The text 8ede470095ef, as Debian 9 (Stretch) shipped it.
start and enable firewalld
cdist-type__firewalld_start(7) on Linux now