Bug 3452

Summary: [2-alpha2] Rebooting after installation & running LiveCD finds shorewall stopped
Product: Mageia Reporter: Dick Gevers <dvgevers>
Component: RPM PackagesAssignee: Mageia Bug Squad <bugsquad>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Normal CC: ennael1, mageia, n54, pterjan, thierry.vignaud, tmb
Version: Cauldron   
Target Milestone: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Source RPM: drakx-net CVE:
Status comment:
Attachments: report.bug.gz from /root/drakx

Description Dick Gevers 2011-11-25 18:36:35 CET
Description of problem:

Personalized desktop install from 64 bit DVD: all workstations, except development, no servers, all window managers on brand new laptop.

After install that included NOT trying network updates, not starting the connection after setup, set the hostname in summary via 'advanced' but without entering ip numbers, activating (as per flag already set by default) shorewall, network up etcetera, msec secure, timezone UTC etc. etc. all works well when rebooting, but shorewall not:


# service iptables status
Redirecting to /bin/systemctl status iptables.service
iptables.service - iptables Firewall for IPv4
          Loaded: loaded (/lib/systemd/system/iptables.service; enabled)
          Active: active (exited) since Tue, 15 Nov 2011 21:21:06 +0000;
1min 32s ago Process: 1641 ExecStart=/usr/lib64/iptables start
(code=exited, status=0/SUCCESS) CGroup:
name=systemd:/system/iptables.service [root@dvglt ~]

# service shorewall status
Shorewall-4.4.23.1 Status at dvglt.homepower - Tue Nov 15 21:23:04 UTC 2011

Shorewall is stopped
State:


# service shorewall restart

ERROR: Duplicate zone name (fw) : /etc/shorewall/zones (line 14)

# tail -n 3 /etc/shorewall/zones
net      firewall
fw       firewall
fw       firewall

- - -
Fixing the file starts shorewall okay

rpm -q shorewall 
shorewall-4.4.23.1-1.mga2

How reproducible: see drakx bugreport to be attached here (after dinner)
Comment 1 Dick Gevers 2011-11-25 20:08:10 CET
Created attachment 1114 [details]
report.bug.gz from /root/drakx
Comment 2 Manuel Hiebel 2011-11-25 23:28:55 CET
Hi, thanks for the bug report.
It's more a bug is the package

Have you changed something after your first reboot ?
What is the output of 'chkconfig --list shorewall' ?
and of 'systemctl status shorewall.service'
Does it work after a new reboot ?

I see line 9610:
shorewall.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig shorewall on
Warning: unit files do not carry install information. No operation executed.

Keywords: (none) => PATCH, Triaged
Component: Installer => RPM Packages
Source RPM: Mageia-2-alpha1-x86_64-DVD.iso of 25.NOV.2011 => shorewall

Comment 3 Dick Gevers 2011-11-26 01:23:28 CET
No I changed nothing between install and next runlevel 5.

The cause is in the badly configured file /etc/shorewall/zones. It's never gonna work with a double zone name (fw). So it's either in the shorewall package (not likely), or the way the installer configures shorewall during the installation routine.

I'll answer the chkconfig and systemctl questions tomorrow when I reboot into the alpha1 installation (but my guess is there lies not the problem).

BFN

Component: RPM Packages => Installer

Manuel Hiebel 2011-11-26 01:32:26 CET

Keywords: PATCH, Triaged => (none)

Comment 4 Dick Gevers 2011-11-26 07:39:37 CET
rebooting into the same alpha1 installed partition as above:

shorewall is already running when init 5 is reached

# chkconfig --list |grep shore
shorewall   0:off  1:off   2:on   3:on   4:on   5:on   6:off   7:off

# systemctl status shorewall.service
shorewall.service - LSB: shorewall-common
      Loaded: loaded (etc/rc.d/init.d/shorewall)
      Active: active (exited) since Sat, 26 Nov 2011 06:29:43 +0000; 3min 37s ago
      Process: 2382 ExecStart=/etc/rc.d/init.d/shorewall start (code=exited, status=0/SUCCESS)
      CGroup: name=systemd:/system/shorewall.service

- - -
Obviously this is all after the fix of the double 'fw' line in /etc/shorewall/zones.

Component: Installer => RPM Packages

Comment 5 Dick Gevers 2011-11-26 10:08:17 CET
The Bugz-ML shows that in #c4 I changed 'RPM Packages' to 'Installer', but that can only have been Bugzilla or Iceape's doing as I certainly did not. Frankly, I don't *know* which is guilty.

Component: RPM Packages => Installer

Comment 6 Manuel Hiebel 2011-11-26 19:52:33 CET
Ok thanks for the replay
Addede the commider of shorewall and maintainer of drakx-installer

CC: (none) => ennael1, pterjan, thierry.vignaud, tmb
Assignee: bugsquad => thierry.vignaud

Comment 7 Remco Rijnders 2011-11-28 07:44:15 CET
*** Bug 3517 has been marked as a duplicate of this bug. ***

CC: (none) => krytarowski

Comment 8 Dick Gevers 2011-12-02 10:50:20 CET
Same result booting from LiveCD Gnome-Europe1 64 bits iso. Same error in /etc/shorewall/zones.

Summary: Rebooting after installation finds shorewall stopped => [alpha1] Rebooting after installation finds shorewall stopped

Comment 9 Manuel Hiebel 2011-12-02 11:15:48 CET
can be related to bug 2860
Comment 10 Dick Gevers 2011-12-02 12:04:25 CET
Perhaps, but that does not (my guess only) explain the double 'fw    firewall' line in /etc/shorewall/zones
Comment 11 Olivier Blin 2011-12-03 16:20:19 CET
That's a drakx-net bug (mainly because the LAST LINE were removed from the shorewall config files, by mistake).

I've fixed drakx-net, and removed these "LAST LINE" markers forever in the shorewall package.

Will be ok in the next drakx-net package

Status: NEW => ASSIGNED
CC: (none) => mageia
Assignee: thierry.vignaud => mageia
Source RPM: shorewall => drakx-net

Comment 12 Manuel Hiebel 2011-12-10 00:05:57 CET
(In reply to comment #11)
> That's a drakx-net bug (mainly because the LAST LINE were removed from the
> shorewall config files, by mistake).
> 
> I've fixed drakx-net, and removed these "LAST LINE" markers forever in the
> shorewall package.
> 
> Will be ok in the next drakx-net package

seems not, see the pad of alpha2
Comment 13 Dick Gevers 2011-12-10 00:25:53 CET
The LAST LINE was not in the file zone when I tried alpha2 LiveCD (Gnome 32 bits).
The line
fw           firewall
was there again twice.
Comment 14 Dick Gevers 2011-12-10 01:55:22 CET
#c12 and #c13 are about Live mode using LiveCD !

Summary: [alpha1] Rebooting after installation finds shorewall stopped => [2-alpha2] Rebooting after installation & running LiveCD finds shorewall stopped

Comment 15 Dick Gevers 2011-12-10 08:47:58 CET
Only file 'params' contains a #LAST LINE... in Live mode in /etc/shorewall
Comment 16 Olivier Blin 2011-12-10 14:17:16 CET
Well, drakx-net has only been submitted yesterday, and the installer has been rebuilt with it tonight. Should be ok in next live CDs run.
Comment 17 Thierry Vignaud 2012-04-18 17:05:25 CEST
Closing then.
Reopen if it happens again.

Status: ASSIGNED => RESOLVED
Component: Installer => RPM Packages
Resolution: (none) => FIXED
Assignee: mageia => bugsquad