Bug 2295402

Summary: Failed to load /etc/firewalld/firewall.conf
Product: Red Hat OpenStack Reporter: Kenny Tordeurs <ktordeur>
Component: openstack-tripleo-heat-templatesAssignee: Lukas Bezdicka <lbezdick>
Status: CLOSED ERRATA QA Contact: Archana Singh <arcsingh>
Severity: high Docs Contact:
Priority: high    
Version: 17.1 (Wallaby)CC: bshephar, enothen, jbadiapa, jelle.hoylaerts.ext, jpretori, kgilliga, lbezdick, madgupta, mariel, mburns, wreiner
Target Milestone: z4Keywords: Reopened, Triaged
Target Release: 17.1   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-14.3.1-17.1.20240919130751.e7c7ce3.el9ost Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-11-21 09:30:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Kenny Tordeurs 2024-07-03 12:35:16 UTC
Description of problem:
Firewalld is not installed if you come from an older OSP version and RHEL version and have been upgrading along the way.

Version-Release number of selected component (if applicable):
16.2 > 17.1

How reproducible:
100%

Steps to Reproduce:
1. # openstack undercloud upgrade --yes --system-upgrade ~/osp17.1_upgrade/system_upgrade.yaml
2.
3.

Actual results:
"ERROR: Failed to load '/etc/firewalld/firewall

lld.conf': [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'\nWARNING: [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'\nWARNING: Using fallback firew

alld configuration settings.\nERROR: No icmptypes found.\nERROR: No services found.\nFATAL ERROR: Zone 'block' is not available.\nFATAL ERROR: Zone 'drop' is not available.\nFATAL ERROR: Zo

ne 'trusted' is not available.\n\n\n====================================================================================================================\nActor firewalld_collect_used_object

_names unexpectedly terminated with exit code: 1 - Please check the above details\n==========================================================================================================

==========", "stderr_lines": ["ERROR: Failed to load '/etc/firewalld/firewalld.conf': [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'", "WARNING: [Errno 2] No such file

 or directory: '/etc/firewalld/firewalld.conf'", "WARNING: Using fallback firewalld configuration settings.", "ERROR: No icmptypes found.", "ERROR: No services found.", "FATAL ERROR: Zone '

block' is not available.", "FATAL ERROR: Zone 'drop' is not available.", "FATAL ERROR: Zone 'trusted' is not available."
Expected results:
no errors

Additional info:
Solution: Install firewalld on director
# sudo dnf install -y firewalld
# sudo systemctl disabled --now firewalld

Comment 34 errata-xmlrpc 2024-11-21 09:30:34 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: RHOSP 17.1.4 (openstack-tripleo-heat-templates) security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2024:9978

Comment 35 Eric Nothen 2024-12-04 08:04:42 UTC
Pre 17.1.4 workaround: remove rpm python3-firewall from the undercloud