ansible-playbook 2.9.27 config file = None configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/local/lib/python3.9/site-packages/ansible executable location = /usr/local/bin/ansible-playbook python version = 3.9.19 (main, May 16 2024, 11:40:09) [GCC 8.5.0 20210514 (Red Hat 8.5.0-22)] No config file found; using defaults [WARNING]: running playbook inside collection fedora.linux_system_roles Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'jsonl', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: tests_ipsets.yml ***************************************************** 1 plays in /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml PLAY [Test firewall user defined ipsets] *************************************** TASK [Gathering Facts] ********************************************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Monday 31 August 2026 11:07:55 -0400 (0:00:00.020) 0:00:00.020 ********* ok: [managed-node1] META: ran handlers TASK [Start from clean slate] ************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:36 Monday 31 August 2026 11:07:56 -0400 (0:00:00.955) 0:00:00.975 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:07:56 -0400 (0:00:00.036) 0:00:01.012 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:07:56 -0400 (0:00:00.049) 0:00:01.061 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:07:57 -0400 (0:00:00.143) 0:00:01.204 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:07:57 -0400 (0:00:00.037) 0:00:01.242 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:07:57 -0400 (0:00:00.535) 0:00:01.777 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:07:57-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:07:58 -0400 (0:00:00.415) 0:00:02.192 ********* ok: [managed-node1] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:07:58 -0400 (0:00:00.478) 0:00:02.671 ********* ok: [managed-node1] => { "ansible_facts": { "__firewall_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:07:58 -0400 (0:00:00.024) 0:00:02.696 ********* ok: [managed-node1] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:07:58 -0400 (0:00:00.329) 0:00:03.026 ********* ok: [managed-node1] => { "ansible_facts": { "__firewall_is_transactional": false }, "changed": false } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:07:58 -0400 (0:00:00.019) 0:00:03.046 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:07:58 -0400 (0:00:00.036) 0:00:03.083 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:07:58 -0400 (0:00:00.028) 0:00:03.112 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:07:58 -0400 (0:00:00.021) 0:00:03.133 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "previous": "replaced" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:07:59 -0400 (0:00:00.037) 0:00:03.171 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:07:59 -0400 (0:00:00.016) 0:00:03.188 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:07:59 -0400 (0:00:00.030) 0:00:03.218 ********* ok: [managed-node1] => { "changed": false, "cmd": [ "systemctl", "is-system-running" ], "delta": "0:00:00.006958", "end": "2026-08-31 11:07:59.415267", "failed_when_result": false, "rc": 0, "start": "2026-08-31 11:07:59.408309" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:07:59 -0400 (0:00:00.411) 0:00:03.630 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:07:59 -0400 (0:00:00.029) 0:00:03.659 ********* ok: [managed-node1] => { "ansible_facts": { "__firewall_is_booted": true }, "changed": false } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:07:59 -0400 (0:00:00.025) 0:00:03.685 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:08:02 -0400 (0:00:02.787) 0:00:06.472 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:08:02 -0400 (0:00:00.032) 0:00:06.505 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:08:02 -0400 (0:00:00.018) 0:00:06.524 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:08:02 -0400 (0:00:00.013) 0:00:06.537 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:08:02 -0400 (0:00:00.036) 0:00:06.573 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:08:02 -0400 (0:00:00.035) 0:00:06.609 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49700864", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:08:03 -0400 (0:00:00.684) 0:00:07.293 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49700864", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:08:03 -0400 (0:00:00.449) 0:00:07.742 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.239299", "end": "2026-08-31 11:08:04.087155", "rc": 0, "start": "2026-08-31 11:08:03.847856" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:08:04 -0400 (0:00:00.562) 0:00:08.304 ********* ok: [managed-node1] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:08:05 -0400 (0:00:01.493) 0:00:09.798 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:08:05 -0400 (0:00:00.023) 0:00:09.822 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:08:05 -0400 (0:00:00.025) 0:00:09.847 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:08:05 -0400 (0:00:00.018) 0:00:09.865 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:08:05 -0400 (0:00:00.029) 0:00:09.895 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:08:05 -0400 (0:00:00.028) 0:00:09.923 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:06-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Check for customipset-ipv4 and ipv6 ipsets] ****************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:44 Monday 31 August 2026 11:08:06 -0400 (0:00:00.350) 0:00:10.274 ********* ok: [managed-node1] => { "changed": false, "cmd": [ "firewall-offline-cmd", "--get-ipsets" ], "delta": "0:00:00.239581", "end": "2026-08-31 11:08:06.615267", "failed_when_result": false, "rc": 0, "start": "2026-08-31 11:08:06.375686" } TASK [Define new ipsets] ******************************************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:52 Monday 31 August 2026 11:08:06 -0400 (0:00:00.549) 0:00:10.824 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:08:06 -0400 (0:00:00.022) 0:00:10.847 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:08:06 -0400 (0:00:00.013) 0:00:10.860 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:08:06 -0400 (0:00:00.021) 0:00:10.882 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:08:06 -0400 (0:00:00.021) 0:00:10.903 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:08:07 -0400 (0:00:00.501) 0:00:11.405 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:07-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:08:07 -0400 (0:00:00.314) 0:00:11.719 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:08:07 -0400 (0:00:00.014) 0:00:11.734 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:08:07 -0400 (0:00:00.013) 0:00:11.747 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:08:07 -0400 (0:00:00.013) 0:00:11.761 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:08:07 -0400 (0:00:00.013) 0:00:11.774 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:08:07 -0400 (0:00:00.031) 0:00:11.806 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:08:07 -0400 (0:00:00.020) 0:00:11.826 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:08:07 -0400 (0:00:00.023) 0:00:11.849 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv4", "ipset_entries": [ "127.0.0.1", "8.8.8.8" ], "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "ipset_type": "hash:ip", "short": "Custom", "state": "present" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv6", "ipset_entries": [ "2001:4860:4860::8844", "2001:4860:4860::8888" ], "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "ipset_type": "hash:ip", "short": "Custom", "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:08:07 -0400 (0:00:00.042) 0:00:11.892 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:08:07 -0400 (0:00:00.016) 0:00:11.908 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:08:07 -0400 (0:00:00.025) 0:00:11.934 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:08:07 -0400 (0:00:00.014) 0:00:11.949 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:08:07 -0400 (0:00:00.013) 0:00:11.962 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:08:07 -0400 (0:00:00.013) 0:00:11.975 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:08:10 -0400 (0:00:02.648) 0:00:14.624 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:08:10 -0400 (0:00:00.014) 0:00:14.639 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:08:10 -0400 (0:00:00.019) 0:00:14.658 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:08:10 -0400 (0:00:00.019) 0:00:14.677 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:08:10 -0400 (0:00:00.032) 0:00:14.710 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:08:10 -0400 (0:00:00.036) 0:00:14.746 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49790976", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:08:11 -0400 (0:00:00.452) 0:00:15.199 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49790976", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:08:11 -0400 (0:00:00.476) 0:00:15.675 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.238132", "end": "2026-08-31 11:08:12.027545", "rc": 0, "start": "2026-08-31 11:08:11.789413" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:08:12 -0400 (0:00:00.572) 0:00:16.248 ********* changed: [managed-node1] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:08:14 -0400 (0:00:02.341) 0:00:18.589 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:08:14 -0400 (0:00:00.014) 0:00:18.604 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:08:14 -0400 (0:00:00.016) 0:00:18.621 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:08:14 -0400 (0:00:00.012) 0:00:18.633 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:08:14 -0400 (0:00:00.021) 0:00:18.655 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:08:14 -0400 (0:00:00.020) 0:00:18.675 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:14-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if ipsets not added] ************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:57 Monday 31 August 2026 11:08:14 -0400 (0:00:00.312) 0:00:18.987 ********* ok: [managed-node1] => { "changed": false, "cmd": [ "firewall-offline-cmd", "--get-ipsets" ], "delta": "0:00:00.243959", "end": "2026-08-31 11:08:15.335708", "failed_when_result": false, "rc": 0, "start": "2026-08-31 11:08:15.091749" } STDOUT: customipset-ipv4 customipset-ipv6 TASK [Fail if entry not added to ipset] **************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:63 Monday 31 August 2026 11:08:15 -0400 (0:00:00.559) 0:00:19.547 ********* ok: [managed-node1] => (item={'name': 'customipset-ipv4', 'entry': '8.8.8.8'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv4", "--query-entry", "8.8.8.8" ], "delta": "0:00:00.241609", "end": "2026-08-31 11:08:15.908115", "item": { "entry": "8.8.8.8", "name": "customipset-ipv4" }, "rc": 0, "start": "2026-08-31 11:08:15.666506" } STDOUT: yes ok: [managed-node1] => (item={'name': 'customipset-ipv6', 'entry': '2001:4860:4860::8844'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--query-entry", "2001:4860:4860::8844" ], "delta": "0:00:00.240219", "end": "2026-08-31 11:08:16.452959", "item": { "entry": "2001:4860:4860::8844", "name": "customipset-ipv6" }, "rc": 0, "start": "2026-08-31 11:08:16.212740" } STDOUT: yes ok: [managed-node1] => (item={'name': 'customipset-ipv6', 'entry': '2001:4860:4860::8888'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--query-entry", "2001:4860:4860::8888" ], "delta": "0:00:00.241073", "end": "2026-08-31 