Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1483302

Summary: Functional tests "test_firewall.FirewallTestCase" fail after switching to RHEL 7.4
Product: Red Hat OpenStack Reporter: Arie Bregman <abregman>
Component: openstack-neutronAssignee: Jakub Libosvar <jlibosva>
Status: CLOSED DUPLICATE QA Contact: Toni Freger <tfreger>
Severity: high Docs Contact:
Priority: medium    
Version: 11.0 (Ocata)CC: amuller, chrisw, nyechiel, srevivo
Target Milestone: ---Keywords: AutomationBlocker, Triaged, ZStream
Target Release: 11.0 (Ocata)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-09-18 15:36:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Arie Bregman 2017-08-20 09:07:06 UTC
The following tests fail after switching from RHEL 7.3 to RHEL 7.4

*neutron.tests.functional.agent.test_firewall.FirewallTestCase.test_dhcp_server_forbidden_on_vm(IptablesFirewallDriver,without ipset)
*neutron.tests.functional.agent.test_firewall.FirewallTestCase.test_ingress_icmp_secgroup(IptablesFirewallDriver,with ipset)

This is *probably* happening because iptables-1.4.21-18.el7.x86_64 (which installed with RHEL 7.4 but not former releases) introduced new file lock mechanism that used by all iptables commands. To adjust current commands to new iptables, we probably need to add "--wait" so the execution will wait for the lock instead of existing.

Version-Release number of selected component (if applicable): 

openstack-neutron-7.2.0-12.1.el7ost.noarch
openstack-neutron-common-7.2.0-12.1.el7ost.noarch
openstack-neutron-openvswitch-7.2.0-12.1.el7ost.noarch

How reproducible: 100%


Steps to Reproduce:
1. Clone neutron repository
2. Run functional tests (tox -e dsvm-functional)

Actual results: tests failed


Expected results: tests passed successfully


Additional info: fails on RHEL 7.4 only

Comment 2 Assaf Muller 2017-09-06 13:46:36 UTC
Jakub will take a look.

Also possible it's happening on 12.

Comment 3 Jakub Libosvar 2017-09-18 15:36:16 UTC

*** This bug has been marked as a duplicate of bug 1489069 ***