One thing I haven't figured out yet is how to fix the tests for Debian. I have added the defaults for the OS in data/os/Debian.yaml, but they do not seem to be used.
Adds support for Debian Buster (10).
This patchset adds a new parameter to the main class to activate a mechanism that will invoke
systemctl reload nftables during the Puppet run if manual changes to the in-memory ruleset are detected.
To accomplish this, the systemd unit in charge of nftables is configured to write a hash of the in-memory ruleset right after starting/reloading. During the Puppet run, the hash of the current rule set is compared to the one previously stored. If the hash differs then
systemctl reload nftables is executed to flush manual changes.