Merge branch 'ci-cd' into 'master'

CI/CD

See merge request !28

.gitlab-ci.yml

+.earthly_prepare:
+  tags:
+    - privileged
+  image:
+    name: earthly/earthly:v0.6.29@sha256:81eaf447132541b930d64cbf3308ba07303928a073c602e81a237799b60f254d
+    entrypoint: [ "sh", "-c" ]
+  before_script:
+    - earthly --version
+    - cat ${EARTHLY_CONFIG}
+  variables:
+    FORCE_COLOR: "1"
+    EARTHLY_CONFIG: "/etc/earthly/config.yaml"
+    EARTHLY_STRICT: "true"
+  interruptible: true
+  retry:
+    max: 2
+    when:
+      - runner_system_failure
+      - stuck_or_timeout_failure
+
+test:
+  stage: test
+  extends: [.earthly_prepare]
+  script:
+    - earthly --no-output -P +test
+  only:
+    refs:
+      - merge_requests

Earthfile

+VERSION --use-copy-include-patterns 0.5
+
+install-deps:
+    FROM debian:stable@sha256:13db79e523a13e3e55b606128a4193d7b9ae788d0c11c95d6a6de0bd30aa3a14
+
+shorewall-deps:
+    FROM +install-deps
+    RUN apt update
+    RUN apt install shorewall shorewall6 ipset -y
+    USER root
+
+validate-shorewall:
+    FROM +shorewall-deps
+    RUN apt update
+    RUN apt install shorewall ipset -y
+    COPY ./roles/firewall/files/shorewall /tmp/shorewall
+    RUN --privileged shorewall check /tmp/shorewall
+
+validate-shorewall6:
+    FROM +shorewall-deps
+    COPY ./roles/firewall/files/shorewall6 /tmp/shorewall6
+    RUN --privileged shorewall6 check /tmp/shorewall6
+
+test:
+    BUILD +validate-shorewall
+    BUILD +validate-shorewall6

roles/firewall/files/shorewall/shorewall.conf

@@ -191,8 +191,6 @@ IP_FORWARDING=Yes
 
 KEEP_RT_TABLES=No
 
-LOAD_HELPERS_ONLY=Yes
-
 MACLIST_TABLE=filter
 
 MACLIST_TTL=

roles/firewall/files/shorewall/shorewall6.conf

@@ -178,8 +178,6 @@ IP_FORWARDING=Yes
 
 KEEP_RT_TABLES=Yes
 
-LOAD_HELPERS_ONLY=Yes
-
 MACLIST_TABLE=filter
 
 MACLIST_TTL=

roles/firewall/files/shorewall6/shorewall6.conf

@@ -178,8 +178,6 @@ IP_FORWARDING=Yes
 
 KEEP_RT_TABLES=Yes
 
-LOAD_HELPERS_ONLY=Yes
-
 MACLIST_TABLE=filter
 
 MACLIST_TTL=