8:19 a.m.
Hi,
Today I got the following error, adding a CentOS 6.4 minimal
to an Gluster based Datacenter:
Everything is ok and installed fine, until I get this error in
the "events" from webadmin:
"Failed to install Host server4. Failed to execute stage 'Closing up':
Command '/sbin/service' failed to execute."
"Host server4 installation failed. Command returned failure code 1
during SSH session 'root(a)vroot4.vrootdev'."
Here is an excerpt from the corresponding host-deploy log
it seems to be iptables related?
Any Hints?
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
rhel.state:169 starting service iptables
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
plugin.executeRaw:347 execute: ('/sbin/initctl', 'status',
'iptables'),
executable='None', cwd='None', env=None
2013-10-17 15:11:03 DEBUG otopi.vplugins.otopi.services.rhel
plugin.executeRaw:364 execute-result: ('/sbin/initctl', 'status',
'iptables'), rc=1
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
plugin.execute:412 execute-output: ('/sbin/initctl', 'status',
'iptables') stdout:
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
plugin.execute:417 execute-output: ('/sbin/initctl', 'status',
'iptables') stderr:
initctl: Unknown job: iptables
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
plugin.executeRaw:347 execute: ('/sbin/service', 'iptables',
'stop'),
executable='None', cwd='None', env=None
2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel
plugin.executeRaw:364 execute-result: ('/sbin/service', 'iptables',
'stop'), rc=1
2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel
plugin.execute:412 execute-output: ('/sbin/service', 'iptables',
'stop')
stdout:
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: nat mangle filter [ OK ]
iptables: Unloading modules: ip_tables[FAILED]
2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel
plugin.execute:417 execute-output: ('/sbin/service', 'iptables',
'stop')
stderr:
2013-10-17 15:11:04 DEBUG otopi.context context._executeMethod:130
method exception
Traceback (most recent call last):
File "/tmp/ovirt-C88JvFdKfe/pythonlib/otopi/context.py", line 120, in
_executeMethod
method['method']()
File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/network/iptables.py",
line 111, in _closeup
self.services.state('iptables', False)
File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/services/rhel.py",
line 184, in state
'start' if state else 'stop'
File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/services/rhel.py",
line 96, in _executeServiceCommand
raiseOnError=raiseOnError
File "/tmp/ovirt-C88JvFdKfe/pythonlib/otopi/plugin.py", line 422, in
execute
command=args[0],
RuntimeError: Command '/sbin/service' failed to execute
2013-10-17 15:11:04 ERROR otopi.context context._executeMethod:139
Failed to execute stage 'Closing up': Command '/sbin/service' failed to
execute
9:15 a.m.
Please send the entire host-deploy log so I can see what iptables rules are there.
----- Original Message -----
From: "Sven Kieske" <S.Kieske(a)mittwald.de>
To: users(a)ovirt.org
Sent: Thursday, October 17, 2013 4:19:46 PM
Subject: [Users] Host installation failed ovirt 3.2
Hi,
Today I got the following error, adding a CentOS 6.4 minimal
to an Gluster based Datacenter:
Everything is ok and installed fine, until I get this error in
the "events" from webadmin:
"Failed to install Host server4. Failed to execute stage 'Closing up':
Command '/sbin/service' failed to execute."
"Host server4 installation failed. Command returned failure code 1
during SSH session 'root(a)vroot4.vrootdev'."
Here is an excerpt from the corresponding host-deploy log
it seems to be iptables related?
Any Hints?
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
rhel.state:169 starting service iptables
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
plugin.executeRaw:347 execute: ('/sbin/initctl', 'status',
'iptables'),
executable='None', cwd='None', env=None
2013-10-17 15:11:03 DEBUG otopi.vplugins.otopi.services.rhel
plugin.executeRaw:364 execute-result: ('/sbin/initctl', 'status',
'iptables'), rc=1
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
plugin.execute:412 execute-output: ('/sbin/initctl', 'status',
'iptables') stdout:
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
plugin.execute:417 execute-output: ('/sbin/initctl', 'status',
'iptables') stderr:
initctl: Unknown job: iptables
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel
plugin.executeRaw:347 execute: ('/sbin/service', 'iptables',
'stop'),
executable='None', cwd='None', env=None
2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel
plugin.executeRaw:364 execute-result: ('/sbin/service', 'iptables',
'stop'), rc=1
2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel
plugin.execute:412 execute-output: ('/sbin/service', 'iptables',
'stop')
stdout:
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: nat mangle filter [ OK ]
iptables: Unloading modules: ip_tables[FAILED]
2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel
plugin.execute:417 execute-output: ('/sbin/service', 'iptables',
'stop')
stderr:
2013-10-17 15:11:04 DEBUG otopi.context context._executeMethod:130
method exception
Traceback (most recent call last):
File "/tmp/ovirt-C88JvFdKfe/pythonlib/otopi/context.py", line 120, in
_executeMethod
method['method']()
File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/network/iptables.py",
line 111, in _closeup
self.services.state('iptables', False)
File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/services/rhel.py",
line 184, in state
'start' if state else 'stop'
File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/services/rhel.py",
line 96, in _executeServiceCommand
raiseOnError=raiseOnError
File "/tmp/ovirt-C88JvFdKfe/pythonlib/otopi/plugin.py", line 422, in
execute
command=args[0],
RuntimeError: Command '/sbin/service' failed to execute
2013-10-17 15:11:04 ERROR otopi.context context._executeMethod:139
Failed to execute stage 'Closing up': Command '/sbin/service' failed to
execute
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
10:21 a.m.
