Bug 1039694

Summary: packstack fails if iptables.service is not available
Product: [Community] RDO Reporter: Lars Kellogg-Stedman <lars>
Component: openstack-packstackAssignee: Ivan Chavero <ichavero>
Status: CLOSED CURRENTRELEASE QA Contact: yeylon <yeylon>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: aortega, derekh, ichavero, srevivo, yeylon
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-packstack-2014.1.1-0.29.dev1251.fc21 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-03-30 23:05:42 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Lars Kellogg-Stedman 2013-12-09 19:42:09 UTC 
Description of problem:

Packstack fails to run on Fedora 19 if the iptables.service unit is not installed:

Error: Could not start Service[iptables]: Execution of '/sbin/service iptables start' returned 6: 
Error: /Stage[main]//Service[iptables]/ensure: change from stopped to running failed: Could not start Service[iptables]: Execution of '/sbin/service iptables start' returned 6: 

Which is because of:

# service iptables start
Redirecting to /bin/systemctl start  iptables.service
Failed to issue method call: Unit iptables.service failed to load: No such file or directory. See system logs and 'systemctl status iptables.service' for details.

Fedora 19 (and later) have replaced the legacy "iptables" service with "firewalld".

Version-Release number of selected component (if applicable):

openstack-packstack-2013.2.1-0.17.dev876.fc20.noarch
Comment 1 Alvaro Lopez Ortega 2014-01-15 13:33:08 UTC 

*** This bug has been marked as a duplicate of bug 1037635 ***
Comment 2 Lars Kellogg-Stedman 2014-05-05 14:03:54 UTC 
This is at least partially addressed by https://github.com/puppetlabs/puppetlabs-firewall/pull/338, but we should confirm behavior on current Fedora.
Comment 3 Ivan Chavero 2014-06-23 12:34:30 UTC 
in the latest packstack version we are actually disabling firewalld [1], iptables is suppoused to be installed, i'll test if this problem is currently happening



[1] https://github.com/stackforge/packstack/blob/master/packstack/puppet/templates/prescript.pp#L24