Package: libvirt-daemon
Version: 12.0.0-1
Severity: important
X-Debbugs-Cc: [email protected]

I've had a basic working libvirt configuration for years - a default
network, with a few VMs attached to it. It has suddenly stopped working
- for some reason, libvirt can't start the network:

*****

~# virsh net-start default
error: Failed to start network default
error: internal error: Failed to run firewall command iptables -w --table 
filter --list-rules: 

*****

When using virt-manager, I get:

*****

Error starting network 'default': internal error: Failed to run firewall 
command iptables -w --table filter --list-rules:

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 67, in cb_wrapper
    callback(asyncjob, *args, **kwargs)
    ~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 101, in tmpcb
    callback(*args, **kwargs)
    ~~~~~~~~^^^^^^^^^^^^^^^^^
  File "/usr/share/virt-manager/virtManager/object/libvirtobject.py", line 57, 
in newfn
    ret = fn(self, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/object/network.py", line 61, in 
start
    self._backend.create()
    ~~~~~~~~~~~~~~~~~~~~^^
  File "/usr/lib/python3/dist-packages/libvirt.py", line 3623, in create
    raise libvirtError('virNetworkCreate() failed')
libvirt.libvirtError: internal error: Failed to run firewall command iptables 
-w --table filter --list-rules:

*****

I have no idea what this means: iptables is installed, and "iptables -w
--table filter --list-rules" runs fine from the command line. Restarting
the libvirt-daemon service doesn't solve the problem. I've seen the
following reports, but I haven't found any solutions there for my case:

https://bugs-devel.debian.org/cgi-bin/bugreport.cgi?bug=994127
https://lists.libvirt.org/archives/list/[email protected]/thread/LEKG4HCKYKF5P55A4M64TZIWKUXKZDOE/

-- System Information:
Debian Release: forky/sid
  APT prefers oldstable-security
  APT policy: (500, 'oldstable-security'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.18.12+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libvirt-daemon depends on:
ii  libc6                  2.42-13
ii  libgcc-s1              15.2.0-14
ii  libglib2.0-0t64        2.87.2-3
ii  libtirpc3t64           1.3.6+ds-1
ii  libvirt-common         12.0.0-1
ii  libvirt-daemon-common  12.0.0-1
ii  libvirt-daemon-log     12.0.0-1
ii  libvirt0               12.0.0-1
ii  libxml2-16             2.15.1+dfsg-2+b1
ii  logrotate              3.22.0-1

Versions of packages libvirt-daemon recommends:
ii  libvirt-daemon-driver-interface        12.0.0-1
ii  libvirt-daemon-driver-network          12.0.0-1
ii  libvirt-daemon-driver-nodedev          12.0.0-1
ii  libvirt-daemon-driver-nwfilter         12.0.0-1
ii  libvirt-daemon-driver-qemu             12.0.0-1
ii  libvirt-daemon-driver-secret           12.0.0-1
ii  libvirt-daemon-driver-storage          12.0.0-1
ii  libvirt-daemon-driver-storage-disk     12.0.0-1
ii  libvirt-daemon-driver-storage-iscsi    12.0.0-1
ii  libvirt-daemon-driver-storage-logical  12.0.0-1
ii  libvirt-daemon-driver-storage-mpath    12.0.0-1
ii  libvirt-daemon-driver-storage-scsi     12.0.0-1
ii  libvirt-daemon-lock                    12.0.0-1
ii  libvirt-daemon-plugin-lockd            12.0.0-1

Versions of packages libvirt-daemon suggests:
ii  libvirt-daemon-driver-lxc                   12.0.0-1
pn  libvirt-daemon-driver-storage-gluster       <none>
pn  libvirt-daemon-driver-storage-iscsi-direct  <none>
pn  libvirt-daemon-driver-storage-rbd           <none>
pn  libvirt-daemon-driver-storage-zfs           <none>
ii  libvirt-daemon-driver-vbox                  12.0.0-1
ii  libvirt-daemon-driver-xen                   12.0.0-1
ii  libvirt-daemon-system                       12.0.0-1

-- debconf-show failed

Reply via email to