From edd8677758d29426bd69322d401372075916585f Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Wed, 23 Jul 2025 13:00:01 -0700 Subject: [PATCH] base / iptables: don't try and disable ip6tables on rhel8 with nftables rhel8 instances using nftables don't have iptables-services installed, because we remove 'iptables'. On rhel9 and fedora iptables-services only needs iptables-libs installed, so it's there and works to disable. Once the last things (rhel8 copr hypervisors) are moved to nftables, we can drop all this. Signed-off-by: Kevin Fenzi --- roles/base/tasks/main.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml index 51d1d6288d..f65e12a2ef 100644 --- a/roles/base/tasks/main.yml +++ b/roles/base/tasks/main.yml @@ -366,6 +366,7 @@ when: - baseiptables|bool - nftables + - ansible_distribution_major_version|int > 8 - name: Enable journald persistence ansible.builtin.file: path=/var/log/journal state=directory