ansible-playbook [core 2.17.10]
config file = None
configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
ansible collection location = /tmp/collections-hUi
executable location = /usr/local/bin/ansible-playbook
python version = 3.12.9 (main, Feb 4 2025, 00:00:00) [GCC 14.2.1 20250110 (Red Hat 14.2.1-7)] (/usr/bin/python3.12)
jinja version = 3.1.5
libyaml = True
No config file found; using defaults
running playbook inside collection fedora.linux_system_roles
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.profile_tasks to ansible.posix.profile_tasks
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
PLAYBOOK: tests_ansible.yml ****************************************************
1 plays in /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml
PLAY [Ensure that the roles runs with default parameters] **********************
TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:2
Saturday 12 April 2025 01:27:07 -0400 (0:00:00.008) 0:00:00.008 ********
[WARNING]: Platform linux on host managed-node1 is using the discovered Python
interpreter at /usr/bin/python3.12, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [managed-node1]
TASK [fedora.linux_system_roles.firewall : Setup firewalld] ********************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2
Saturday 12 April 2025 01:27:09 -0400 (0:00:02.551) 0:00:02.560 ********
included: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1
TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:2
Saturday 12 April 2025 01:27:09 -0400 (0:00:00.023) 0:00:02.583 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__firewall_required_facts | difference(ansible_facts.keys() | list) | length > 0",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Check if system is ostree] **********
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:10
Saturday 12 April 2025 01:27:09 -0400 (0:00:00.032) 0:00:02.615 ********
ok: [managed-node1] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:15
Saturday 12 April 2025 01:27:10 -0400 (0:00:00.419) 0:00:03.035 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_is_ostree": false
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:22
Saturday 12 April 2025 01:27:10 -0400 (0:00:00.021) 0:00:03.056 ********
ok: [managed-node1] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:27
Saturday 12 April 2025 01:27:10 -0400 (0:00:00.354) 0:00:03.411 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_is_transactional": false
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Install firewalld] ******************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:31
Saturday 12 April 2025 01:27:10 -0400 (0:00:00.035) 0:00:03.447 ********
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: firewalld
TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:43
Saturday 12 April 2025 01:27:15 -0400 (0:00:04.529) 0:00:07.976 ********
skipping: [managed-node1] => {
"false_condition": "__firewall_is_transactional | d(false)"
}
TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:48
Saturday 12 April 2025 01:27:15 -0400 (0:00:00.031) 0:00:08.008 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__firewall_is_transactional | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:53
Saturday 12 April 2025 01:27:15 -0400 (0:00:00.030) 0:00:08.038 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__firewall_is_transactional | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Collect service facts] **************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5
Saturday 12 April 2025 01:27:15 -0400 (0:00:00.031) 0:00:08.070 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "firewall_disable_conflicting_services | bool",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:9
Saturday 12 April 2025 01:27:15 -0400 (0:00:00.030) 0:00:08.100 ********
skipping: [managed-node1] => (item=nftables) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "firewall_disable_conflicting_services | bool",
"item": "nftables",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=iptables) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "firewall_disable_conflicting_services | bool",
"item": "iptables",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=ufw) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "firewall_disable_conflicting_services | bool",
"item": "ufw",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
"changed": false
}
MSG:
All items skipped
TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] ***********
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:22
Saturday 12 April 2025 01:27:15 -0400 (0:00:00.036) 0:00:08.136 ********
ok: [managed-node1] => {
"changed": false,
"name": "firewalld",
"status": {
"AccessSELinuxContext": "system_u:object_r:firewalld_unit_file_t:s0",
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "inactive",
"After": "polkit.service dbus-broker.service system.slice basic.target sysinit.target dbus.socket",
"AllowIsolate": "no",
"AssertResult": "no",
"AssertTimestampMonotonic": "0",
"Before": "network-pre.target shutdown.target",
"BindLogSockets": "no",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "[not set]",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanLiveMount": "yes",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_tty_config cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "no",
"ConditionTimestampMonotonic": "0",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "iptables.service ip6tables.service ebtables.service shutdown.target ipset.service",
"ControlGroupId": "0",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DebugInvocation": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DeviceAllow": "char-rtc r",
"DevicePolicy": "closed",
"Documentation": "\"man:firewalld(1)\"",
"DynamicUser": "no",
"EffectiveMemoryHigh": "3631104000",
"EffectiveMemoryMax": "3631104000",
"EffectiveTasksMax": "21947",
"EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainHandoffTimestampMonotonic": "0",
"ExecMainPID": "0",
"ExecMainStartTimestampMonotonic": "0",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecReloadEx": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestampMonotonic": "0",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "13717",
"LimitNPROCSoft": "13717",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "13717",
"LimitSIGPENDINGSoft": "13717",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LiveMountResult": "success",
"LoadState": "loaded",
"LockPersonality": "yes",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "0",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureDurationUSec": "[not set]",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3243155456",
