diff --git a/test/vm.install b/test/vm.install
index 7df33c4..84f26f7 100644
--- a/test/vm.install
+++ b/test/vm.install
@@ -7,7 +7,7 @@ set -eux
 mkdir -p /etc/cockpit
 printf "[WebService]\\nAllowUnencrypted=true\\n" > /etc/cockpit/cockpit.conf
 
-if type firewall-cmd >/dev/null 2>&1; then
+if systemctl is-active -q firewalld.service; then
     firewall-cmd --add-service=cockpit --permanent
 fi
 systemctl enable cockpit.socket