November 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1214181] New: VUL-0: CVE-2023-39952: nextcloud: unrestricted subfolder access despite advanced permission checks
by bugzilla_noreply＠suse.com 16 Apr '24

16 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214181 Bug ID: 1214181 Summary: VUL-0: CVE-2023-39952: nextcloud: unrestricted subfolder access despite advanced permission checks Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/374976/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: ecsos(a)schirra.net Reporter: carlos.lopez(a)suse.com QA Contact: security-team(a)suse.de Target Milestone: --- Found By: --- Blocker: --- CVE-2023-39952 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1, a user can access files inside a subfolder of a groupfolder accessible to them, even if advanced permissions would block access to the subfolder. Nextcloud Server versions 25.0.8, 26.0.3, and 27.0.1 and Nextcloud Enterprise Server versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1 contain a patch for this issue. No known workarounds are available. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39952 https://bugzilla.redhat.com/show_bug.cgi?id=2231145 https://www.cve.org/CVERecord?id=CVE-2023-39952 https://github.com/nextcloud/groupfolders/issues/1906 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c… https://github.com/nextcloud/server/pull/38890 https://hackerone.com/reports/1808079 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1215343] New: Aeon does not support webp images.
by bugzilla_noreply＠suse.com 15 Apr '24

15 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1215343 Bug ID: 1215343 Summary: Aeon does not support webp images. Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Desktop Environment Assignee: rbrown(a)suse.com Reporter: gchm2(a)quicknet.nl QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Aeon dows not support webp images so those images cannot be set as a wallpaper in GNOME and nautilus cannot create thumbnails of those images. I think the package webp-pixbuf-loader should be part of the base system for a better out of the box experience. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1213496] New: Man pages and documentation in general missing
by bugzilla_noreply＠suse.com 15 Apr '24

15 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1213496 Bug ID: 1213496 Summary: Man pages and documentation in general missing Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Distrobox Assignee: rbrown(a)suse.com Reporter: kjong+lists(a)neobits.nl QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- In Aeon the system is immutable and shouldn't be touched. However, there are no man pages installed. This is not really user-friendly. But maybe it's on purpose to make sure people don't touch their base install? But even after doing `distrobox enter` and you download and enter the default distrobox, which is `registry.opensuse.org/opensuse/distrobox:latest`, I still don't get manual pages. This makes using the system harder than it should be. What's the reasoning to not include documentation? On production non-interactive containers I get why man pages are a waste of disk space. But distrobox is meant to be used as a normal user environment. In such an environment people expect to find man pages. Otherwise the system is in the way of getting things done. In contrast, Fedora Silverblue has the man pages installed in the base OS, but also in their default toolbox image. Which to me makes perfect sense. Humans are going to use those environment interactively. Googling/Ducking for man pages online would be weird and the `--help` output isn't always complete or fully helpful. Can man pages be included in Aeon and in the toolbox containers? -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1214614] New: [suggested] add "sane-backends" in default install
by bugzilla_noreply＠suse.com 15 Apr '24

15 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214614 Bug ID: 1214614 Summary: [suggested] add "sane-backends" in default install Classification: openSUSE Product: openSUSE Aeon Version: Current Hardware: All OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Base Assignee: rbrown(a)suse.com Reporter: christophe.durand(a)my.mail.fr QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0 Build Identifier: Usb Scanners are not recognized by default Aeon installation. Simple-scan flatpak complains about missing drivers. To have fonctionnal usb scanner, I need to add san-backends and san-backends-autoconfig. Reproducible: Always Steps to Reproduce: install simple-scan flatpak try to use USB scanner Actual Results: missing drivers Expected Results: USB scanner should work out of the box (at least for a desktop environnement) no Scanner drivers installed by default in Aeon. Can be solved with sane-backends installation. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1212951] New: AUDIT-1: nqptp: precision time protocol daemon