11:08:16.995233", "item": { "entry": "2001:4860:4860::8888", "name": "customipset-ipv6" }, "rc": 0, "start": "2026-08-31 11:08:16.754160" } STDOUT: yes TASK [Fail if options not added to ipset] ************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:74 Monday 31 August 2026 11:08:17 -0400 (0:00:01.654) 0:00:21.201 ********* ok: [managed-node1] => (item={'name': 'customipset-ipv4', 'option1': 'hashsize=120', 'option2': 'maxelem=1000'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv4" ], "delta": "0:00:00.243130", "end": "2026-08-31 11:08:17.561491", "failed_when_result": false, "item": { "name": "customipset-ipv4", "option1": "hashsize=120", "option2": "maxelem=1000" }, "rc": 0, "start": "2026-08-31 11:08:17.318361" } STDOUT: customipset-ipv4 type: hash:ip options: hashsize=120 maxelem=1000 entries: 127.0.0.1 8.8.8.8 ok: [managed-node1] => (item={'name': 'customipset-ipv6', 'option1': 'hashsize=120', 'option2': 'maxelem=1000'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv6" ], "delta": "0:00:00.243288", "end": "2026-08-31 11:08:18.160961", "failed_when_result": false, "item": { "name": "customipset-ipv6", "option1": "hashsize=120", "option2": "maxelem=1000" }, "rc": 0, "start": "2026-08-31 11:08:17.917673" } STDOUT: customipset-ipv6 type: hash:ip options: hashsize=120 maxelem=1000 family=inet6 entries: 2001:4860:4860::8844 2001:4860:4860::8888 TASK [Redefine new ipsets] ***************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:87 Monday 31 August 2026 11:08:18 -0400 (0:00:01.184) 0:00:22.386 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:08:18 -0400 (0:00:00.027) 0:00:22.413 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:08:18 -0400 (0:00:00.020) 0:00:22.434 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:08:18 -0400 (0:00:00.032) 0:00:22.467 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:08:18 -0400 (0:00:00.034) 0:00:22.501 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:08:18 -0400 (0:00:00.540) 0:00:23.042 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:19-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:08:19 -0400 (0:00:00.324) 0:00:23.366 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:08:19 -0400 (0:00:00.023) 0:00:23.390 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:08:19 -0400 (0:00:00.023) 0:00:23.413 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:08:19 -0400 (0:00:00.022) 0:00:23.436 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:08:19 -0400 (0:00:00.020) 0:00:23.456 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:08:19 -0400 (0:00:00.048) 0:00:23.504 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:08:19 -0400 (0:00:00.041) 0:00:23.546 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:08:19 -0400 (0:00:00.035) 0:00:23.581 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv4", "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "short": "Custom", "state": "present" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv6", "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "short": "Custom", "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:08:19 -0400 (0:00:00.046) 0:00:23.628 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:08:19 -0400 (0:00:00.019) 0:00:23.648 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:08:19 -0400 (0:00:00.032) 0:00:23.681 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:08:19 -0400 (0:00:00.020) 0:00:23.701 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:08:19 -0400 (0:00:00.015) 0:00:23.717 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:08:19 -0400 (0:00:00.013) 0:00:23.731 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:08:22 -0400 (0:00:02.703) 0:00:26.434 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:08:22 -0400 (0:00:00.021) 0:00:26.456 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:08:22 -0400 (0:00:00.020) 0:00:26.477 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:08:22 -0400 (0:00:00.020) 0:00:26.497 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:08:22 -0400 (0:00:00.041) 0:00:26.539 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:08:22 -0400 (0:00:00.046) 0:00:26.585 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49954816", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:08:22 -0400 (0:00:00.464) 0:00:27.050 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49954816", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:08:23 -0400 (0:00:00.436) 0:00:27.486 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.239086", "end": "2026-08-31 11:08:23.831285", "rc": 0, "start": "2026-08-31 11:08:23.592199" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:08:23 -0400 (0:00:00.555) 0:00:28.041 ********* ok: [managed-node1] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:08:24 -0400 (0:00:00.923) 0:00:28.964 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:08:24 -0400 (0:00:00.015) 0:00:28.979 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:08:24 -0400 (0:00:00.022) 0:00:29.002 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:08:24 -0400 (0:00:00.012) 0:00:29.015 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:08:24 -0400 (0:00:00.028) 0:00:29.043 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:08:24 -0400 (0:00:00.032) 0:00:29.076 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:25-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if defining ipset not idempotent] *********************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:106 Monday 31 August 2026 11:08:25 -0400 (0:00:00.349) 0:00:29.425 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Redefine new ipsets with previous replaced] ****************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:111 Monday 31 August 2026 11:08:25 -0400 (0:00:00.023) 0:00:29.449 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:08:25 -0400 (0:00:00.027) 0:00:29.477 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:08:25 -0400 (0:00:00.020) 0:00:29.497 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:08:25 -0400 (0:00:00.027) 0:00:29.525 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:08:25 -0400 (0:00:00.025) 0:00:29.550 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:08:25 -0400 (0:00:00.508) 0:00:30.058 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:26-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:08:26 -0400 (0:00:00.316) 0:00:30.374 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:08:26 -0400 (0:00:00.014) 0:00:30.388 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:08:26 -0400 (0:00:00.017) 0:00:30.406 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:08:26 -0400 (0:00:00.013) 0:00:30.420 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:08:26 -0400 (0:00:00.016) 0:00:30.437 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:08:26 -0400 (0:00:00.037) 0:00:30.474 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:08:26 -0400 (0:00:00.028) 0:00:30.502 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:08:26 -0400 (0:00:00.028) 0:00:30.531 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv4", "ipset_entries": [ "127.0.0.1", "8.8.8.8" ], "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "ipset_type": "hash:ip", "short": "Custom", "state": "present" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv6", "ipset_entries": [ "2001:4860:4860::8844", "2001:4860:4860::8888" ], "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "ipset_type": "hash:ip", "short": "Custom", "state": "present" } } MSG: All assertions passed ok: [managed-node1] => (item=2) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 2, "item": { "previous": "replaced" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:08:26 -0400 (0:00:00.056) 0:00:30.587 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:08:26 -0400 (0:00:00.017) 0:00:30.605 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:08:26 -0400 (0:00:00.025) 0:00:30.630 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:08:26 -0400 (0:00:00.015) 0:00:30.646 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:08:26 -0400 (0:00:00.013) 0:00:30.659 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:08:26 -0400 (0:00:00.013) 0:00:30.673 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:08:29 -0400 (0:00:02.702) 0:00:33.376 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:08:29 -0400 (0:00:00.015) 0:00:33.391 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:08:29 -0400 (0:00:00.013) 0:00:33.405 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:08:29 -0400 (0:00:00.013) 0:00:33.419 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:08:29 -0400 (0:00:00.027) 0:00:33.447 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:08:29 -0400 (0:00:00.029) 0:00:33.476 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49954816", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:08:29 -0400 (0:00:00.455) 0:00:33.931 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49954816", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:08:30 -0400 (0:00:00.487) 0:00:34.418 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.238568", "end": "2026-08-31 11:08:30.766511", "rc": 0, "start": "2026-08-31 11:08:30.527943" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:08:30 -0400 (0:00:00.556) 0:00:34.974 ********* ok: [managed-node1] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:08:31 -0400 (0:00:00.933) 0:00:35.907 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:08:31 -0400 (0:00:00.015) 0:00:35.923 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:08:31 -0400 (0:00:00.017) 0:00:35.940 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:08:31 -0400 (0:00:00.012) 0:00:35.952 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:08:31 -0400 (0:00:00.021) 0:00:35.974 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:08:31 -0400 (0:00:00.021) 0:00:35.995 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:32-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if defining ipset not idempotent with previous replaced] ************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:116 Monday 31 August 2026 11:08:32 -0400 (0:00:00.313) 0:00:36.309 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Modify ipset options] **************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:122 Monday 31 August 2026 11:08:32 -0400 (0:00:00.013) 0:00:36.323 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:08:32 -0400 (0:00:00.031) 0:00:36.355 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:08:32 -0400 (0:00:00.013) 0:00:36.368 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:08:32 -0400 (0:00:00.022) 0:00:36.390 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:08:32 -0400 (0:00:00.020) 0:00:36.411 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:08:32 -0400 (0:00:00.509) 0:00:36.920 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:33-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:08:33 -0400 (0:00:00.323) 0:00:37.243 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:08:33 -0400 (0:00:00.019) 0:00:37.263 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:08:33 -0400 (0:00:00.016) 0:00:37.280 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:08:33 -0400 (0:00:00.016) 0:00:37.297 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:08:33 -0400 (0:00:00.019) 0:00:37.316 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:08:33 -0400 (0:00:00.039) 0:00:37.355 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:08:33 -0400 (0:00:00.023) 0:00:37.379 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:08:33 -0400 (0:00:00.020) 0:00:37.399 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "customipset-ipv4", "ipset_options": { "hashsize": 240 }, "state": "present" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv6", "ipset_options": { "hashsize": 240 }, "state": "present" } } MSG: All assertions passed ok: [managed-node1] => (item=2) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 2, "item": { "ipset": "customipset-ipv4", "ipset_options": { "maxelem": null }, "state": "absent" } } MSG: All assertions passed ok: [managed-node1] => (item=3) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 3, "item": { "ipset": "customipset-ipv6", "ipset_options": { "maxelem": null }, "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:08:33 -0400 (0:00:00.054) 0:00:37.454 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:08:33 -0400 (0:00:00.018) 0:00:37.472 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:08:33 -0400 (0:00:00.024) 0:00:37.497 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:08:33 -0400 (0:00:00.014) 0:00:37.512 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:08:33 -0400 (0:00:00.013) 0:00:37.525 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:08:33 -0400 (0:00:00.013) 0:00:37.538 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:08:36 -0400 (0:00:02.675) 0:00:40.214 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:08:36 -0400 (0:00:00.025) 0:00:40.240 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:08:36 -0400 (0:00:00.021) 0:00:40.261 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:08:36 -0400 (0:00:00.020) 0:00:40.282 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:08:36 -0400 (0:00:00.034) 0:00:40.316 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:08:36 -0400 (0:00:00.033) 0:00:40.350 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49954816", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:08:36 -0400 (0:00:00.454) 0:00:40.805 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49954816", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:08:37 -0400 (0:00:00.468) 0:00:41.273 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.240833", "end": "2026-08-31 11:08:37.667310", "rc": 0, "start": "2026-08-31 11:08:37.426477" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:08:37 -0400 (0:00:00.604) 0:00:41.877 ********* changed: [managed-node1] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:08:40 -0400 (0:00:03.258) 0:00:45.136 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:08:41 -0400 (0:00:00.023) 0:00:45.160 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:08:41 -0400 (0:00:00.025) 0:00:45.186 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:08:41 -0400 (0:00:00.025) 0:00:45.211 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:08:41 -0400 (0:00:00.022) 0:00:45.234 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:08:41 -0400 (0:00:00.020) 0:00:45.254 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:41-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if options not modified in ipset] *********************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:144 Monday 31 August 2026 11:08:41 -0400 (0:00:00.320) 0:00:45.574 ********* ok: [managed-node1] => (item={'name': 'customipset-ipv4', 'option': 'hashsize=240'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv4" ], "delta": "0:00:00.241670", "end": "2026-08-31 11:08:41.937954", "failed_when_result": false, "item": { "name": "customipset-ipv4", "option": "hashsize=240" }, "rc": 0, "start": "2026-08-31 11:08:41.696284" } STDOUT: customipset-ipv4 type: hash:ip options: hashsize=240 entries: 127.0.0.1 8.8.8.8 ok: [managed-node1] => (item={'name': 'customipset-ipv6', 'option': 'hashsize=240'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv6" ], "delta": "0:00:00.241685", "end": "2026-08-31 11:08:42.524911", "failed_when_result": false, "item": { "name": "customipset-ipv6", "option": "hashsize=240" }, "rc": 0, "start": "2026-08-31 11:08:42.283226" } STDOUT: customipset-ipv6 type: hash:ip options: family=inet6 hashsize=240 entries: 2001:4860:4860::8844 2001:4860:4860::8888 TASK [Fail if options not removed from ipset] ********************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:156 Monday 31 August 2026 11:08:42 -0400 (0:00:01.159) 0:00:46.734 ********* ok: [managed-node1] => (item={'name': 'customipset-ipv4', 'option': 'maxelem='}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv4" ], "delta": "0:00:00.241489", "end": "2026-08-31 11:08:43.085417", "failed_when_result": false, "item": { "name": "customipset-ipv4", "option": "maxelem=" }, "rc": 0, "start": "2026-08-31 11:08:42.843928" } STDOUT: customipset-ipv4 type: hash:ip options: hashsize=240 entries: 127.0.0.1 8.8.8.8 ok: [managed-node1] => (item={'name': 'customipset-ipv6', 'option': 'maxelem='}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv6" ], "delta": "0:00:00.244195", "end": "2026-08-31 11:08:43.640118", "failed_when_result": false, "item": { "name": "customipset-ipv6", "option": "maxelem=" }, "rc": 0, "start": "2026-08-31 11:08:43.395923" } STDOUT: customipset-ipv6 type: hash:ip options: family=inet6 hashsize=240 entries: 2001:4860:4860::8844 2001:4860:4860::8888 TASK [Remove entries and options from ipset] *********************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:168 Monday 31 August 2026 11:08:43 -0400 (0:00:01.115) 0:00:47.849 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:08:43 -0400 (0:00:00.028) 0:00:47.877 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:08:43 -0400 (0:00:00.014) 0:00:47.892 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:08:43 -0400 (0:00:00.022) 0:00:47.915 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:08:43 -0400 (0:00:00.021) 0:00:47.936 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:08:44 -0400 (0:00:00.503) 0:00:48.439 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:44-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:08:44 -0400 (0:00:00.320) 0:00:48.759 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:08:44 -0400 (0:00:00.018) 0:00:48.778 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:08:44 -0400 (0:00:00.018) 0:00:48.796 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:08:44 -0400 (0:00:00.013) 0:00:48.810 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:08:44 -0400 (0:00:00.017) 0:00:48.828 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:08:44 -0400 (0:00:00.033) 0:00:48.861 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:08:44 -0400 (0:00:00.021) 0:00:48.882 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:08:44 -0400 (0:00:00.020) 0:00:48.903 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "customipset-ipv4", "ipset_entries": [ "8.8.8.8", "127.0.0.1" ], "ipset_options": { "hashsize": null, "maxelem": null }, "state": "absent" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv6", "ipset_entries": [ "2001:4860:4860::8844", "2001:4860:4860::8888" ], "ipset_options": { "hashsize": null, "maxelem": null }, "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:08:44 -0400 (0:00:00.036) 0:00:48.939 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:08:44 -0400 (0:00:00.018) 0:00:48.957 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:08:44 -0400 (0:00:00.025) 0:00:48.983 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:08:44 -0400 (0:00:00.018) 0:00:49.002 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:08:44 -0400 (0:00:00.013) 0:00:49.015 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:08:44 -0400 (0:00:00.018) 0:00:49.033 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:08:47 -0400 (0:00:02.672) 0:00:51.706 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:08:47 -0400 (0:00:00.015) 0:00:51.721 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:08:47 -0400 (0:00:00.014) 0:00:51.736 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:08:47 -0400 (0:00:00.013) 0:00:51.750 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:08:47 -0400 (0:00:00.027) 0:00:51.778 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:08:47 -0400 (0:00:00.030) 0:00:51.808 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "50102272", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:08:48 -0400 (0:00:00.446) 0:00:52.254 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "50102272", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:08:48 -0400 (0:00:00.449) 0:00:52.704 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.251238", "end": "2026-08-31 11:08:49.068409", "rc": 0, "start": "2026-08-31 11:08:48.817171" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:08:49 -0400 (0:00:00.582) 0:00:53.287 ********* changed: [managed-node1] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:08:51 -0400 (0:00:02.314) 0:00:55.601 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:08:51 -0400 (0:00:00.015) 0:00:55.616 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:08:51 -0400 (0:00:00.018) 0:00:55.634 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:08:51 -0400 (0:00:00.012) 0:00:55.647 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:08:51 -0400 (0:00:00.020) 0:00:55.667 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:08:51 -0400 (0:00:00.019) 0:00:55.687 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:51-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if ipsets removed] ************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:189 Monday 31 August 2026 11:08:51 -0400 (0:00:00.319) 0:00:56.007 ********* ok: [managed-node1] => (item=customipset-ipv4) => { "ansible_loop_var": "item", "changed": false, "cmd": "set -euo pipefail\nfirewall-offline-cmd --get-ipsets | grep customipset-ipv4\n", "delta": "0:00:00.243072", "end": "2026-08-31 11:08:52.401043", "item": "customipset-ipv4", "rc": 0, "start": "2026-08-31 11:08:52.157971" } STDOUT: customipset-ipv4 customipset-ipv6 ok: [managed-node1] => (item=customipset-ipv6) => { "ansible_loop_var": "item", "changed": false, "cmd": "set -euo pipefail\nfirewall-offline-cmd --get-ipsets | grep customipset-ipv6\n", "delta": "0:00:00.242480", "end": "2026-08-31 11:08:52.967865", "item": "customipset-ipv6", "rc": 0, "start": "2026-08-31 11:08:52.725385" } STDOUT: customipset-ipv4 customipset-ipv6 TASK [Fail if entry not removed from ipset] ************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:200 Monday 31 August 2026 11:08:53 -0400 (0:00:01.170) 0:00:57.177 ********* ok: [managed-node1] => (item={'name': 'customipset-ipv4', 'entry': '8.8.8.8'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv4", "--query-entry", "8.8.8.8" ], "delta": "0:00:00.243889", "end": "2026-08-31 11:08:53.549074", "failed_when_result": false, "item": { "entry": "8.8.8.8", "name": "customipset-ipv4" }, "rc": 1, "start": "2026-08-31 11:08:53.305185" } STDOUT: no MSG: non-zero return code ok: [managed-node1] => (item={'name': 'customipset-ipv6', 'entry': '2001:4860:4860::8844'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--query-entry", "2001:4860:4860::8844" ], "delta": "0:00:00.241352", "end": "2026-08-31 11:08:54.139736", "failed_when_result": false, "item": { "entry": "2001:4860:4860::8844", "name": "customipset-ipv6" }, "rc": 1, "start": "2026-08-31 11:08:53.898384" } STDOUT: no MSG: non-zero return code ok: [managed-node1] => (item={'name': 'customipset-ipv6', 'entry': '2001:4860:4860::8888'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--query-entry", "2001:4860:4860::8888" ], "delta": "0:00:00.240873", "end": "2026-08-31 11:08:54.716342", "failed_when_result": false, "item": { "entry": "2001:4860:4860::8888", "name": "customipset-ipv6" }, "rc": 