"MemoryCurrent": "[not set]",
"MemoryDenyWriteExecute": "yes",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "[not set]",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "[not set]",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "[not set]",
"MemoryZSwapCurrent": "[not set]",
"MemoryZSwapMax": "infinity",
"MemoryZSwapWriteback": "yes",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "yes",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivatePIDs": "no",
"PrivateTmp": "no",
"PrivateTmpEx": "no",
"PrivateUsers": "no",
"PrivateUsersEx": "no",
"ProcSubset": "all",
"ProtectClock": "yes",
"ProtectControlGroups": "yes",
"ProtectControlGroupsEx": "yes",
"ProtectHome": "yes",
"ProtectHostname": "yes",
"ProtectKernelLogs": "yes",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "yes",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "sysinit.target system.slice dbus.socket",
"Restart": "no",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "100ms",
"RestartUSecNext": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "yes",
"RestrictSUIDSGID": "yes",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestampMonotonic": "0",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "dead",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallArchitectures": "native",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "[not set]",
"TasksMax": "21947",
"TimeoutAbortUSec": "1min 30s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopFailureMode": "terminate",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "disabled",
"UtmpMode": "init",
"Wants": "network-pre.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "infinity"
}
}
TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:28
Saturday 12 April 2025 01:27:15 -0400 (0:00:00.692) 0:00:08.828 ********
changed: [managed-node1] => {
"changed": true,
"enabled": true,
"name": "firewalld",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:firewalld_unit_file_t:s0",
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "inactive",
"After": "dbus-broker.service sysinit.target dbus.socket basic.target system.slice polkit.service",
"AllowIsolate": "no",
"AssertResult": "no",
"AssertTimestampMonotonic": "0",
"Before": "network-pre.target shutdown.target",
"BindLogSockets": "no",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "[not set]",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanLiveMount": "yes",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_tty_config cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "no",
"ConditionTimestampMonotonic": "0",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "ipset.service iptables.service ebtables.service shutdown.target ip6tables.service",
"ControlGroupId": "0",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DebugInvocation": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DeviceAllow": "char-rtc r",
"DevicePolicy": "closed",
"Documentation": "\"man:firewalld(1)\"",
"DynamicUser": "no",
"EffectiveMemoryHigh": "3631104000",
"EffectiveMemoryMax": "3631104000",
"EffectiveTasksMax": "21947",
"EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainHandoffTimestampMonotonic": "0",
"ExecMainPID": "0",
"ExecMainStartTimestampMonotonic": "0",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecReloadEx": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestampMonotonic": "0",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "13717",
"LimitNPROCSoft": "13717",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "13717",
"LimitSIGPENDINGSoft": "13717",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LiveMountResult": "success",
"LoadState": "loaded",
"LockPersonality": "yes",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "0",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureDurationUSec": "[not set]",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3241811968",
"MemoryCurrent": "[not set]",
"MemoryDenyWriteExecute": "yes",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "[not set]",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "[not set]",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "[not set]",
"MemoryZSwapCurrent": "[not set]",
"MemoryZSwapMax": "infinity",
"MemoryZSwapWriteback": "yes",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "yes",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivatePIDs": "no",
"PrivateTmp": "no",
"PrivateTmpEx": "no",
"PrivateUsers": "no",
"PrivateUsersEx": "no",
"ProcSubset": "all",
"ProtectClock": "yes",
"ProtectControlGroups": "yes",
"ProtectControlGroupsEx": "yes",
"ProtectHome": "yes",
"ProtectHostname": "yes",
"ProtectKernelLogs": "yes",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "yes",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "dbus.socket sysinit.target system.slice",
"Restart": "no",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "100ms",
"RestartUSecNext": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "yes",
"RestrictSUIDSGID": "yes",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestampMonotonic": "0",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "dead",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallArchitectures": "native",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "[not set]",
"TasksMax": "21947",
"TimeoutAbortUSec": "1min 30s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopFailureMode": "terminate",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "disabled",
"UtmpMode": "init",
"Wants": "network-pre.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "infinity"
}
}
TASK [fedora.linux_system_roles.firewall : Check if previous replaced is defined] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:34
Saturday 12 April 2025 01:27:16 -0400 (0:00:01.031) 0:00:09.860 ********
ok: [managed-node1] => {
"ansible_facts": {
"__firewall_previous_replaced": false,
"__firewall_python_cmd": "/usr/bin/python3.12",
"__firewall_report_changed": true
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Get config files, checksums before and remove] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:43
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.037) 0:00:09.898 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__firewall_previous_replaced | bool",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Tell firewall module it is able to report changed] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:55