by bugzilla_noreply＠suse.com 15 Apr '24

15 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1212951 Bug ID: 1212951 Summary: AUDIT-1: nqptp: precision time protocol daemon Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: wolfgang.frisch(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- nqptp is a Precision Time Protocol daemon. Upstream: https://github.com/mikebrady/nqptp This daemon runs as root and, according to upstream: > nqptp has not been checked or audited for security issues. Note that it must run in root mode. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1215846] New: Bluetooth under TW will not pair with other devices, although they are discovered
by bugzilla_noreply＠suse.com 09 Apr '24

09 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1215846 Bug ID: 1215846 Summary: Bluetooth under TW will not pair with other devices, although they are discovered Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: stakanov(a)disroot.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This hits a ASUS dongle with Bus 001 Device 004: ID 0b05:184c ASUSTek Computer, Inc. 802.11ac NIC which is also WLAN (WLAN/BT). The device can see the other but cannot pair. Neither is a window opened when the PC tries to connect to the device (pairing aborts prematurely), nor is it opened when a device tries to connect to the PC (no device found) although the BT device is shown with name. On Leap 15.4 the very same device pairs flawlessly. So the issue is restricted as it appears to TW. in journalctl I find the protocol of "timeout": 16:43:19 localhost bluedevil-wizard[19224]: kf.bluezqt: PendingCall Error: "Authentication Timeout" set 30 16:43:03 localhost systemd[6683]: Started Aggiungi dispositivo Bluetooth - Aggiungi dispositivo Bluetooth. set 30 16:42:22 localhost akonadi_pop3_resource[7978]: DIGEST-MD5 common mech free set 30 16:42:20 localhost akonadi_pop3_resource[7976]: DIGEST-MD5 common mech free set 30 16:41:08 localhost systemsettings[19149]: Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. set 30 16:41:08 localhost systemsettings[19149]: Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. set 30 16:41:08 localhost systemsettings[19149]: Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. set 30 16:41:08 localhost systemsettings[19149]: Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. set 30 16:41:08 localhost systemsettings[19149]: Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. set 30 16:41:08 localhost systemsettings[19149]: Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. set 30 16:41:08 localhost systemsettings[19149]: QQmlEngine::setContextForObject(): Object already has a QQmlContext set 30 16:41:08 localhost systemsettings[19149]: file:///usr/lib64/qt5/qml/org/kde/kirigami.2/ScrollablePage.qml:200:9: QML MouseArea: Binding loop detected for property "width" set 30 16:41:08 localhost systemsettings[19149]: file:///usr/lib64/qt5/qml/org/kde/kirigami.2/ScrollablePage.qml:200:9: QML MouseArea: Binding loop detected for property "width" set 30 16:41:08 localhost systemd[6683]: Started Impostazioni di sistema - Impostazioni di sistema. set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:49: TypeError: Cannot read property 'right' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:48: TypeError: Cannot read property 'left' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:49: TypeError: Cannot read property 'right' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:48: TypeError: Cannot read property 'left' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:49: TypeError: Cannot read property 'right' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:48: TypeError: Cannot read property 'left' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:49: TypeError: Cannot read property 'right' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:48: TypeError: Cannot read property 'left' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:49: TypeError: Cannot read property 'right' of null set 30 16:40:35 localhost plasmashell[6920]: file:///usr/share/plasma/plasmoids/org.papylhomme.diskmonitor/contents/ui/PopupDialog.qml:48: TypeError: Cannot read property 'left' of