Fail to start if firewalld is disabled.

[dxdxdt]

I have to apologise first and will be blunt with you.
I don't want rolekit on my newly installed server and it's enabled by default in Fedora Server. I don't know exactly what it does, and I don't want to imply any "role" on the server.

I'd been trying to find what starts firewalld. Firewalld didn't show on the dependency list because rolekit is oneshot service. (Related post)

Make it fail if firewalld is disabled. Or you could set rolekit service disabled by default. If you do not decide to either of these, rolekit is just another annoying thing for me to disable when I install Fedora Server.

[sgallagher]

rolekit's purpose was to provide a lightweight service that could deploy common infrastructure services using Cockpit.

The reason rolekit didn't show up is because it doesn't run unless you are actually using it. Normally it is shut down - consuming no resources - unless you explicitly call for it using its API.

FirewallD is an official part of Fedora Server and it is strongly discouraged to disable it. It's come a long way in the last couple years, and if you're disabling it because of early negative impressions, I'd strongly suggest taking a look at what it can do these days.

Unfortunately, the project didn't enjoy widespread adoption, so it's being retired. In Fedora 26, the services provided by rolekit will likely be replaced or merged with Ansible functionality.