oVirt Cockpit 安装 Enforce firewalld status ERROR答案

【问题标题】：oVirt cockpit intstallation Enforce firewalld status ERRORoVirt Cockpit 安装 Enforce firewalld status ERROR
【发布时间】：2020-12-16 06:50:15
【问题描述】：

我正在尝试按照https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_cockpit_web_interface/在 Centos Stream 上部署一个自托管的 oVirt

但是，我在虚拟机部署过程中遇到以下错误

[ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Enforce firewalld status]
[ ERROR ] fatal: [localhost]: FAILED! => {"msg": "The conditional check 'firewalld_s.status.SubState != 'running' or firewalld_s.status.LoadState == 'masked'' failed. The error was: error while evaluating conditional (firewalld_s.status.SubState != 'running' or firewalld_s.status.LoadState == 'masked'): 'dict object' has no attribute 'SubState'\n\nThe error appears to be in '/usr/share/ansible/collections/ansible_collections/ovirt/ovirt/roles/hosted_engine_setup/tasks/pre_checks/validate_firewalld.yml': line 8, column 5, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n register: firewalld_s\n - name: Enforce firewalld status\n ^ here\n"}

Firewalld 已在 Centos 主机上启动并运行：

public zone
Interfaces eno1
Service TCP UDP 
ssh 
22
dhcpv6-client   
546
cockpit 
9090
nfs 
2049
nfs3    
2049
2049
rpc-bind    
111
111
mountd  
20048
20048
ovirt-imageio   
54322
ovirt-storageconsole    
55863, 39543
ovirt-vmconsole 
2223
Additional ports    2049, 80, 443, 54323, 6442, 9696, 6100, 2222, 16514, 111, 5900-6923, 49152-49215, 6081, 53, 35357   2049, 7410, 161, 53, 123

和

libvirt zone
Interfaces virbr0
Service TCP UDP 
dhcp    
67
dhcpv6  
547
dns 
53
53
ssh 
22
tftp    
69
oVirt   
7777
ovirt-imageio   
54322
ovirt-storageconsole    
55863, 39543
ovirt-vmconsole 
2223

请帮我找到解决这个问题的方向

【问题讨论】：

标签： centos firewalld ovirt

【解决方案1】：

虽然不是一个完整的解决方案，但在部署节点上执行时，绕过此 Reddit 帖子建议的检查对我有用：https://www.reddit.com/r/ovirt/comments/kigha8/hosted_engine_fails_at_enforce_firewalld_status/。

从 Reddit 上的 u/fhallberg 粘贴：

mv /usr/share/ansible/collections/ansible_collections/ovirt/ovirt/roles/hosted_engine_setup/tasks/pre_checks/validate_firewalld.yml /root

mv /usr/share/ansible/collections/ansible_collections/ovirt/ovirt/roles/hosted_engine_setup/tasks/pre_checks/validate_services_status.yml 根目录

【讨论】：