null set 30 16:43:28 localhost dbus-daemon[1608]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.277" (uid=1000 pid=7050 comm="/usr/bin/wireplumber") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.2" (uid=0 pid=1607 c> set 30 16:43:28 localhost dbus-daemon[1608]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.277" (uid=1000 pid=7050 comm="/usr/bin/wireplumber") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.2" (uid=0 pid=1607 c> set 30 16:43:28 localhost dbus-daemon[1608]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.277" (uid=1000 pid=7050 comm="/usr/bin/wireplumber") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.2" (uid=0 pid=1607 c> set 30 16:43:28 localhost dbus-daemon[1608]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.277" (uid=1000 pid=7050 comm="/usr/bin/wireplumber") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.2" (uid=0 pid=1607 c> set 30 16:43:28 localhost dbus-daemon[1608]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.277" (uid=1000 pid=7050 comm="/usr/bin/wireplumber") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.2" (uid=0 pid=1607 c> set 30 16:43:28 localhost dbus-daemon[1608]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.277" (uid=1000 pid=7050 comm="/usr/bin/wireplumber") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.2" (uid=0 pid=1607 c> set 30 16:43:28 localhost dbus-daemon[1608]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.277" (uid=1000 pid=7050 comm="/usr/bin/wireplumber") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.2" (uid=0 pid=1607 c> set 30 16:43:28 localhost dbus-daemon[1608]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.277" (uid=1000 pid=7050 comm="/usr/bin/wireplumber") interface="(unset)" member="(unset)" error name="org.bluez.MediaEndpoint1.Error.NotImplemented" requested_reply="0" destination=":1.2" (uid=0 pid=1607 c> set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/opus_05_duplex set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSink/opus_05_duplex set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/opus_05 set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSink/opus_05 set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/faststream_duplex set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/faststream set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/aptx_ll_duplex_0 set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/aptx_ll_duplex_1 set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/aptx_ll_0 set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/aptx_ll_1 set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/sbc_xq set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSink/sbc_xq set 30 16:43:28 localhost systemd[1]: Starting Load/Save RF Kill Switch Status... set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/sbc set 30 16:43:28 localhost systemsettings[19149]: file:///usr/share/kpackage/kcms/kcm_bluetooth/contents/ui/General.qml:35: TypeError: Cannot read property 'name' of null set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSink/sbc set 30 16:43:28 localhost systemsettings[19149]: file:///usr/share/kpackage/kcms/kcm_bluetooth/contents/ui/General.qml:41: TypeError: Cannot read property 'address' of null set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/aac set 30 16:43:28 localhost systemsettings[19149]: file:///usr/share/kpackage/kcms/kcm_bluetooth/contents/ui/General.qml:47: TypeError: Cannot read property 'powered' of null set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSink/aac set 30 16:43:28 localhost systemsettings[19149]: file:///usr/share/kpackage/kcms/kcm_bluetooth/contents/ui/General.qml:53: TypeError: Cannot read property 'discoverable' of null set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/aptx set 30 16:43:28 localhost systemsettings[19149]: file:///usr/share/kpackage/kcms/kcm_bluetooth/contents/ui/General.qml:24:9: Unable to assign [undefined] to QObject* set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSink/aptx set 30 16:43:28 localhost systemsettings[19149]: file:///usr/share/kpackage/kcms/kcm_bluetooth/contents/ui/General.qml:24:9: Unable to assign [undefined] to QObject* set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/aptx_hd set 30 16:43:28 localhost systemd-udevd[1083]: /etc/udev/rules.d/55-brother-libsane-type1-inst.rules:14 Invalid key 'SYSFS'. set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSink/aptx_hd set 30 16:43:28 localhost systemd-udevd[1083]: /etc/udev/rules.d/55-brother-brscan4-libsane-type1.rules:9 Invalid key 