The text a70edf10d0dd, as Debian 12 (Bookworm) shipped it.
start and enable firewalld
cdist-type__firewalld_start(7) on Linux now