Hi,
here it is.
atm, I try to reproduce this bug on a different hardware, it may be
related to a "yum update" before installing vdsm, this is the only
difference to our working machines.
Thanks!
PS: You can also catch me on IRC
On 17.10.2013 16:15, Alon Bar-Lev wrote:
Please send the entire host-deploy log so I can see what iptables
rules are there.
10:52 a.m.
------=_Part_5683343_1121954314.1382025161743
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
----- Original Message -----
From: "Sven Kieske" <S.Kieske(a)mittwald.de>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>, users(a)ovirt.org
Sent: Thursday, October 17, 2013 6:21:11 PM
Subject: Re: [Users] Host installation failed ovirt 3.2
Hi,
here it is.
atm, I try to reproduce this bug on a different hardware, it may be
related to a "yum update" before installing vdsm, this is the only
difference to our working machines.
Can you please try to manual put the attached in /etc/sysconfig/iptables?
This is what host-deploy try to apply.
Then stop and start iptables service, this should fail as well but allow us to find the
issue.
Thanks,
Alon
Thanks!
PS: You can also catch me on IRC
On 17.10.2013 16:15, Alon Bar-Lev wrote:
> Please send the entire host-deploy log so I can see what iptables rules are
> there.
>
------=_Part_5683343_1121954314.1382025161743
Content-Type: text/x-iptables; name=iptables
Content-Disposition: attachment; filename=iptables
Content-Transfer-Encoding: base64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------=_Part_5683343_1121954314.1382025161743--
3:44 a.m.
Hi,
this config was already in /etc/sysconfig/iptables (you forget some
empty lines, but the rest is identical), here is the outcome:
service iptables stop
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: nat filter mangl[ OK ]
iptables: Unloading modules: [ OK ]
[root@vroot4 ~]# service iptables start
iptables: Applying firewall rules: [ OK ]
[root@vroot4 ~]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state
RELATED,ESTABLISHED
2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
3 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:54321
4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:22
5 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:161
6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:16514
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0
multiport dports 5634:6166
8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0
multiport dports 49152:49216
9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:24007
10 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:111
11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:38465
12 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:38466
13 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:38467
14 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:39543
15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:55863
16 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:38468
17 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:963
18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:965
19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:4379
20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:139
21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:445
22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpts:24009:24108
23 REJECT all -- 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 REJECT all -- 0.0.0.0/0 0.0.0.0/0
PHYSDEV match ! --physdev-is-bridged reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
So there is no error, reloading it by hand.
I tried to then add the host again via webadmin, and it succeeds.
So I really don't know what the problem was :(
On 17.10.2013 17:52, Alon Bar-Lev wrote:
>
>
> ----- Original Message -----
>>
>> On 17.10.2013 16:15, Alon Bar-Lev wrote:
>>> Please send the entire host-deploy log so I can see what iptables rules are
>>> there.
>>>
>>
9:43 a.m.
This problem occured again, this time, deploying an centOS netinstall.
Steps to reproduce:
1. install CentOS 6.4. x64 netinstall, use the target "minimal
installation".
2. add repos for epel and ovirt.
3. install vdsm on host through webadmin
actual result:
In Webadmin:
"Failed to install Host server4 Failed to execute stage 'Closing up':
Command '/sbin/service' failed to execute."
I attached the complete host-deploy log. it fails at reloading iptables
however, the default ovirt-iptables config is present in
/etc/sysconfig/iptables and is loaded (this was checked by
"service iptables status" command)
also manual restarting the service works fine:
service iptables restart
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: mangle filter na[ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
next step was "reinstall" host through webadmin, which worked fine,
the host rebooted.
any hints?
On 18.10.2013 10:44, Sven Kieske wrote:
Hi,
this config was already in /etc/sysconfig/iptables (you forget some
empty lines, but the rest is identical), here is the outcome:
service iptables stop
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: nat filter mangl[ OK ]
iptables: Unloading modules: [ OK ]
[root@vroot4 ~]# service iptables start
iptables: Applying firewall rules: [ OK ]
[root@vroot4 ~]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state
RELATED,ESTABLISHED
2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
3 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:54321
4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:22
5 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:161
6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:16514
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0
multiport dports 5634:6166
8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0
multiport dports 49152:49216
9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:24007
10 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:111
11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:38465
12 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:38466
13 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:38467
14 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:39543
15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:55863
16 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:38468
17 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:963
18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:965
19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:4379
20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:139
21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:445
22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpts:24009:24108
23 REJECT all -- 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 REJECT all -- 0.0.0.0/0 0.0.0.0/0
PHYSDEV match ! --physdev-is-bridged reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
So there is no error, reloading it by hand.
