Bug 2401676
| Summary: | Updating from F42 -> F43 disables the nftables systemd service | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Joe Walker <joe.c.walker0> |
| Component: | nftables | Assignee: | Kevin Fenzi <kevin> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | low | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 43 | CC: | awilliam, joe.c.walker0, kevin, psutter, zbyszek |
| Target Milestone: | --- | Keywords: | CommonBugs, Regression, Upgrades |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | https://discussion.fedoraproject.org/t/170288 | ||
| Fixed In Version: | nftables-1.1.3-6.fc43 | Doc Type: | --- |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2026-01-17 00:48:37 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Joe Walker
2025-10-05 16:44:01 UTC
I guess neither myself or Phil had this one on our radar. ;( Sorry about that. Yes, I think its due to the service moving to another package and using the initial state there. I'm not fully sure of the best solution. Possibly we can just add it to presets (There are no rules by default, so it's just a noop) but that means it shows as enabled when lots of people aren't using it. Or some more complex scriptlets to see if we can tell if the old one was enabled on new install? Adding system maintainer for input. Can you do something like this in in post ... %if %(systemctl -q is-enabled nftables.service) systemctl enable nftables.service %else %systemd_post nftables.service %endif (In reply to grumpey0 from comment #2) > Can you do something like this in in post ... > > %if %(systemctl -q is-enabled nftables.service) > systemctl enable nftables.service > %else > %systemd_post nftables.service > %endif No that I think about I don't think this will work. Apologies for the noise. %post services if [ $1 -eq 1 ] && [[ -h /etc/systemd/system/multi-user.target.wants/nftables.service ]]; then echo "nftables.service is already enabled" else %systemd_post nftables.service fi This looks like it works testing from the everything iso in a VM. So, does that work for the dist upgrade case tho? ie, you have a f42 install with nftables enabled and then dist-upgrade to f43... It did using a COPR,https://copr.fedorainfracloud.org/coprs/grumpey/nftables-test/ With the 42 everything iso, and doing a dnf system-upgrade download and dnf offline reboot. humf. Well, I don't really like that, but it seems the least bad way to do it. So, thanks for that... I adjusted it some and submitted a PR on it ( https://src.fedoraproject.org/rpms/nftables/pull-request/6 ) Can you test this one? FEDORA-2026-9ff8265724 (nftables-1.1.3-6.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-9ff8265724 FEDORA-2026-9ff8265724 has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-9ff8265724` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-9ff8265724 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-9ff8265724 (nftables-1.1.3-6.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report. |