Puphpet: IPTables issue with Ubuntu 14

[rlweb]

I've added a port 8080 firewall allow and now get these errors whilst provisioning or running a new server. Any idea why?

==> default: Error: /Stage[main]/Firewall::Linux::Debian/Service[iptables-persistent]: Could not evaluate: Could not find init script or upstart conf file for 'iptables-persistent'
==> default: Notice: /Stage[main]/Puphpet::Firewall::Pre/Firewall[000 accept all icmp]/ensure: created
==> default: Warning: Firewall[000 accept all icmp](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
==> default:
==> default: Notice: /Stage[main]/Puphpet::Firewall::Pre/Firewall[001 accept all to lo interface]/ensure: created
==> default: Warning: Firewall[001 accept all to lo interface](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
==> default:
==> default: Notice: /Stage[main]/Puphpet::Firewall::Pre/Firewall[002 accept related established rules]/ensure: created
==> default: Warning: Firewall[002 accept related established rules](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
==> default:
==> default: Notice: /Stage[main]/Main/Puphpet::Firewall::Port[80]/Firewall[100 tcp/80]/ensure: created
==> default: Warning: Firewall[100 tcp/80](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
==> default:
==> default: Notice: /Stage[main]/Main/Puphpet::Firewall::Port[443]/Firewall[100 tcp/443]/ensure: created
==> default: Warning: Firewall[100 tcp/443](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
==> default:
==> default: Notice: /Stage[main]/Main/Puphpet::Firewall::Port[8080]/Firewall[100 tcp/8080]/ensure: created
==> default: Warning: Firewall[100 tcp/8080](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service
==> default:
==> default: Notice: /Stage[main]/Main/Puphpet::Firewall::Port[22]/Firewall[100 tcp/22]/ensure: created
==> default: Warning: Firewall[100 tcp/22](provider=iptables): Unable to persist firewall rules: Execution of '/usr/sbin/service iptables-persistent save' returned 1: iptables-persistent: unrecognized service