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.029) 0:00:09.927 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__firewall_previous_replaced | bool",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Configure firewall] *****************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:71
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.027) 0:00:09.955 ********
skipping: [managed-node1] => {
"changed": false,
"skipped_reason": "No items in the list"
}
TASK [fedora.linux_system_roles.firewall : Gather firewall config information] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:120
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.036) 0:00:09.992 ********
skipping: [managed-node1] => {
"changed": false,
"skipped_reason": "No items in the list"
}
TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] *******
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:130
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.035) 0:00:10.027 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "firewall | length == 1",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:139
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.031) 0:00:10.059 ********
ok: [managed-node1] => {
"changed": false,
"firewall_config": {
"custom": {
"zones": {
"public": {
"description": "For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.",
"egress_priority": 0,
"forward": true,
"forward_ports": [],
"icmp_block_inversion": false,
"icmp_blocks": [],
"ingress_priority": 0,
"interfaces": [],
"masquerade": false,
"ports": [],
"protocols": [],
"rules_str": [],
"services": [
"ssh",
"dhcpv6-client",
"cockpit"
],
"short": "Public",
"source_ports": [],
"sources": [],
"target": "default",
"version": ""
}
}
},
"default": {
"helpers": [
"Q.931",
"RAS",
"amanda",
"ftp",
"h323",
"irc",
"netbios-ns",
"pptp",
"proto-gre",
"sane",
"sip",
"snmp",
"tftp"
],
"icmptypes": [
"mld-listener-report",
"mld2-listener-report",
"neighbour-advertisement",
"neighbour-solicitation",
"network-prohibited",
"network-redirect",
"network-unknown",
"network-unreachable",
"no-route",
"packet-too-big",
"parameter-problem",
"port-unreachable",
"precedence-cutoff",
"protocol-unreachable",
"redirect",
"reject-route",
"required-option-missing",
"router-advertisement",
"router-solicitation",
"source-quench",
"source-route-failed",
"time-exceeded",
"timestamp-reply",
"timestamp-request",
"tos-host-redirect",
"tos-host-unreachable",
"tos-network-redirect",
"tos-network-unreachable",
"ttl-zero-during-reassembly",
"ttl-zero-during-transit",
"unknown-header-type",
"unknown-option",
"address-unreachable",
"bad-header",
"beyond-scope",
"communication-prohibited",
"destination-unreachable",
"echo-reply",
"echo-request",
"failed-policy",
"fragmentation-needed",
"host-precedence-violation",
"host-prohibited",
"host-redirect",
"host-unknown",
"host-unreachable",
"ip-header-bad",
"mld-listener-done",
"mld-listener-query"
],
"policies": [
"allow-host-ipv6"
],
"services": [
"RH-Satellite-6",
"afp",
"alvr",
"amanda-client",
"amanda-k5-client",
"amqp",
"amqps",
"anno-1602",
"anno-1800",
"apcupsd",
"aseqnet",
"audit",
"ausweisapp2",
"bacula-client",
"bacula",
"bareos-director",
"bareos-filedaemon",
"bareos-storage",
"bb",
"bgp",
"bitcoin-rpc",
"bitcoin-testnet-rpc",
"bitcoin-testnet",
"bitcoin",
"bittorrent-lsd",
"ceph-exporter",
"ceph-mon",
"ceph",
"cfengine",
"checkmk-agent",
"civilization-iv",
"civilization-v",
"cockpit",
"collectd",
"condor-collector",
"cratedb",
"ctdb",
"dds-multicast",
"dds-unicast",
"dds",
"dhcp",
"dhcpv6-client",
"dhcpv6",
"distcc",
"dns-over-quic",
"dns-over-tls",
"dns",
"docker-registry",
"docker-swarm",
"dropbox-lansync",
"elasticsearch",
"etcd-client",
"etcd-server",
"factorio",
"finger",
"foreman-proxy",
"foreman",
"freeipa-4",
"freeipa-ldap",
"freeipa-ldaps",
"freeipa-replication",
"freeipa-trust",
"ftp",
"galera",
"ganglia-client",
"ganglia-master",
"git",
"gpsd",
"grafana",
"gre",
"high-availability",
"http",
"http3",
"https",
"ident",
"imap",
"imaps",
"iperf2",
"iperf3",
"ipfs",
"ipp-client",
"ipp",
"ipsec",
"irc",
"ircs",
"iscsi-target",
"isns",
"jenkins",
"kadmin",
"kdeconnect",
"kerberos",
"kibana",
"klogin",
"kpasswd",
"kprop",
"kshell",
"kube-api",
"kube-apiserver",
"kube-control-plane-secure",
"kube-control-plane",
"kube-controller-manager-secure",
"kube-controller-manager",
"kube-nodeport-services",
"kube-scheduler-secure",
"kube-scheduler",
"kube-worker",
"kubelet-readonly",
"kubelet-worker",
"kubelet",
"ldap",
"ldaps",
"libvirt-tls",
"libvirt",
"lightning-network",
"llmnr-client",
"llmnr-tcp",
"llmnr-udp",
"llmnr",
"managesieve",
"matrix",
"mdns",
"memcache",
"minecraft",
"minidlna",
"mndp",
"mongodb",
"mosh",
"mountd",
"mpd",
"mqtt-tls",
"mqtt",
"ms-wbt",
"mssql",
"murmur",
"mysql",
"nbd",
"nebula",
"need-for-speed-most-wanted",
"netbios-ns",
"netdata-dashboard",
"nfs",
"nfs3",
"nmea-0183",
"nrpe",
"ntp",
"nut",
"opentelemetry",
"openvpn",
"ovirt-imageio",
"ovirt-storageconsole",
"ovirt-vmconsole",
"plex",
"pmcd",
"pmproxy",
"pmwebapi",
"pmwebapis",
"pop3",
"pop3s",
"postgresql",
"privoxy",
"prometheus-node-exporter",
"prometheus",
"proxy-dhcp",
"ps2link",
"ps3netsrv",
"ptp",
"pulseaudio",
"puppetmaster",
"quassel",
"radius",
"radsec",
"rdp",
"redis-sentinel",
"redis",
"rootd",
"rpc-bind",
"rquotad",
"rsh",
"rsyncd",
"rtsp",
"salt-master",
"samba-client",
"samba-dc",
"samba",
"sane",
"settlers-history-collection",
"sip",
"sips",
"slimevr",
"slp",
"smtp-submission",
"smtp",
"smtps",
"snmp",
"snmptls-trap",
"snmptls",
"snmptrap",
"spideroak-lansync",
"spotify-sync",
"squid",
"ssdp",
"ssh",
"statsrv",
"steam-lan-transfer",
"steam-streaming",
"stellaris",
"stronghold-crusader",
"stun",
"stuns",
"submission",
"supertuxkart",
"svdrp",
"svn",
"syncthing-gui",
"syncthing-relay",
"syncthing",
"synergy",
"syscomlan",
"syslog-tls",
"syslog",
"telnet",
"tentacle",
"terraria",
"tftp",
"tile38",
"tinc",
"tor-socks",
"transmission-client",
"turn",
"turns",
"upnp-client",
"vdsm",
"vnc-server",
"vrrp",
"warpinator",
"wbem-http",
"wbem-https",
"wireguard",
"ws-discovery-client",
"ws-discovery-host",
"ws-discovery-tcp",
"ws-discovery-udp",
"ws-discovery",
"wsman",
"wsmans",
"xdmcp",
"xmpp-bosh",
"xmpp-client",
"xmpp-local",
"xmpp-server",
"zabbix-agent",
"zabbix-java-gateway",
"zabbix-server",
"zabbix-trapper",
"zabbix-web-service",
"zero-k",
"zerotier",
"0-AD",
"RH-Satellite-6-capsule"
],
"zones": [
"nm-shared",
"block",
"dmz",
"drop",
"external",
"home",
"internal",
"public",
"trusted",
"work"
]
},
"default_zone": "public"
}
}
TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] *******
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:144
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.567) 0:00:10.626 ********
ok: [managed-node1] => {
"ansible_facts": {
"firewall_config": {
