Description of problem: During installation of Undercloud, if firewalld rpm is found, the Installer tries to remove firewalld and fails because of firewalld dependencies Version-Release number of selected component (if applicable): RHOS10 How reproducible: Installation of RHOS 10 undercloud using official repo present in official Documentation Steps to Reproduce: 1. Register the Undercloud using subscription-manager 2. run the command by stack user: $ sudo yum install -y python-tripleoclient 3. $ cp /usr/share/instack-undercloud/undercloud.conf.sample ~/undercloud.conf 4. $ openstack undercloud install Actual results: Failed installation with error 2017-02-01 15:26:41,112 INFO: 2017-02-01 15:26:41 - Error: Execution of '/bin/rpm -e firewalld-0.4.3.2-8.1.el7_3.noarch' returned 1: error: Failed dependencies: 2017-02-01 15:26:41,112 INFO: 2017-02-01 15:26:41 - firewalld >= 0.3.5-1 is needed by (installed) anaconda-core-21.48.22.93-1.el7.x86_64 2017-02-01 15:26:41,113 INFO: 2017-02-01 15:26:41 - firewalld = 0.4.3.2-8.1.el7_3 is needed by (installed) firewall-config-0.4.3.2-8.1.el7_3.noarch 2017-02-01 15:26:41,113 INFO: 2017-02-01 15:26:41 - Error: /Stage[main]/Main/Package[firewalld]/ensure: change from 0.4.3.2-8.1.el7_3 to absent failed: Execution of '/bin/rpm -e firewalld-0.4.3.2-8.1.el7_3.noarch' returned 1: error: Failed dependencies: 2017-02-01 15:26:41,113 INFO: 2017-02-01 15:26:41 - firewalld >= 0.3.5-1 is needed by (installed) anaconda-core-21.48.22.93-1.el7.x86_64 2017-02-01 15:26:41,114 INFO: 2017-02-01 15:26:41 - firewalld = 0.4.3.2-8.1.el7_3 is needed by (installed) firewall-config-0.4.3.2-8.1.el7_3.noarch 2017-02-01 16:05:17,204 INFO: 2017-02-01 16:05:17 - Warning: /Firewall[998 log all]: Skipping because of failed dependencies 2017-02-01 16:05:17,236 INFO: 2017-02-01 16:05:17 - Notice: /Firewall[999 drop all]: Dependency Package[firewalld] has failures: true 2017-02-01 16:05:17,256 INFO: 2017-02-01 16:05:17 - Warning: /Firewall[999 drop all]: Skipping because of failed dependencies 2017-02-01 16:05:18,939 INFO: 2017-02-01 16:05:18 - Notice: Finished catalog run in 2422.20 seconds 2017-02-01 16:05:43,224 INFO: + rc=6 2017-02-01 16:05:43,252 INFO: + set -e 2017-02-01 16:05:43,256 INFO: + echo 'puppet apply exited with exit code 6' 2017-02-01 16:05:43,257 INFO: puppet apply exited with exit code 6 2017-02-01 16:05:43,263 INFO: + '[' 6 '!=' 2 -a 6 '!=' 0 ']' 2017-02-01 16:05:43,263 INFO: + exit 6 2017-02-01 16:05:43,638 INFO: [2017-02-01 16:05:43,611] (os-refresh-config) [ERROR] during configure phase. [Command '['dib-run-parts', '/usr/libexec/os-refresh-config/configure.d']' returned non-zero exit status 1] 2017-02-01 16:05:43,642 INFO: 2017-02-01 16:05:43,651 INFO: [2017-02-01 16:05:43,643] (os-refresh-config) [ERROR] Aborting... Expected results: The Undercloud install should be seamless and should be completed successfully Additional info:
I am getting the same error on my system with the same scenario: 2017-02-07 15:19:29,420 INFO: 2017-02-07 15:19:29 - Notice: /Firewall[998 log all]: Dependency Package[firewalld] has failures: true 2017-02-07 15:19:29,423 INFO: 2017-02-07 15:19:29 - Warning: /Firewall[998 log all]: Skipping because of failed dependencies 2017-02-07 15:19:29,443 INFO: 2017-02-07 15:19:29 - Notice: /Firewall[999 drop all]: Dependency Package[firewalld] has failures: true 2017-02-07 15:19:29,448 INFO: 2017-02-07 15:19:29 - Warning: /Firewall[999 drop all]: Skipping because of failed dependencies 2017-02-07 15:19:31,020 INFO: 2017-02-07 15:19:31 - Notice: Finished catalog run in 409.89 seconds 2017-02-07 15:19:36,286 INFO: + rc=6 2017-02-07 15:19:36,286 INFO: + set -e 2017-02-07 15:19:36,287 INFO: + echo 'puppet apply exited with exit code 6' 2017-02-07 15:19:36,287 INFO: puppet apply exited with exit code 6 2017-02-07 15:19:36,287 INFO: + '[' 6 '!=' 2 -a 6 '!=' 0 ']' 2017-02-07 15:19:36,287 INFO: + exit 6 2017-02-07 15:19:36,287 INFO: [2017-02-07 15:19:36,287] (os-refresh-config) [ERROR] during configure phase. [Command '['dib-run-parts', '/usr/libexec/os-refresh-config/configure.d']' returned non-zero exit status 1] 2017-02-07 15:19:36,287 INFO: 2017-02-07 15:19:36,288 INFO: [2017-02-07 15:19:36,287] (os-refresh-config) [ERROR] Aborting...
firewalld is intentionally removed during undercloud install: /usr/share/instack-undercloud/puppet-stack-config/puppet-stack-config.pp ... 508 ensure_resource('package', 'firewalld', { 509 'ensure' => 'absent', 510 }) ... Looks like there's a dependency issue introduced when a system is installed graphically (as opposed to text). anaconda-core (graphical installer) gets installed and has a dependency of firewalld in its spec file. Removing anaconda-core (and its dependency anaconda-tui) should be OK once the OS is installed. After removing anaconda-core I was able to remove firewalld with rpm -e. Haven't tested the undercloud install after this, but I suspect it should succeed past this error. Will try to confirm this workaround shortly.
Thanks Andrew, I have removed few packages : anaconda-core, anaconda-tui, initial-setup-gui, anaconda-gui, and then I was able to remove the firewalld. Then I have run again the installation script which finished successfully - ############################################################################# Undercloud install complete. I believe this Bug can be closed now, but maybe you should mention in the instillation manual this limitation about Server-Gui issue. Igal
*** Bug 1458828 has been marked as a duplicate of this bug. ***
Verified on instack-undercloud-5.3.0-1.el7ost.noarch running install when anaconda-core is installed successfully installs and anaconda-core is removed when firewalld is removed
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1585