[Users] oVirt and firewalld

[Jonathan Daugherty]

> I've just set up a new oVirt installation with two nodes.  Both of
> the nodes have had 'firewalld' disabled.  When I went to test VM
> migration, it failed, apparently due to this (from the vdsm log on
> the source node):
> 
>   error : virNetClientProgramDispatchError:174 : Error while
>   building firewall: Some rules could not be created for interface
>   vnet0: Failure to execute command '$EBT -t nat -N libvirt-J-vnet0'
>   : 'DBusException org.freedesktop.DBus.Error.ServiceUnknown: The
>   name org.fedoraproject.FirewallD1 was not provided by any .service
>   filesCouldn't connect to FirewallD, it's probably not running.'.

Okay, I'll answer it myself, for the google searchers of the future:

This was caused by 1) not restarting libvirtd *after* disabling
firewalld and 2) not realizing (understandably) that the error was
from the migration *destination* host, not the source host, despite
the fact that it was found in the source host's log and makes no
mention of the other host.  Libvirtd on the destination host was still
attempting to use firewalld; restarting it resolved the problem.

-- 
  Jonathan Daugherty
  Software Engineer
  Galois, Inc.