Could not autoload puppet/provider/firewall/iptables: Firewall is not a class

[psapezhka]

Describe the Bug

Trying to build with the r10k and module of the version 7.0.2. I get the next output

Command: /opt/puppetlabs/bin/puppet generate types --environment upd --environmentpath /etc/puppetlabs/code/environments --config /etc/puppetlabs/puppet/puppet.conf
Stdout:
Notice: Generating Puppet resource types.
Stderr:
Error: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Could not autoload puppet/provider/firewall/ip6tables: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Failed to load custom type 'firewall' from '/etc/puppetlabs/code/environments/upd/modules/firewall/lib/puppet/type/firewall.rb': Could not autoload puppet/provider/firewall/ip6tables: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Could not autoload puppet/provider/firewallchain/iptables_chain: uninitialized constant Puppet::Util::Firewall
Error: Failed to load custom type 'firewallchain' from '/etc/puppetlabs/code/environments/upd/modules/firewall/lib/puppet/type/firewallchain.rb': Could not autoload puppet/provider/firewallchain/iptables_chain: uninitialized constant Puppet::Util::Firewall

Expected Behavior

No error

Steps to Reproduce

Steps to reproduce the behavior:

1. Use module of the version 7.0.2
2. Build env

Environment

• module 7.0.2
• Puppet 8.2.1

[dacron]

Also seeing this but with Puppet 7.25.0:

Error: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.8.16/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Could not autoload puppet/provider/firewall/ip6tables: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.8.16/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Failed to load custom type 'firewall' from '/etc/puppetlabs/code/environments/feature_puppetfile/external-modules/firewall/lib/puppet/type/firewall.rb': Could not autoload puppet/provider/firewall/ip6tables: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.8.16/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Warning: Unknown feature detected: ["custom_generate"]
Error: Could not autoload puppet/provider/firewallchain/iptables_chain: uninitialized constant Puppet::Util::Firewall
Error: Failed to load custom type 'firewallchain' from '/etc/puppetlabs/code/environments/feature_puppetfile/external-modules/firewall/lib/puppet/type/firewallchain.rb': Could not autoload puppet/provider/firewallchain/iptables_chain: uninitialized constant Puppet::Util::Firewall

[Helkar]

Hi,

I am seeing the same behavior using puppet 7.26.0 on Ubuntu 18.04, is anyone aware of any workaround? Thanks!

[jplindquist]

+1 Running into this as well after upgrading when testing via puppet apply locally and when trying to generate types on Puppet server as well

Notice: Generating Puppet resource types.
Error: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Could not autoload puppet/provider/firewall/ip6tables: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Failed to load custom type 'firewall' from '/etc/puppetlabs/code/puppet-control/iptables_module/modules/firewall/lib/puppet/type/firewall.rb': Could not autoload puppet/provider/firewall/ip6tables: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Could not autoload puppet/provider/firewallchain/iptables_chain: uninitialized constant Puppet::Util::Firewall
Error: Failed to load custom type 'firewallchain' from '/etc/puppetlabs/code/puppet-control/iptables_module/modules/firewall/lib/puppet/type/firewallchain.rb': Could not autoload puppet/provider/firewallchain/iptables_chain: uninitialized constant Puppet::Util::Firewall

puppetlabs-firewall (v7.0.2)
puppet-agent-7.26
puppetserver-7.13.0

[jlindquist-godaddy]

This is also causing issues with deploying modules via r10k in isolated environments because type generation is failing. I cleared the resource_types cache for this environment, and regenerated via r10k to end up with a new error

Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, No such file or directory - /etc/puppetlabs/code/puppet-control/dev/.resource_types/firewall.pp

[dacron]

Is there a workaround for this? We're trying to adopt 7.0.2 as part of a major Puppetfile overhaul.

[tlundse]

Just ran into this as well, when trying to go from 6.0.0 to 7.0.x
puppetserver version: 7.13.0

[jplindquist]

I thought this might be related to environment isolation or caching when deploying modules via r10k, and have tried removing other environments, restarting puppetserver, and removing each environment's .resource_types cache with no luck. If there is anything else worth trying, I'm happy to continue to debug.