"custom": {
"zones": {
"public": {
"description": "For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.",
"egress_priority": 0,
"forward": true,
"forward_ports": [],
"icmp_block_inversion": false,
"icmp_blocks": [],
"ingress_priority": 0,
"interfaces": [],
"masquerade": false,
"ports": [],
"protocols": [],
"rules_str": [],
"services": [
"ssh",
"dhcpv6-client",
"cockpit"
],
"short": "Public",
"source_ports": [],
"sources": [],
"target": "default",
"version": ""
}
}
},
"default": {
"helpers": [
"Q.931",
"RAS",
"amanda",
"ftp",
"h323",
"irc",
"netbios-ns",
"pptp",
"proto-gre",
"sane",
"sip",
"snmp",
"tftp"
],
"icmptypes": [
"mld-listener-report",
"mld2-listener-report",
"neighbour-advertisement",
"neighbour-solicitation",
"network-prohibited",
"network-redirect",
"network-unknown",
"network-unreachable",
"no-route",
"packet-too-big",
"parameter-problem",
"port-unreachable",
"precedence-cutoff",
"protocol-unreachable",
"redirect",
"reject-route",
"required-option-missing",
"router-advertisement",
"router-solicitation",
"source-quench",
"source-route-failed",
"time-exceeded",
"timestamp-reply",
"timestamp-request",
"tos-host-redirect",
"tos-host-unreachable",
"tos-network-redirect",
"tos-network-unreachable",
"ttl-zero-during-reassembly",
"ttl-zero-during-transit",
"unknown-header-type",
"unknown-option",
"address-unreachable",
"bad-header",
"beyond-scope",
"communication-prohibited",
"destination-unreachable",
"echo-reply",
"echo-request",
"failed-policy",
"fragmentation-needed",
"host-precedence-violation",
"host-prohibited",
"host-redirect",
"host-unknown",
"host-unreachable",
"ip-header-bad",
"mld-listener-done",
"mld-listener-query"
],
"policies": [
"allow-host-ipv6"
],
"services": [
"RH-Satellite-6",
"afp",
"alvr",
"amanda-client",
"amanda-k5-client",
"amqp",
"amqps",
"anno-1602",
"anno-1800",
"apcupsd",
"aseqnet",
"audit",
"ausweisapp2",
"bacula-client",
"bacula",
"bareos-director",
"bareos-filedaemon",
"bareos-storage",
"bb",
"bgp",
"bitcoin-rpc",
"bitcoin-testnet-rpc",
"bitcoin-testnet",
"bitcoin",
"bittorrent-lsd",
"ceph-exporter",
"ceph-mon",
"ceph",
"cfengine",
"checkmk-agent",
"civilization-iv",
"civilization-v",
"cockpit",
"collectd",
"condor-collector",
"cratedb",
"ctdb",
"dds-multicast",
"dds-unicast",
"dds",
"dhcp",
"dhcpv6-client",
"dhcpv6",
"distcc",
"dns-over-quic",
"dns-over-tls",
"dns",
"docker-registry",
"docker-swarm",
"dropbox-lansync",
"elasticsearch",
"etcd-client",
"etcd-server",
"factorio",
"finger",
"foreman-proxy",
"foreman",
"freeipa-4",
"freeipa-ldap",
"freeipa-ldaps",
"freeipa-replication",
"freeipa-trust",
"ftp",
"galera",
"ganglia-client",
"ganglia-master",
"git",
"gpsd",
"grafana",
"gre",
"high-availability",
"http",
"http3",
"https",
"ident",
"imap",
"imaps",
"iperf2",
"iperf3",
"ipfs",
"ipp-client",
"ipp",
"ipsec",
"irc",
"ircs",
"iscsi-target",
"isns",
"jenkins",
"kadmin",
"kdeconnect",
"kerberos",
"kibana",
"klogin",
"kpasswd",
"kprop",
"kshell",
"kube-api",
"kube-apiserver",
"kube-control-plane-secure",
"kube-control-plane",
"kube-controller-manager-secure",
"kube-controller-manager",
"kube-nodeport-services",
"kube-scheduler-secure",
"kube-scheduler",
"kube-worker",
"kubelet-readonly",
"kubelet-worker",
"kubelet",
"ldap",
"ldaps",
"libvirt-tls",
"libvirt",
"lightning-network",
"llmnr-client",
"llmnr-tcp",
"llmnr-udp",
"llmnr",
"managesieve",
"matrix",
"mdns",
"memcache",
"minecraft",
"minidlna",
"mndp",
"mongodb",
"mosh",
"mountd",
"mpd",
"mqtt-tls",
"mqtt",
"ms-wbt",
"mssql",
"murmur",
"mysql",
"nbd",
"nebula",
"need-for-speed-most-wanted",
"netbios-ns",
"netdata-dashboard",
"nfs",
"nfs3",
"nmea-0183",
"nrpe",
"ntp",
"nut",
"opentelemetry",
"openvpn",
"ovirt-imageio",
"ovirt-storageconsole",
"ovirt-vmconsole",
"plex",
"pmcd",
"pmproxy",
"pmwebapi",
"pmwebapis",
"pop3",
"pop3s",
"postgresql",
"privoxy",
"prometheus-node-exporter",
"prometheus",
"proxy-dhcp",
"ps2link",
"ps3netsrv",
"ptp",
"pulseaudio",
"puppetmaster",
"quassel",
"radius",
"radsec",
"rdp",
"redis-sentinel",
"redis",
"rootd",
"rpc-bind",
"rquotad",
"rsh",
"rsyncd",
"rtsp",
"salt-master",
"samba-client",
"samba-dc",
"samba",
"sane",
"settlers-history-collection",
"sip",
"sips",
"slimevr",
"slp",
"smtp-submission",
"smtp",
"smtps",
"snmp",
"snmptls-trap",
"snmptls",
"snmptrap",
"spideroak-lansync",
"spotify-sync",
"squid",
"ssdp",
"ssh",
"statsrv",
"steam-lan-transfer",
"steam-streaming",
"stellaris",
"stronghold-crusader",
"stun",
"stuns",
"submission",
"supertuxkart",
"svdrp",
"svn",
"syncthing-gui",
"syncthing-relay",
"syncthing",
"synergy",
"syscomlan",
"syslog-tls",
"syslog",
"telnet",
"tentacle",
"terraria",
"tftp",
"tile38",
"tinc",
"tor-socks",
"transmission-client",
"turn",
"turns",
"upnp-client",
"vdsm",
"vnc-server",
"vrrp",
"warpinator",
"wbem-http",
"wbem-https",
"wireguard",
"ws-discovery-client",
"ws-discovery-host",
"ws-discovery-tcp",
"ws-discovery-udp",
"ws-discovery",
"wsman",
"wsmans",
"xdmcp",
"xmpp-bosh",
"xmpp-client",
"xmpp-local",
"xmpp-server",
"zabbix-agent",
"zabbix-java-gateway",
"zabbix-server",
"zabbix-trapper",
"zabbix-web-service",
"zero-k",
"zerotier",
"0-AD",
"RH-Satellite-6-capsule"
],
"zones": [
"nm-shared",
"block",
"dmz",
"drop",
"external",
"home",
"internal",
"public",
"trusted",
"work"
]
},
"default_zone": "public"
}
},
"changed": false
}
TASK [fedora.linux_system_roles.firewall : Get config files, checksums after] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:153
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.059) 0:00:10.686 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__firewall_previous_replaced | bool",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Calculate what has changed] *********
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:163
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.032) 0:00:10.718 ********
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__firewall_previous_replaced | bool",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.firewall : Show diffs] *************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:169
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.057) 0:00:10.775 ********
skipping: [managed-node1] => {
"false_condition": "__firewall_previous_replaced | bool"
}
TASK [Get default zone] ********************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:11
Saturday 12 April 2025 01:27:17 -0400 (0:00:00.052) 0:00:10.828 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--get-default-zone"
],
"delta": "0:00:00.183330",
"end": "2025-04-12 01:27:18.561168",
"rc": 0,
"start": "2025-04-12 01:27:18.377838"
}
STDOUT:
public
TASK [Remove custom zone] ******************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:21
