Bug 1672683
| Summary: | [ebtables] build option breaks service firewalld | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Joachim Frieben <jfrieben> |
| Component: | ebtables | Assignee: | Tom "spot" Callaway <tcallawa> |
| Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | alciregi, awilliam, dhill, egarver, fzatlouk, jfrieben, jpopelka, robatino, tcallawa, twoerner |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | openqa AcceptedBlocker | ||
| Fixed In Version: | ebtables-2.0.10-31.fc30 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2019-02-22 19:02:48 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1574713 | ||
|
Description
Joachim Frieben
2019-02-05 16:02:41 UTC
This was also reported on freenode, but I was unable to reproduce. Can you downgrade ebtables and then retry? (In reply to Eric Garver from comment #1) 1. In order to reproduce this issue boot a recent live media, e.g. Fedora-Workstation-Live-x86_64-Rawhide-20190204.n.0, on bare metal or in gnome-boxes. After the GNOME desktop has come up (wired connection activated), log file /var/log/firewalld already shows the following entries: .. ERROR: '/usr/sbin/ebtables-restore --noflush' failed: Bad table name 'nat'. .. ERROR: '/usr/sbin/ebtables-restore --noflush' failed: Bad table name 'nat'. .. ERROR: COMMAND_FAILED: '/usr/sbin/ebtables-restore --noflush' failed: Bad table name 'nat'. .. ERROR: INVALID_ZONE 2. Downgrading package ebtables from ebtables-2.0.10-29.fc30 to ebtables-2.0.10-28.fc29 and restarting service "firewalld" restores normal operation. The last entry in the corresponding changelog reads: "* Mon Jan 21 2019 David Abdurachmanov <david abdurachmanov gmail com> 2.0.10-29 - Disable --as-needed to resolve segfaults". *** Bug 1673625 has been marked as a duplicate of this bug. *** I have no idea _why_ reverting to -28 would fix this, but I can confirm that it does. Searching shows that Ubuntu has this issue open as well: https://bugs.launchpad.net/ubuntu/+source/ebtables/+bug/1672276 ... which implicate their patch (to disable --as-needed in one place) that we applied in -29. So I got rid of that patch and simply disabled --as-needed everywhere in ebtables (%undefine _ld_as_needed) and that build works again. Rawhide build with fix: https://koji.fedoraproject.org/koji/taskinfo?taskID=32610662 (keep in mind that rawhide is really slowly tagging builds right now... very slowly) It's built now, please pull it out of koji and confirm that it fixes things for you. Build ebtables-2.0.10-31.fc30 restores normal operation of utility firewall-cmd. *** Bug 1674076 has been marked as a duplicate of this bug. *** Discussed during the 2019-02-11 blocker review meeting: [1] The decision to classify this bug as an AcceptedBlocker was made: "accepted as a blocker per Basic criterion "...Supported install-time firewall configuration options must work correctly."" [1] https://meetbot-raw.fedoraproject.org/fedora-blocker-review/2019-02-11/f30-blocker-review.2019-02-11-17.13.log.txt All firewall tests passed in last Rawhide compose test in openQA, so closing. |