Bug 1499367
| Summary: | ip6tables.service unit file has invalid value for After= | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Micah Abbott <miabbott> | |
| Component: | iptables | Assignee: | Phil Sutter <psutter> | |
| Status: | CLOSED ERRATA | QA Contact: | Tomas Dolezal <todoleza> | |
| Severity: | urgent | Docs Contact: | ||
| Priority: | urgent | |||
| Version: | 7.4 | CC: | ajb, devel, h1k6zn2m, herrold, h.reindl, ian, iptables-maint-list, misterbonnie, nicolas, pasik, pasteur, phil, psutter, ptalbert, redhat-bugzilla, robert.scheck, shyam.biradar, stefanp, todoleza | |
| Target Milestone: | rc | Keywords: | Regression, ZStream | |
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | iptables-1.4.21-23.el7 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 1538549 (view as bug list) | Environment: | ||
| Last Closed: | 2018-04-10 11:28:02 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 1538549 | |||
|
Description
Micah Abbott
2017-10-06 20:17:32 UTC
I edited the ip6tables.service file with the new value for 'After=' and put it in /etc/systemd/system # cat /etc/systemd/system/ip6tables.service [Unit] Description=IPv6 firewall with ip6tables After=syslog.target iptables.service AssertPathExists=/etc/sysconfig/ip6tables [Service] Type=oneshot RemainAfterExit=yes ExecStart=/usr/libexec/iptables/ip6tables.init start ExecReload=/usr/libexec/iptables/ip6tables.init reload ExecStop=/usr/libexec/iptables/ip6tables.init stop Environment=BOOTUP=serial Environment=CONSOLETYPE=serial StandardOutput=syslog StandardError=syslog [Install] WantedBy=basic.target When I did 'systemctl daemon-reload', the error previously found in the journal did not occur. Hi Micah, Thanks for reporting. Strangely, this error message doesn't occur when both units are restarted at the same time using 'systemctl restart iptables ip6tables'. Anyway, the fix is trivial. This probably should be added to 7.4.z as well since it contains the same piece of code. Thanks, Phil Cross-filed ticket 01903155 on the Red Hat customer portal. *** Bug 1504647 has been marked as a duplicate of this bug. *** I've just seen it in oVirt (RHV downstream). This issue has been addressed as follow-up fix to Bug 1486803. Proposing this bug for z-stream. *** Bug 1505043 has been marked as a duplicate of this bug. *** Hi, How we I get this fix? We have updated our packages to latest on RHEL7.4 and still we have issue on our system. We still have 1.4.21 version of iptables-services package. Installed Packages Name : iptables-services Arch : x86_64 Version : 1.4.21 Release : 18.2.el7_4 Size : 25 k Repo : installed From repo : rhel-7-server-rpms Summary : iptables and ip6tables services for iptables URL : http://www.netfilter.org/ License : GPLv2 Description : iptables services for IPv4 and IPv6 : : This package provides the services iptables and ip6tables that have been split : out of the base package since they are not active by default anymore. just edit the unit file in the meantime and there is no good reason to clone it to /etc because that would prevent future updates hopefully the guys at redhat become some basic education about their own operating system - that's at least the third time some crap makes it into unit files where the one which did the change didn't systemctl daemon-reload and read his sys logs before put it into a package and every bug at RHEL/CentOS takes ages to get fixed @Phil Sutter "Strangely, this error message doesn't occur when both units are restarted at the same time using 'systemctl restart iptables ip6tables'" are you kidding me? units are reloaded with "systemctl daemon-reload" and then the warning fires while "systemctl restart" only complains when the unit on disk was changed since the last reload which is a differnt story you guys please learn grep your syslogs for "error", "alert" and "warn" after changes and before appy them to packages which would reduce the number of bugs and reports [root@srv-rhsoft:~]$ cat /scripts/system-errors.sh #!/usr/bin/bash dmesg | grep -i warn dmesg | grep -i fail dmesg | grep -i error cat /var/log/messages | grep -i warn cat /var/log/messages | grep -i fail cat /var/log/messages | grep -i error Thanks Herald. I know workaround, but I was looking for solution from upstream. But looks like it is not in the release yet. Thanks Herald. I know workaround, but I was looking for solution from upstream. But looks like it is not in the release yet. Thanks Herald. I know workaround, but I was looking for solution from upstream. But looks like it is not in the release yet. *** Bug 1541501 has been marked as a duplicate of this bug. *** Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2018:0715 |