Saturday 12 April 2025 01:27:18 -0400 (0:00:00.669) 0:00:11.498 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--delete-zone=custom"
],
"delta": "0:00:00.185381",
"end": "2025-04-12 01:27:19.113919",
"failed_when_result": false,
"rc": 112,
"start": "2025-04-12 01:27:18.928538"
}
STDERR:
Error: INVALID_ZONE: custom
MSG:
non-zero return code
TASK [Reset internal zone to defaults] *****************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:27
Saturday 12 April 2025 01:27:19 -0400 (0:00:00.550) 0:00:12.048 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=internal"
],
"delta": "0:00:00.188861",
"end": "2025-04-12 01:27:19.658943",
"failed_when_result": false,
"rc": 22,
"start": "2025-04-12 01:27:19.470082"
}
STDERR:
Error: NO_DEFAULTS: internal
MSG:
non-zero return code
TASK [Reset trusted zone to defaults] ******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:33
Saturday 12 April 2025 01:27:19 -0400 (0:00:00.545) 0:00:12.594 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=trusted"
],
"delta": "0:00:00.187491",
"end": "2025-04-12 01:27:20.216460",
"failed_when_result": false,
"rc": 22,
"start": "2025-04-12 01:27:20.028969"
}
STDERR:
Error: NO_DEFAULTS: trusted
MSG:
non-zero return code
TASK [Reset dmz zone to defaults] **********************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:39
Saturday 12 April 2025 01:27:20 -0400 (0:00:00.555) 0:00:13.149 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=dmz"
],
"delta": "0:00:00.194783",
"end": "2025-04-12 01:27:20.760651",
"failed_when_result": false,
"rc": 22,
"start": "2025-04-12 01:27:20.565868"
}
STDERR:
Error: NO_DEFAULTS: dmz
MSG:
non-zero return code
TASK [Reset drop zone to defaults] *********************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:45
Saturday 12 April 2025 01:27:20 -0400 (0:00:00.546) 0:00:13.696 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=drop"
],
"delta": "0:00:00.186839",
"end": "2025-04-12 01:27:21.295984",
"failed_when_result": false,
"rc": 22,
"start": "2025-04-12 01:27:21.109145"
}
STDERR:
Error: NO_DEFAULTS: drop
MSG:
non-zero return code
TASK [Reset public zone to defaults] *******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:51
Saturday 12 April 2025 01:27:21 -0400 (0:00:00.543) 0:00:14.239 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=public"
],
"delta": "0:00:00.185605",
"end": "2025-04-12 01:27:21.867668",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:21.682063"
}
STDOUT:
success
TASK [Reset default zone to defaults] ******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:57
Saturday 12 April 2025 01:27:21 -0400 (0:00:00.562) 0:00:14.802 ********
ok: [managed-node1] => {
"changed": false,
"cmd": "zone=$(firewall-cmd --get-default-zone)\nfirewall-cmd --permanent --load-zone-defaults=$zone\n",
"delta": "0:00:00.368058",
"end": "2025-04-12 01:27:22.588314",
"failed_when_result": false,
"rc": 22,
"start": "2025-04-12 01:27:22.220256"
}
STDERR:
Error: NO_DEFAULTS: public
MSG:
non-zero return code
TASK [Create custom zone] ******************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:66
Saturday 12 April 2025 01:27:22 -0400 (0:00:00.720) 0:00:15.522 ********
changed: [managed-node1] => {
"changed": true,
"cmd": [
"firewall-cmd",
"--permanent",
"--new-zone=custom"
],
"delta": "0:00:00.187418",
"end": "2025-04-12 01:27:23.148550",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:22.961132"
}
STDOUT:
success
TASK [Reload firewalld] ********************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:72
Saturday 12 April 2025 01:27:23 -0400 (0:00:00.560) 0:00:16.083 ********
changed: [managed-node1] => {
"changed": true,
"cmd": [
"firewall-cmd",
"--reload"
],
"delta": "0:00:00.400047",
"end": "2025-04-12 01:27:23.908031",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:23.507984"
}
STDOUT:
success
TASK [Permit traffic in default zone for https service] ************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:80
Saturday 12 April 2025 01:27:23 -0400 (0:00:00.760) 0:00:16.843 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Permit traffic in default zone for https service, again] *****************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:88
Saturday 12 April 2025 01:27:24 -0400 (0:00:00.540) 0:00:17.384 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Permit traffic in default zone on port 8081/tcp] *************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:96
Saturday 12 April 2025 01:27:24 -0400 (0:00:00.455) 0:00:17.839 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Permit traffic in default zone on port 8081/tcp, again] ******************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:104
Saturday 12 April 2025 01:27:25 -0400 (0:00:00.474) 0:00:18.314 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Allow port 161-162/udp in permanent default zone] ************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:112
Saturday 12 April 2025 01:27:25 -0400 (0:00:00.444) 0:00:18.758 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Allow port 161-162/udp in permanent default zone, again] *****************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:120
Saturday 12 April 2025 01:27:26 -0400 (0:00:00.447) 0:00:19.206 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Do not permit traffic in default zone on port 8081/tcp] ******************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:128
Saturday 12 April 2025 01:27:26 -0400 (0:00:00.448) 0:00:19.654 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Do not permit traffic in default zone on port 8081/tcp, again] ***********
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:136
Saturday 12 April 2025 01:27:27 -0400 (0:00:00.461) 0:00:20.116 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Allow service http in permanent dmz zone] ********************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:144
Saturday 12 April 2025 01:27:27 -0400 (0:00:00.456) 0:00:20.572 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Allow service http in permanent dmz zone, again] *************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:153
Saturday 12 April 2025 01:27:28 -0400 (0:00:00.456) 0:00:21.029 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Allow service ftp with limitation using rich rule in permanent default zone] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:162
Saturday 12 April 2025 01:27:28 -0400 (0:00:00.450) 0:00:21.479 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Allow service ftp with limitation using rich rule in permanent default zone, again] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:170
