<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 19, 2017 at 7:35 AM, Dan Kenigsberg <span dir="ltr"><<a href="mailto:danken@redhat.com" target="_blank">danken@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Wed, Oct 18, 2017 at 2:40 PM, Daniel Belenky <span dir="ltr"><<a href="mailto:dbelenky@redhat.com" target="_blank">dbelenky@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi all,<div><font face="arial, helvetica, sans-serif"><br></font></div><div><div><font face="arial, helvetica, sans-serif"><b>The following test is failing:</b> <span style="text-decoration-line:underline;color:rgb(51,51,51)">002_bootstrap.verify_<wbr>add_hosts</span></font></div><div><span style="color:rgb(51,51,51)"><font face="arial, helvetica, sans-serif"><b><a href="http://jenkins.ovirt.org/view/Change%20queue%20jobs/job/ovirt-master_change-queue-tester/3166/artifact/exported-artifacts/basic-suit-master-el7/test_logs/basic-suite-master/post-002_bootstrap.py/" target="_blank">All logs from failing job</a></b></font></span></div><div><font face="arial, helvetica, sans-serif" color="#333333"><b>Only 2 engine patches participated in the test, so the suspected patches are:</b></font></div><div><ol><li><a href="https://gerrit.ovirt.org/#/c/82542/2" target="_blank"><b style="font-family:arial,helvetica,sans-serif">https://gerrit.ovirt.org/#/c/8<wbr>2542/2</b><br></a></li><li><b style="font-family:arial,helvetica,sans-serif"><a href="https://gerrit.ovirt.org/#/c/82545/3" target="_blank">https://gerrit.ovirt.org/#/c/8<wbr>2545/3</a></b><br></li></ol><div>Due to the fact that when this error first introduced we had another error, the CI can't automatically detect the specific patch.</div></div><div><font face="arial, helvetica, sans-serif"><b><br></b></font></div><div><font face="arial, helvetica, sans-serif"><b>Error snippet from logs: </b></font><b style="color:rgb(0,0,0);white-space:pre-wrap"><a href="http://jenkins.ovirt.org/view/Change%20queue%20jobs/job/ovirt-master_change-queue-tester/3166/artifact/exported-artifacts/basic-suit-master-el7/test_logs/basic-suite-master/post-002_bootstrap.py/lago-basic-suite-master-engine/_var_log/ovirt-engine/host-deploy/ovirt-host-deploy-ansible-20171015165106-lago-basic-suite-master-host-0-74ed9407.log/*view*/" target="_blank">ovirt-host-deploy-ansibl<wbr>e log</a> (Full log)</b></div><div><pre style="color:rgb(0,0,0);white-space:pre-wrap">TASK [ovirt-host-deploy-firewalld : Enable firewalld rules] ********************
failed: [lago-basic-suite-master-host-<wbr>0] (item={u'service': u'glusterfs'}) => {"changed": false, "failed": true, "item": {"service": "glusterfs"}, "msg": "ERROR: Exception caught: org.fedoraproject.FirewallD1.E<wbr>xception: INVALID_SERVICE: 'glusterfs' not among existing services Permanent and Non-Permanent(immediate) operation, Services are defined by port/tcp relationship and named as they are in /etc/services (on most systems)"}</pre></div><div><br></div><div><b>Error from HOST 0 firewalld log: <a href="http://jenkins.ovirt.org/view/Change%20queue%20jobs/job/ovirt-master_change-queue-tester/3166/artifact/exported-artifacts/basic-suit-master-el7/test_logs/basic-suite-master/post-002_bootstrap.py/lago-basic-suite-master-host-0/_var_log/firewalld/*view*/" target="_blank">lago-basic-suite-master-h<wbr>ost-0/_var_log/firewalld/</a> (Ful<wbr>l log)</b></div><div><pre style="color:rgb(0,0,0);white-space:pre-wrap">2017-10-15 16:51:24 ERROR: INVALID_SERVICE: 'glusterfs' not among existing services</pre></div></div></div></blockquote><div><br></div><div>Ondra, would such an error propagate through the playbook to Engine and fail the add-host flow? (I think it should!)</div></div></div></div></blockquote><div><br><div style="font-family:arial,helvetica,sans-serif;display:inline" class="gmail_default">We didn't do that so far, because of EL 7.3</div><div style="font-family:arial,helvetica,sans-serif;display:inline" class="gmail_default">. We need firewalld from 7.4 to have all available services in place (I don't remember but I think imageio service was the one delivered only in firewalld from 7.4). So up until now we ingore non-existent firewalld service, but if needed we can turn this on and fail host deploy.<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div><br></div><div>Do you know which package provide the glusterfs firewalld service, and why it is missing from the host?</div></div></div></div></blockquote><div><br><div style="font-family:arial,helvetica,sans-serif;display:inline" class="gmail_default">So we have used 'glusterfs' firewalld service per Sahina recommendation, which is included in glusterfs-server package from version 3.7.6 [1]. But this package is not installed when installing packages for cluster with gluster capabilities enabled. So now I'm confused: don't we need glusterfs-server package? If not and we need those ports open because they are used by services from different already installed glusterfs packages, shouldn't the firewalld configuration be moved from glusterfs-server to glusterfs package?<br><br><br>[1] <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1057295">https://bugzilla.redhat.com/show_bug.cgi?id=1057295</a><br><br></div></div></div><br></div></div>