Doc Text:
|
Cause:
When running engine-setup, as part of migration from el6 to el7, if the backed up engine was configured to automatically configure iptables, and the package 'iptables-services' was not installed on the target el7 machine, and the user accepted the choice to automatically configure the firewall, engine-setup failed.
Consequence:
It was not possible to finish the migration process without some manual action.
Fix:
engine-setup was changed to not fail in this case.
Instead:
1. If the package iptables-services is installed prior to running engine-setup, it will work as expected.
2. If iptables-services is not installed, a warning will be issued.
3. If only firewalld is installed and active (up), it will be selected automatically.
4. If firewalld is installed but not active, the user will be prompted to choose it. The user will be prompted, and have to type in an answer, even if firewalld is the only option, to help prevent breaking non-standard/manual/etc iptables/firewall setups.
All of the above applies, as before, only if the user accepts to automatically configure the firewall.
Result:
engine-setup, and the migration process, finish successfully, with a firewall manager configured, if possible and selected.
|