I am using fiddyspence's version of sysctl, it has the permanent param, looks like thias' version does not, my mistake. https://forge.puppetlabs.com/fiddyspence/sysctl vs https://forge.puppetlabs.com/thias/sysctl