1, "start": "2026-08-31 11:08:54.475469" } STDOUT: no MSG: non-zero return code TASK [Fail if not all options removed from ipset] ****************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:213 Monday 31 August 2026 11:08:54 -0400 (0:00:01.747) 0:00:58.925 ********* ok: [managed-node1] => (item={'name': 'customipset-ipv4', 'option1': 'hashsize=', 'option2': 'maxelem='}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv4" ], "delta": "0:00:00.241103", "end": "2026-08-31 11:08:55.276517", "failed_when_result": false, "item": { "name": "customipset-ipv4", "option1": "hashsize=", "option2": "maxelem=" }, "rc": 0, "start": "2026-08-31 11:08:55.035414" } STDOUT: customipset-ipv4 type: hash:ip options: entries: ok: [managed-node1] => (item={'name': 'customipset-ipv6', 'option1': 'hashsize=', 'option2': 'maxelem='}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv6" ], "delta": "0:00:00.241549", "end": "2026-08-31 11:08:55.833035", "failed_when_result": false, "item": { "name": "customipset-ipv6", "option1": "hashsize=", "option2": "maxelem=" }, "rc": 0, "start": "2026-08-31 11:08:55.591486" } STDOUT: customipset-ipv6 type: hash:ip options: entries: TASK [Test update short and description] *************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:227 Monday 31 August 2026 11:08:55 -0400 (0:00:01.118) 0:01:00.043 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:08:55 -0400 (0:00:00.029) 0:01:00.072 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:08:55 -0400 (0:00:00.014) 0:01:00.086 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:08:55 -0400 (0:00:00.023) 0:01:00.110 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:08:55 -0400 (0:00:00.021) 0:01:00.131 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:08:56 -0400 (0:00:00.508) 0:01:00.640 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:08:56-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:08:56 -0400 (0:00:00.326) 0:01:00.967 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:08:56 -0400 (0:00:00.017) 0:01:00.985 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:08:56 -0400 (0:00:00.014) 0:01:00.999 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:08:56 -0400 (0:00:00.019) 0:01:01.018 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:08:56 -0400 (0:00:00.016) 0:01:01.035 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:08:56 -0400 (0:00:00.040) 0:01:01.075 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:08:56 -0400 (0:00:00.021) 0:01:01.097 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:08:56 -0400 (0:00:00.020) 0:01:01.118 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "description": "Custom IPSet for testing purposes (changed)", "ipset": "customipset-ipv4", "runtime": false, "short": "CustomChanged", "state": "present" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "description": "Custom IPSet for testing purposes (changed)", "ipset": "customipset-ipv6", "runtime": false, "short": "CustomChanged", "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:08:56 -0400 (0:00:00.036) 0:01:01.154 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:08:57 -0400 (0:00:00.017) 0:01:01.171 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:08:57 -0400 (0:00:00.024) 0:01:01.196 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:08:57 -0400 (0:00:00.014) 0:01:01.211 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:08:57 -0400 (0:00:00.013) 0:01:01.224 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:08:57 -0400 (0:00:00.013) 0:01:01.238 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:08:59 -0400 (0:00:02.657) 0:01:03.895 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:08:59 -0400 (0:00:00.014) 0:01:03.909 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:08:59 -0400 (0:00:00.019) 0:01:03.929 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:08:59 -0400 (0:00:00.020) 0:01:03.949 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:08:59 -0400 (0:00:00.043) 0:01:03.993 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:08:59 -0400 (0:00:00.047) 0:01:04.040 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "50069504", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:09:00 -0400 (0:00:00.468) 0:01:04.509 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "50069504", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:09:00 -0400 (0:00:00.445) 0:01:04.954 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.248249", "end": "2026-08-31 11:09:01.334953", "rc": 0, "start": "2026-08-31 11:09:01.086704" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:09:01 -0400 (0:00:00.589) 0:01:05.544 ********* changed: [managed-node1] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:09:03 -0400 (0:00:02.291) 0:01:07.835 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:09:03 -0400 (0:00:00.015) 0:01:07.851 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:09:03 -0400 (0:00:00.017) 0:01:07.869 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:09:03 -0400 (0:00:00.013) 0:01:07.882 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:09:03 -0400 (0:00:00.020) 0:01:07.902 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:09:03 -0400 (0:00:00.019) 0:01:07.921 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:04-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Verify changes] ********************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:242 Monday 31 August 2026 11:09:04 -0400 (0:00:00.330) 0:01:08.252 ********* ok: [managed-node1] => (item={'command': 'firewall-offline-cmd --ipset customipset-ipv4 --get-description\n', 'expected': 'Custom IPSet for testing purposes (changed)'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv4", "--get-description" ], "delta": "0:00:00.242387", "end": "2026-08-31 11:09:04.621744", "failed_when_result": false, "item": { "command": "firewall-offline-cmd --ipset customipset-ipv4 --get-description\n", "expected": "Custom IPSet for testing purposes (changed)" }, "rc": 0, "start": "2026-08-31 11:09:04.379357" } STDOUT: Custom IPSet for testing purposes (changed) ok: [managed-node1] => (item={'command': 'firewall-offline-cmd --ipset customipset-ipv4 --get-short\n', 'expected': 'CustomChanged'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv4", "--get-short" ], "delta": "0:00:00.240351", "end": "2026-08-31 11:09:05.180680", "failed_when_result": false, "item": { "command": "firewall-offline-cmd --ipset customipset-ipv4 --get-short\n", "expected": "CustomChanged" }, "rc": 0, "start": "2026-08-31 11:09:04.940329" } STDOUT: CustomChanged ok: [managed-node1] => (item={'command': 'firewall-offline-cmd --ipset customipset-ipv6 --get-description\n', 'expected': 'Custom IPSet for testing purposes (changed)'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--get-description" ], "delta": "0:00:00.240359", "end": "2026-08-31 11:09:05.730067", "failed_when_result": false, "item": { "command": "firewall-offline-cmd --ipset customipset-ipv6 --get-description\n", "expected": "Custom IPSet for testing purposes (changed)" }, "rc": 0, "start": "2026-08-31 11:09:05.489708" } STDOUT: Custom IPSet for testing purposes (changed) ok: [managed-node1] => (item={'command': 'firewall-offline-cmd --ipset customipset-ipv6 --get-short\n', 'expected': 'CustomChanged'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--get-short" ], "delta": "0:00:00.241916", "end": "2026-08-31 11:09:06.296783", "failed_when_result": false, "item": { "command": "firewall-offline-cmd --ipset customipset-ipv6 --get-short\n", "expected": "CustomChanged" }, "rc": 0, "start": "2026-08-31 11:09:06.054867" } STDOUT: CustomChanged TASK [Add ipsets to default zone (runtime)] ************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:262 Monday 31 August 2026 11:09:06 -0400 (0:00:02.255) 0:01:10.507 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:09:06 -0400 (0:00:00.031) 0:01:10.539 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:09:06 -0400 (0:00:00.014) 0:01:10.553 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:09:06 -0400 (0:00:00.022) 0:01:10.576 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:09:06 -0400 (0:00:00.021) 0:01:10.597 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:09:06 -0400 (0:00:00.512) 0:01:11.110 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:07-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:09:07 -0400 (0:00:00.353) 0:01:11.463 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:09:07 -0400 (0:00:00.017) 0:01:11.481 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:09:07 -0400 (0:00:00.014) 0:01:11.496 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:09:07 -0400 (0:00:00.014) 0:01:11.510 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:09:07 -0400 (0:00:00.019) 0:01:11.530 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:09:07 -0400 (0:00:00.038) 0:01:11.569 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:09:07 -0400 (0:00:00.025) 0:01:11.595 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:09:07 -0400 (0:00:00.024) 0:01:11.619 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "permanent": false, "source": "ipset:customipset-ipv4", "state": "enabled" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "permanent": false, "source": "ipset:customipset-ipv6", "state": "enabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:09:07 -0400 (0:00:00.036) 0:01:11.656 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:09:07 -0400 (0:00:00.018) 0:01:11.675 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:09:07 -0400 (0:00:00.035) 0:01:11.711 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:09:07 -0400 (0:00:00.018) 0:01:11.729 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:09:07 -0400 (0:00:00.014) 0:01:11.744 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:09:07 -0400 (0:00:00.014) 0:01:11.758 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:09:10 -0400 (0:00:02.695) 0:01:14.453 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:09:10 -0400 (0:00:00.015) 0:01:14.469 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:09:10 -0400 (0:00:00.013) 0:01:14.482 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:09:10 -0400 (0:00:00.013) 0:01:14.496 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:09:10 -0400 (0:00:00.027) 0:01:14.524 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:09:10 -0400 (0:00:00.029) 0:01:14.553 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49860608", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:09:10 -0400 (0:00:00.440) 0:01:14.994 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49860608", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:09:11 -0400 (0:00:00.439) 0:01:15.433 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.236595", "end": "2026-08-31 11:09:11.774603", "rc": 0, "start": "2026-08-31 11:09:11.538008" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:09:11 -0400 (0:00:00.550) 0:01:15.984 ********* changed: [managed-node1] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:09:13 -0400 (0:00:01.469) 0:01:17.454 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:09:13 -0400 (0:00:00.015) 0:01:17.469 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:09:13 -0400 (0:00:00.017) 0:01:17.486 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:09:13 -0400 (0:00:00.012) 0:01:17.499 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:09:13 -0400 (0:00:00.020) 0:01:17.520 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:09:13 -0400 (0:00:00.019) 0:01:17.540 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:13-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Add