Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (nmstate bug fix and enhancement update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHBA-2021:1748
Description of problem: Got failure when change bridge multicast-snooping from false to true Version-Release number of selected component (if applicable): nmstate-0.3.3-2.el8.noarch NetworkManager-1.26.0-0.2.1.el8.x86_64 DISTRO=RHEL-8.3.0-20200709.n.0 Linux hpe-dl380pgen8-02-vm-7.hpe2.lab.eng.bos.redhat.com 4.18.0-223.el8.x86_64 #1 SMP Tue Jul 7 12:56:57 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux How reproducible: Very high Steps to Reproduce: 1. See "Additional info" 2. 3. Actual results: Fail Expected results: No failure Additional info: See reproducer: # bridge_traffic_test ip netns add client ip netns add server ip link add veth0_c type veth peer name veth0_c_p ip link add veth0_s type veth peer name veth0_s_p ip link set veth0_c_p netns client ip link set veth0_s_p netns server ip netns exec client ip link set lo up ip netns exec client ip link set veth0_c_p up ip netns exec client ip addr add 192.168.0.1/24 dev veth0_c_p ip netns exec client ip addr add 2000::1/64 dev veth0_c_p ip netns exec server ip link set lo up ip netns exec server ip link set veth0_s_p up ip netns exec server ip addr add 192.168.0.2/24 dev veth0_s_p ip netns exec server ip -6 addr add 2000::2/64 dev veth0_s_p nmcli device set veth0_c managed yes nmcli device set veth0_s managed yes cat > br_test.yaml << EOF --- interfaces: - name: veth0_c type: ethernet state: up ipv4: enabled: false ipv6: enabled: false mtu: 1500 - name: veth0_s type: ethernet state: up ipv4: enabled: false ipv6: enabled: false mtu: 1500 - name: br_test type: linux-bridge description: br_test state: up bridge: options: group-forward-mask: 0 mac-ageing-time: 300 multicast-snooping: true stp: enabled: false forward-delay: 15 hello-time: 2 max-age: 20 priority: 32768 port: - name: veth0_c stp-hairpin-mode: false stp-path-cost: 100 stp-priority: 32 - name: veth0_s stp-hairpin-mode: false stp-path-cost: 100 stp-priority: 32 ipv4: dhcp: false enabled: true address: - ip: 192.168.0.254 prefix-length: 24 ipv6: dhcp: false enabled: true address: - ip: 2000::a prefix-length: 64 mac-address: AA:CF:A8:2D:6A:48 mtu: 1500 EOF # repeat the commands below to reproduce: sed 's/multicast-snooping: true/multicast-snooping: false/' br_test.yaml | nmstatectl set sleep 2 nmstatectl set br_test.yaml # error log: 2020-07-09 14:25:15,843 root DEBUG Async action: Create checkpoint started 2020-07-09 14:25:15,848 root DEBUG Checkpoint None created for all devices 2020-07-09 14:25:15,848 root DEBUG Async action: Create checkpoint finished 2020-07-09 14:25:15,851 root DEBUG Async action: Update profile: br_test started 2020-07-09 14:25:15,852 root DEBUG Async action: Update profile: veth0_c started 2020-07-09 14:25:15,853 root DEBUG Async action: Update profile: veth0_s started 2020-07-09 14:25:15,856 root DEBUG Async action: Update profile: br_test finished 2020-07-09 14:25:15,858 root DEBUG Async action: Update profile: veth0_c finished 2020-07-09 14:25:15,860 root DEBUG Async action: Update profile: veth0_s finished 2020-07-09 14:25:15,860 root DEBUG Async action: Reapply device config: br_test started 2020-07-09 14:25:15,862 root DEBUG Device reapply failed on br_test: error=nm-device-error-quark: Can't reapply any changes to 'bridge' setting (3) Fallback to device activation 2020-07-09 14:25:15,863 root DEBUG Async action: Activate profile: br_test started 2020-07-09 14:25:15,870 root DEBUG Connection activation initiated: dev=br_test, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState> 2020-07-09 14:25:15,927 root DEBUG Connection activation succeeded: dev=br_test, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_IP_CONFIG of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_MASTER | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_MASTER_HAS_SLAVES of type NM.ActivationStateFlags> 2020-07-09 14:25:15,928 root DEBUG Async action: Activate profile: br_test finished 2020-07-09 14:25:15,956 root DEBUG Async action: Activate profile: veth0_c started 2020-07-09 14:25:15,968 root DEBUG Async action: Activate profile: veth0_s started 2020-07-09 14:25:15,970 root DEBUG Connection activation initiated: dev=veth0_c, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState> 2020-07-09 14:25:15,994 root DEBUG Connection activation succeeded: dev=veth0_c, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATED of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_ACTIVATED of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_SLAVE | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_IP4_READY | NM_ACTIVATION_STATE_FLAG_IP6_READY of type NM.ActivationStateFlags> 2020-07-09 14:25:15,994 root DEBUG Async action: Activate profile: veth0_c finished 2020-07-09 14:25:15,995 root DEBUG Connection activation initiated: dev=veth0_s, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState> 2020-07-09 14:25:16,019 root DEBUG Connection activation succeeded: dev=veth0_s, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATED of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_ACTIVATED of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_SLAVE | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_IP4_READY | NM_ACTIVATION_STATE_FLAG_IP6_READY of type NM.ActivationStateFlags> 2020-07-09 14:25:16,019 root DEBUG Async action: Activate profile: veth0_s finished 2020-07-09 14:25:21,320 root DEBUG Async action: Rollback to checkpoint /org/freedesktop/NetworkManager/Checkpoint/36 started 2020-07-09 14:25:21,358 root DEBUG Checkpoint /org/freedesktop/NetworkManager/Checkpoint/36 rollback executed 2020-07-09 14:25:21,359 root DEBUG Async action: Waiting for rolling back veth0_c started 2020-07-09 14:25:21,359 root DEBUG Interface veth0_c rollback succeeded 2020-07-09 14:25:21,359 root DEBUG Async action: Waiting for rolling back veth0_s started 2020-07-09 14:25:21,359 root DEBUG Interface veth0_s rollback succeeded 2020-07-09 14:25:21,359 root DEBUG Async action: Waiting for rolling back br_test started 2020-07-09 14:25:21,359 root DEBUG Interface br_test rollback succeeded 2020-07-09 14:25:21,359 root DEBUG Interface lo rollback succeeded 2020-07-09 14:25:21,360 root DEBUG Interface ens3 rollback succeeded 2020-07-09 14:25:21,360 root DEBUG Async action: Rollback to checkpoint /org/freedesktop/NetworkManager/Checkpoint/36 finished 2020-07-09 14:25:21,373 root DEBUG Active connection of device None has been replaced 2020-07-09 14:25:21,416 root DEBUG Active connection of device None has been replaced 2020-07-09 14:25:21,417 root DEBUG Connection activation succeeded: dev=br_test, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_IP_CONFIG of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_MASTER | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_MASTER_HAS_SLAVES of type NM.ActivationStateFlags> 2020-07-09 14:25:21,418 root DEBUG Async action: Waiting for rolling back br_test finished 2020-07-09 14:25:21,418 root DEBUG Active connection of device None has been replaced 2020-07-09 14:25:21,447 root DEBUG Connection activation succeeded: dev=veth0_c, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATED of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_ACTIVATED of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_SLAVE | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_IP4_READY | NM_ACTIVATION_STATE_FLAG_IP6_READY of type NM.ActivationStateFlags> 2020-07-09 14:25:21,448 root DEBUG Async action: Waiting for rolling back veth0_c finished 2020-07-09 14:25:21,503 root DEBUG Connection activation succeeded: dev=veth0_s, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATED of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_ACTIVATED