Hide Forgot
Description of problem: On a RHV-4.2, Install host in a 4.1 cluster fail. This is the event with the failure: Host host_mixed_2 installation failed. Failed to execute Ansible host-deploy role. Please check logs for more details: /var/log/ovirt-engine/host-deploy/ovirt-host-deploy-ansible-20181206133201-automation-cfme-08.lab.eng.tlv2.redhat.com-27c51b02.log. (attached) In this log, the indicated problem is: "VDSM version 4.19.51 is not supported for FirewallD." Version-Release number of selected component (if applicable): RHV-4.2-8-1 Steps to Reproduce: 1. Have a RHV 4.2 2. Add a Data center & a cluster, from compatibility 4.1 3. Prepare a host, installed with RHEL=7.5 & have rhv-4.1.11 repos, and install vdsm on it (vdsm-4.19.51-1.el7ev.x86_64) 4. Add this RHV-4.1 host to the 4.1 Cluster. 5. Host installation fail on the above error. Same result happen also if the Automatic firewall checkbox is not checked (which is the default). Expected results: A RHV-4.1 host installation should succeed in RHV-4.2.
Created attachment 1512109 [details] ovirt-host-deploy.log
Martin can you look into this?
The error is correct, firewalld support is not based on cluster level, but on VDSM version installed on the host. In RHVM 4.2 we are setting firewall type to firewalld by default for newly created datacenters with version greater than 4.0, because: 1. iptables has been deprecated on RHEL 7 and firewalld should be used instead 2. If you are using RHEL on the host, then this situation should not happen, because you should get VDSM from RHV 4.2 (all RHV 4.y hosts shares the same software channel) and that should support firewalld already 3. If you are using RHVH < 4.2 on the host, then you either need to use RHVH 4.2 (which can be added to clusters with version < 4.2 without any issues) or change firewall type of cluster back to iptables. *** This bug has been marked as a duplicate of bug 1517538 ***