'SYSFS'. set 30 16:43:28 localhost bluetoothd[1607]: Endpoint unregistered: sender=:1.277 path=/MediaEndpoint/A2DPSource/ldac set 30 16:43:28 localhost plasmashell[6920]: file:///usr/lib64/qt5/qml/org/kde/plasma/extras/PlaceholderMessage.qml:238:5: QML Heading: Binding loop detected for property "verticalAlignment" set 30 16:43:28 localhost plasmashell[6920]: file:///usr/lib64/qt5/qml/org/kde/plasma/extras/PlaceholderMessage.qml:238:5: QML Heading: Binding loop detected for property "verticalAlignment" set 30 16:43:28 localhost kernel: usb 1-1.7: USB disconnect, device number 6 set 30 16:43:19 localhost bluedevil-wizard[19224]: kf.bluezqt: PendingCall Error: "Authentication Timeout" set 30 16:43:03 localhost systemd[6683]: Started Aggiungi dispositivo Bluetooth - Aggiungi dispositivo Bluetooth. So it is currently not possible to pair certain devices (in particular ones following older BT protocols (here a Samsung GPS/UMTS phone). I doubt the problem is only given by the dongle, it appears it also hits other hardware BT like Cambridge Silicon Radio BT dongle. So changing dongle does not change the issue in TW. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1217342] New: VirtualBox: Starting VM hangs if hosts system uses newer kernel
by bugzilla_noreply＠suse.com 08 Apr '24

08 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1217342 Bug ID: 1217342 Summary: VirtualBox: Starting VM hangs if hosts system uses newer kernel Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs(a)suse.de Reporter: ceggers(a)arri.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 870854 --> https://bugzilla.suse.com/attachment.cgi?id=870854&action=edit dmesg output after trying to start a VirtualBox VM Machine: DELL Precision 5680 In order to get sound on this machine running, I was forced to install a contemporary kernel (6.6.0-lp155.8) from the Kernel:stable:Backport:standard repository (sound works fine after installing this kernel, latest Alsa libs AND sof-firmware). Unfortunately, VirtualBox runs not fine at all. I installed the KMP (in the same version) from Kernel:stable:Backport:KMP:standard and VirtualBox starts without complaining about missing modules (and I see vboxnetadp, vboxnetflt and vboxdrv in the output of lsmod). But when I try to run a virtual machine, the sidebar shows only a progress bar "VM hochfahren ..." , stuck at 20%. Additionally I get much output in the kernel log (see attached file). I have the same problem with different virtual machines (Windows 11, openSUSE). When booting the host system with the openSUSE Leap 15.5 stock kernel (currently 5.14.21), VirtualBox VMs run fine. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1214795] New: [Build 518.1] openQA test fails in sshfs - sshfs can not be installed on s390x
by bugzilla_noreply＠suse.com 06 Apr '24

06 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214795 Bug ID: 1214795 Summary: [Build 518.1] openQA test fails in sshfs - sshfs can not be installed on s390x Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: S/390-64 URL: https://openqa.opensuse.org/tests/3534841/modules/sshf s/steps/19 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: ada.lovelace(a)gmx.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation sshfs tests are failing during the installation of sshfs on s390x. The capability can not be found: 2023-08-29 14:32:30 <2> susetest(39392) [zypper:req] SolverRequester.cc(install):325 sshfs cap:sshfs not found 2023-08-29 14:32:30 <5> susetest(39392) [zypp-core] Exception.cc(log):186 installremove.cc(handleFeedback):41 THROW: name or capability not found 2023-08-29 14:32:30 <5> susetest(39392) [zypp-core] Exception.cc(log):186 basecommand.cc(run):281 CAUGHT: name or capability not found at opensuse/lib/utils.pm line 675. openQA test in scenario opensuse-15.6-DVD-s390x-textmode-server@s390x-zVM-vswitch-l2 fails in [sshfs](https://openqa.opensuse.org/tests/3534841/modules/sshfs/steps/19) ## Test suite description The base test suite is used for job templates defined in YAML documents. It has no settings of its own. ## Reproducible Fails since (at least) Build [507.2](https://openqa.opensuse.org/tests/3505261) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=s390x&distri=opensuse… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1216871] New: Thinkpad P16 with Open GPU kernel modules does not resume after sleep/hibernate (BUG: kernel NULL pointer dereference, address: 0000000000000008)
by bugzilla_noreply＠suse.com 04 Apr '24

04 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1216871 Bug ID: 1216871 Summary: Thinkpad P16 with Open GPU kernel modules does not resume after sleep/hibernate (BUG: kernel NULL pointer dereference, address: 0000000000000008) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: petr.vorel(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This is similar to #1211950, but I don't use nouveau but these packages nvidia-open-driver-G06-signed-kmp-default kernel-firmware-nvidia-gsp-G06 nvidia-open-driver-G06-signed-kmp suggested in [1]. I tried both of these [2], but although sleep worked it did not resume: sudo systemctl suspend sudo systemctl hibernate (I searched to [2] due errors reported in dmesg after trying to suspend with echo mem > /sys/power/state). suspend is ok: [ 0.000000] Linux version 6.5.9-1-default (geeko@buildhost) (gcc (SUSE Linux) 13.2.1 20230912 [revision b96e66fd4ef3e36983969fb8cdd1956f551a074b], GNU ld (GNU Binutils; openSUSE Tumbleweed) 2.40.0.20230412-5) #1 SMP PREEMPT_DYNAMIC Wed Oct 25 10:31:37 UTC 2023 (29edc7c) [ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-6.5.9-1-default root=/dev/mapper/system-root splash=silent resume=/dev/system/swap mitigations=auto quiet security=apparmor nosimplefb=1 ... [ 247.802155] NVRM nvAssertFailedNoLog: Assertion failed: 0 @ mem_list.c:293 [ 247.802161] NVRM nvAssertOkFailedNoLog: Assertion failed: Call not supported [NV_ERR_NOT_SUPPORTED] (0x00000056) returned from pRmApi->Alloc(pRmApi, pMemoryManager->hClient, pMemoryManager->hSubdevice, pHandle, hClass, &listAllocParams, sizeof(listAllocParams)) @ mem_desc.c:4790 [ 247.802163] NVRM serverFreeResourceTree: hObject 0xcaf00003 not found for client 0xc1e00003 [ 247.802164] NVRM nvAssertOkFailedNoLog: Assertion failed: Call not supported [NV_ERR_NOT_SUPPORTED] (0x00000056) returned from memdescSendMemDescToGSP(pGpu, pFbsr->pSysMemDesc, &hSysMem) @ fbsr_gm107.c:113 [ 247.802165] NVRM nvAssertOkFailedNoLog: Assertion failed: Call not supported [NV_ERR_NOT_SUPPORTED] (0x00000056) returned from _fbsrInitGsp(pGpu, pFbsr) @ fbsr_gm107.c:548 [ 248.155408] PM: suspend entry (s2idle) [ 248.167460] Filesystems sync: 0.012 seconds [ 248.386725] Freezing user space processes [ 248.387547] Freezing user space processes completed (elapsed 0.000 seconds) [ 248.387549] OOM killer disabled. [ 248.387550] Freezing remaining freezable tasks [ 248.388805] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 248.388808] printk: Suspending console(s) (use no_console_suspend to debug) [ 248.801471] ACPI: EC: interrupt blocked [ 262.602984] ACPI: EC: interrupt unblocked [ 263.174146] iwlwifi 0000:00:14.3: WRT: Invalid buffer destination [ 263.252329] nvme nvme0: 24/0/0 default/read/poll queues ... [ 263.524598] ucsi_acpi USBC000:00: UCSI_GET_PDOS failed (-95) [ 263.719374] OOM killer enabled. [ 263.719375] Restarting tasks ... [ 263.719441] usb 1-3: USB disconnect, device number 3 [ 263.719734] done. [ 263.719738] random: crng reseeded on system resumption [ 263.788084] PM: suspend exit ... [ 264.672684] NVRM: GPU at PCI:0000:01:00: GPU-80c21799-19c6-1198-2255-31aa55463b1e [ 264.672688] NVRM: Xid (PCI:0000:01:00): 45, pid=1781, name=modprobe, Ch 00000000 [ 264.673536] NVRM: Xid (PCI:0000:01:00): 45, pid=1781, name=modprobe, Ch 00000001 [ 264.674314] NVRM: Xid (PCI:0000:01:00): 45, pid=2788, name=Xorg.bin, Ch 00000002 [ 264.675135] NVRM: Xid (PCI:0000:01:00): 45, pid=2788, name=Xorg.bin, Ch 00000003 [ 264.676290] NVRM kbusVerifyBar2_GM107: MMUTest BAR0 window offset 0x70d000 returned garbage 0x0 [ 264.676296] NVRM nvAssertOkFailedNoLog: Assertion failed: Generic memory error [NV_ERR_MEMORY_ERROR] (0x00000072) returned from kbusVerifyBar2_HAL(pGpu, pKernelBus, NULL, NULL, 0, 0) @ kern_bus_gm107.c:457 [ 264.676299] NVRM nvAssertOkFailedNoLog: Assertion failed: Generic memory error [NV_ERR_MEMORY_ERROR] (0x00000072) returned from gpuStateLoad(pGpu, IS_GPU_GC6_STATE_EXITING(pGpu) ? GPU_STATE_FLAGS_PRESERVING | GPU_STATE_FLAGS_PM_TRANSITION | GPU_STATE_FLAGS_GC6_TRANSITION : GPU_STATE_FLAGS_PRESERVING | GPU_STATE_FLAGS_PM_TRANSITION) @ gpu_suspend.c:247 [ 264.678312] NVRM: Xid (PCI:0000:01:00): 45, pid=1781, name=modprobe, Ch 00000000 [ 264.679493] NVRM: Xid (PCI:0000:01:00): 45, pid=1781, name=modprobe, Ch 00000001 [ 264.680580] NVRM: Xid (PCI:0000:01:00): 45, pid=2788, name=Xorg.bin, Ch 00000002 [ 264.681653] NVRM: Xid (PCI:0000:01:00): 45, pid=2788, name=Xorg.bin, Ch 00000003 [ 264.690483] NVRM nvCheckOkFailedNoLog: Check failed: Failure: Generic Error [NV_ERR_GENERIC] (0x0000FFFF) returned from pRmApi->Control(pRmApi, nv->rmapi.hClient, nv->rmapi.hSubDevice, NV2080_CTRL_CMD_INTERNAL_DISPLAY_UNIX_CONSOLE, &unixConsoleParams, sizeof(unixConsoleParams)) @ unix_console.c:105 [ 264.690775] NVRM rpcRmApiAlloc_GSP: GspRmAlloc failed: hClient=0xc1d00001; hParent=0x00010001; hObject=0x00010011; hClass=0x0000c670; paramsSize=0x00000000; paramsStatus=0x00000062; status=0x00000062 [ 264.690781] nvidia-modeset: ERROR: GPU:0: Failed to initialize display engine: 0x62 (Reset required [NV_ERR_RESET_REQUIRED]) [ 264.690799] NVRM serverFreeResourceTree: hObject 0x10011 not found for client 0xc1d00001 [ 264.691195] NVRM nvCheckOkFailedNoLog: Check failed: Failure: Generic Error [NV_ERR_GENERIC] (0x0000FFFF) returned from pRmApi->Control(pRmApi, nv->rmapi.hClient, nv->rmapi.hSubDevice, NV2080_CTRL_CMD_INTERNAL_DISPLAY_UNIX_CONSOLE, &unixConsoleParams, sizeof(unixConsoleParams)) @ unix_console.c:105 [ 264.691372] NVRM rpcRmApiAlloc_GSP: GspRmAlloc failed: hClient=0xc1d00001; hParent=0x00010001; hObject=0x00010011; hClass=0x0000c670; paramsSize=0x00000000; paramsStatus=0x00000062; status=0x00000062 [ 264.691375] nvidia-modeset: ERROR: GPU:0: Failed to initialize display engine: 0x62 (Reset required [NV_ERR_RESET_REQUIRED]) [ 264.691386] NVRM serverFreeResourceTree: hObject 0x10011 not found for client 0xc1d00001 [ 264.691889] NVRM unixCallVideoBIOS: int10h(4f02, 0000) vesa call failed! (4f02, 0000) [ 264.692482] NVRM nvCheckOkFailedNoLog: Check failed: Failure: Generic Error [NV_ERR_GENERIC] (0x0000FFFF) returned from pRmApi->Control(pRmApi, nv->rmapi.hClient, nv->rmapi.hSubDevice, NV2080_CTRL_CMD_INTERNAL_DISPLAY_POST_RESTORE, &restoreParams, sizeof(restoreParams)) @ unix_console.c:197 [ 264.721179] NVRM rpcRmApiAlloc_GSP: GspRmAlloc failed: hClient=0xc1d0000b; hParent=0x01000001; hObject=0x01000012; hClass=0x0000c56f; paramsSize=0x00000168; paramsStatus=0x00000062; status=0x00000062 [ 264.721182] NVRM nvAssertFailedNoLog: Assertion failed: status == NV_OK @ kernel_channel.c:2588 [ 264.721185] NVRM nvAssertOkFailedNoLog: Assertion failed: Reset required [NV_ERR_RESET_REQUIRED] (0x00000062) returned from _kchannelSendChannelAllocRpc(pKernelChannel, pChannelGpfifoParams, pKernelChannelGroup, bFullSriov) @ kernel_channel.c:863 But the problem is with resume: ... [ 268.636544] wlp0s20f3: authenticated [ 268.654389] wlp0s20f3: associated [ 276.745060] BUG: kernel NULL pointer dereference, address: 0000000000000008 [ 276.745071] #PF: supervisor read access in kernel mode [ 276.745074] #PF: error_code(0x0000) - not-present page [ 276.745077] PGD 0 P4D 0 [ 276.745081] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 276.745086] CPU: 6 PID: 2788 Comm: Xorg.bin Tainted: G OE 6.5.9-1-default #1 openSUSE Tumbleweed eb5faaeb0a34bed614de16eec67e50ac769ec453 [ 276.745092] Hardware name: LENOVO 21D7S22N08/21D7S22N08, BIOS N3FET36W (1.21 ) 05/31/2023 [ 276.745095] RIP: 0010:EvoIsChannelMethodPendingC3+0x22/0xc0 [nvidia_modeset] [ 276.745174] Code: 00 00 00 00 00 00 00 00 f3 0f 1e fa 41 55 89 d0 49 89 cd 41 b8 14 00 00 00 41 54 49 89 c4 55 48 89 fd 53 48 89 f3 48 83 ec 28 <8b> 56 08 48 c7 44 24 14 00 00 00 00 48 8d 4c 24 08 48 c1 e2 20 48 [ 276.745177] RSP: 0018:ffffa72880d57b30 EFLAGS: 00010286 [ 276.745182] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffa72880d57b8f [ 276.745184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff933cb01c2008 [ 276.745185] RBP: ffff933cb01c2008 R08: 0000000000000014 R09: ffffa72882ccd008 [ 276.745187] R10: ffffa72881921008 R11: 000000000003f0e0 R12: 0000000000000000 [ 276.745189] R13: ffffa72880d57b8f R14: ffffa72880d57d30 R15: 0000000000000001 [ 276.745191] FS: 00007f743ce03980(0000) GS:ffff93434f700000(0000) knlGS:0000000000000000 [ 276.745193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.745195] CR2: 0000000000000008 CR3: 0000000107780000 CR4: 0000000000f50ee0 [ 276.745197] PKRU: 55555554 [ 276.745199] Call Trace: [ 276.745202] <TASK> [ 276.745205] ? __die+0x23/0x70 [ 276.745212] ? page_fault_oops+0x14d/0x490 [ 276.745217] ? EvoIsModePossibleC3+0xe1/0x5b0 [nvidia_modeset 2547d6f3000deb268fd07ecb612b5ef73687c832] [ 276.745269] ? exc_page_fault+0x71/0x160 [ 276.745275] ? asm_exc_page_fault+0x26/0x30 [ 276.745279] ? EvoIsChannelMethodPendingC3+0x22/0xc0 [nvidia_modeset 2547d6f3000deb268fd07ecb612b5ef73687c832] [ 276.745326] nvRMIdleBaseChannel+0x6b/0xf0 [nvidia_modeset 2547d6f3000deb268fd07ecb612b5ef73687c832] [ 276.745385] nvSetDispModeEvo+0x12c9/0x42f0 [nvidia_modeset 2547d6f3000deb268fd07ecb612b5ef73687c832] [ 276.745442] ? Flip+0xf0/0xf0 [nvidia_modeset 2547d6f3000deb268fd07ecb612b5ef73687c832] [ 276.745501] nvKmsIoctl+0xdc/0x220 [nvidia_modeset 2547d6f3000deb268fd07ecb612b5ef73687c832] [ 