GitHub puppet-ipset

Puppet module to manage ipset tooling and actual sets

This PR will enable using nested arrays for parameter 'set'.

It's required (e.g.) when grouping networks in Hiera.
```
ip4subnetaclass00: '10.0.1.0/24'
ip4subnetaclass01: '10.0.2.0/24'
ip4subnetsaclass:
- "%{alias('ip4subnetaclass00')}"
- "%{alias('ip4subnetaclass01')}"

ip4subnetcclass00: '192.168.0.0/24'
ip4subnetcclass01: '192.168.1.0/24'
ip4subnetscclass:
- "%{alias('ip4subnetcclass00')}"
- "%{alias('ip4subnetcclass01')}"

ip4subnets:
- "%{alias('ip4subnetsaclass')}"
- "%{alias('ip4subnets_cclass')}"

ipset::sets:
ip4subnets:
set: "%{alias('ip4subnets')}"
type: 'hash:net'
```

Allow ipset_sync script to work with ipset 7.8 and newer, by ignoring the variables when checking the configuration

Pull Request (PR) description

This patch makes ipset_sync ignore the bucketsize and initval parameters. Without it, the module wants to recreate the ipset on every Puppet run. I made diff ignore whitespace as well to reduce sed space tricks required.

I tried to add bucketsize as an actual settable option to the module, which may be nice, but unfortunately stops working on older kernels, and because the module sorts the parameters in $opt_string, it also does not match the order ipset save provides.

Diff result on my recent system before this patch:
```

< create vallumd hash:ip family inet maxelem 65536 timeout 3600 bucketsize 12 initval 0xd52632d0

create vallumd hash:ip family inet maxelem 65536 timeout 3600
```

Pull Request (PR) description

The current ipset service unit sets Before=network-pre.target as it is needed before the network to help ensure that the firewall is up and running before anyone might actually try to connect. It has no setting
for DefaultDependencies which means it takes the defaults, one of which is After=sysinit.target.

There are some cases where this can cause a dependency cycle with other units that want to start early in the boot process between networking.service and sysinit.target (for example, cloud-init). This results in one of the offending units being removed and risks startup continuing without ipsets being configured, potentially leaving a firewall open and a host at risk.

The ipset service can safely be run before sysinit.target by setting DefaultDependencies=no with a couple of additional dependencies to handle some of the other implied settings that are removed as a result.

This Pull Request (PR) fixes the following issues

Fixes #63

<!--
Thank you for contributing to this project!

• This project has a Contributor Code of Conduct: https://voxpupuli.org/coc/
• Please check that here is no existing issue or PR that addresses your problem.
• Our vulnerabilities reporting process is at https://voxpupuli.org/security/

-->

Pull Request (PR) description

<!--
Replace this comment with a description of your pull request.
-->

This Pull Request (PR) fixes the following issues

<!--
Replace this comment with the list of issues or n/a.
Use format:
Fixes #123
Fixes #124
-->

modulesync 5.3.0