Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Description of problem:
As in bug 1145454, I'm using kickstart from RHEL 7.0 ages to install trully minimal VM. It crashes because /usr/bin/firewall-offline-cmd is missing.
As in bug 1145454, I think that Anaconda should skip firewall configuration when firewalld is not installed.
Version-Release number of selected component:
anaconda-19.31.91-1
The following was filed automatically by anaconda:
anaconda 19.31.91-1 exception report
Traceback (most recent call first):
File "/usr/lib64/python2.7/site-packages/pyanaconda/kickstart.py", line 636, in execute
raise KickstartError(msg)
File "/usr/lib64/python2.7/site-packages/pyanaconda/install.py", line 85, in doConfiguration
ksdata.firewall.execute(storage, ksdata, instClass)
File "/usr/lib64/python2.7/threading.py", line 764, in run
self.__target(*self.__args, **self.__kwargs)
File "/usr/lib64/python2.7/site-packages/pyanaconda/threads.py", line 211, in run
threading.Thread.run(self, *args, **kwargs)
KickstartError: /usr/bin/firewall-offline-cmd is missing. Cannot setup firewall.
Additional info:
cmdline: /usr/bin/python /sbin/anaconda
cmdline_file: inst.sshd dhcpclass=ipa-lab-vms ks=http://gordo.idm.lab.bos.redhat.com/cblr/svc/op/ks/profile/RHEL-7-nightly-x86_64-minimal-brq
executable: /sbin/anaconda
hashmarkername: anaconda
kernel: 3.10.0-160.el7.x86_64
product: Red Hat Enterprise Linux
release: Red Hat Enterprise Linux ComputeNode release 7.0 (Maipo)
release_type: pre-release
type: anaconda
version: 7.0
You asked for firewall config in your kickstart file. This is consistent with other kickstart behavior - if you ask for partitioning we can't do, anaconda fails. We can maybe clean up the traceback so it looks more like an error, but it needs to stay an error. What if you are relying on the firewall setup to be just so for post-install? That could be a nasty surprise.
Ah, okay. I was confused by fact that it worked in the past.
To be sure: It is supposed to work if I omit "firewall --enabled --port=22:tcp" line from kickstart, right?
> Ah, okay. I was confused by fact that it worked in the past.
>
> To be sure: It is supposed to work if I omit "firewall --enabled
> --port=22:tcp" line from kickstart, right?
You may need to add "firewall --disabled" instead. anaconda does set up a default firewall regardless.
Okay, can you please retest with the latest trees? We've got a patch in now that should have the firewall package installed if you reference the firewall command in your kickstart file (and same for authconfig). See bug 1147867.