[SOLVED] Firewalld fails to start on openSUSE Leap 15.0

Brother77 · 02-18-2019, 12:34 PM

Dear readers,
Since some time firewalld fails to start, have some answers for other distributions but none of tem helped here.

#systemctl status firewalld.service
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2019-02-18 10:11:20 PST; 17min ago
Docs: man:firewalld(1)
Process: 5893 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=1/FAILURE)
Main PID: 5893 (code=exited, status=1/FAILURE)

Feb 18 10:11:20 chenrezi.domain systemd[1]: Starting firewalld - dynamic firewall daemon...
Feb 18 10:11:20 chenrezi.domain systemd[1]: firewalld.service: Main process exited, code=exited, status=1/FAILURE
Feb 18 10:11:20 chenrezi.domain systemd[1]: Failed to start firewalld - dynamic firewall daemon.
Feb 18 10:11:20 chenrezi.domain systemd[1]: firewalld.service: Unit entered failed state.
Feb 18 10:11:20 chenrezi.domain systemd[1]: firewalld.service: Failed with result 'exit-code'.

Thanks in advantage!

Peter

Brother77 · 02-18-2019, 11:12 PM

More information; output firewall-cmd command gives:

# firewall-cmd --help
Traceback (most recent call last):
File "/usr/bin/firewall-cmd", line 24, in <module>
from gi.repository import GObject
File "/usr/lib64/python3.6/site-packages/gi/__init__.py", line 42, in <module>
from . import _gi
ImportError: /usr/lib64/libgio-2.0.so.0: undefined symbol: g_utf8_validate_len

Have checked integrity of python3-gobject and libgio-2_0-0 but nothing wrong there.

John VV · 02-19-2019, 12:58 AM

the first thing in debugging a system is

What changed ?

what has changed from when it WAS working to now when it is not ?

the error

Code:

Error: /usr/lib64/libgio-2.0.so.0: undefined symbol: g_utf8_validate_len

suggests that a incompatable version is installed

did you by chance install some ODD repo for zypper

Brother77 · 02-19-2019, 01:10 PM

Did a KDE upgrade and downgraded again because frescobaldi stopt working some weeks ago that might have caused it.
See if i can find some "left behind" packages"

Have already removed some.
rpmqpack| xargs rpm -qi | grep 'Distribution: ' | sort -u
Distribution: (none)
Distribution: Essentials / openSUSE_Leap_15.0
Distribution: Extra / openSUSE_Leap_15.0
Distribution: M17N:fonts / openSUSE_Leap_15.0
Distribution: Multimedia / openSUSE_Leap_15.0
Distribution: SuSE / Leap_15.0
Distribution: home:PunisherHD:Trinity / openSUSE_Leap_15.0
Distribution: home:PunisherHD:Trinity:unstable / openSUSE_Leap_15.0
Distribution: home:ecsos / openSUSE_Leap_15.0
Distribution: home:in4ops:internals--c--linux_sys--o--kernel--f--kernel_mainline / openSUSE_Leap_15.0
Distribution: mozilla / openSUSE_Leap_15.0
Distribution: openSUSE Leap 15.0

Believe Essentials and Extra is also from the upgrade.

ferrari · 02-19-2019, 01:52 PM

Post a list of currently configured repos

Code:

zypper lr -d

and perhaps investigate any package version inconsistencies with

Code:

zypper ve --dry-run

Report back.

Brother77 · 02-19-2019, 03:02 PM

Thank you both for your help!

Conclusion is that after the KDE up and downgrade some "left behind" packages from the QT and framwork5 distributions caused some problems, after replacing these
firewalld works again, there might still be some problems with other packages like kdeSU and some hotkeys.

