After upgrading our ovirt hosts to the 4.2.4 release two nodes are unable to run VMs.  The vdsm.log shows a failure which appears to be related to firewalld. 2018-06-27 10:58:08,340-0400 ERROR (vm/5a42e1ed) [virt.vm] (vmId='5a42e1ed-7b9f-42f2-b1c3-403276cf1cd9') The vm start process failed (vm:943) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872, in _startUnderlyingVm self._run() File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2876, in _run dom.createWithFlags(flags) File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", line 130, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1099, in createWithFlags if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', dom=self) libvirtError: The name org.fedoraproject.FirewallD1 was not provided by any .service files 2018-06-27 10:58:08,342-0400 INFO (vm/5a42e1ed) [virt.vm] (vmId='5a42e1ed-7b9f-42f2-b1c3-403276cf1cd9') Changed state to Down: The name org.fedoraproject.FirewallD1 was not provided by any .service files (code=1) (vm:1683) The cluster this host is a member of is configured to use *iptables*, not firewalld.  Is there a way to resolve this?  What package provides the .service file that vdsm is looking for?