Back to bug 1332088

Who When What Removed Added
Sandro Bonazzola 2016-05-02 08:06:19 UTC Summary [migration 3.6 el6 - 3.6 el7] Failed to execute stage 'Setup validation': Firewall manager iptables is not available [3.6.6 clone][migration 3.6 el6 - 3.6 el7] Failed to execute stage 'Setup validation': Firewall manager iptables is not available
Sandro Bonazzola 2016-05-02 08:07:00 UTC Keywords ZStream
Yaniv Lavi 2016-05-02 08:50:29 UTC CC ydary
Flags planning_ack? planning_ack+
Pavel Novotny 2016-05-02 10:03:31 UTC QA Contact pstehlik jbelka
Flags testing_ack? testing_ack+
Red Hat Bugzilla Rules Engine 2016-05-02 10:03:39 UTC Flags ovirt-3.6.z? ovirt-3.6.z+
Yedidyah Bar David 2016-05-03 09:21:56 UTC Blocks 1332463
Yedidyah Bar David 2016-05-03 09:30:02 UTC Status NEW ASSIGNED
Yedidyah Bar David 2016-05-03 14:29:02 UTC Link ID oVirt gerrit 56963
Status ASSIGNED POST
Link ID oVirt gerrit 56968
Status POST MODIFIED
Doc Text Cause:

When running engine-setup, as part of migration from el6 to el7, if the backed up engine was configured to automatically configure iptables, and the package 'iptables-services' was not installed on the target el7 machine, and the user accepted the choice to automatically configure the firewall, engine-setup failed.

Consequence:

It was not possible to finish the migration process without some manual action.

Fix:

engine-setup was changed to not fail in this case.

Instead:

1. If the package iptables-services is installed prior to running engine-setup, it will work as expected.
2. If iptables-services is not installed, a warning will be issued.
3. If only firewalld is installed and active (up), it will be selected automatically.
4. If firewalld is installed but not active, the user will be prompted to choose it. The user will be prompted, and have to type in an answer, even if firewalld is the only option, to help prevent breaking non-standard/manual/etc iptables/firewall setups.

All of the above applies, as before, only if the user accepts to automatically configure the firewall.

Result:

engine-setup, and the migration process, finish successfully, with a firewall manager configured, if possible and selected.
Sandro Bonazzola 2016-05-04 08:20:24 UTC Target Release --- 3.6.6.1
Jiri Belka 2016-05-09 17:07:02 UTC Status MODIFIED ON_QA
Status ON_QA VERIFIED
Sandro Bonazzola 2016-05-30 10:52:24 UTC Status VERIFIED CLOSED
Resolution --- CURRENTRELEASE
Last Closed 2016-05-30 06:52:24 UTC
Sandro Bonazzola 2017-05-11 09:25:27 UTC CC rhev-integ-dev

Back to bug 1332088