Saturday 12 April 2025 01:27:29 -0400 (0:00:00.458) 0:00:21.938 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Allow source 192.0.2.0/24 in internal zone] ******************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:178
Saturday 12 April 2025 01:27:29 -0400 (0:00:00.473) 0:00:22.411 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Allow source 192.0.2.0/24 in internal zone, again] ***********************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:187
Saturday 12 April 2025 01:27:29 -0400 (0:00:00.448) 0:00:22.860 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Allow nm interface eth0 in permanent trusted zone] ***********************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:196
Saturday 12 April 2025 01:27:30 -0400 (0:00:00.447) 0:00:23.307 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Allow nm interface eth0 in permanent trusted zone, again] ****************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:205
Saturday 12 April 2025 01:27:30 -0400 (0:00:00.494) 0:00:23.802 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Disable nm interface eth0 in permanent trusted zone] *********************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:214
Saturday 12 April 2025 01:27:31 -0400 (0:00:00.467) 0:00:24.270 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Disable nm interface eth0 in permanent trusted zone, again] **************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:223
Saturday 12 April 2025 01:27:31 -0400 (0:00:00.476) 0:00:24.746 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Allow interface eth2 in permanent trusted zone] **************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:232
Saturday 12 April 2025 01:27:32 -0400 (0:00:00.449) 0:00:25.196 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Allow interface eth2 in permanent trusted zone, again] *******************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:241
Saturday 12 April 2025 01:27:32 -0400 (0:00:00.464) 0:00:25.660 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Allow masquerading in permanent dmz zone] ********************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:250
Saturday 12 April 2025 01:27:33 -0400 (0:00:00.454) 0:00:26.115 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Allow masquerading in permanent dmz zone, again] *************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:258
Saturday 12 April 2025 01:27:33 -0400 (0:00:00.466) 0:00:26.581 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Ensure permanent custom zone exists (no change)] *************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:266
Saturday 12 April 2025 01:27:34 -0400 (0:00:00.431) 0:00:27.013 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Ensure ICMP block inversion in permanent drop zone] **********************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:274
Saturday 12 April 2025 01:27:34 -0400 (0:00:00.466) 0:00:27.480 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Ensure ICMP block inversion in permanent drop zone, again] ***************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:282
Saturday 12 April 2025 01:27:35 -0400 (0:00:00.468) 0:00:27.948 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Block ICMP echo-request in permanent drop zone] **************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:290
Saturday 12 April 2025 01:27:35 -0400 (0:00:00.455) 0:00:28.404 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Block ICMP echo-request in permanent drop zone, again] *******************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:299
Saturday 12 April 2025 01:27:35 -0400 (0:00:00.471) 0:00:28.876 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Ensure default target in permanent internal zone (no change)] ************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:308
Saturday 12 April 2025 01:27:36 -0400 (0:00:00.442) 0:00:29.318 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Ensure target ACCEPT in permanent internal zone] *************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:317
Saturday 12 April 2025 01:27:36 -0400 (0:00:00.463) 0:00:29.781 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Ensure target ACCEPT in permanent internal zone, again] ******************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:326
Saturday 12 April 2025 01:27:37 -0400 (0:00:00.764) 0:00:30.546 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Ensure default target in permanent internal zone] ************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:335
Saturday 12 April 2025 01:27:38 -0400 (0:00:00.449) 0:00:30.995 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Ensure default target in permanent internal zone, again] *****************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:344
Saturday 12 April 2025 01:27:38 -0400 (0:00:00.687) 0:00:31.682 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Redirect port 443 to 8443 with Rich Rule in permanent and runtime public zone] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:353
Saturday 12 April 2025 01:27:39 -0400 (0:00:00.441) 0:00:32.123 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Redirect port 443 to 8443 with Rich Rule in permanent and runtime public zone, again] ***
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:363
Saturday 12 April 2025 01:27:39 -0400 (0:00:00.486) 0:00:32.609 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Firewalld custom zone] ***************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:373
Saturday 12 April 2025 01:27:40 -0400 (0:00:00.481) 0:00:33.091 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true
}
TASK [Assert firewalld custom zone] ********************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:381
Saturday 12 April 2025 01:27:40 -0400 (0:00:00.720) 0:00:33.811 ********
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Add masquerade to custom zone] *******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:386
Saturday 12 April 2025 01:27:40 -0400 (0:00:00.029) 0:00:33.840 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Add masquerade to custom zone, again] ************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:396
Saturday 12 April 2025 01:27:41 -0400 (0:00:00.468) 0:00:34.309 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Set the default zone to something other than dmz] ************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:406
