[ovirt-devel] firewalld on vdsm host

[Fabian Deutsch]

On Thu, Nov 12, 2015 at 2:07 PM, Sandro Bonazzola <sbonazzo at redhat.com> wrote:
>
>
> On Thu, Nov 12, 2015 at 12:08 PM, Fabian Deutsch <fdeutsch at redhat.com>
> wrote:
>>
>> Hey,
>>
>> what is the expectation/assumption about firewalld on a CentOS 7 host
>> where you want to install vdsm onto?
>>
>> Is vdsm taking care of it?
>
>
> ovirt-host-deploy should take care of disabling firewalld and enabling
> iptables.

Right, thanks. As far as I can tell it can not handle this currently:

Bug 995362 - (ovirt_firewalld_support) [RFE] Support firewalld

please also see my simple fix:
https://gerrit.ovirt.org/#/c/48491/

Change 48491 - Needs Code-Review
presets: Disable firewalld.service by default

firewalld is installed and enabled by default on CentOS 7, but vdsm can not
handle it. This leads to a situation where a freshy installed CentOS 7 host
with the default package set can not be added to Engine.

By disabling firewalld.service using a presets file, this add flow should
work.

Change-Id: Ia17b04259ad28b8c4df4c73c928e23bf6a1222d0
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=995362
Signed-off-by: Fabian Deutsch <fabiand at fedoraproject.org>

- fabian