require that shorewall has been installed before execs are run (#3339)

Change-Id: Iae2b1cacd64565931cef77194a733aeae681efaf

1 files changed, 4 insertions, 2 deletions

diff --git a/puppet/modules/site_config/manifests/initial_firewall.pp b/puppet/modules/site_config/manifests/initial_firewall.pp
index b9fc5ffe..9178a5f2 100644
--- a/puppet/modules/site_config/manifests/initial_firewall.pp
+++ b/puppet/modules/site_config/manifests/initial_firewall.pp
@@ -51,12 +51,14 @@ class site_config::initial_firewall {
       command   => '/sbin/iptables-restore < /etc/network/ipv4firewall_up.rules',
       logoutput => true,
       unless    => '/sbin/shorewall status',
-      require   => File['/etc/network/ipv4firewall_up.rules'];
+      require   => [ Package['shorewall'],
+                     File['/etc/network/ipv4firewall_up.rules'] ];
 
     'default_ipv6_firewall':
       command   => '/sbin/ip6tables-restore < /etc/network/ipv6firewall_up.rules',
       logoutput => true,
       unless    => '/sbin/shorewall status',
-      require   => File['/etc/network/ipv6firewall_up.rules'];
+      require   => [ Package['shorewall'],
+                     File['/etc/network/ipv6firewall_up.rules'] ];
   }
 }