Bug 1780331

Summary: Firewalld service not enabled/running after RHV-H upgrade
Product: Red Hat Enterprise Virtualization Manager Reporter: Jaroslav Spanko <jspanko>
Component: imgbasedAssignee: Yuval Turgeman <yturgema>
Status: CLOSED ERRATA QA Contact: peyu
Severity: high Docs Contact:
Priority: high    
Version: 4.3.6CC: cshao, dfediuck, lsvaty, mavital, nlevy, pelauter, peyu, qiyuan, sbonazzo, sgoodman, shlei, weiwang, yaniwang, yturgema
Target Milestone: ovirt-4.3.8Keywords: ZStream
Target Release: 4.3.8   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: imgbased-1.1.14 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-02-13 15:43:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Node RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
imgbased none

Description Jaroslav Spanko 2019-12-05 17:22:13 UTC 
Description of problem:
Firewalld is not enabled after RHV-H upgrade in case of 3 layers where 1 layer has firewalld disabled, for example:

Layer 1
rhvh-4.0-0.20170307.0+1
----
systemctl is-enabled firewalld
disabled
----

Current layer
rhvh-4.3.0.7-0.20190512.0+1
------
systemctl is-enabled firewalld
enabled
------

Than upgrade to the latest version, first layer is removed but after yum update service is disabled
------
systemctl is-enabled firewalld
disabled
------

And after booting to the newest layer firewalld is not running

In the imgbased log is possible to see removing service because 1 layer has service disabled
-------
2019-12-04 14:32:32,659 [DEBUG] (fix_systemd_services) Removing /etc/systemd/system/multi-user.target.wants/firewalld.service
------

This is working fine in case of 2 layers.

Version-Release number of selected component (if applicable):
rhvh-4.3.6.5-0.20191108

How reproducible:
100%

Steps to Reproduce:
1. Have a host which have 2 layers and firewalld enabled/running on the current one
2. Upgrade host
3. Firewalld is not running/enabled

Actual results:
Firewalld is not running/enabled

Expected results:
Firewalld is not running/enabled

Additional info:
imgbased.log attached
Comment 1 Jaroslav Spanko 2019-12-05 17:26:03 UTC 
Created attachment 1642440 [details]
imgbased
Comment 3 peyu 2019-12-06 06:48:49 UTC 
I reproduced this issue.

Version-Release number of selected component (if applicable):
Layer 1: rhvh-4.2.7.5-0.20181121.0+1
Layer 2: rhvh-4.3.0.7-0.20190512.0+1
Latest Layer: rhvh-4.3.6.5-0.20191108.0+1

Steps to Reproduce:
1. Install RHVH-4.2-20181121.1-RHVH-x86_64-dvd1.iso and reboot
2. Login to RHVH and disable firewalld service
   # systemctl disable firewalld
   # systemctl is-enabled firewalld
3. Setup local repo and point to "redhat-virtualization-host-image-update-4.3-20190512.0.el7_6.noarch.rpm"
4. Upgrade RHVH to Layer 2
   # yum update
5. Reboot and login to Layer 2, check firewalld service and enable it
   # systemctl is-enabled firewalld
   # systemctl enable firewalld
   # systemctl is-enabled firewalld
6. Set local reop point to "redhat-virtualization-host-image-update-4.3.6-20191108.0.el7_7.noarch.rpm"
7. Upgrade RHVH to the Latest Layer
   # yum update
8. Reboot and login to the Latest Layer and check firewalld service:
   # systemctl is-enabled firewalld


Actual results:
firewalld is not running/enabled in the Latest Layer

Expected results:
firewalld is running/enabled in the Latest Layer
Comment 5 peyu 2019-12-23 03:46:32 UTC 
This bug was resolved in redhat-virtualization-host-4.3.8-20191219.0.el7_7

Version-Release number of selected component (if applicable):
Layer 1: rhvh-4.2.7.5-0.20181121.0+1
Layer 2: rhvh-4.3.0.7-0.20190512.0+1
Latest Layer: rhvh-4.3.8.1-0.20191219.0+1

Test steps:
1. Install RHVH-4.2-20181121.1-RHVH-x86_64-dvd1.iso and reboot
2. Login to RHVH and disable firewalld service
   # systemctl disable firewalld
   # systemctl is-enabled firewalld
3. Setup local repo and point to "redhat-virtualization-host-image-update-4.3-20190512.0.el7_6.noarch.rpm"
4. Upgrade RHVH to Layer 2
   # yum update
5. Reboot and login to Layer 2, check firewalld service and enable it
   # systemctl is-enabled firewalld
   # systemctl enable firewalld
   # systemctl is-enabled firewalld
6. Set local reop point to "redhat-virtualization-host-image-update-4.3.8-20191219.0.el7_7.noarch.rpm"
7. Upgrade RHVH to the Latest Layer
   # yum update
8. Reboot and login to the Latest Layer and check firewalld service:
   # systemctl is-enabled firewalld


Test results:
firewalld is running/enabled in the Latest Layer

So I move the bug status to "VERIFIED".
Comment 6 Steve Goodman 2020-02-06 10:21:05 UTC 
If this bug does not require documentation, please set the "requires_doc_text" flag to "-".

Otherwise, please supply doc text.
Comment 8 errata-xmlrpc 2020-02-13 15:43:12 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0503
Comment 9 Red Hat Bugzilla 2023-09-18 00:19:00 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days