Code:

# zypper lr -d
 1 | M17N                                | Fonts M17N                                                         | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/reposit...USE_Leap_15.0/                                                          |        
 2 | google-chrome                       | google-chrome                                                      | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://dl.google.com/linux/chrome/rpm/stable/x86_64                                                                                |        
 3 | http-download.opensuse.org-077ea0be | home:PunisherHD:Trinity:unstable                                   | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/reposit...USE_Leap_15.0/                                  |        
 4 | http-download.opensuse.org-729e7a1c | home:in4ops:internals--c--linux_sys--o--kernel--f--kernel_mainline | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/reposit...USE_Leap_15.0/ |        
 5 | http-download.opensuse.org-7f2d2476 | home:ecsos                                                         | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/reposit...USE_Leap_15.0/                                                          |        
 6 | http-download.opensuse.org-c83563b7 | home:PunisherHD:Trinity                                            | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/reposit...USE_Leap_15.0/                                            |        
 7 | http-download.opensuse.org-d5cb9961 | home:PunisherHD:opensuse                                           | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/reposit...USE_Leap_15.0/                                           |        
 8 | http-opensuse-guide.org-9787c2da    | libdvdcss repository                                               | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://opensuse-guide.org/repo/openSUSE_Leap_15.0/                                                                                 |        
 9 | mozilla                             | Mozilla based projects (openSUSE_Leap_15.0)                        | Yes     | (r ) Yes  | No      |   99     | rpm-md | http://download.opensuse.org/reposit...USE_Leap_15.0/                                                              |        
10 | packman                             | packman                                                            | Yes     | (r ) Yes  | Yes     |   90     | rpm-md | http://ftp.gwdg.de/pub/linux/misc/pa...USE_Leap_15.0/                                                                 |        
11 | repo-debug                          | openSUSE-Leap-15.0-Debug                                           | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/d...15.0/repo/oss/                                                                |        
12 | repo-debug-non-oss                  | openSUSE-Leap-15.0-Debug-Non-Oss                                   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/d.../repo/non-oss/                                                            |        
13 | repo-debug-update                   | openSUSE-Leap-15.0-Update-Debug                                    | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/u...leap/15.0/oss/                                                                           |        
14 | repo-debug-update-non-oss           | openSUSE-Leap-15.0-Update-Debug-Non-Oss                            | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/u.../15.0/non-oss/                                                                       |        
15 | repo-non-oss                        | openSUSE-Leap-15.0-Non-Oss                                         | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distrib.../repo/non-oss/                                                                  |        
16 | repo-oss                            | openSUSE-Leap-15.0-Oss                                             | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distrib...15.0/repo/oss/                                                                      |        
17 | repo-source                         | openSUSE-Leap-15.0-Source                                          | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/...15.0/repo/oss/                                                               |        
18 | repo-source-non-oss                 | openSUSE-Leap-15.0-Source-Non-Oss                                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/.../repo/non-oss/                                                           |        
19 | repo-update                         | openSUSE-Leap-15.0-Update                                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.0/oss/                                                                                 |        
20 | repo-update-non-oss                 | openSUSE-Leap-15.0-Update-Non-Oss                                  | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.0/non-oss/                                                                             |        
21 | skype-stable                        | skype (stable)                                                     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://repo.skype.com/rpm/stable/

## zypper ve --dry-run
Loading repository data...
Reading installed packages...

Dependencies of all installed packages are satisfied.

ferrari · 02-19-2019, 06:18 PM

Show the installed packages...

Code:

zypper se -si libgio python

The code tags need to look like [code][/cod.]

Brother77 · 02-19-2019, 06:28 PM

Code:

# zypper se -si libgio python
Loading repository data...
Reading installed packages...

S  | Name                    | Type    | Version                                | Arch   | Repository               
---+-------------------------+---------+----------------------------------------+--------+--------------------------
i+ | gimp-plugins-python     | package | 2.8.22-lp150.3.8                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | libgio-2_0-0            | package | 2.54.3-lp150.3.6.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | libpython2_7-1_0        | package | 2.7.14-lp150.6.6.1                     | x86_64 | openSUSE-Leap-15.0-Update
i  | libpython2_7-1_0-32bit  | package | 2.7.14-lp150.6.6.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | libpython3_6m1_0        | package | 3.6.5-lp150.2.6.1                      | x86_64 | openSUSE-Leap-15.0-Update
i+ | python                  | package | 2.7.14-lp150.6.6.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | python-base             | package | 2.7.14-lp150.6.6.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | python-curses           | package | 2.7.14-lp150.6.6.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | python-gobject2         | package | 2.28.7-lp150.1.4                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python-gtk              | package | 2.24.0-lp150.1.11                      | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python-ldb              | package | 1.2.3-lp150.2.3.1                      | x86_64 | openSUSE-Leap-15.0-Update
i+ | python-poppler-qt5      | package | 0.25.0-lp150.1.6                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python-qt5-utils        | package | 5.10.1-lp150.3.1                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python-rpm-macros       | package | 2017.12.22.d9968ab-lp150.1.6           | noarch | openSUSE-Leap-15.0-Oss   
i+ | python-sip-common       | package | 4.19.7-lp150.1.3                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python-solv             | package | 0.6.35-lp150.2.3.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | python-talloc           | package | 2.1.11-lp150.2.3.1                     | x86_64 | openSUSE-Leap-15.0-Update
i  | python-talloc-32bit     | package | 2.1.11-lp150.2.3.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | python-tdb              | package | 1.3.15-lp150.2.3.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | python-tevent           | package | 0.9.36-lp150.2.6.1                     | x86_64 | openSUSE-Leap-15.0-Update
i  | python-wxWidgets-3_0    | package | 3.0.2.0-lp150.2.5                      | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python-xml              | package | 2.7.14-lp150.6.6.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | python2-cairo           | package | 1.15.1-lp150.1.6                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python2-configobj       | package | 5.0.6-lp150.1.3                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python2-dbus-python     | package | 1.2.4-lp150.4.4                        | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python2-decorator       | package | 4.2.1-lp150.1.3                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python2-gobject         | package | 3.26.1-lp150.1.4                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python2-numpy           | package | 1.14.0-lp150.2.15                      | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python2-pyudev          | package | 0.21.0-lp150.3.2                       | noarch | openSUSE-Leap-15.0-Oss   
i+ | python2-rpm             | package | 4.14.1-lp150.9.9.1                     | x86_64 | openSUSE-Leap-15.0-Update
i+ | python2-six             | package | 1.11.0-lp150.2.3                       | noarch | openSUSE-Leap-15.0-Oss   
i  | python2-twodict         | package | 1.2-lp150.1.3                          | noarch | openSUSE-Leap-15.0-Oss   
i+ | python2-urwid           | package | 2.0.1-lp150.1.2                        | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python3                 | package | 3.6.5-lp150.2.6.1                      | x86_64 | openSUSE-Leap-15.0-Update
i  | python3-PySocks         | package | 1.6.8-lp150.1.3                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-apparmor        | package | 2.12-lp150.6.6.1                       | x86_64 | openSUSE-Leap-15.0-Update
i+ | python3-appdirs         | package | 1.4.3-lp150.1.6                        | noarch | openSUSE-Leap-15.0-Oss   
i  | python3-asn1crypto      | package | 0.24.0-lp150.1.3                       | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-base            | package | 3.6.5-lp150.2.6.1                      | x86_64 | openSUSE-Leap-15.0-Update
i+ | python3-bind            | package | 9.11.2-lp150.8.6.1                     | noarch | openSUSE-Leap-15.0-Update
i  | python3-cairo           | package | 1.15.1-lp150.1.6                       | x86_64 | openSUSE-Leap-15.0-Oss   
i  | python3-certifi         | package | 2018.1.18-lp150.1.2                    | noarch | openSUSE-Leap-15.0-Oss   
i  | python3-cffi            | package | 1.11.2-lp150.3.3.1                     | x86_64 | openSUSE-Leap-15.0-Update
i  | python3-chardet         | package | 3.0.4-lp150.2.7                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-cmdln           | package | 2.0.0-lp150.1.3                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-createrepo_c    | package | 0.10.0.git20170131.04828e6-lp150.3.1   | x86_64 | openSUSE-Leap-15.0-Oss   
i  | python3-cryptography    | package | 2.1.4-lp150.3.3.1                      | x86_64 | openSUSE-Leap-15.0-Update
i+ | python3-cupshelpers     | package | 1.5.7-lp150.5.1                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-curses          | package | 3.6.5-lp150.2.6.1                      | x86_64 | openSUSE-Leap-15.0-Update
i+ | python3-dbm             | package | 3.6.5-lp150.2.6.1                      | x86_64 | openSUSE-Leap-15.0-Update
i+ | python3-dbus-python     | package | 1.2.4-lp150.4.4                        | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python3-decorator       | package | 4.2.1-lp150.1.3                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-firewall        | package | 0.5.5-lp150.2.18.1                     | noarch | openSUSE-Leap-15.0-Update
i+ | python3-gobject         | package | 3.26.1-lp150.1.4                       | x86_64 | openSUSE-Leap-15.0-Oss   
i  | python3-gobject-Gdk     | package | 3.26.1-lp150.1.4                       | x86_64 | openSUSE-Leap-15.0-Oss   
i  | python3-gobject-cairo   | package | 3.26.1-lp150.1.4                       | x86_64 | openSUSE-Leap-15.0-Oss   
i  | python3-idna            | package | 2.6-lp150.1.3                          | noarch | openSUSE-Leap-15.0-Oss   
i  | python3-ndg-httpsclient | package | 0.4.0-lp150.1.3                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-packaging       | package | 16.8-lp150.1.6                         | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-pip             | package | 10.0.1-lp150.1.2                       | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-ply             | package | 3.10-lp150.1.6                         | noarch | openSUSE-Leap-15.0-Oss   
i  | python3-py              | package | 1.5.2-lp150.1.3                        | noarch | openSUSE-Leap-15.0-Oss   
i  | python3-pyOpenSSL       | package | 17.5.0-lp150.2.3.1                     | noarch | openSUSE-Leap-15.0-Update
i  | python3-pyasn1          | package | 0.4.2-lp150.1.3                        | noarch | openSUSE-Leap-15.0-Oss   
i  | python3-pycparser       | package | 2.17-lp150.1.8                         | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-pycups          | package | 1.9.73-lp150.1.7                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python3-pycurl          | package | 7.43.0.1-lp150.2.5                     | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python3-pyparsing       | package | 2.2.0-lp150.1.12                       | noarch | openSUSE-Leap-15.0-Oss   
i  | python3-pysmbc          | package | 1.0.15.8-lp150.1.3                     | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python3-qt5             | package | 5.10.1-lp150.3.1                       | x86_64 | openSUSE-Leap-15.0-Oss   
i  | python3-requests        | package | 2.18.4-lp150.1.6                       | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-setuptools      | package | 38.4.1-lp150.1.3                       | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-sip             | package | 4.19.7-lp150.1.3                       | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python3-six             | package | 1.11.0-lp150.2.3                       | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-slip            | package | 0.6.5-lp150.4.3                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-slip-dbus       | package | 0.6.5-lp150.4.3                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | python3-speechd         | package | 0.8.8-lp150.1.2                        | x86_64 | openSUSE-Leap-15.0-Oss   
i  | python3-urllib3         | package | 1.22-lp150.4.1                         | noarch | openSUSE-Leap-15.0-Oss   
i  | python3-vapoursynth     | package | 43-lp150.2.1                           | x86_64 | openSUSE-Leap-15.0-Oss   
i+ | python3-zypp-plugin     | package | 0.6.3-lp150.1.2                        | noarch | openSUSE-Leap-15.0-Oss   
i+ | samba-python            | package | 4.7.10+git.124.8d97fe90926-lp150.3.9.1 | x86_64 | openSUSE-Leap-15.0-Update