I tried to then add the host again via webadmin, and it succeeds.
So I really don't know what the problem was :(
On 17.10.2013 17:52, Alon Bar-Lev wrote:
>
>
> ----- Original Message -----
>>
>> On 17.10.2013 16:15, Alon Bar-Lev wrote:
>>> Please send the entire host-deploy log so I can see what iptables rules are
>>> there.
>>>
>>
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
1:26 p.m.
----- Original Message -----
From: "Sven Kieske" <S.Kieske(a)mittwald.de>
To: users(a)ovirt.org
Sent: Friday, October 18, 2013 5:43:39 PM
Subject: Re: [Users] Host installation failed ovirt 3.2
This problem occured again, this time, deploying an centOS netinstall.
Steps to reproduce:
1. install CentOS 6.4. x64 netinstall, use the target "minimal
installation".
2. add repos for epel and ovirt.
3. install vdsm on host through webadmin
actual result:
In Webadmin:
"Failed to install Host server4 Failed to execute stage 'Closing up':
Command '/sbin/service' failed to execute."
2013-10-18 16:29:11 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:412
execute-output: ('/sbin/service', 'iptables', 'start') stdout:
iptables: Applying firewall rules: [FAILED]
2013-10-18 16:29:11 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:417
execute-output: ('/sbin/service', 'iptables', 'start') stderr:
iptables-restore: line 61 failed
I attached the complete host-deploy log. it fails at reloading
iptables
however, the default ovirt-iptables config is present in
/etc/sysconfig/iptables and is loaded (this was checked by
"service iptables status" command)
also manual restarting the service works fine:
service iptables restart
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: mangle filter na[ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
next step was "reinstall" host through webadmin, which worked fine,
the host rebooted.
any hints?
I have no access to centos... and unsure what is happening... need your help.
It looks like there is some problem in first apply of firewall rules...
Can you please checkout this sequence which is similar to what happening at host-deploy:
1. have default /etc/sysconfig/iptables (you can find it as backuped up
/etc/sysconfig/iptables.*)
2. restart iptables
3. move /etc/sysconfig/iptables /etc/sysconfig/iptables.old
4. move /etc/sysconfig/<ovirt> /etc/sysconfig/iptables
5. restart iptables
I hope we see same failure, so it will be easier to debug.
I've never seen this issue... with same file content restart 1 does not work, restart
2 does... this is strange.
Thanks,
Alon
On 18.10.2013 10:44, Sven Kieske wrote:
> Hi,
>
> this config was already in /etc/sysconfig/iptables (you forget some
> empty lines, but the rest is identical), here is the outcome:
>
> service iptables stop
> iptables: Flushing firewall rules: [ OK ]
> iptables: Setting chains to policy ACCEPT: nat filter mangl[ OK ]
> iptables: Unloading modules: [ OK ]
> [root@vroot4 ~]# service iptables start
> iptables: Applying firewall rules: [ OK ]
> [root@vroot4 ~]# service iptables status
> Table: filter
> Chain INPUT (policy ACCEPT)
> num target prot opt source destination
> 1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state
> RELATED,ESTABLISHED
> 2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
> 3 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:54321
> 4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:22
> 5 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
> dpt:161
> 6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:16514
> 7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0
> multiport dports 5634:6166
> 8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0
> multiport dports 49152:49216
> 9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:24007
> 10 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
> dpt:111
> 11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:38465
> 12 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:38466
> 13 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:38467
> 14 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:39543
> 15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:55863
> 16 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:38468
> 17 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
> dpt:963
> 18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:965
> 19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:4379
> 20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:139
> 21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpt:445
> 22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
> dpts:24009:24108
> 23 REJECT all -- 0.0.0.0/0 0.0.0.0/0
> reject-with icmp-host-prohibited
>
> Chain FORWARD (policy ACCEPT)
> num target prot opt source destination
> 1 REJECT all -- 0.0.0.0/0 0.0.0.0/0
> PHYSDEV match ! --physdev-is-bridged reject-with icmp-host-prohibited
>
> Chain OUTPUT (policy ACCEPT)
> num target prot opt source destination
>
>
> So there is no error, reloading it by hand.
>
> I tried to then add the host again via webadmin, and it succeeds.
>
> So I really don't know what the problem was :(
>
>
> On 17.10.2013 17:52, Alon Bar-Lev wrote:
>>
>>
>> ----- Original Message -----
>>>
>>> On 17.10.2013 16:15, Alon Bar-Lev wrote:
>>>> Please send the entire host-deploy log so I can see what iptables rules
>>>> are
>>>> there.
>>>>
>>>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
3850
days inactive
3851
days old
6 comments
2 participants
participants (2)
-
Alon Bar-Lev -
Sven Kieske