Saturday 12 April 2025 01:27:41 -0400 (0:00:00.457) 0:00:34.766 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--set-default-zone",
"public"
],
"delta": "0:00:00.181765",
"end": "2025-04-12 01:27:42.389911",
"rc": 0,
"start": "2025-04-12 01:27:42.208146"
}
STDOUT:
success
STDERR:
Warning: ZONE_ALREADY_SET: public
TASK [Set default zone] ********************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:410
Saturday 12 April 2025 01:27:42 -0400 (0:00:00.555) 0:00:35.321 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Set default zone, again] *************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:417
Saturday 12 April 2025 01:27:43 -0400 (0:00:00.740) 0:00:36.062 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Add multiple custom services] ********************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:424
Saturday 12 April 2025 01:27:43 -0400 (0:00:00.484) 0:00:36.547 ********
ok: [managed-node1] => {
"changed": false,
"failed_when_result": false
}
MSG:
can only add, modify, or remove one service at a time
TASK [Add custom service without details] **************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:434
Saturday 12 April 2025 01:27:44 -0400 (0:00:00.418) 0:00:36.966 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Add custom service that already exists] **********************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:442
Saturday 12 April 2025 01:27:44 -0400 (0:00:00.719) 0:00:37.685 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Add description to custom service] ***************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:450
Saturday 12 April 2025 01:27:45 -0400 (0:00:00.481) 0:00:38.167 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Add short description to custom service] *********************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:459
Saturday 12 April 2025 01:27:46 -0400 (0:00:00.724) 0:00:38.892 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Add source_ports to custom service] **************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:468
Saturday 12 April 2025 01:27:46 -0400 (0:00:00.730) 0:00:39.622 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Add source_ports to custom service again] ********************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:477
Saturday 12 April 2025 01:27:47 -0400 (0:00:00.720) 0:00:40.343 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Add invalid protocol to custom service] **********************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:486
Saturday 12 April 2025 01:27:47 -0400 (0:00:00.450) 0:00:40.793 ********
ok: [managed-node1] => {
"changed": false,
"failed_when_result": false
}
MSG:
INVALID_PROTOCOL: nonexistentprotocol
TASK [Add valid protocol to custom service] ************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:495
Saturday 12 April 2025 01:27:48 -0400 (0:00:00.461) 0:00:41.254 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Remove valid protocol from customservice] ********************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:504
Saturday 12 April 2025 01:27:49 -0400 (0:00:00.727) 0:00:41.982 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Remove ports from custom service without deleting service] ***************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:513
Saturday 12 April 2025 01:27:49 -0400 (0:00:00.713) 0:00:42.696 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Add destination addresses] ***********************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:522
Saturday 12 April 2025 01:27:50 -0400 (0:00:00.725) 0:00:43.421 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Delete custom service] ***************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:533
Saturday 12 April 2025 01:27:51 -0400 (0:00:00.727) 0:00:44.148 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Delete custom service again] *********************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:541
Saturday 12 April 2025 01:27:51 -0400 (0:00:00.705) 0:00:44.853 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Add custom service with all the elements at once] ************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:549
Saturday 12 April 2025 01:27:52 -0400 (0:00:00.449) 0:00:45.303 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Add helper module that already is on customservice] **********************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:566
Saturday 12 April 2025 01:27:53 -0400 (0:00:00.729) 0:00:46.032 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Forward port 40 to 0.0.0.0:8080 (string)] ********************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:575
Saturday 12 April 2025 01:27:53 -0400 (0:00:00.465) 0:00:46.497 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Forward same port again (string)] ****************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:582
Saturday 12 April 2025 01:27:54 -0400 (0:00:00.506) 0:00:47.004 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Disable forward port (string)] *******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:589
Saturday 12 April 2025 01:27:54 -0400 (0:00:00.449) 0:00:47.454 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Forward port (dict form)] ************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:596
Saturday 12 April 2025 01:27:55 -0400 (0:00:00.453) 0:00:47.907 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Forward port again (dict form)] ******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:607
Saturday 12 April 2025 01:27:55 -0400 (0:00:00.448) 0:00:48.356 ********
ok: [managed-node1] => {
"__firewall_changed": false,
"changed": false,
"failed_when_result": false
}
TASK [Disable forward port (dict form)] ****************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:618
Saturday 12 April 2025 01:27:55 -0400 (0:00:00.451) 0:00:48.808 ********
changed: [managed-node1] => {
"__firewall_changed": true,
"changed": true,
"failed_when_result": false
}
TASK [Remove custom zone] ******************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:637
Saturday 12 April 2025 01:27:56 -0400 (0:00:00.453) 0:00:49.261 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--delete-zone=custom"
],
"delta": "0:00:00.185965",
"end": "2025-04-12 01:27:56.867869",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:56.681904"
}
STDOUT:
success
TASK [Remove customzone zone] **************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:643
Saturday 12 April 2025 01:27:56 -0400 (0:00:00.551) 0:00:49.812 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--delete-zone=customzone"
