I'm using firewalld_custom_service resources to define custom services for firewalld on all my systems.
Then in a second step, I enable only the services that are needed on every specific system.
But I was noticing that the puppet apply time for all my firewalld_custom_service resources is currently ~70 seconds. I've 56 firewalld_custom_service resouces in the catalog.
I think the reason for it is, that the firewall-cmd commands are rather slow and they are executed multiple times per firewalld_custom_service.
My only idea is that parsing the xml files might be faster.
In the meantime I removed the description parameter from every custom_services which already saved some time.
I'm using firewalld_custom_service resources to define custom services for firewalld on all my systems.
Then in a second step, I enable only the services that are needed on every specific system.
But I was noticing that the puppet apply time for all my firewalld_custom_service resources is currently ~70 seconds. I've 56 firewalld_custom_service resouces in the catalog.
I think the reason for it is, that the firewall-cmd commands are rather slow and they are executed multiple times per firewalld_custom_service.
My only idea is that parsing the xml files might be faster.
In the meantime I removed the description parameter from every custom_services which already saved some time.