I still get intermittent errors where a couple of runs will be successful, and every few runs will fail with one of a few errors:

Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Could not autoload puppet/type/firewall: Could not autoload puppet/provider/firewall/firewall: no such file to load -- puppet_x/puppetlabs/firewall/ipcidr (file: /etc/puppetlabs/code/puppet-control/dev/profile_modules/profile/manifests/user.pp, line: 41, column: 3) on node host.example.com

Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Could not autoload puppet/type/firewallchain: Could not autoload puppet/provider/firewallchain/firewallchain: no such file to load -- puppet_x/puppetlabs/firewall/ipcidr (file: /etc/puppetlabs/code/puppet-control/dev/profile_modules/profile/manifests/example/sample.pp, line: 40, column: 3) on node host.example.com
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run

Type generation consistently failing after deploying the module as well

sudo puppet generate types --environment dev
Notice: Generating Puppet resource types.
Error: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Could not autoload puppet/provider/firewall/ip6tables: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Failed to load custom type 'firewall' from '/etc/puppetlabs/code/puppet-control/dev/modules/firewall/lib/puppet/type/firewall.rb': Could not autoload puppet/provider/firewall/ip6tables: Could not autoload puppet/provider/firewall/iptables: Firewall is not a class
/opt/puppetlabs/puppet/lib/ruby/vendor_gems/gems/puppet-resource_api-1.9.0/lib/puppet/resource_api.rb:36: previous definition of Firewall was here
Error: Could not autoload puppet/provider/firewallchain/iptables_chain: uninitialized constant Puppet::Util::Firewall
Error: Failed to load custom type 'firewallchain' from '/etc/puppetlabs/code/puppet-control/dev/modules/firewall/lib/puppet/type/firewallchain.rb': Could not autoload puppet/provider/firewallchain/iptables_chain: uninitialized constant Puppet::Util::Firewall

[jordan78]

I am running into the same issue with firewall module version 7.0.2 and puppet 7.26.0 and also the same on error with puppet 8.2.3.

[rmoreas]

Any news on this issue? We get similar issues with firewall module 7.0.2 and puppet 7.27.0.

We do not get errors during execution of "puppet generate types" on the r10k created environment, but we get following errors afterwards:

Error: Could not autoload puppet/type/firewall: cannot load such file -- puppet/resource_api
Did you mean?  puppet/resource
Error: Failed to apply catalog: Could not autoload puppet/type/firewall: cannot load such file -- puppet/resource_api
Did you mean?  puppet/resource

If we remove the .resource_types folder from the environment again, we get following errors:

Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: no parameter named 'protocol' (file: /etc/puppetlabs/code/environments/develop/site/manifests/firewall/pre.pp, line: 28) on Firewall[004 accept all icmp (v6)] (file: /etc/puppetlabs/code/environments/develop/site/manifests/firewall/pre.pp, line: 28) on node node01.example.org

[chrisongthb]

Got a workaround for this. On the (*nix) puppetserver search for files regarding firewall module in the Cache directory (vardir)

find $(puppet config print vardir) -ipath '*firewall*' -type f

and delete them

find $(puppet config print vardir) -ipath '*firewall*' -type f -delete

Then re-generate types:

puppet generate types --environment <environment>

Helped for me.

[BertrandJO]

Any news on this issue? We get similar issues with firewall module 7.0.2 and puppet 7.27.0.

We do not get errors during execution of "puppet generate types" on the r10k created environment, but we get following errors afterwards:

Error: Could not autoload puppet/type/firewall: cannot load such file -- puppet/resource_api
Did you mean?  puppet/resource
Error: Failed to apply catalog: Could not autoload puppet/type/firewall: cannot load such file -- puppet/resource_api
Did you mean?  puppet/resource

If we remove the .resource_types folder from the environment again, we get following errors:

Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: no parameter named 'protocol' (file: /etc/puppetlabs/code/environments/develop/site/manifests/firewall/pre.pp, line: 28) on Firewall[004 accept all icmp (v6)] (file: /etc/puppetlabs/code/environments/develop/site/manifests/firewall/pre.pp, line: 28) on node node01.example.org

Same code with 6.0.0 version, replacing jump with action works fine (puppet 7.23.0), i was facing same error "Could not autoload puppet/type/firewall: cannot load such file -- puppet/resource_api"

[redrac]

+1 we have been plagued by this issue on every version of puppet7:

ERROR [puppetserver] Puppet Evaluation Error: Error while evaluating a Resource Statement, Could not autoload puppet/type/firewall: Could not autoload puppet/provider/firewall/firewall: no such file to load -- puppet_x/puppetlabs/firewall/ipcidr