ipsets to default zone again (runtime)] ****************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:274 Monday 31 August 2026 11:09:13 -0400 (0:00:00.327) 0:01:17.868 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:09:13 -0400 (0:00:00.039) 0:01:17.907 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:09:13 -0400 (0:00:00.014) 0:01:17.922 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:09:13 -0400 (0:00:00.032) 0:01:17.954 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:09:13 -0400 (0:00:00.023) 0:01:17.978 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:09:14 -0400 (0:00:00.506) 0:01:18.484 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:14-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:09:14 -0400 (0:00:00.312) 0:01:18.797 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:09:14 -0400 (0:00:00.014) 0:01:18.811 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:09:14 -0400 (0:00:00.028) 0:01:18.840 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:09:14 -0400 (0:00:00.026) 0:01:18.867 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:09:14 -0400 (0:00:00.022) 0:01:18.890 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:09:14 -0400 (0:00:00.049) 0:01:18.939 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:09:14 -0400 (0:00:00.036) 0:01:18.975 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:09:14 -0400 (0:00:00.032) 0:01:19.008 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "permanent": false, "source": "ipset:customipset-ipv4", "state": "enabled" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "permanent": false, "source": "ipset:customipset-ipv6", "state": "enabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:09:14 -0400 (0:00:00.048) 0:01:19.056 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:09:14 -0400 (0:00:00.018) 0:01:19.074 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:09:14 -0400 (0:00:00.033) 0:01:19.108 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:09:14 -0400 (0:00:00.020) 0:01:19.128 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:09:14 -0400 (0:00:00.017) 0:01:19.146 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:09:15 -0400 (0:00:00.015) 0:01:19.161 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:09:17 -0400 (0:00:02.662) 0:01:21.824 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:09:17 -0400 (0:00:00.016) 0:01:21.841 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:09:17 -0400 (0:00:00.013) 0:01:21.855 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:09:17 -0400 (0:00:00.014) 0:01:21.869 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:09:17 -0400 (0:00:00.034) 0:01:21.904 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:09:17 -0400 (0:00:00.032) 0:01:21.936 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:09:18 -0400 (0:00:00.442) 0:01:22.379 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:09:18 -0400 (0:00:00.444) 0:01:22.824 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.237524", "end": "2026-08-31 11:09:19.175838", "rc": 0, "start": "2026-08-31 11:09:18.938314" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:09:19 -0400 (0:00:00.562) 0:01:23.386 ********* ok: [managed-node1] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:09:20 -0400 (0:00:00.932) 0:01:24.319 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:09:20 -0400 (0:00:00.019) 0:01:24.339 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:09:20 -0400 (0:00:00.018) 0:01:24.357 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:09:20 -0400 (0:00:00.013) 0:01:24.370 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:09:20 -0400 (0:00:00.021) 0:01:24.392 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:09:20 -0400 (0:00:00.020) 0:01:24.412 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:20-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if adding ipsets is not idempotent (runtime)] *********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:286 Monday 31 August 2026 11:09:20 -0400 (0:00:00.316) 0:01:24.728 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Add ipsets to default zone (permanent)] ********************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:293 Monday 31 August 2026 11:09:20 -0400 (0:00:00.021) 0:01:24.750 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:09:20 -0400 (0:00:00.041) 0:01:24.792 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:09:20 -0400 (0:00:00.014) 0:01:24.806 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:09:20 -0400 (0:00:00.029) 0:01:24.835 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:09:20 -0400 (0:00:00.021) 0:01:24.857 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:09:21 -0400 (0:00:00.512) 0:01:25.370 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:21-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:09:21 -0400 (0:00:00.318) 0:01:25.688 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:09:21 -0400 (0:00:00.015) 0:01:25.704 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:09:21 -0400 (0:00:00.013) 0:01:25.717 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:09:21 -0400 (0:00:00.014) 0:01:25.732 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:09:21 -0400 (0:00:00.013) 0:01:25.746 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:09:21 -0400 (0:00:00.033) 0:01:25.779 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:09:21 -0400 (0:00:00.022) 0:01:25.801 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:09:21 -0400 (0:00:00.021) 0:01:25.823 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "runtime": false, "source": "ipset:customipset-ipv4", "state": "enabled" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "runtime": false, "source": "ipset:customipset-ipv6", "state": "enabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:09:21 -0400 (0:00:00.036) 0:01:25.859 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:09:21 -0400 (0:00:00.018) 0:01:25.878 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:09:21 -0400 (0:00:00.025) 0:01:25.903 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:09:21 -0400 (0:00:00.015) 0:01:25.919 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:09:21 -0400 (0:00:00.013) 0:01:25.933 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:09:21 -0400 (0:00:00.013) 0:01:25.946 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:09:24 -0400 (0:00:02.685) 0:01:28.632 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:09:24 -0400 (0:00:00.015) 0:01:28.648 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:09:24 -0400 (0:00:00.014) 0:01:28.662 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:09:24 -0400 (0:00:00.013) 0:01:28.676 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:09:24 -0400 (0:00:00.027) 0:01:28.703 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:09:24 -0400 (0:00:00.030) 0:01:28.734 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:09:25 -0400 (0:00:00.440) 0:01:29.174 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:09:25 -0400 (0:00:00.439) 0:01:29.614 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.237416", "end": "2026-08-31 11:09:25.959578", "rc": 0, "start": "2026-08-31 11:09:25.722162" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:09:26 -0400 (0:00:00.555) 0:01:30.170 ********* changed: [managed-node1] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:09:27 -0400 (0:00:01.448) 0:01:31.618 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:09:27 -0400 (0:00:00.018) 0:01:31.636 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:09:27 -0400 (0:00:00.019) 0:01:31.656 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:09:27 -0400 (0:00:00.013) 0:01:31.669 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:09:27 -0400 (0:00:00.020) 0:01:31.690 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:09:27 -0400 (0:00:00.020) 0:01:31.710 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:27-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if adding ipsets reports no changes] ******************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:304 Monday 31 August 2026 11:09:27 -0400 (0:00:00.317) 0:01:32.028 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Add ipsets to default zone again (permanent)] **************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:309 Monday 31 August 2026 11:09:27 -0400 (0:00:00.019) 0:01:32.048 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:09:27 -0400 (0:00:00.045) 0:01:32.093 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:09:27 -0400 (0:00:00.017) 0:01:32.111 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:09:27 -0400 (0:00:00.026) 0:01:32.138 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:09:28 -0400 (0:00:00.026) 0:01:32.165 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:09:28 -0400 (0:00:00.511) 0:01:32.676 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:28-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:09:28 -0400 (0:00:00.321) 0:01:32.997 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:09:28 -0400 (0:00:00.015) 0:01:33.012 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:09:28 -0400 (0:00:00.014) 0:01:33.026 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:09:28 -0400 (0:00:00.013) 0:01:33.040 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:09:28 -0400 (0:00:00.014) 0:01:33.055 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:09:28 -0400 (0:00:00.033) 0:01:33.088 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:09:28 -0400 (0:00:00.030) 0:01:33.119 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:09:28 -0400 (0:00:00.022) 0:01:33.141 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "runtime": false, "source": "ipset:customipset-ipv4", "state": "enabled" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "runtime": false, "source": "ipset:customipset-ipv6", "state": "enabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:09:29 -0400 (0:00:00.036) 0:01:33.177 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:09:29 -0400 (0:00:00.017) 0:01:33.195 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:09:29 -0400 (0:00:00.025) 0:01:33.221 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:09:29 -0400 (0:00:00.015) 0:01:33.237 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:09:29 -0400 (0:00:00.013) 0:01:33.250 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:09:29 -0400 (0:00:00.013) 0:01:33.264 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:09:31 -0400 (0:00:02.651) 0:01:35.916 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:09:31 -0400 (0:00:00.018) 0:01:35.934 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:09:31 -0400 (0:00:00.013) 0:01:35.948 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:09:31 -0400 (0:00:00.020) 0:01:35.969 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:09:31 -0400 (0:00:00.043) 0:01:36.012 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:09:31 -0400 (0:00:00.050) 0:01:36.063 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:09:32 -0400 (0:00:00.504) 0:01:36.567 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:09:32 -0400 (0:00:00.446) 0:01:37.014 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.239751", "end": "2026-08-31 11:09:33.365592", "rc": 0, "start": "2026-08-31 11:09:33.125841" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:09:33 -0400 (0:00:00.561) 0:01:37.576 ********* ok: [managed-node1] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:09:34 -0400 (0:00:00.929) 0:01:38.506 