ferrari · 02-19-2019, 11:49 PM

The 'Post Reply' editor has the '#' (code) button. You've taken my "[/code.]" tag too literally. It's actually "[/code]" but I didn't post that with the accompanying "[code]" tag for hopefully obvious reasons. As you can tell, the formatting is not preserved when posting output without CODE tags.

ferrari · 02-20-2019, 12:07 AM

The installed packages look to match mine for openSUSE Leap 15....I'm at the limits of my knowledge with this. It's not clear to me where the problem might be. If you can't get a resolution here, consider posting this issue at the openSUSE Forums as well.

Sauerland · 02-20-2019, 10:37 AM

Please post:

Code:

zypper se -si glib firewall

Brother77 · 02-20-2019, 11:28 AM

[Solved]
Thank you all so much everyone!, firewalld is working again since all packages that where left behind after a failed upgrade and downgrade where remove.

Distributions to remove (some replaced) where Frameworks5*, KDE:Qt* and devel:languages:*

Code:

#rpmqpack | xargs rpm -qi | grep 'Distribution: ' | sort -u

Actually a bit more tricky because the upgrade had caused some other packages from the "good" distributions to take a wrong version and did not go back after the KDE downgrade. So i also downgraded a few python packages.

ferrari · 02-20-2019, 12:18 PM

Well done. Thanks for the update.