centos o虚拟驾驶舱安装强制防火墙状态错误

jgovgodb  于 2022-11-23  发布在  其他
关注(0)|答案(2)|浏览(305)

我正在尝试按照https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_cockpit_web_interface/在Centos Stream上部署自托管oVirt
但是,我在虚拟机部署期间收到以下错误

[ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Enforce firewalld status]
[ ERROR ] fatal: [localhost]: FAILED! => {"msg": "The conditional check 'firewalld_s.status.SubState != 'running' or firewalld_s.status.LoadState == 'masked'' failed. The error was: error while evaluating conditional (firewalld_s.status.SubState != 'running' or firewalld_s.status.LoadState == 'masked'): 'dict object' has no attribute 'SubState'\n\nThe error appears to be in '/usr/share/ansible/collections/ansible_collections/ovirt/ovirt/roles/hosted_engine_setup/tasks/pre_checks/validate_firewalld.yml': line 8, column 5, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n register: firewalld_s\n - name: Enforce firewalld status\n ^ here\n"}

Firewalld已在主机Centos上启动并运行:

public zone
Interfaces eno1
Service TCP UDP 
ssh 
22
dhcpv6-client   
546
cockpit 
9090
nfs 
2049
nfs3    
2049
2049
rpc-bind    
111
111
mountd  
20048
20048
ovirt-imageio   
54322
ovirt-storageconsole    
55863, 39543
ovirt-vmconsole 
2223
Additional ports    2049, 80, 443, 54323, 6442, 9696, 6100, 2222, 16514, 111, 5900-6923, 49152-49215, 6081, 53, 35357   2049, 7410, 161, 53, 123

libvirt zone
Interfaces virbr0
Service TCP UDP 
dhcp    
67
dhcpv6  
547
dns 
53
53
ssh 
22
tftp    
69
oVirt   
7777
ovirt-imageio   
54322
ovirt-storageconsole    
55863, 39543
ovirt-vmconsole 
2223

请帮我找到一个方向,挖掘解决这个问题

2ul0zpep

2ul0zpep1#

虽然不是一个完整的解决方案,但在部署节点上执行时,Reddit帖子建议的绕过检查对我来说是有效的:https://www.reddit.com/r/ovirt/comments/kigha8/hosted_engine_fails_at_enforce_firewalld_status/
来自Reddit上的u/fhallberg:
mv /usr/共享/ansible/集合/ansible_集合/ovirt/ovirt/角色/托管引擎设置/任务/预检查/验证防火墙.yml /root
mv /usr/共享/ansible/集合/ansible集合/ovirt/ovirt/角色/托管引擎设置/任务/预检查/验证服务状态.yml root

j0pj023g

j0pj023g2#

您可能缺少如下所示的区域public
1.启用OR取消屏蔽服务

sudo systemctl enable --now cockpit.socket
#OR
sudo systemctl unmask cockpit.socket

2.添加防火墙例外

sudo firewall-cmd --permanent --zone=public --add-service=cockpit
sudo firewall-cmd --reload

相关问题