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:09:34 -0400 (0:00:00.015) 0:01:38.522 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:09:34 -0400 (0:00:00.017) 0:01:38.539 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:09:34 -0400 (0:00:00.013) 0:01:38.553 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:09:34 -0400 (0:00:00.021) 0:01:38.574 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:09:34 -0400 (0:00:00.020) 0:01:38.594 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:34-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if adding ipsets is not idempotent (permanent)] ********************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:320 Monday 31 August 2026 11:09:34 -0400 (0:00:00.314) 0:01:38.909 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Remove ipsets from default zone] ***************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:325 Monday 31 August 2026 11:09:34 -0400 (0:00:00.014) 0:01:38.923 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:09:34 -0400 (0:00:00.035) 0:01:38.959 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:09:34 -0400 (0:00:00.014) 0:01:38.974 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:09:34 -0400 (0:00:00.024) 0:01:38.998 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:09:34 -0400 (0:00:00.022) 0:01:39.020 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:09:35 -0400 (0:00:00.544) 0:01:39.565 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:35-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:09:35 -0400 (0:00:00.319) 0:01:39.884 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:09:35 -0400 (0:00:00.016) 0:01:39.901 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:09:35 -0400 (0:00:00.016) 0:01:39.918 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:09:35 -0400 (0:00:00.020) 0:01:39.939 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:09:35 -0400 (0:00:00.082) 0:01:40.021 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:09:35 -0400 (0:00:00.033) 0:01:40.055 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:09:35 -0400 (0:00:00.021) 0:01:40.077 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:09:35 -0400 (0:00:00.021) 0:01:40.098 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "source": "ipset:customipset-ipv4", "state": "disabled" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "source": "ipset:customipset-ipv6", "state": "disabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:09:35 -0400 (0:00:00.036) 0:01:40.135 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:09:35 -0400 (0:00:00.017) 0:01:40.153 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:09:36 -0400 (0:00:00.026) 0:01:40.179 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:09:36 -0400 (0:00:00.015) 0:01:40.194 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:09:36 -0400 (0:00:00.013) 0:01:40.208 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:09:36 -0400 (0:00:00.014) 0:01:40.222 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:09:38 -0400 (0:00:02.658) 0:01:42.881 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:09:38 -0400 (0:00:00.015) 0:01:42.896 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:09:38 -0400 (0:00:00.018) 0:01:42.915 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:09:38 -0400 (0:00:00.014) 0:01:42.929 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:09:38 -0400 (0:00:00.035) 0:01:42.965 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:09:38 -0400 (0:00:00.046) 0:01:43.011 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:09:39 -0400 (0:00:00.466) 0:01:43.477 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:09:39 -0400 (0:00:00.438) 0:01:43.916 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.237190", "end": "2026-08-31 11:09:40.267688", "rc": 0, "start": "2026-08-31 11:09:40.030498" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:09:40 -0400 (0:00:00.564) 0:01:44.481 ********* changed: [managed-node1] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:09:41 -0400 (0:00:01.461) 0:01:45.942 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:09:41 -0400 (0:00:00.015) 0:01:45.958 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:09:41 -0400 (0:00:00.017) 0:01:45.976 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:09:41 -0400 (0:00:00.014) 0:01:45.990 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:09:41 -0400 (0:00:00.020) 0:01:46.011 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:09:41 -0400 (0:00:00.019) 0:01:46.031 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:42-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if removing ipsets reports no changes] ****************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:334 Monday 31 August 2026 11:09:42 -0400 (0:00:00.313) 0:01:46.344 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Remove custom ipsets] **************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:339 Monday 31 August 2026 11:09:42 -0400 (0:00:00.015) 0:01:46.359 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:09:42 -0400 (0:00:00.046) 0:01:46.406 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:09:42 -0400 (0:00:00.013) 0:01:46.420 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:09:42 -0400 (0:00:00.023) 0:01:46.443 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:09:42 -0400 (0:00:00.022) 0:01:46.465 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:09:42 -0400 (0:00:00.505) 0:01:46.970 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:43-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:09:43 -0400 (0:00:00.328) 0:01:47.299 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:09:43 -0400 (0:00:00.020) 0:01:47.320 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:09:43 -0400 (0:00:00.020) 0:01:47.341 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:09:43 -0400 (0:00:00.019) 0:01:47.361 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:09:43 -0400 (0:00:00.014) 0:01:47.375 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:09:43 -0400 (0:00:00.048) 0:01:47.424 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:09:43 -0400 (0:00:00.029) 0:01:47.453 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:09:43 -0400 (0:00:00.028) 0:01:47.482 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "customipset-ipv4", "state": "absent" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv6", "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:09:43 -0400 (0:00:00.040) 0:01:47.522 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:09:43 -0400 (0:00:00.020) 0:01:47.543 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:09:43 -0400 (0:00:00.026) 0:01:47.570 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:09:43 -0400 (0:00:00.014) 0:01:47.584 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:09:43 -0400 (0:00:00.013) 0:01:47.598 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:09:43 -0400 (0:00:00.013) 0:01:47.612 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:09:46 -0400 (0:00:02.654) 0:01:50.266 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:09:46 -0400 (0:00:00.015) 0:01:50.281 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:09:46 -0400 (0:00:00.013) 0:01:50.295 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:09:46 -0400 (0:00:00.014) 0:01:50.310 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:09:46 -0400 (0:00:00.028) 0:01:50.338 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:09:46 -0400 (0:00:00.034) 0:01:50.373 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:09:46 -0400 (0:00:00.488) 0:01:50.862 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49856512", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:09:47 -0400 (0:00:00.443) 0:01:51.306 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.240223", "end": "2026-08-31 11:09:47.655371", "rc": 0, "start": "2026-08-31 11:09:47.415148" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:09:47 -0400 (0:00:00.568) 0:01:51.874 ********* changed: [managed-node1] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:09:49 -0400 (0:00:02.269) 0:01:54.144 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:09:50 -0400 (0:00:00.014) 0:01:54.159 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:09:50 -0400 (0:00:00.017) 0:01:54.176 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:09:50 -0400 (0:00:00.012) 0:01:54.189 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:09:50 -0400 (0:00:00.020) 0:01:54.209 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:09:50 -0400 (0:00:00.019) 0:01:54.229 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:50-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if ipsets not removed] ********************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:348 Monday 31 August 2026 11:09:50 -0400 (0:00:00.321) 0:01:54.550 ********* ok: [managed-node1] => (item=customipset-ipv4) => { "ansible_loop_var": "item", "changed": false, "cmd": "set -euo pipefail\nfirewall-offline-cmd --get-ipsets | grep customipset-ipv4\n", "delta": "0:00:00.242533", "end": "2026-08-31 11:09:50.932414", "failed_when_result": false, "item": "customipset-ipv4", "rc": 1, "start": "2026-08-31 11:09:50.689881" } MSG: non-zero return code ok: [managed-node1] => (item=customipset-ipv6) => { "ansible_loop_var": "item", "changed": false, "cmd": "set -euo pipefail\nfirewall-offline-cmd --get-ipsets | grep customipset-ipv6\n", "delta": "0:00:00.243344", "end": "2026-08-31 11:09:51.499600", "failed_when_result": false, "item": "customipset-ipv6", "rc": 1, "start": "2026-08-31 11:09:51.256256" } MSG: non-zero return code TASK [Remove custom ipsets again] ********************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:361 Monday 31 August 2026 11:09:51 -0400 (0:00:01.161) 0:01:55.712 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:09:51 -0400 (0:00:00.048) 0:01:55.761 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:09:51 -0400 (0:00:00.017) 0:01:55.778 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:09:51 -0400 (0:00:00.026) 0:01:55.805 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:09:51 -0400 (0:00:00.025) 0:01:55.830 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:09:52 -0400 (0:00:00.516) 0:01:56.347 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:52-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:09:52 -0400 (0:00:00.337) 0:01:56.684 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:09:52 -0400 (0:00:00.014) 0:01:56.699 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:09:52 -0400 (0:00:00.016) 0:01:56.715 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:09:52 -0400 (0:00:00.013) 0:01:56.729 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:09:52 -0400 (0:00:00.015) 0:01:56.744 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:09:52 -0400 (0:00:00.033) 0:01:56.777 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:09:52 -0400 (0:00:00.021) 0:01:56.799 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:09:52 -0400 (0:00:00.021) 0:01:56.821 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "customipset-ipv4", "state": "absent" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv6", "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:09:52 -0400 (0:00:00.094) 0:01:56.916 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:09:52 -0400 (0:00:00.018) 0:01:56.935 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:09:52 -0400 (0:00:00.026) 0:01:56.961 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:09:52 -0400 (0:00:00.016) 0:01:56.977 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:09:52 -0400 (0:00:00.014) 0:01:56.991 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:09:52 -0400 (0:00:00.014) 0:01:57.006 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:09:55 -0400 (0:00:02.653) 0:01:59.659 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:09:55 -0400 (0:00:00.015) 0:01:59.675 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:09:55 -0400 (0:00:00.021) 0:01:59.697 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:09:55 -0400 (0:00:00.014) 0:01:59.712 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:09:55 -0400 (0:00:00.028) 0:01:59.740 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:09:55 -0400 (0:00:00.030) 0:01:59.770 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49983488", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:09:56 -0400 (0:00:00.439) 0:02:00.210 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49983488", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:09:56 -0400 (0:00:00.445) 0:02:00.656 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.236786", "end": "2026-08-31 11:09:57.002389", "rc": 0, "start": "2026-08-31 11:09:56.765603" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:09:57 -0400 (0:00:00.556) 0:02:01.212 ********* ok: [managed-node1] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:09:57 -0400 (0:00:00.917) 0:02:02.130 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:09:57 -0400 (0:00:00.015) 0:02:02.145 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:09:58 -0400 (0:00:00.018) 0:02:02.163 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:09:58 -0400 (0:00:00.012) 0:02:02.176 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:09:58 -0400 (0:00:00.020) 0:02:02.197 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:09:58 -0400 (0:00:00.019) 0:02:02.217 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:58-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if not idempotent] ************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:370 Monday 31 August 2026 11:09:58 -0400 (0:00:00.322) 0:02:02.539 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Remove custom ipsets again with previous replaced] *********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:375 Monday 31 August 2026 11:09:58 -0400 (0:00:00.018) 0:02:02.558 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:09:58 -0400 (0:00:00.047) 0:02:02.605 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:09:58 -0400 (0:00:00.014) 0:02:02.620 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:09:58 -0400 (0:00:00.031) 0:02:02.652 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:09:58 -0400 (0:00:00.026) 0:02:02.678 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:09:59 -0400 (0:00:00.527) 0:02:03.205 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:09:59-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:09:59 -0400 (0:00:00.323) 0:02:03.529 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:09:59 -0400 (0:00:00.021) 0:02:03.551 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:09:59 -0400 (0:00:00.014) 0:02:03.565 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:09:59 -0400 (0:00:00.020) 0:02:03.585 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:09:59 -0400 (0:00:00.013) 0:02:03.599 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:09:59 -0400 (0:00:00.040) 0:02:03.640 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:09:59 -0400 (0:00:00.026) 0:02:03.666 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:09:59 -0400 (0:00:00.024) 0:02:03.690 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "previous": "replaced" } } MSG: All assertions passed ok: [managed-node1] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv4", "state": "absent" } } MSG: All assertions passed ok: [managed-node1] => (item=2) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 2, "item": { "ipset": "customipset-ipv6", "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:09:59 -0400 (0:00:00.057) 0:02:03.747 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:09:59 -0400 (0:00:00.018) 0:02:03.766 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:09:59 -0400 (0:00:00.026) 0:02:03.792 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:09:59 -0400 (0:00:00.016) 0:02:03.809 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:09:59 -0400 (0:00:00.013) 0:02:03.823 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:09:59 -0400 (0:00:00.014) 0:02:03.837 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:10:02 -0400 (0:00:02.667) 0:02:06.505 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:10:02 -0400 (0:00:00.019) 0:02:06.525 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:10:02 -0400 (0:00:00.014) 0:02:06.539 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:10:02 -0400 (0:00:00.017) 0:02:06.557 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:10:02 -0400 (0:00:00.047) 0:02:06.604 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:10:02 -0400 (0:00:00.047) 0:02:06.651 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49766400", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:10:02 -0400 (0:00:00.481) 0:02:07.132 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49766400", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:10:03 -0400 (0:00:00.448) 0:02:07.581 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.239139", "end": "2026-08-31 11:10:03.961700", "rc": 0, "start": "2026-08-31 11:10:03.722561" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:10:04 -0400 (0:00:00.589) 0:02:08.171 ********* ok: [managed-node1] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:10:05 -0400 (0:00:01.338) 0:02:09.510 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:10:05 -0400 (0:00:00.015) 0:02:09.525 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:10:05 -0400 (0:00:00.017) 0:02:09.543 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:10:05 -0400 (0:00:00.013) 0:02:09.556 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:10:05 -0400 (0:00:00.020) 0:02:09.577 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:10:05 -0400 (0:00:00.020) 0:02:09.597 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:10:05-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if not idempotent with previous replaced] *************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:385 Monday 31 August 2026 11:10:05 -0400 (0:00:00.319) 0:02:09.916 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Test ipset with wrong family (ipv4)] ************************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:392 Monday 31 August 2026 11:10:05 -0400 (0:00:00.014) 0:02:09.930 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:10:05 -0400 (0:00:00.018) 0:02:09.949 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:10:05 -0400 (0:00:00.014) 0:02:09.963 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:10:05 -0400 (0:00:00.024) 0:02:09.987 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:10:05 -0400 (0:00:00.023) 0:02:10.010 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:10:06 -0400 (0:00:00.506) 0:02:10.517 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:10:06-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:10:06 -0400 (0:00:00.321) 0:02:10.838 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:10:06 -0400 (0:00:00.023) 0:02:10.861 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:10:06 -0400 (0:00:00.020) 0:02:10.882 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:10:06 -0400 (0:00:00.037) 0:02:10.919 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:10:06 -0400 (0:00:00.022) 0:02:10.942 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:10:06 -0400 (0:00:00.051) 0:02:10.994 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:10:06 -0400 (0:00:00.037) 0:02:11.032 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:10:06 -0400 (0:00:00.026) 0:02:11.058 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "badipset-v4", "ipset_entries": [ "127.0.0.1", "8.8.8.8" ], "ipset_options": { "family": "inet6" }, "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:10:06 -0400 (0:00:00.031) 0:02:11.090 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:10:06 -0400 (0:00:00.021) 0:02:11.111 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:10:06 -0400 (0:00:00.038) 0:02:11.150 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:10:07 -0400 (0:00:00.019) 0:02:11.169 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:10:07 -0400 (0:00:00.014) 0:02:11.184 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:10:07 -0400 (0:00:00.017) 0:02:11.201 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:10:09 -0400 (0:00:02.678) 0:02:13.879 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:10:09 -0400 (0:00:00.015) 0:02:13.895 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:10:09 -0400 (0:00:00.014) 0:02:13.910 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:10:09 -0400 (0:00:00.013) 0:02:13.924 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:10:09 -0400 (0:00:00.033) 0:02:13.957 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:10:09 -0400 (0:00:00.032) 0:02:13.990 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49823744", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:10:10 -0400 (0:00:00.444) 0:02:14.434 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49823744", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:10:10 -0400 (0:00:00.466) 0:02:14.901 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.238443", "end": "2026-08-31 11:10:11.261222", "rc": 0, "start": "2026-08-31 11:10:11.022779" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:10:11 -0400 (0:00:00.582) 0:02:15.483 ********* fatal: [managed-node1]: FAILED! => { "changed": false } MSG: ipset badipset-v4: family=inet6 is not supported for IPv4 ipset_entries 127.0.0.1, 8.8.8.8 TASK [Fail if error message is not correct] ************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:408 Monday 31 August 2026 11:10:12 -0400 (0:00:00.932) 0:02:16.416 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Test ipset with wrong family (ipv6)] ************************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:419 Monday 31 August 2026 11:10:12 -0400 (0:00:00.024) 0:02:16.440 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:10:12 -0400 (0:00:00.028) 0:02:16.469 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:10:12 -0400 (0:00:00.022) 0:02:16.491 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:10:12 -0400 (0:00:00.095) 0:02:16.587 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:10:12 -0400 (0:00:00.038) 0:02:16.626 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:10:13 -0400 (0:00:00.550) 0:02:17.177 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:10:13-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:10:13 -0400 (0:00:00.336) 0:02:17.514 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:10:13 -0400 (0:00:00.015) 0:02:17.529 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:10:13 -0400 (0:00:00.014) 0:02:17.544 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:10:13 -0400 (0:00:00.015) 0:02:17.559 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:10:13 -0400 (0:00:00.014) 0:02:17.574 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:10:13 -0400 (0:00:00.033) 0:02:17.607 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:10:13 -0400 (0:00:00.023) 0:02:17.631 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:10:13 -0400 (0:00:00.021) 0:02:17.652 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "badipset-v6", "ipset_entries": [ "2001:4860:4860::8844", "2001:4860:4860::8888" ], "ipset_options": { "family": "inet" }, "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:10:13 -0400 (0:00:00.028) 0:02:17.681 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:10:13 -0400 (0:00:00.018) 0:02:17.699 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:10:13 -0400 (0:00:00.029) 0:02:17.729 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:10:13 -0400 (0:00:00.017) 0:02:17.746 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:10:13 -0400 (0:00:00.014) 0:02:17.760 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:10:13 -0400 (0:00:00.014) 0:02:17.775 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:10:16 -0400 (0:00:02.645) 0:02:20.421 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:10:16 -0400 (0:00:00.019) 0:02:20.440 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:10:16 -0400 (0:00:00.014) 0:02:20.454 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:10:16 -0400 (0:00:00.018) 0:02:20.473 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:10:16 -0400 (0:00:00.029) 0:02:20.502 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:10:16 -0400 (0:00:00.030) 0:02:20.533 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49819648", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:10:16 -0400 (0:00:00.439) 0:02:20.973 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49819648", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:10:17 -0400 (0:00:00.448) 0:02:21.421 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.251024", "end": "2026-08-31 11:10:17.784323", "rc": 0, "start": "2026-08-31 11:10:17.533299" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:10:17 -0400 (0:00:00.575) 0:02:21.996 ********* fatal: [managed-node1]: FAILED! => { "changed": false } MSG: ipset badipset-v6: family=inet is not supported for IPv6 ipset_entries 2001:4860:4860::8844, 2001:4860:4860::8888 TASK [Fail if error message is not correct] ************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:435 Monday 31 August 2026 11:10:18 -0400 (0:00:00.928) 0:02:22.924 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Cleanup] ***************************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:444 Monday 31 August 2026 11:10:18 -0400 (0:00:00.015) 0:02:22.940 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node1 META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Monday 31 August 2026 11:10:18 -0400 (0:00:00.052) 0:02:22.992 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Monday 31 August 2026 11:10:18 -0400 (0:00:00.015) 0:02:23.008 ********* TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Monday 31 August 2026 11:10:18 -0400 (0:00:00.032) 0:02:23.041 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Monday 31 August 2026 11:10:18 -0400 (0:00:00.024) 0:02:23.066 ********* ok: [managed-node1] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Monday 31 August 2026 11:10:19 -0400 (0:00:00.543) 0:02:23.610 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:10:19-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Monday 31 August 2026 11:10:19 -0400 (0:00:00.358) 0:02:23.969 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Monday 31 August 2026 11:10:19 -0400 (0:00:00.015) 0:02:23.984 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Monday 31 August 2026 11:10:19 -0400 (0:00:00.014) 0:02:23.998 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Monday 31 August 2026 11:10:19 -0400 (0:00:00.017) 0:02:24.015 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Monday 31 August 2026 11:10:19 -0400 (0:00:00.018) 0:02:24.034 ********* skipping: [managed-node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Monday 31 August 2026 11:10:19 -0400 (0:00:00.048) 0:02:24.082 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Monday 31 August 2026 11:10:19 -0400 (0:00:00.022) 0:02:24.105 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Monday 31 August 2026 11:10:19 -0400 (0:00:00.029) 0:02:24.134 ********* ok: [managed-node1] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "previous": "replaced" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Monday 31 August 2026 11:10:20 -0400 (0:00:00.033) 0:02:24.168 ********* ok: [managed-node1] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Monday 31 August 2026 11:10:20 -0400 (0:00:00.018) 0:02:24.186 ********* included: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node1 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Monday 31 August 2026 11:10:20 -0400 (0:00:00.026) 0:02:24.212 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Monday 31 August 2026 11:10:20 -0400 (0:00:00.015) 0:02:24.227 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Monday 31 August 2026 11:10:20 -0400 (0:00:00.013) 0:02:24.241 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Monday 31 August 2026 11:10:20 -0400 (0:00:00.013) 0:02:24.255 ********* ok: [managed-node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Monday 31 August 2026 11:10:22 -0400 (0:00:02.646) 0:02:26.901 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Monday 31 August 2026 11:10:22 -0400 (0:00:00.015) 0:02:26.917 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Monday 31 August 2026 11:10:22 -0400 (0:00:00.014) 0:02:26.931 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Monday 31 August 2026 11:10:22 -0400 (0:00:00.014) 0:02:26.946 ********* skipping: [managed-node1] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Monday 31 August 2026 11:10:22 -0400 (0:00:00.028) 0:02:26.974 ********* skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node1] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "item": { "ansible_loop_var": "item", "changed": false, "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Monday 31 August 2026 11:10:22 -0400 (0:00:00.029) 0:02:27.004 ********* ok: [managed-node1] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49721344", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Monday 31 August 2026 11:10:23 -0400 (0:00:00.442) 0:02:27.447 ********* ok: [managed-node1] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Mon 2026-08-31 11:05:15 EDT", "ActiveEnterTimestampMonotonic": "135193015", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "dbus.socket dbus.service polkit.service sysinit.target system.slice basic.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-08-31 11:05:14 EDT", "AssertTimestampMonotonic": "134843354", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ConditionTimestampMonotonic": "134843354", "ConfigurationDirectoryMode": "0755", "Conflicts": "nftables.service ipset.service ebtables.service shutdown.target ip6tables.service iptables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8782", "ExecMainStartTimestamp": "Mon 2026-08-31 11:05:14 EDT", "ExecMainStartTimestampMonotonic": "134844620", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Mon 2026-08-31 11:05:14 EDT] ; stop_time=[n/a] ; pid=8782 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-08-31 11:05:14 EDT", "InactiveExitTimestampMonotonic": "134844662", "InvocationID": "76cb814a1ef74cb78a306ecd1cdd2559", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8782", "MemoryAccounting": "yes", "MemoryCurrent": "49721344", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target dbus.socket system.slice", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-08-31 11:05:15 EDT", "StateChangeTimestampMonotonic": "135193015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Mon 2026-08-31 11:05:15 EDT", "WatchdogTimestampMonotonic": "135193014", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Monday 31 August 2026 11:10:23 -0400 (0:00:00.441) 0:02:27.888 ********* ok: [managed-node1] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.235700", "end": "2026-08-31 11:10:24.239091", "rc": 0, "start": "2026-08-31 11:10:24.003391" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Monday 31 August 2026 11:10:24 -0400 (0:00:00.561) 0:02:28.450 ********* ok: [managed-node1] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Monday 31 August 2026 11:10:25 -0400 (0:00:01.333) 0:02:29.783 ********* skipping: [managed-node1] => {} TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Monday 31 August 2026 11:10:25 -0400 (0:00:00.018) 0:02:29.802 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Monday 31 August 2026 11:10:25 -0400 (0:00:00.021) 0:02:29.823 ********* ok: [managed-node1] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Monday 31 August 2026 11:10:25 -0400 (0:00:00.015) 0:02:29.839 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Monday 31 August 2026 11:10:25 -0400 (0:00:00.025) 0:02:29.864 ********* skipping: [managed-node1] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Monday 31 August 2026 11:10:25 -0400 (0:00:00.023) 0:02:29.888 ********* ok: [managed-node1] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.9.27", "date": "2026-08-31T11:10:26-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* managed-node1 : ok=300 changed=8 unreachable=0 failed=0 skipped=320 rescued=2 ignored=0 SYSTEM ROLES ERRORS BEGIN v1 [ { "ansible_version": "2.9.27", "end_time": "2026-08-31T15:10:12.255648+00:00Z", "host": "managed-node1", "message": "ipset badipset-v4: family=inet6 is not supported for IPv4 ipset_entries 127.0.0.1, 8.8.8.8", "start_time": "2026-08-31T15:10:11.327539+00:00Z", "task_name": "Configure firewall", "task_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63" }, { "ansible_version": "2.9.27", "end_time": "2026-08-31T15:10:18.765301+00:00Z", "host": "managed-node1", "message": "ipset badipset-v6: family=inet is not supported for IPv6 ipset_entries 2001:4860:4860::8844, 2001:4860:4860::8888", "start_time": "2026-08-31T15:10:17.839893+00:00Z", "task_name": "Configure firewall", "task_path": "/tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63" } ] SYSTEM ROLES ERRORS END v1 TASKS RECAP ******************************************************************** Monday 31 August 2026 11:10:26 -0400 (0:00:00.321) 0:02:30.210 ********* =============================================================================== fedora.linux_system_roles.firewall : Configure firewall ---------------- 27.52s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests -- 10.25s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 fedora.linux_system_roles.firewall : Unmask firewalld service ----------- 8.46s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 fedora.linux_system_roles.firewall : Enable and start firewalld service --- 8.12s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 fedora.linux_system_roles.firewall : Record role success fingerprint ---- 5.17s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.79s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.70s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.70s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.70s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.69s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.68s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.68s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.67s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.67s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.66s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.66s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.66s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.65s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.65s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.65s /tmp/collections-MHK/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23