From issues-return-90010-archive-asf-public=cust-asf.ponee.io@cloudstack.apache.org Wed Feb 14 16:15:06 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 5DB8F180621 for ; Wed, 14 Feb 2018 16:15:05 +0100 (CET) Received: (qmail 62508 invoked by uid 500); 14 Feb 2018 15:15:04 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 62499 invoked by uid 500); 14 Feb 2018 15:15:04 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 62496 invoked by uid 99); 14 Feb 2018 15:15:04 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Feb 2018 15:15:04 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id E9740180146 for ; Wed, 14 Feb 2018 15:15:03 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -109.511 X-Spam-Level: X-Spam-Status: No, score=-109.511 tagged_above=-999 required=6.31 tests=[ENV_AND_HDR_SPF_MATCH=-0.5, KAM_ASCII_DIVIDERS=0.8, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_SPF_WL=-7.5, USER_IN_WHITELIST=-100] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id nzYiu-gdJwtM for ; Wed, 14 Feb 2018 15:15:02 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTP id 9A4AC5F126 for ; Wed, 14 Feb 2018 15:15:01 +0000 (UTC) Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id 16855E0248 for ; Wed, 14 Feb 2018 15:15:01 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 3F950240F6 for ; Wed, 14 Feb 2018 15:15:00 +0000 (UTC) Date: Wed, 14 Feb 2018 15:15:00 +0000 (UTC) From: "ASF GitHub Bot (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=3Dcom.atl= assian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId= =3D16364230#comment-16364230 ]=20 ASF GitHub Bot commented on CLOUDSTACK-10282: --------------------------------------------- blueorangutan commented on issue #2450: CLOUDSTACK-10282: firewall rules op= eration should be done with ip6tab=E2=80=A6 URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-365637963 =20 =20 Trillian test result (tid-2255) Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7 Total time taken: 17944 seconds Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/= trillian/pr2450-t2255-kvm-centos7.zip Intermitten failure detected: /marvin/tests/smoke/test_deploy_virtio_scs= i_vm.py Intermitten failure detected: /marvin/tests/smoke/test_public_ip_range.p= y Intermitten failure detected: /marvin/tests/smoke/test_reset_vm_on_reboo= t.py Intermitten failure detected: /marvin/tests/smoke/test_router_dhcphosts.= py Intermitten failure detected: /marvin/tests/smoke/test_router_dns.py Intermitten failure detected: /marvin/tests/smoke/test_router_dnsservice= .py Intermitten failure detected: /marvin/tests/smoke/test_routers_iptables_= default_policy.py Intermitten failure detected: /marvin/tests/smoke/test_routers_network_o= ps.py Intermitten failure detected: /marvin/tests/smoke/test_routers.py Intermitten failure detected: /marvin/tests/smoke/test_secondary_storage= .py Intermitten failure detected: /marvin/tests/smoke/test_service_offerings= .py Intermitten failure detected: /marvin/tests/smoke/test_snapshots.py Intermitten failure detected: /marvin/tests/smoke/test_ssvm.py Intermitten failure detected: /marvin/tests/smoke/test_templates.py Intermitten failure detected: /marvin/tests/smoke/test_usage.py Intermitten failure detected: /marvin/tests/smoke/test_vm_life_cycle.py Intermitten failure detected: /marvin/tests/smoke/test_vm_snapshots.py Intermitten failure detected: /marvin/tests/smoke/test_volumes.py Intermitten failure detected: /marvin/tests/smoke/test_vpc_redundant.py Intermitten failure detected: /marvin/tests/smoke/test_vpc_router_nics.p= y Intermitten failure detected: /marvin/tests/smoke/test_vpc_vpn.py Intermitten failure detected: /marvin/tests/smoke/test_host_maintenance.= py Intermitten failure detected: /marvin/tests/smoke/test_hostha_kvm.py Smoke tests completed. 46 look OK, 21 have error(s) Only failed tests results shown below: =20 =20 Test | Result | Time (s) | Test File --- | --- | --- | --- ContextSuite context=3DTestResetVmOnReboot>:setup | `Error` | 0.00 | tes= t_reset_vm_on_reboot.py ContextSuite context=3DTestRouterDHCPHosts>:setup | `Error` | 0.00 | tes= t_router_dhcphosts.py ContextSuite context=3DTestRouterDHCPOpts>:setup | `Error` | 0.00 | test= _router_dhcphosts.py ContextSuite context=3DTestRouterDns>:setup | `Error` | 0.00 | test_rout= er_dns.py ContextSuite context=3DTestVmSnapshot>:setup | `Error` | 0.08 | test_vm_= snapshots.py ContextSuite context=3DTestRouterDnsService>:setup | `Error` | 0.00 | te= st_router_dnsservice.py ContextSuite context=3DTestDeployVM>:setup | `Error` | 0.00 | test_vm_li= fe_cycle.py ContextSuite context=3DTestVMLifeCycle>:setup | `Error` | 0.00 | test_vm= _life_cycle.py ContextSuite context=3DTestRouterIpTablesPolicies>:setup | `Error` | 0.0= 0 | test_routers_iptables_default_policy.py ContextSuite context=3DTestVPCIpTablesPolicies>:setup | `Error` | 0.00 |= test_routers_iptables_default_policy.py test_01_isolate_network_FW_PF_default_routes_egress_true | `Error` | 0.1= 9 | test_routers_network_ops.py test_02_isolate_network_FW_PF_default_routes_egress_false | `Error` | 0.