of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_SLAVE | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_IP4_READY | NM_ACTIVATION_STATE_FLAG_IP6_READY of type NM.ActivationStateFlags> 2020-07-09 14:25:21,503 root DEBUG Async action: Waiting for rolling back veth0_s finished Traceback (most recent call last): File "/usr/bin/nmstatectl", line 11, in <module> load_entry_point('nmstate==0.3.3', 'console_scripts', 'nmstatectl')() File "/usr/lib/python3.6/site-packages/nmstatectl/nmstatectl.py", line 67, in main return args.func(args) File "/usr/lib/python3.6/site-packages/nmstatectl/nmstatectl.py", line 256, in apply args.save_to_disk, File "/usr/lib/python3.6/site-packages/nmstatectl/nmstatectl.py", line 289, in apply_state save_to_disk=save_to_disk, File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 71, in apply _apply_ifaces_state(plugins, net_state, verify_change, save_to_disk) File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 115, in _apply_ifaces_state _verify_change(plugins, net_state) File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 120, in _verify_change net_state.verify(current_state) File "/usr/lib/python3.6/site-packages/libnmstate/net_state.py", line 63, in verify self._ifaces.verify(current_state.get(Interface.KEY)) File "/usr/lib/python3.6/site-packages/libnmstate/ifaces/ifaces.py", line 308, in verify cur_iface.state_for_verify(), libnmstate.error.NmstateVerificationError: desired ======= --- name: br_test type: linux-bridge state: up bridge: options: group-forward-mask: 0 mac-ageing-time: 300 multicast-snooping: true stp: enabled: false forward-delay: 15 hello-time: 2 max-age: 20 priority: 32768 port: - name: veth0_c stp-hairpin-mode: false stp-path-cost: 100 stp-priority: 32 vlan: {} - name: veth0_s stp-hairpin-mode: false stp-path-cost: 100 stp-priority: 32 vlan: {} description: br_test ipv4: enabled: true address: - ip: 192.168.0.254 prefix-length: 24 dhcp: false ipv6: enabled: true address: - ip: 2000::a prefix-length: 64 dhcp: false mac-address: AA:CF:A8:2D:6A:48 mtu: 1500 current ======= --- name: br_test type: linux-bridge state: up bridge: options: group-addr: 01:80:C2:00:00:00 group-forward-mask: 0 hash-max: 4096 mac-ageing-time: 300 multicast-last-member-count: 2 multicast-last-member-interval: 100 multicast-querier: false multicast-querier-interval: 25500 multicast-query-interval: 12500 multicast-query-response-interval: 1000 multicast-query-use-ifaddr: false multicast-router: 1 multicast-snooping: false multicast-startup-query-count: 2 multicast-startup-query-interval: 3125 stp: enabled: false forward-delay: 15 hello-time: 2 max-age: 20 priority: 32768 port: - name: veth0_c stp-hairpin-mode: false stp-path-cost: 100 stp-priority: 32 vlan: {} - name: veth0_s stp-hairpin-mode: false stp-path-cost: 100 stp-priority: 32 vlan: {} description: br_test ipv4: enabled: true address: - ip: 192.168.0.254 prefix-length: 24 dhcp: false ipv6: enabled: true address: - ip: 2000::a prefix-length: 64 autoconf: false dhcp: false lldp: enabled: false mac-address: AA:CF:A8:2D:6A:48 mtu: 1500 difference ========== --- desired +++ current @@ -4,9 +4,21 @@ state: up bridge: options: + group-addr: 01:80:C2:00:00:00 group-forward-mask: 0 + hash-max: 4096 mac-ageing-time: 300 - multicast-snooping: true + multicast-last-member-count: 2 + multicast-last-member-interval: 100 + multicast-querier: false + multicast-querier-interval: 25500 + multicast-query-interval: 12500 + multicast-query-response-interval: 1000 + multicast-query-use-ifaddr: false + multicast-router: 1 + multicast-snooping: false + multicast-startup-query-count: 2 + multicast-startup-query-interval: 3125 stp: enabled: false forward-delay: 15 @@ -36,6 +48,9 @@ address: - ip: 2000::a prefix-length: 64 + autoconf: false dhcp: false +lldp: + enabled: false mac-address: AA:CF:A8:2D:6A:48 mtu: 1500