`nft list ruleset` prints the symbolic chain priority (`filter` = 0); the ubongo profile asserted `priority 0` (the rendered-file format the Molecule scenario checks), so the live-ruleset assertion failed even though the firewall was correct. Assert `priority filter` for the input/forward policy lines. Caught by the harness GREEN gate (`make test-integration HOST=ubongo`). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| certs | ||
| overrides | ||
| profiles | ||
| verify.yml | ||