],
"delta": "0:00:00.187074",
"end": "2025-04-12 01:27:57.425855",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:57.238781"
}
STDOUT:
success
TASK [Reset internal zone to defaults] *****************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:649
Saturday 12 April 2025 01:27:57 -0400 (0:00:00.554) 0:00:50.367 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=internal"
],
"delta": "0:00:00.184518",
"end": "2025-04-12 01:27:57.994013",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:57.809495"
}
STDOUT:
success
TASK [Reset trusted zone to defaults] ******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:655
Saturday 12 April 2025 01:27:58 -0400 (0:00:00.560) 0:00:50.928 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=trusted"
],
"delta": "0:00:00.183103",
"end": "2025-04-12 01:27:58.545567",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:58.362464"
}
STDOUT:
success
TASK [Reset dmz zone to defaults] **********************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:661
Saturday 12 April 2025 01:27:58 -0400 (0:00:00.551) 0:00:51.480 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=dmz"
],
"delta": "0:00:00.186599",
"end": "2025-04-12 01:27:59.080632",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:58.894033"
}
STDOUT:
success
TASK [Reset drop zone to defaults] *********************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:667
Saturday 12 April 2025 01:27:59 -0400 (0:00:00.545) 0:00:52.025 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=drop"
],
"delta": "0:00:00.186432",
"end": "2025-04-12 01:27:59.653787",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:27:59.467355"
}
STDOUT:
success
TASK [Reset public zone to defaults] *******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:673
Saturday 12 April 2025 01:27:59 -0400 (0:00:00.565) 0:00:52.591 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=public"
],
"delta": "0:00:00.186664",
"end": "2025-04-12 01:28:00.193178",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:28:00.006514"
}
STDOUT:
success
TASK [Reset default zone to defaults] ******************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:679
Saturday 12 April 2025 01:28:00 -0400 (0:00:00.538) 0:00:53.129 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--permanent",
"--load-zone-defaults=public"
],
"delta": "0:00:00.186744",
"end": "2025-04-12 01:28:00.726940",
"failed_when_result": false,
"rc": 22,
"start": "2025-04-12 01:28:00.540196"
}
STDERR:
Error: NO_DEFAULTS: public
MSG:
non-zero return code
TASK [Reset default zone] ******************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:685
Saturday 12 April 2025 01:28:00 -0400 (0:00:00.535) 0:00:53.665 ********
ok: [managed-node1] => {
"changed": false,
"cmd": [
"firewall-cmd",
"--set-default-zone=public"
],
"delta": "0:00:00.403024",
"end": "2025-04-12 01:28:01.509034",
"rc": 0,
"start": "2025-04-12 01:28:01.106010"
}
STDOUT:
success
TASK [Reload firewalld] ********************************************************
task path: /tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:691
Saturday 12 April 2025 01:28:01 -0400 (0:00:00.778) 0:00:54.443 ********
changed: [managed-node1] => {
"changed": true,
"cmd": [
"firewall-cmd",
"--reload"
],
"delta": "0:00:00.399123",
"end": "2025-04-12 01:28:02.283370",
"failed_when_result": false,
"rc": 0,
"start": "2025-04-12 01:28:01.884247"
}
STDOUT:
success
PLAY RECAP *********************************************************************
managed-node1 : ok=95 changed=37 unreachable=0 failed=0 skipped=14 rescued=0 ignored=0
TASKS RECAP ********************************************************************
Saturday 12 April 2025 01:28:02 -0400 (0:00:00.772) 0:00:55.216 ********
===============================================================================
fedora.linux_system_roles.firewall : Install firewalld ------------------ 4.53s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:31
Gathering Facts --------------------------------------------------------- 2.55s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:2
fedora.linux_system_roles.firewall : Enable and start firewalld service --- 1.03s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:28
Reset default zone ------------------------------------------------------ 0.78s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:685
Reload firewalld -------------------------------------------------------- 0.77s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:691
Ensure target ACCEPT in permanent internal zone ------------------------- 0.76s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:317
Reload firewalld -------------------------------------------------------- 0.76s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:72
Set default zone -------------------------------------------------------- 0.74s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:410
Add short description to custom service --------------------------------- 0.73s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:459
Add custom service with all the elements at once ------------------------ 0.73s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:549
Add valid protocol to custom service ------------------------------------ 0.73s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:495
Add destination addresses ----------------------------------------------- 0.73s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:522
Remove ports from custom service without deleting service --------------- 0.73s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:513
Add description to custom service --------------------------------------- 0.72s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:450
Firewalld custom zone --------------------------------------------------- 0.72s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:373
Add source_ports to custom service -------------------------------------- 0.72s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:468
Reset default zone to defaults ------------------------------------------ 0.72s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:57
Add custom service without details -------------------------------------- 0.72s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:434
Remove valid protocol from customservice -------------------------------- 0.71s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:504
Delete custom service --------------------------------------------------- 0.71s
/tmp/collections-hUi/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ansible.yml:533