276.745557] nvkms_ioctl+0x109/0x170 [nvidia_modeset 2547d6f3000deb268fd07ecb612b5ef73687c832] [ 276.745587] nvidia_frontend_unlocked_ioctl+0x3c/0x60 [nvidia ce71fbe41fb2be9720a1b7ffb01074e41d182b8e] [ 276.745757] __x64_sys_ioctl+0x94/0xd0 [ 276.745763] do_syscall_64+0x5d/0x90 [ 276.745768] ? do_user_addr_fault+0x179/0x640 [ 276.745772] ? exit_to_user_mode_prepare+0x133/0x1f0 [ 276.745778] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 276.745781] RIP: 0033:0x7f743cd139cf [ 276.745839] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 276.745842] RSP: 002b:00007ffc7c213670 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.745845] RAX: ffffffffffffffda RBX: 00000000c0106d00 RCX: 00007f743cd139cf [ 276.745846] RDX: 00007ffc7c2136d0 RSI: 00000000c0106d00 RDI: 0000000000000014 [ 276.745848] RBP: 00007ffc7c2136d0 R08: 0000000000000000 R09: 0000555aa6b25490 [ 276.745849] R10: 00007ffc7c22aa40 R11: 0000000000000246 R12: 0000000000000014 [ 276.745851] R13: 00007f743c41cbc8 R14: 00007ffc7c215fd8 R15: 0000000000000003 [ 276.745854] </TASK> [ 276.745855] Modules linked in: ccm cmac algif_hash algif_skcipher af_alg af_packet joydev nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct bnep nft_chain_nat nf_tables ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security btusb btrtl btbcm btintel btmtk bluetooth nfnetlink uvcvideo videobuf2_vmalloc uvc videobuf2_memops videobuf2_v4l2 ebtable_filter ebtables videodev ip6table_filter videobuf2_common ip6_tables ecdh_generic iptable_filter bpfilter qrtr nvidia_drm(OE) nvidia_modeset(OE) nvidia_uvm(OE) binfmt_misc snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_hda_dsp_common snd_soc_hdac_hdmi snd_sof_probes snd_usb_audio snd_usbmidi_lib snd_ump snd_rawmidi snd_seq_device mc snd_hda_codec_realtek snd_hda_codec_generic snd_soc_dmic xfs snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel snd_sof_intel_hda_mlink [ 276.745909] soundwire_cadence snd_sof_intel_hda nls_iso8859_1 snd_sof_pci nls_cp437 snd_sof_xtensa_dsp vfat snd_sof fat snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi soundwire_generic_allocation soundwire_bus iwlmvm snd_soc_core intel_uncore_frequency intel_uncore_frequency_common snd_compress intel_tcc_cooling snd_pcm_dmaengine mac80211 libarc4 x86_pkg_temp_thermal intel_powerclamp snd_hda_intel coretemp snd_intel_dspcfg snd_intel_sdw_acpi kvm_intel snd_hda_codec nvidia(OE) iwlwifi spi_nor snd_hda_core iTCO_wdt think_lmi mei_wdt pmt_telemetry processor_thermal_device_pci intel_pmc_bxt kvm mei_hdcp mei_pxp mtd iTCO_vendor_support processor_thermal_device snd_hwdep intel_rapl_msr pmt_class igc irqbypass pcspkr thunderbolt cfg80211 firmware_attributes_class wmi_bmof thinkpad_acpi processor_thermal_rfim i2c_i801 snd_pcm mei_me processor_thermal_mbox spi_intel_pci ledtrig_audio processor_thermal_rapl spi_intel i2c_smbus platform_profile snd_timer mei intel_rapl_common rfkill [ 276.745959] thermal intel_vsec fan snd int3403_thermal soundcore ac int340x_thermal_zone intel_hid int3400_thermal intel_pmc_core acpi_pad sparse_keymap acpi_thermal_rel acpi_tad tiny_power_button fuse efi_pstore configfs dmi_sysfs ip_tables x_tables dm_crypt essiv authenc trusted asn1_encoder tee hid_logitech_hidpp hid_logitech_dj hid_generic usbhid crct10dif_pclmul crc32_pclmul polyval_clmulni polyval_generic gf128mul ghash_clmulni_intel xhci_pci rtsx_pci_sdmmc sha512_ssse3 xhci_pci_renesas mmc_core xhci_hcd aesni_intel ucsi_acpi nvme typec_ucsi crypto_simd cryptd usbcore nvme_core roles rtsx_pci typec button video battery wmi pinctrl_alderlake serio_raw br_netfilter btrfs bridge stp llc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua sd_mod t10_pi sg scsi_mod blake2b_generic libcrc32c scsi_common crc32c_intel xor msr raid6_pq dm_mirror dm_region_hash dm_log dm_mod bbswitch(O) efivarfs [ 276.746018] CR2: 0000000000000008 [ 276.746021] ---[ end trace 0000000000000000 ]--- [ 276.746023] RIP: 0010:EvoIsChannelMethodPendingC3+0x22/0xc0 [nvidia_modeset] [ 276.746071] Code: 00 00 00 00 00 00 00 00 f3 0f 1e fa 41 55 89 d0 49 89 cd 41 b8 14 00 00 00 41 54 49 89 c4 55 48 89 fd 53 48 89 f3 48 83 ec 28 <8b> 56 08 48 c7 44 24 14 00 00 00 00 48 8d 4c 24 08 48 c1 e2 20 48 [ 276.746073] RSP: 0018:ffffa72880d57b30 EFLAGS: 00010286 [ 276.746076] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffa72880d57b8f [ 276.746077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff933cb01c2008 [ 276.746079] RBP: ffff933cb01c2008 R08: 0000000000000014 R09: ffffa72882ccd008 [ 276.746080] R10: ffffa72881921008 R11: 000000000003f0e0 R12: 0000000000000000 [ 276.746082] R13: ffffa72880d57b8f R14: ffffa72880d57d30 R15: 0000000000000001 [ 276.746083] FS: 00007f743ce03980(0000) GS:ffff93434f700000(0000) knlGS:0000000000000000 [ 276.746085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.746087] CR2: 0000000000000008 CR3: 0000000107780000 CR4: 0000000000f50ee0 [ 276.746089] PKRU: 55555554 [ 276.746090] note: Xorg.bin[2788] exited with irqs disabled $ rpm -qa |grep -i -e nvidia kernel-firmware-nvidia-gsp-G06-525.116.04-2.1.x86_64 kernel-firmware-nvidia-gspx-G06-535.113.01-1.1.x86_64 nvidia-compute-G06-32bit-535.129.03-15.1.x86_64 libva-nvidia-driver-0.0.9-1.10.x86_64 libnvidia-egl-wayland1-1.1.12-1.2.x86_64 nvidia-compute-G06-535.129.03-15.1.x86_64 kernel-firmware-nvidia-gsp-G06-535.54.03-1.1.x86_64 nvidia-gl-G06-535.129.03-15.1.x86_64 nvidia-gl-G06-32bit-535.129.03-15.1.x86_64 nvidia-open-driver-G06-signed-kmp-default-535.129.03_k6.5.9_1-55.2.x86_64 nvidia-video-G06-32bit-535.129.03-15.1.x86_64 nvidia-open-driver-G06-signed-kmp-default-535.113.01_k6.5.6_1-51.3.x86_64 kernel-firmware-nvidia-gspx-G06-535.129.03-11.1.x86_64 nvidia-video-G06-535.129.03-15.1.x86_64 kernel-firmware-nvidia-20231019-1.1.noarch $ lspci |grep -i vga 01:00.0 VGA compatible controller: NVIDIA Corporation GA107GLM [RTX A1000 Laptop GPU] (rev a1) $ lsgpu card0 10de:25b9 drm:/dev/dri/card0 └─renderD128 drm:/dev/dri/renderD128 [1] https://sndirsch.github.io/nvidia/2022/06/07/nvidia-opengpu.html [2] https://download.nvidia.com/XFree86/Linux-x86_64/535.129.03/README/powerman… -- You are receiving this mail because: You are on the CC list for the bug.

1 28

[Bug 1214160] New: libvirt-routed firewalld zone not functional
by bugzilla_noreply＠suse.com 04 Apr '24

04 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1214160 Bug ID: 1214160 Summary: libvirt-routed firewalld zone not functional Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs(a)suse.de Reporter: rombert(a)apache.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- After a recent update of my virtual machines host (sorry for being fuzzy) I started seeing connections being dropped between the VMs and the host, specifically NFS. The interfaces are assigned to the libvirt-routed interface contributed by libvirt-daemon-driver-network. # firewall-cmd --get-active-zones (...) libvirt-routed interfaces: kubic-net-br virbr1 # rpm -qf /usr/lib/firewalld/zones/libvirt-routed.xml libvirt-daemon-driver-network-9.0.0-150500.6.11.1.x86_64 Once enabling firewalld dropped packages logging I see log entries such as Aug 10 13:08:02 vmhost002 kernel: "filter_IN_policy_libvirt-to-host_REJECT: "IN=virbr1 OUT= MAC=52:54:00:33:68:12:52:54:00:ce:5c:25:08:00 SRC=10.25.1.6 DST=10.25.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=54291 DF PROTO=TCP SPT=943 DPT=2049 WINDOW=64240 RES=0x00 SYN URGP=0 The nfs service should be allowed # firewall-cmd --info-zone=libvirt-routed | grep services services: http mountd mysql nfs rpc-bind # firewall-cmd --info-service=nfs nfs ports: 2049/tcp protocols: source-ports: modules: destination: includes: helpers: What is worrying me and pointing to a bug are the following messages from the system journal which point to the firewalld zone not being functional Aug 09 13:12:36 vmhost002 firewalld[17692]: ERROR: Calling pre func <bound method Firewall.full_check_config of <class 'firewall.core.fw.Firewall'>(True, True, True, 'RUNNING', False, 'public', {'nf_nat_tftp': 4}, [], True, True, True, False, 'all')>(()) failed: INVALID_ZONE: 'libvirt-routed' not among existing zones Aug 09 13:12:36 vmhost002 firewalld[17692]: ERROR: Calling pre func <bound method Firewall.full_check_config of <class 'firewall.core.fw.Firewall'>(True, True, True, 'RUNNING', False, 'public', {'nf_nat_tftp': 4}, [], True, True, True, False, 'all')>(()) failed: INVALID_ZONE: 'libvirt-routed' not among existing zones Aug 09 13:13:33 vmhost002 firewalld[17692]: ERROR: Calling pre func <bound method Firewall.full_check_config of <class 'firewall.core.fw.Firewall'>(True, True, True, 'INIT', False, 'public', {}, [], True, True, True, False, 'all')>(()) failed: INVALID_ZONE: 'libvirt-routed' not among existing zones Aug 09 13:13:33 vmhost002 firewalld[17692]: ERROR: Calling pre func <bound method Firewall.full_check_config of <class 'firewall.core.fw.Firewall'>(True, True, True, 'INIT', False, 'public', {'nf_nat_tftp': 1}, [], True, True, True, False, 'all')>(()) failed: INVALID_ZONE: 'libvirt-routed' not among existing zones Happy to provide more information if needed. -- You are receiving this mail because: You are on the CC list for the bug.

1 5