed": false,
"rc": 0
}
STDOUT:
e2b071ca9b919b8fd60a4fe1e00e4f792ec2245359e8c48027020970791176d1 /etc/firewalld/zones/internal.xml
df2e066f9b8c0677c4887aa9a7032c4f94480408ff740036d98e648d11dd84c5 /etc/firewalld/zones/dmz.xml
610e6e9bafe289c126adb751e772cd0224012f12738a8b8011454b1da8865c18 /etc/firewalld/zones/customzone.xml
958dce439fe299ce0b0fdb10c4c18412269fbab3f09660e4b210962728554953 /etc/firewalld/firewalld.conf
STDERR:
Shared connection to 10.31.42.99 closed.
TASK [fedora.linux_system_roles.firewall : Calculate what has changed] *********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:163
Saturday 22 March 2025 01:26:23 -0400 (0:00:00.402) 0:00:23.147 ********
ok: [managed-node1] => {
"ansible_facts": {
"firewall_lib_result": {
"changed": false
}
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Show diffs] *************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:169
Saturday 22 March 2025 01:26:23 -0400 (0:00:00.061) 0:00:23.208 ********
skipping: [managed-node1] => {}
TASK [Fail on newly changes] ***************************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:95
Saturday 22 March 2025 01:26:23 -0400 (0:00:00.053) 0:00:23.262 ********
skipping: [managed-node1] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Verify firewalld zone internal services] *********************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:102
Saturday 22 March 2025 01:26:23 -0400 (0:00:00.050) 0:00:23.313 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--zone=internal",
"--list-services"
],
"delta": "0:00:00.269607",
"end": "2025-03-22 01:26:24.401723",
"failed_when_result": false,
"rc": 0,
"start": "2025-03-22 01:26:24.132116"
}
STDOUT:
dhcpv6-client ftp mdns samba-client ssh tftp
TASK [Verify firewalld zone internal ports] ************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:108
Saturday 22 March 2025 01:26:24 -0400 (0:00:00.850) 0:00:24.163 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--zone=internal",
"--list-ports"
],
"delta": "0:00:00.279494",
"end": "2025-03-22 01:26:25.023445",
"failed_when_result": false,
"rc": 0,
"start": "2025-03-22 01:26:24.743951"
}
STDOUT:
443/tcp 443/udp
TASK [Verify firewalld zone internal forward ports] ****************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:114
Saturday 22 March 2025 01:26:25 -0400 (0:00:00.629) 0:00:24.793 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--zone=internal",
"--list-forward-ports"
],
"delta": "0:00:00.265177",
"end": "2025-03-22 01:26:25.655411",
"failed_when_result": false,
"rc": 0,
"start": "2025-03-22 01:26:25.390234"
}
STDOUT:
port=447:proto=tcp:toport=:toaddr=1.2.3.4
port=448:proto=tcp:toport=:toaddr=1.2.3.5
TASK [Verify custom zone has masquerade added to it] ***************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:120
Saturday 22 March 2025 01:26:25 -0400 (0:00:00.634) 0:00:25.427 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--zone=customzone",
"--query-masquerade"
],
"delta": "0:00:00.267569",
"end": "2025-03-22 01:26:26.278369",
"failed_when_result": false,
"rc": 0,
"start": "2025-03-22 01:26:26.010800"
}
STDOUT:
yes
TASK [Verify custom zone has masquerade added to it] ***************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:126
Saturday 22 March 2025 01:26:26 -0400 (0:00:00.626) 0:00:26.053 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--get-default-zone"
],
"delta": "0:00:00.253865",
"end": "2025-03-22 01:26:26.956320",
"failed_when_result": false,
"rc": 0,
"start": "2025-03-22 01:26:26.702455"
}
STDOUT:
dmz
TASK [Verify that service http has been added to the default zone dmz] *********
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:132
Saturday 22 March 2025 01:26:27 -0400 (0:00:00.661) 0:00:26.715 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--zone=dmz",
"--query-service=http"
],
"delta": "0:00:00.264903",
"end": "2025-03-22 01:26:27.564175",
"failed_when_result": false,
"rc": 0,
"start": "2025-03-22 01:26:27.299272"
}
STDOUT:
yes
TASK [Remove customzone zone] **************************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:144
Saturday 22 March 2025 01:26:27 -0400 (0:00:00.616) 0:00:27.332 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--delete-zone=customzone"
],
"delta": "0:00:00.266597",
"end": "2025-03-22 01:26:28.188080",
"failed_when_result": false,
"rc": 0,
"start": "2025-03-22 01:26:27.921483"
}
STDOUT:
success
TASK [Reset to zone defaults] **************************************************
task path: /tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:150
Saturday 22 March 2025 01:26:28 -0400 (0:00:00.615) 0:00:27.947 ********
ok: [managed-node1] => {
"changed": false,
"cmd": "firewall-cmd --permanent --load-zone-defaults=internal\nfirewall-cmd --permanent --load-zone-defaults=external\nfirewall-cmd --permanent --load-zone-defaults=trusted\nfirewall-cmd --reload\n",
"delta": "0:00:01.245903",
"end": "2025-03-22 01:26:29.783439",
"rc": 0,
"start": "2025-03-22 01:26:28.537536"
}
STDOUT:
success
success
STDERR:
Error: NO_DEFAULTS: external
Error: NO_DEFAULTS: trusted
META: ran handlers
META: ran handlers
PLAY RECAP *********************************************************************
managed-node1 : ok=39 changed=2 unreachable=0 failed=0 skipped=48 rescued=0 ignored=0
Saturday 22 March 2025 01:26:29 -0400 (0:00:01.584) 0:00:29.532 ********
===============================================================================
fedora.linux_system_roles.firewall : Configure firewall ----------------- 3.57s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:71
fedora.linux_system_roles.firewall : Configure firewall ----------------- 2.02s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:71
Reset to zone defaults -------------------------------------------------- 1.59s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:150
Gathering Facts --------------------------------------------------------- 1.11s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:2
fedora.linux_system_roles.firewall : Install firewalld ------------------ 0.91s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:31
fedora.linux_system_roles.firewall : Get config files, checksums before and remove --- 0.89s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:43
Verify firewalld zone internal services --------------------------------- 0.85s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:102
fedora.linux_system_roles.firewall : Unmask firewalld service ----------- 0.74s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:22
fedora.linux_system_roles.firewall : Install firewalld ------------------ 0.73s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:31
Verify custom zone has masquerade added to it --------------------------- 0.66s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:126
Verify firewalld zone internal forward ports ---------------------------- 0.63s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:114
Verify firewalld zone internal ports ------------------------------------ 0.63s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:108
Verify custom zone has masquerade added to it --------------------------- 0.63s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:120
fedora.linux_system_roles.firewall : Install firewalld ------------------ 0.62s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:31
Verify that service http has been added to the default zone dmz --------- 0.62s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:132
Remove customzone zone -------------------------------------------------- 0.62s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_zone.yml:144
fedora.linux_system_roles.firewall : Check if system is ostree ---------- 0.58s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:10
fedora.linux_system_roles.firewall : Enable and start firewalld service --- 0.52s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:28
fedora.linux_system_roles.firewall : Unmask firewalld service ----------- 0.42s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:22
fedora.linux_system_roles.firewall : Enable and start firewalld service --- 0.42s
/tmp/collections-rdw/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:28