Bug 1148426
Summary: | Using the Juno RDO packstack --allinone fails trying to remove firewalld-0.3.11-3.fc20.noarch | ||
---|---|---|---|
Product: | [Community] RDO | Reporter: | Sean Toner <stoner> |
Component: | openstack-puppet-modules | Assignee: | Ivan Chavero <ichavero> |
Status: | CLOSED DUPLICATE | QA Contact: | Ami Jeain <ajeain> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | unspecified | CC: | aortega, apevec, derekh, lars, mruckman, rbowen, whayutin, yeylon |
Target Milestone: | Milestone3 | Keywords: | ZStream |
Target Release: | Juno | ||
Hardware: | Unspecified | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2014-10-23 18:58:11 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Sean Toner
2014-10-01 12:39:25 UTC
I am experiencing this same problem on CentOS7 > Error: /Stage[main]/Firewall::Linux::Redhat/Package[firewalld]/ensure: > change from 0.3.11-3.fc20 to absent failed: Execution of '/usr/bin/rpm -e > firewalld-0.3.11-3.fc20.noarch' returned 1: error: Failed dependencies: > firewalld >= 0.3.5-1 is needed by (installed) > anaconda-20.25.16-1.fc20.x86_64 > firewalld = 0.3.11-3.fc20 is needed by (installed) > firewall-config-0.3.11-3.fc20.noarch So this is in puppet firewall module, Packstack just disables firewalld in templates/prescript.pp: service { "firewalld": ensure => "stopped", enable => false, before => Service['iptables'], } I'm not sure why is puppet module going for nuclear option. > I can manually work around this by issuing `yum remove firewalld` which will > remove the anaconda dependency as well That's a general issue with RPM handling in puppet package provider, AFAICT it tries to be RPM-distro agnostic by using rpm as the common lowest-level tool but that fails miserably like here due to dependencies or that it doesn't handle provides... > I'm not sure why is puppet module going for nuclear option. It's from https://github.com/puppetlabs/puppetlabs-firewall/commit/ad961d79e433bf65ca8ff42bad89d00f6d127436 Lars, I saw you worked on puppetlabs-firewall, do you know why is firewalld _package removal_ required? Isn't firewalld service disabling like in Packstack enough? I think that simply disabling it may lead to unexpected problems if someone were to accidentally enable it, or run it, or whatever. We get enough firewall-related problem reports as it is. It's not something I feel strongly about, though. (In reply to Rich Bowen from comment #2) > I am experiencing this same problem on CentOS7 me too. Workaround solution. sudo yum remove firewalld Then re-run packstack with the same answer file. packstack --answer-file=<generated packstack file> Same thing on F21. Pastes of logs: prescript.pp.log - http://paste.fedoraproject.org/138578/22663401/ setup.log - http://paste.fedoraproject.org/138577/14122663/ stdout - http://paste.fedoraproject.org/138585/22667921/ recreated on f21.. *** This bug has been marked as a duplicate of bug 1148399 *** |