libvirtd: could not find a usable firewall backend

  • Done
  • quality assurance status badge
Details
2 participants
  • Simen Endsjø
  • Maxim Cournoyer
Owner
unassigned
Submitted by
Simen Endsjø
Severity
normal

Debbugs page

Simen Endsjø wrote 1 weeks ago
(address . bug-guix@gnu.org)
87eczdarh9.fsf@simendsjo.me
After an upgrade, I can no longer start libvirtd.

guix c991c49
branch: master
commit: c991c49f09d6fd2764e1f7bdae54c097c748524f

Mar 4 13:15:58 localhost shepherd[1]: Respawning libvirtd.
Mar 4 13:15:58 localhost shepherd[1]: Starting service libvirtd...
Mar 4 13:15:58 localhost shepherd[1]: Service libvirtd has been started.
Mar 4 13:15:58 localhost shepherd[1]: Service libvirtd started.
Mar 4 13:15:58 localhost shepherd[1]: Service libvirtd running with value #<<process> id: 23337 command: ("/gnu/store/bg0p3sjnl17i1zz14cnc82p4mvzc8n1s-libvirt-10.10.0/sbin/libvirtd" "-f" "/gnu/store/wx2j24bba8bzga5b90xks09fghxxqjk0-libvirtd.conf")>.
Mar 4 13:15:58 localhost libvirtd: 23349: info : libvirt version: 10.10.0
Mar 4 13:15:58 localhost libvirtd: 23349: info : hostname: REDACTED
Mar 4 13:15:58 localhost libvirtd: 23349: error : virNetworkLoadDriverConfig:155 : internal error: could not find a usable firewall backend
Mar 4 13:15:58 localhost libvirtd: 23349: error : virStateInitialize:672 : Initialization of bridge state driver failed: internal error: could not find a usable firewall backend
Mar 4 13:15:58 localhost libvirtd: 23349: error : daemonRunStateInit:617 : Driver state initialization failed
Mar 4 13:15:58 localhost shepherd[1]: Service libvirtd has been disabled.
Mar 4 13:15:58 localhost shepherd[1]: (Respawning too fast.)
-----BEGIN PGP SIGNATURE-----

iQFJBAEBCAAzFiEEsPLWxSk2lf1XtdJVd7xjRbZdbPsFAmfG92IVHGNvbnRhY3RA
c2ltZW5kc2pvLm1lAAoJEHe8Y0W2XWz7lN0H/2xtQMhLdWJCzv1PC5SEZ8xnJXRZ
FltucK2tWWrylBKb2zWMd5JDIM559Aa797BYisfESidmcRbuFBy+noE2vJE36uv/
kE7oAo+zpgMhEA0ZL2ObfwT3godyz+aYIKsDLB0YO1QndMX8axCxG2QS5e8ZabWF
S6C0kcYSOMZQXghdW5RpXbMwWQOsPTrhg8K2RK6iYDBLJRQ+CXzvsk9QmpYJOTZW
rUztDYYtchWQgXo28vcQ8pqIQXkVoLLXyNKb9lkGAbbuBUxg6p1r4titUnNA0I3g
U5lfquIGhvzRmSVDmmu2gD+MIWQKqxMxSUpO1VrTdYd0Yo+8os1NYSkzBmY=
=NTp4
-----END PGP SIGNATURE-----

Simen Endsjø wrote 1 weeks ago
The offending commit
(address . 76741@debbugs.gnu.org)
878qpkr4no.fsf@simendsjo.me
My guess is it's this commit:

I tried adding the ebtables package to my system packages, but this did
not have any effect.
-----BEGIN PGP SIGNATURE-----

iQFJBAEBCAAzFiEEsPLWxSk2lf1XtdJVd7xjRbZdbPsFAmfHUKsVHGNvbnRhY3RA
c2ltZW5kc2pvLm1lAAoJEHe8Y0W2XWz7ijgH/0ts/f9QqBeJQHJ2sGCvEx18UwES
lRYeDJ0X9lwNBYfQ5AheunB1T+GWzD1LTF6BU1v4BnGiJP6oW7tBEnJMOxIGNM84
tKiILliULilh9+1wGmQjlKLacqPktmOpJZGa6mrpaxwJ0xJl6zO/vAhYiQWKoWPi
3N6RFNC82EQPcf7DG9mZs/Dvy8q6zsHrcxRmMtwY7gKlaQsQAkxNa/nJA88y/he4
AfUiYBDUtfb2ZheNjf9rFRBMmRqPejpU/eih/LSGd9yrYLX9PCD8y1ULYH0HwS9c
8vyH0Fa+TIUB9JgceO5BSb3itRwT7xyBNnHkSTy3XXaF1akhAdwlN4hOXvI=
=T3Gf
-----END PGP SIGNATURE-----

Maxim Cournoyer wrote 1 weeks ago
Re: bug#76741: libvirtd: could not find a usable firewall backend
(name . Simen Endsjø)(address . contact@simendsjo.me)(address . 76741@debbugs.gnu.org)
87jz93h9c9.fsf_-_@gmail.com
Hi,

Simen Endsjø <contact@simendsjo.me> writes:

Toggle quote (3 lines)
> My guess is it's this commit:
> https://codeberg.org/guix/guix-mirror/commit/bd30b8506687d8ada63d163ee21c0b95f659d97a

It is indeed this commit, but reverting it would break virt-manager at
least, so we need to fix it properly instead.

--
Thanks,
Maxim
Maxim Cournoyer wrote 1 weeks ago
(name . Simen Endsjø)(address . contact@simendsjo.me)(address . 76741-done@debbugs.gnu.org)
87frjrh5wz.fsf_-_@gmail.com
Hi Simen,

Simen Endsjø <contact@simendsjo.me> writes:

Toggle quote (6 lines)
> My guess is it's this commit:
> https://codeberg.org/guix/guix-mirror/commit/bd30b8506687d8ada63d163ee21c0b95f659d97a
>
> I tried adding the ebtables package to my system packages, but this did
> not have any effect.

It was looking for nft or iptables, which were not patched in the source
code (looked up from PATH). I've patched these and a few others in
commit 4226b784b9, and 'make check-system TESTS=libvirt' now passes.

Thank you for the report!

--
Maxim
Closed
?
Your comment

Commenting via the web interface is currently disabled.

To comment on this conversation send an email to 76741@debbugs.gnu.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 76741
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch
You may also tag this issue. See list of standard tags. For example, to set the confirmed and easy tags
mumi command -t +confirmed -t +easy
Or, remove the moreinfo tag and set the help tag
mumi command -t -moreinfo -t +help