Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-29893

[RHEL-10] virbr0 cannot be started as ipt_REJECT.ko.xz module cannot be found

    • libvirt-10.4.0-1.el10
    • None
    • None
    • rhel-sst-virtualization-networking
    • ssg_virtualization
    • 19
    • None
    • Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • None
    • All
    • 10.4.0
    • None

      What were you trying to do that didn't work?

      ipt_REJECT.ko.xz is moved from kernel-modules-core to kernel-modules-extra, but it's not in the deplist of libvirt-daemon-driver-network, so start virbr0 will fail.

      $ dnf provides */ipt_REJECT.ko.xz
      Warning: failed loading '/etc/yum.repos.d/rcm-tools.repo', skipping.
      Last metadata expiration check: 2:17:31 ago on Wed 20 Mar 2024 10:00:24 PM EDT.
      kernel-modules-extra-6.8.0-0.rc3.20240209git1f719a2f3fa6.31.el10.aarch64 : Extra kernel modules to match the kernel
      Repo        : beaker-BaseOS
      Matched from:
      Filename    : /lib/modules/6.8.0-0.rc3.20240209git1f719a2f3fa6.31.el10.aarch64/kernel/net/ipv4/netfilter/ipt_REJECT.ko.xz 

      I am not sure when libvirt will switch from iptables to firewalld, but before that time, we should handle this issue.

      Please provide the package NVR for which bug is seen:

      Compose: RHEL-10.0-20240318.5

      libvirt: libvirt-10.0.0-3.el10.aarch64

      iptables: iptables-nft-1.8.10-7.el10.aarch64

      How reproducible:

      always

      Steps to reproduce

      1.  virsh net-start --network default

      Expected results

      virbr0 is present

      Actual results

      error: internal error: Failed to apply firewall rules /usr/sbin/iptables -w --table filter --insert LIBVIRT_FWO --in-interface virbr0 --jump REJECT: Warning: Extension REJECT revision 0 not supported, missing kernel module?
      iptables v1.8.10 (nf_tables):  RULE_INSERT failed (No such file or directory): rule in chain LIBVIRT_FWO

      After install kernel-modules-extra, can fix this issue.

              lstump@redhat.com Laine Stump
              rhn-support-yihyu Yihuang Yu
              virt-maint virt-maint
              Yanqiu Zhang Yanqiu Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              19 Start watching this issue

                Created:
                Updated: