Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provisioning fails when firewalld and python3-firewalld aren't installed on the infra box #28

Open
rhawalsh opened this issue May 10, 2023 · 1 comment · Fixed by #32
Assignees

Comments

@rhawalsh
Copy link
Member

Running a Fedora 36 infrastructure system (using Vagrant's public repository fedora/36-cloud-base image) with a freshly checked out version of Bunsen ends up with failed provisioning.

TASK [nfs_server : Modify firewall port 2049/tcp] ***********************************************************************************************************************************
Wednesday 10 May 2023  16:05:14 -0400 (0:00:00.061)       0:09:56.148 *********                                                                                                      
fatal: [ossbunsen-infra]: FAILED! => {                                                                                                                                               
    "changed": false                                                                                                                                                                 
}                                                                                                                                                                                    
                                                                                                                                                                                     
MSG:                                                                                                                                                                                 
                                                                                                                                                                                     
Python Module not found: firewalld and its python module are required for this module,                         version 0.2.11 or newer required (0.3.9 or newer for offline operations)

If I then install python3-firewall on the infrastructure box, it gets further but still ends up failing.

TASK [nfs_server : Modify firewall port 2049/tcp] ***********************************************************************************************************************************
Wednesday 10 May 2023  17:00:20 -0400 (0:00:00.077)       0:00:58.654 *********                                                                                                      
fatal: [ossbunsen-infra]: FAILED! => {                                                                                                                                               
    "changed": false,                                                                                                                                                                
    "rc": 254                                                                                                                                                                        
}                                                                                                                                                                                    
                                                                                                                                                                                     
MSG:                                                                                                                                                                                 
                                                                                                                                                                                     
MODULE FAILURE                                                                                                                                                                       
See stdout/stderr for the exact error                                                                                                                                                
                                                                                                                                                                                     
                                                                                                                                                                                     
MODULE_STDERR:                                                                                                                                                                       
                                                                                                                                                                                     
ERROR: Failed to load '/etc/firewalld/firewalld.conf': [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'                                                          
WARNING: [Errno 2] No such file or directory: '/etc/firewalld/firewalld.conf'                                                                                                        
WARNING: Using fallback firewalld configuration settings.                                                                                                                            
ERROR: Failed to load user configuration. Falling back to full stock configuration.                                                                                                  
ERROR: INVALID_ZONE: Zone 'block' is not available.                                                                                                                                  
ERROR: INVALID_ZONE: Zone 'block' is not available.                                                                                                                                  
ERROR: Failed to load full stock configuration. This likely indicates a system level issue, e.g. the firewall backend (nftables, iptables) is broken. All hope is lost. Exiting.     

If I then install firewalld, provisioning is able to continue as expected.

I am going to try to reproduce with Fedora 37 and Fedora 38 (if that image is available; I'm not sure atm).

@rhawalsh rhawalsh self-assigned this May 10, 2023
@rhawalsh
Copy link
Member Author

This also seems to apply to the farm role as well, but not resources.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant