GNU bug report logs - #76741
libvirtd: could not find a usable firewall backend

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 76741 in the body.
You can then email your comments to 76741 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Simen Endsjø <contact <at> simendsjo.me>
To: bug-guix <at> gnu.org
Subject: libvirtd: could not find a usable firewall backend
Date: Tue, 04 Mar 2025 13:51:46 +0100

[Message part 1 (text/plain, inline)]

After an upgrade, I can no longer start libvirtd.

  guix c991c49
    repository URL: https://git.savannah.gnu.org/git/guix.git
    branch: master
    commit: c991c49f09d6fd2764e1f7bdae54c097c748524f

Mar  4 13:15:58 localhost shepherd[1]: Respawning libvirtd.
Mar  4 13:15:58 localhost shepherd[1]: Starting service libvirtd...
Mar  4 13:15:58 localhost shepherd[1]: Service libvirtd has been started.
Mar  4 13:15:58 localhost shepherd[1]: Service libvirtd started.
Mar  4 13:15:58 localhost shepherd[1]: Service libvirtd running with value #<<process> id: 23337 command: ("/gnu/store/bg0p3sjnl17i1zz14cnc82p4mvzc8n1s-libvirt-10.10.0/sbin/libvirtd" "-f" "/gnu/store/wx2j24bba8bzga5b90xks09fghxxqjk0-libvirtd.conf")>.
Mar  4 13:15:58 localhost libvirtd: 23349: info : libvirt version: 10.10.0
Mar  4 13:15:58 localhost libvirtd: 23349: info : hostname: REDACTED
Mar  4 13:15:58 localhost libvirtd: 23349: error : virNetworkLoadDriverConfig:155 : internal error: could not find a usable firewall backend
Mar  4 13:15:58 localhost libvirtd: 23349: error : virStateInitialize:672 : Initialization of bridge state driver failed: internal error: could not find a usable firewall backend
Mar  4 13:15:58 localhost libvirtd: 23349: error : daemonRunStateInit:617 : Driver state initialization failed
Mar  4 13:15:58 localhost shepherd[1]: Service libvirtd has been disabled.
Mar  4 13:15:58 localhost shepherd[1]:   (Respawning too fast.)

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 76741 <at> debbugs.gnu.org (full text, mbox):

From: Simen Endsjø <contact <at> simendsjo.me>
To: 76741 <at> debbugs.gnu.org
Subject: The offending commit
Date: Tue, 04 Mar 2025 20:12:43 +0100

[Message part 1 (text/plain, inline)]

My guess is it's this commit:
https://codeberg.org/guix/guix-mirror/commit/bd30b8506687d8ada63d163ee21c0b95f659d97a

I tried adding the ebtables package to my system packages, but this did
not have any effect.

[signature.asc (application/pgp-signature, inline)]

Message #11 received at 76741 <at> debbugs.gnu.org (full text, mbox):

From: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
To: Simen Endsjø <contact <at> simendsjo.me>
Cc: 76741 <at> debbugs.gnu.org
Subject: Re: bug#76741: libvirtd: could not find a usable firewall backend
Date: Wed, 05 Mar 2025 22:53:58 +0900

Hi,

Simen Endsjø <contact <at> simendsjo.me> writes:

> My guess is it's this commit:
> https://codeberg.org/guix/guix-mirror/commit/bd30b8506687d8ada63d163ee21c0b95f659d97a

It is indeed this commit, but reverting it would break virt-manager at
least, so we need to fix it properly instead.

-- 
Thanks,
Maxim

Message #16 received at 76741-done <at> debbugs.gnu.org (full text, mbox):

From: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
To: Simen Endsjø <contact <at> simendsjo.me>
Cc: 76741-done <at> debbugs.gnu.org
Subject: Re: bug#76741: libvirtd: could not find a usable firewall backend
Date: Thu, 06 Mar 2025 00:07:56 +0900

Hi Simen,

Simen Endsjø <contact <at> simendsjo.me> writes:

> My guess is it's this commit:
> https://codeberg.org/guix/guix-mirror/commit/bd30b8506687d8ada63d163ee21c0b95f659d97a
>
> I tried adding the ebtables package to my system packages, but this did
> not have any effect.

It was looking for nft or iptables, which were not patched in the source
code (looked up from PATH).  I've patched these and a few others in
commit 4226b784b9, and 'make check-system TESTS=libvirt' now passes.

Thank you for the report!

-- 
Maxim

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.