The text cfa9ed9627da, as Debian 9 (Stretch) shipped it.
Copy a pf(4) ruleset to $__target_host
cdist-type__pf_ruleset(7) on Linux now
