** Description changed: + ============================================ + SRU justification + ============================================ + 1. Impact: libvirt may fail to start + 2. Development fix: have libvirt use -w flag to iptables to have it wait rather than fail on lock contention + 3. Stable fix: same as dev fix + 4. Test case: install ufw and libvirt; reboot a few times. + 5. Regression potential: there should be none, this only passes the -w flag to iptables if it is supported. + Running KVM under Ubuntu 13.10 64 bits. + =================================================== When UFW is enabled, the default network won't start automatically when set to do so. Manual startup of the network must be done before starting the first guest. Error in /var/log/libvirt/libvirtd.log when UFW is enabled : 2013-10-28 02:53:31.732+0000: 1485: error : virCommandWait:2348 : internal error: Child process (/sbin/iptables --table filter --insert INPUT --in-interface virbr0 --protocol tcp --destination-port 67 --jump ACCEPT) unexpected exit status 4: Another app is currently holding the xtables lock. Perhaps you want to use the -w option? 2013-10-28 02:53:31.732+0000: 1485: error : networkAddGeneralFirewallRules:1895 : failed to add iptables rule to allow DHCP requests from 'virbr0' Disabling UFW and rebooting solves the issue (default network is started automatically). This behaviour is new in 13.10 (it was working fine in 13.04 and before).
** Changed in: libvirt (Ubuntu Saucy) Status: New => Triaged ** Changed in: libvirt (Ubuntu Saucy) Importance: Undecided => High ** Changed in: libvirt (Ubuntu) Importance: Medium => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1245322 Title: UFW blocks libvirtd default network from starting automatically in Saucy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1245322/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs