Description of problem: Firewalld is not installed if you come from an older OSP version and RHEL version and have been upgrading along the way. Version-Release number of selected component (if applicable): 16.2 > 17.1 How reproducible: 100% Steps to Reproduce: 1. # openstack undercloud upgrade --yes --system-upgrade ~/osp17.1_upgrade/system_upgrade.yaml 2. 3. Actual results: "ERROR: Failed to load '/etc/firewalld/firewall lld.conf': [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'\nWARNING: [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'\nWARNING: Using fallback firew alld configuration settings.\nERROR: No icmptypes found.\nERROR: No services found.\nFATAL ERROR: Zone 'block' is not available.\nFATAL ERROR: Zone 'drop' is not available.\nFATAL ERROR: Zo ne 'trusted' is not available.\n\n\n====================================================================================================================\nActor firewalld_collect_used_object _names unexpectedly terminated with exit code: 1 - Please check the above details\n========================================================================================================== ==========", "stderr_lines": ["ERROR: Failed to load '/etc/firewalld/firewalld.conf': [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'", "WARNING: [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'", "WARNING: Using fallback firewalld configuration settings.", "ERROR: No icmptypes found.", "ERROR: No services found.", "FATAL ERROR: Zone ' block' is not available.", "FATAL ERROR: Zone 'drop' is not available.", "FATAL ERROR: Zone 'trusted' is not available." Expected results: no errors Additional info: Solution: Install firewalld on director # sudo dnf install -y firewalld # sudo systemctl disabled --now firewalld
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: RHOSP 17.1.4 (openstack-tripleo-heat-templates) security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2024:9978
Pre 17.1.4 workaround: remove rpm python3-firewall from the undercloud