Public bug reported:
I upgraded Ubuntu 24.04 LTS to 26.04 LTS with the graphical release upgrader
(DistUpgradeViewGtk3,
ubuntu-release-upgrader 1:26.04.25) on 2026-09-29. The system is now Ubuntu
26.04.1 LTS.
Before the upgrade, firewalld was installed, enabled and running, with a
customised zone (I had removed the ssh
service from the public zone). It was marked as automatically installed: it had
originally come in as a dependency
of another package that I removed later. No installed package depends on or
recommends it; iptables and nftables
only suggest it.
During the upgrade, firewalld was first upgraded (2.1.1-1 -> 2.3.1-3). The
clean-up step then listed it, together
with python3-firewall, under "Unused dependencies" / remove_candidates, and
removed and purged it.
/var/log/dist-upgrade/main.log:
2026-09-29 18:31:10 DEBUG Unused dependencies: ... firewalld ...
python3-firewall ...
2026-09-29 18:31:13 DEBUG The following packages are marked for removal: ...
firewalld ...
/var/log/dpkg.log:
2026-09-29 17:48:58 upgrade firewalld:all 2.1.1-1 2.3.1-3
2026-09-29 19:00:52 remove firewalld:all 2.3.1-3 <none>
2026-09-29 19:02:02 purge firewalld:all 2.3.1-3 <none>
After the upgrade no firewall was running. Nothing pointed this out: firewalld
was one entry among many unused
libraries in the clean-up. I only noticed 8 days later while checking open
ports. ufw is not installed on this
system, so there was no other firewall.
Expected: the upgrader should not remove a package whose service is enabled and
running, at least not a firewall,
just because it is an automatically installed package that nothing depends on.
Or it should warn about it
specifically before removing it (for example: "this removes your active
firewall").
Workaround: "sudo apt install firewalld" (this also marks it as manually
installed). My customised zone under
/etc/firewalld/zones was still there and took effect again. Running "sudo
apt-mark manual firewalld" before the
upgrade would have prevented the removal.
Possibly related: bug #2079842 (packages listed as "unused dependencies"
removed during a release upgrade). There,
the packages were still recommended by installed packages; here nothing
recommends firewalld, so this report is
about removing an active service.
** Affects: ubuntu-release-upgrader (Ubuntu)
Importance: Undecided
Status: New
** Tags: dist-upgrade resolute
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2169886
Title:
Release upgrade 24.04 -> 26.04 removed enabled and running firewalld
as an "unused dependency", leaving no firewall
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/2169886/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
