Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 1520532 - firewalld package upgrade causes tunnel drivers to unload
Summary: firewalld package upgrade causes tunnel drivers to unload
Keywords:
Status: ASSIGNED
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: firewalld
Version: 8.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: 8.1
Assignee: Eric Garver
QA Contact: qe-baseos-daemons
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-12-04 16:20 UTC by Eric Garver
Modified: 2019-03-01 20:29 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Bug
Target Upstream Version:


Attachments (Terms of Use)

Description Eric Garver 2017-12-04 16:20:48 UTC
As reported in bug 1512575 when the firewalld package is upgraded it will do a full restart and recursively unload kernel modules. This causes a problem for other packages that may be using those modules or modules that depend upon them.

e.g.
  nf_conntrack.ko used by openvswitch.ko
  vport-geneve.ko used by openvswitch.ko
  geneve.ko used by vport-geneve.ko

firewalld package upgrade will attempt to recursively unload nf_conntrack and therefore also openvswitch, vport-geneve, geneve. This will cause openvswitch tunnels unrelated to firewalld to go down.

On daemon stop firewalld attempts to unload kernel modules (CleanupOnExit in firewalld.conf). Perhaps we should introduced CleanupModulesOnExit and default to no. Users can still use --complete-reload to force modules to be unloaded/reloaded.


Note You need to log in before you can comment on or make changes to this bug.