Bug 1286719
Summary: | Generation of RHEL6-based Sahara image fails | ||
---|---|---|---|
Product: | Red Hat OpenStack | Reporter: | Luigi Toscano <ltoscano> |
Component: | sahara-image-elements | Assignee: | Elise Gafford <egafford> |
Status: | CLOSED ERRATA | QA Contact: | Luigi Toscano <ltoscano> |
Severity: | urgent | Docs Contact: | |
Priority: | urgent | ||
Version: | 7.0 (Kilo) | CC: | egafford, kbasil, matt, rbiba, rhos-maint |
Target Milestone: | z3 | Keywords: | Regression, ZStream |
Target Release: | 7.0 (Kilo) | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | sahara-image-elements-2015.1.0-5.el7ost | Doc Type: | Bug Fix |
Doc Text: |
In some base image contexts, iptables is not initialized prior to saving. As a consequence, the "service iptables save" command in the disable-firewall element fails. To fix this problem, the nondestructive "iptables -L" command has been added, which successfully initializes iptables, As a result, image generation now succeeds.
|
Story Points: | --- |
Clone Of: | 1286276 | Environment: | |
Last Closed: | 2015-12-21 17:09:08 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1286276 | ||
Bug Blocks: |
Description
Luigi Toscano
2015-11-30 15:14:35 UTC
So, the bug appears also on the RHEL-OSP7 environment, I guess it's something related to a change in RHEL 7.2 then. To be more precise: reproduced with $ sahara-disk-image-create -p hdp on RHEL 7.2, package: sahara-image-elements-2015.1.0-4.el7ost.noarch This bug is not presently reproducible for me on RHEL 7.2 with any plugin and version combination supported by either of the present packages for RHOS 7 and RHOS 8. I see """ + which service /sbin/service + service iptables save iptables: Saving firewall rules to /etc/sysconfig/iptables: ^[[60G[^[[0;32m OK ^[[0;39m]^M + chkconfig iptables off """ which is more to be expected. I've tried this on RHEL 7.2, and have also tried limiting the enabled repos to only those required by the installation, in case a repository enabled with my employee sub was providing a corrective package. I'll discuss this with you tomorrow when you're in, and ensure I'm using the precise same host- and guest- level repository sets as you are to attempt to reproduce. The host which I used is a guest image (rhel-guest-image) running as instance in an openstack system. The instance was originally 7.1 for the RHEL-OSP7 bug; 7.2 for the RHEL-OSP8 version, but both instances have been updated to the latest 7.2.z version. Maybe something in the way this kind of image boots does not initialize the tables and the first run ever of "save" does not work because of this. As I mentioned, running "iptables -L" at least once makes the error go away, so I suspect it simply initializes/loads what was missing. Possible tests: - try a guest image from KVM and from another openstack environment - try a non guest-image With the workaround applied, the images are now properly generated on RHEL 7.2 (both "hdp" and "cloudera"). sahara-image-elements-2015.1.0-5.el7ost.noarch diskimage-builder-0.1.46-4.el7ost.noarch dib-utils-0.0.9-1.el7ost.noarch Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2015:2674 |