= 23 | test_routers_network_ops.py ContextSuite context=3DTestRedundantIsolateNetworks>:setup | `Error` | 1= .47 | test_routers_network_ops.py ContextSuite context=3DTestRouterServices>:setup | `Error` | 0.00 | test= _routers.py test_01_sys_vm_start | `Failure` | 0.15 | test_secondary_storage.py test_02_sys_template_ready | `Failure` | 0.12 | test_secondary_storage.p= y ContextSuite context=3DTestServiceOfferings>:setup | `Error` | 0.28 | te= st_service_offerings.py ContextSuite context=3DTestSnapshotRootDisk>:setup | `Error` | 0.00 | te= st_snapshots.py test_01_list_sec_storage_vm | `Failure` | 0.04 | test_ssvm.py test_02_list_cpvm_vm | `Failure` | 0.05 | test_ssvm.py test_03_ssvm_internals | `Failure` | 0.04 | test_ssvm.py test_04_cpvm_internals | `Failure` | 0.05 | test_ssvm.py test_05_stop_ssvm | `Failure` | 0.06 | test_ssvm.py test_06_stop_cpvm | `Failure` | 0.04 | test_ssvm.py test_07_reboot_ssvm | `Failure` | 0.04 | test_ssvm.py test_08_reboot_cpvm | `Failure` | 0.05 | test_ssvm.py test_09_destroy_ssvm | `Failure` | 0.04 | test_ssvm.py test_10_destroy_cpvm | `Failure` | 0.04 | test_ssvm.py test_02_create_template_with_checksum_sha1 | `Error` | 65.58 | test_temp= lates.py test_03_create_template_with_checksum_sha256 | `Error` | 65.54 | test_te= mplates.py test_04_create_template_with_checksum_md5 | `Error` | 65.55 | test_templ= ates.py test_05_create_template_with_no_checksum | `Error` | 65.55 | test_templa= tes.py test_02_deploy_vm_from_direct_download_template | `Error` | 4.42 | test_= templates.py test_03_deploy_vm_wrong_checksum | `Error` | 3.60 | test_templates.py ContextSuite context=3DTestTemplates>:setup | `Error` | 17.82 | test_tem= plates.py ContextSuite context=3DTestISOUsage>:setup | `Error` | 0.00 | test_usage= .py ContextSuite context=3DTestLBRuleUsage>:setup | `Error` | 0.00 | test_us= age.py ContextSuite context=3DTestNatRuleUsage>:setup | `Error` | 0.00 | test_u= sage.py ContextSuite context=3DTestPublicIPUsage>:setup | `Error` | 0.00 | test_= usage.py ContextSuite context=3DTestSnapshotUsage>:setup | `Error` | 0.00 | test_= usage.py ContextSuite context=3DTestVmUsage>:setup | `Error` | 0.00 | test_usage.= py ContextSuite context=3DTestVolumeUsage>:setup | `Error` | 0.00 | test_us= age.py ContextSuite context=3DTestVpnUsage>:setup | `Error` | 0.00 | test_usage= .py ContextSuite context=3DTestCreateVolume>:setup | `Error` | 0.00 | test_v= olumes.py ContextSuite context=3DTestVolumes>:setup | `Error` | 0.00 | test_volume= s.py test_01_create_redundant_VPC_2tiers_4VMs_4IPs_4PF_ACL | `Error` | 5.22 |= test_vpc_redundant.py test_02_redundant_VPC_default_routes | `Error` | 3.14 | test_vpc_redunda= nt.py test_03_create_redundant_VPC_1tier_2VMs_2IPs_2PF_ACL_reboot_routers | `E= rror` | 2.14 | test_vpc_redundant.py test_04_rvpc_network_garbage_collector_nics | `Error` | 2.10 | test_vpc_= redundant.py test_05_rvpc_multi_tiers | `Error` | 2.12 | test_vpc_redundant.py test_01_VPC_nics_after_destroy | `Error` | 3.14 | test_vpc_router_nics.p= y test_02_VPC_default_routes | `Error` | 3.11 | test_vpc_router_nics.py test_01_redundant_vpc_site2site_vpn | `Failure` | 2.43 | test_vpc_vpn.py test_01_vpc_site2site_vpn_multiple_options | `Failure` | 2.43 | test_vpc= _vpn.py test_01_vpc_remote_access_vpn | `Failure` | 2.30 | test_vpc_vpn.py test_01_vpc_site2site_vpn | `Failure` | 3.41 | test_vpc_vpn.py test_02_cancel_host_maintenace_with_migration_jobs | `Error` | 3.50 | te= st_host_maintenance.py test_hostha_enable_ha_when_host_in_maintenance | `Error` | 2.88 | test_h= ostha_kvm.py =20 ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. =20 For queries about this service, please contact Infrastructure at: users@infra.apache.org > SystemVM - filrewall rules incorrect > ------------------------------------ > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-102= 82 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the defa= ult.)=20 > Components: SystemVM > Reporter: Marc-Aur=C3=A8le Brothier > Priority: Major > > The current state of the firewall on the systemVMs let all packets come i= n due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)