Bug 1780331 - Firewalld service not enabled/running after RHV-H upgrade
Summary: Firewalld service not enabled/running after RHV-H upgrade
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: imgbased
Version: 4.3.6
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ovirt-4.3.8
: 4.3.8
Assignee: Yuval Turgeman
QA Contact: peyu
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-12-05 17:22 UTC by Jaroslav Spanko
Modified: 2023-09-18 00:19 UTC (History)
14 users (show)

Fixed In Version: imgbased-1.1.14
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-02-13 15:43:12 UTC
oVirt Team: Node
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
imgbased (3.51 MB, text/plain)
2019-12-05 17:26 UTC, Jaroslav Spanko
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2020:0503 0 None None None 2020-02-13 15:43:27 UTC
oVirt gerrit 105413 0 master MERGED osupdater: use current layer only in remediate_etc 2020-12-06 16:44:14 UTC
oVirt gerrit 105446 0 ovirt-4.3 MERGED osupdater: use current layer only in remediate_etc 2020-12-06 16:44:41 UTC

Description Jaroslav Spanko 2019-12-05 17:22:13 UTC
Description of problem:
Firewalld is not enabled after RHV-H upgrade in case of 3 layers where 1 layer has firewalld disabled, for example:

Layer 1
rhvh-4.0-0.20170307.0+1
----
systemctl is-enabled firewalld
disabled
----

Current layer
rhvh-4.3.0.7-0.20190512.0+1
------
systemctl is-enabled firewalld
enabled
------

Than upgrade to the latest version, first layer is removed but after yum update service is disabled
------
systemctl is-enabled firewalld
disabled
------

And after booting to the newest layer firewalld is not running

In the imgbased log is possible to see removing service because 1 layer has service disabled
-------
2019-12-04 14:32:32,659 [DEBUG] (fix_systemd_services) Removing /etc/systemd/system/multi-user.target.wants/firewalld.service
------

This is working fine in case of 2 layers.

Version-Release number of selected component (if applicable):
rhvh-4.3.6.5-0.20191108

How reproducible:
100%

Steps to Reproduce:
1. Have a host which have 2 layers and firewalld enabled/running on the current one
2. Upgrade host
3. Firewalld is not running/enabled

Actual results:
Firewalld is not running/enabled

Expected results:
Firewalld is not running/enabled

Additional info:
imgbased.log attached

Comment 1 Jaroslav Spanko 2019-12-05 17:26:03 UTC
Created attachment 1642440 [details]
imgbased

Comment 3 peyu 2019-12-06 06:48:49 UTC
I reproduced this issue.

Version-Release number of selected component (if applicable):
Layer 1: rhvh-4.2.7.5-0.20181121.0+1
Layer 2: rhvh-4.3.0.7-0.20190512.0+1
Latest Layer: rhvh-4.3.6.5-0.20191108.0+1

Steps to Reproduce:
1. Install RHVH-4.2-20181121.1-RHVH-x86_64-dvd1.iso and reboot
2. Login to RHVH and disable firewalld service
   # systemctl disable firewalld
   # systemctl is-enabled firewalld
3. Setup local repo and point to "redhat-virtualization-host-image-update-4.3-20190512.0.el7_6.noarch.rpm"
4. Upgrade RHVH to Layer 2
   # yum update
5. Reboot and login to Layer 2, check firewalld service and enable it
   # systemctl is-enabled firewalld
   # systemctl enable firewalld
   # systemctl is-enabled firewalld
6. Set local reop point to "redhat-virtualization-host-image-update-4.3.6-20191108.0.el7_7.noarch.rpm"
7. Upgrade RHVH to the Latest Layer
   # yum update
8. Reboot and login to the Latest Layer and check firewalld service:
   # systemctl is-enabled firewalld


Actual results:
firewalld is not running/enabled in the Latest Layer

Expected results:
firewalld is running/enabled in the Latest Layer

Comment 5 peyu 2019-12-23 03:46:32 UTC
This bug was resolved in redhat-virtualization-host-4.3.8-20191219.0.el7_7

Version-Release number of selected component (if applicable):
Layer 1: rhvh-4.2.7.5-0.20181121.0+1
Layer 2: rhvh-4.3.0.7-0.20190512.0+1
Latest Layer: rhvh-4.3.8.1-0.20191219.0+1

Test steps:
1. Install RHVH-4.2-20181121.1-RHVH-x86_64-dvd1.iso and reboot
2. Login to RHVH and disable firewalld service
   # systemctl disable firewalld
   # systemctl is-enabled firewalld
3. Setup local repo and point to "redhat-virtualization-host-image-update-4.3-20190512.0.el7_6.noarch.rpm"
4. Upgrade RHVH to Layer 2
   # yum update
5. Reboot and login to Layer 2, check firewalld service and enable it
   # systemctl is-enabled firewalld
   # systemctl enable firewalld
   # systemctl is-enabled firewalld
6. Set local reop point to "redhat-virtualization-host-image-update-4.3.8-20191219.0.el7_7.noarch.rpm"
7. Upgrade RHVH to the Latest Layer
   # yum update
8. Reboot and login to the Latest Layer and check firewalld service:
   # systemctl is-enabled firewalld


Test results:
firewalld is running/enabled in the Latest Layer

So I move the bug status to "VERIFIED".

Comment 6 Steve Goodman 2020-02-06 10:21:05 UTC
If this bug does not require documentation, please set the "requires_doc_text" flag to "-".

Otherwise, please supply doc text.

Comment 8 errata-xmlrpc 2020-02-13 15:43:12 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0503

Comment 9 Red Hat Bugzilla 2023-09-18 00:19:00 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days


Note You need to log in before you can comment on or make changes to this bug.