And my puphpet file

``` vagrantfile:
target: digitalocean
vm:
box: digital_ocean
hostname: test
network:
private_network: 192.168.56.101
forwarded_port: { }
provider:
digital_ocean:
image: ubuntu-14-10-x64
region: lon1
size: 512mb
token:
ssh_key_name: Me
provision:
puppet:
manifests_path: puphpet/puppet
manifest_file: site.pp
module_path: puphpet/puppet/modules
options:
- '--verbose'
- '--hiera_config /vagrant/puphpet/puppet/hiera.yaml'
- '--parser future'
synced_folder: { }
ssh:
host: null
port: null
private_key_path: ~/.ssh/id_rsa
username: rlweb
guest_port: null
keep_alive: true
forward_agent: false
forward_x11: false
shell: 'bash -l'
vagrant:
host: detect
server:
install: '1'
packages:
- git
users_groups:
install: '1'
groups: { }
users:
- kipos
firewall:
install: '1'
rules:
fr_zrniuig9td6w:
port:
- '8080'
priority: '100'
proto: tcp
action: accept
cron:
install: '1'
jobs:
cj_6utc4bvv9y63:
name: clearOrders
user: kipos
command: 'usr/bin/php /var/www/clearOrders.php >> /tmp/clearOrders.log'
minute: '30'
hour: '4'
weekday: ''
month: ''
monthday: ''
nginx:
install: '1'
settings:
default_vhost: 1
proxy_buffer_size: 128k
proxy_buffers: '4 256k'
upstreams: { }
vhosts:
nxv_5opsamu9fyaz:
server_name: test
server_aliases:
- test.kipos.uk
www_root: /var/www/kipos/
listen_port: '80'
index_files:
- index.html
- index.htm
- index.php
client_max_body_size: 1m
ssl: '1'
ssl_cert: ''
ssl_key: ''
ssl_port: '443'
ssl_protocols: ''
ssl_ciphers: ''
rewrite_to_https: '1'
spdy: '1'
locations:
nxvl_qpj36cx22p9z:
location: /
autoindex: off
try_files:
- $uri
- $uri/
- index.php
fastcgi: ''
fastcgi_index: ''
fastcgi_split_path: ''
nxvl_xacf5146yevy:
location: '~ .php$'
autoindex: off
try_files:
- $uri
- $uri/
- index.php
- /index.php$is_args$args
fastcgi: '127.0.0.1:9000'
fastcgi_index: index.php
fastcgi_split_path: '^(.+.php)(/.)$'
fast_cgi_params_extra:
- 'SCRIPT_FILENAME $request_filename'
- 'APP_ENV dev'
proxies: { }
apache:
install: '0'
settings:
user: www-data
group: www-data
default_vhost: true
manage_user: false
manage_group: false
sendfile: 0
modules:
- proxy_fcgi
- rewrite
vhosts:
av_4qnvavcvvsqq:
servername: awesome.dev
serveraliases:
- www.awesome.dev
docroot: /var/www/awesome
port: '80'
setenv:
- 'APP_ENV dev'
custom_fragment: ''
ssl: '0'
ssl_cert: ''
ssl_key: ''
ssl_chain: ''
ssl_certs_dir: ''
ssl_protocol: ''
ssl_cipher: ''
directories:
avd_od39wgujvbfh:
path: /var/www/awesome
options:
- Indexes
- FollowSymlinks
- MultiViews
allow_override:
- All
require:
- 'all granted'
custom_fragment: ''
files_match:
avdfm_aji8fx9yr6mr:
path: .php$
sethandler: 'proxy:fcgi://127.0.0.1:9000'
custom_fragment: ''
provider: filesmatch
provider: directory
php:
install: '1'
settings:
version: '56'
modules:
php:
- cli
- intl
- mcrypt
- curl
- redis
pear: { }
pecl:
- pecl_http
ini:
display_errors: On
error_reporting: '-1'
session.save_path: tcp://localhost:6379?weight=1&database=0
session.save_handler: redis
session.gc_maxlifetime: 7200
date.timezone: Europe/London
fpm_ini:
error_log: /var/log/php-fpm.log
fpm_pools: { }
composer: '1'
composer_home: ''
xdebug:
install: '0'
settings:
xdebug.default_enable: '1'
xdebug.remote_autostart: '0'
xdebug.remote_connect_back: '1'
xdebug.remote_enable: '1'
xdebug.remote_handler: dbgp
xdebug.remote_port: '9000'
blackfire:
install: '0'
settings:
server_id: ''
server_token: ''
agent:
http_proxy: ''
https_proxy: ''
log_file: stderr
log_level: '1'
php:
agent_timeout: '0.25'
log_file: ''
log_level: '1'
xhprof:
install: '0'
wpcli:
install: '0'
version: v0.17.1
drush:
install: '0'
version: 6.3.0
ruby:
install: '1'
versions: { }
python:
install: '1'
packages: { }
versions: { }
nodejs:
install: '1'
npm_packages:
- pm2
- grunt
hhvm:
install: '0'
nightly: 0
composer: '1'
composer_home: ''
settings: { }
server_ini: { }
php_ini: { }
mysql:
install: '1'
settings:
version: '5.6'
root_password: qqq
override_options: { }
adminer: 0
users:
mysqlnu_c1mjpybwp21a:
name: dev
password: qqq
databases: {}
grants:
mysqlng_jzxtegsbr1zn:
user: dev
table: '.'
privileges:
- ALL
postgresql:
install: '0'
settings:
global:
encoding: UTF8
version: '9.3'
server:
postgres_password: '123'
databases: { }
users: { }
grants: { }
adminer: 0
mongodb:
install: '0'
settings:
auth: 1
bind_ip: 127.0.0.1
port: '27017'
databases: { }
redis:
install: '1'
settings:
conf_port: '6379'
sqlite:
install: '0'
adminer: 0
databases: { }
mailcatcher:
install: '0'
settings:
smtp_ip: 0.0.0.0
smtp_port: 1025
http_ip: 0.0.0.0
http_port: '1080'
mailcatcher_path: /usr/local/rvm/wrappers/default
from_email_method: inline
beanstalkd:
install: '0'
settings:
listenaddress: 0.0.0.0
listenport: '13000'
maxjobsize: '65535'
maxconnections: '1024'
binlogdir: /var/lib/beanstalkd/binlog
binlogfsync: null
binlogsize: '10485760'
beanstalk_console: 0
binlogdir: /var/lib/beanstalkd/binlog
rabbitmq:
install: '0'
settings:
port: '5672'
users: { }
vhosts: { }
plugins: { }
elastic_search:
install: '0'
settings:
version: 1.4.1
java_install: true
solr:
install: '0'
settings:
version: 4.10.2
port: '8984'

```

[rlweb]

This happens also If I remove the extra firewall entry.

[rlweb]

Save as #1575 but it is correctly installed...

[07:08 AM]-[rlweb@test]-[~]
$ sudo apt-get -y install iptables-persistent
Reading package lists... Done
Building dependency tree
Reading state information... Done
iptables-persistent is already the newest version.
The following packages were automatically installed and are no longer required:
  linux-headers-3.16.0-21 linux-headers-3.16.0-21-generic linux-image-3.16.0-21-generic
  linux-image-extra-3.16.0-21-generic
Use 'apt-get autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 85 not upgraded.

[07:09 AM]-[rlweb@test]-[~]
$ iptables-persistent
iptables-persistent: command not found

[rlweb]

It looks like the issue is because with 14.10 they have renamed the iptables to netfilter...
https://tickets.puppetlabs.com/browse/MODULES-1029
Updated the module which fixed the issue.

[geoffreyhale]

(Someone should fix this tutorial: https://www.digitalocean.com/community/tutorials/how-to-implement-a-basic-firewall-template-with-iptables-on-ubuntu-14-04)