Restore of Centos 7 VM breaks firewalld

[tjk]

Hey All,

I have some Centos 7.9 VM's running firewalld just fine, when I restore them with PBS, it breaks firewalld. Which is odd since it shouldn't be doing anything inside the VM to cause these problems...at least for a VM I would think.

Can't load nf_conntrack, etc. Is PBS doing anything inside the VM on a restore?

I've tested this on 6 different Centos 7.9 VM restores, all having the same issue. Firewalld is running fine on the VM's, just anything I restore has these issues.

systemctl status firewalls
firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: inactive (dead) since Fri 2023-05-05 17:17:54 EDT; 4s ago
     Docs: man:firewalls(1)
  Process: 1610 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=0/SUCCESS)
 Main PID: 1610 (code=exited, status=0/SUCCESS)

May 05 17:17:53 somehost-test.somedomain.internal firewalld[1610]: WARNING: ipset not usable, disabling ipset usage in firewall.
May 05 17:17:53 somehost-test.somedomain.internal firewalld[1610]: WARNING: Failed to load nf_conntrack module: modprobe: ERROR: could not find module by name='nf_conntrack'
                                                                   modprobe: ERROR: could not insert 'nf_conntrack': Function not implemented
                                                                   modprobe: ERROR: Error running install command for nf_conntrack...
May 05 17:17:53 somehost-test.somedomain.internal firewalld[1610]: ERROR: Failed to write to file "/proc/sys/net/netfilter/nf_conntrack_helper": [Errno 2] No such file or director...ck_helper'
May 05 17:17:53 somehost-test.somedomain.internal firewalld[1610]: ERROR: Failed to read file "/proc/sys/net/netfilter/nf_conntrack_helper": [Errno 2] No such file or directory: '...ck_helper'
May 05 17:17:53 somehost-test.somedomain.internal firewalld[1610]: WARNING: Failed to get and parse nf_conntrack_helper setting
May 05 17:17:53 somehost-test.somedomain.internal firewalld[1610]: WARNING: iptables not usable, disabling IPv4 firewall.
May 05 17:17:53 somehost-test.somedomain.internal firewalld[1610]: WARNING: ip6tables not usable, disabling IPv6 firewall.
May 05 17:17:54 somehost-test.somedomain.internal firewalld[1610]: WARNING: ebtables not usable, disabling ethernet bridge firewall.
May 05 17:17:54 somehost-test.somedomain.internal firewalld[1610]: FATAL ERROR: No IPv4 and IPv6 firewall.
May 05 17:17:54 somehost-test.somedomain.internal firewalld[1610]: ERROR: Raising SystemExit in run_server
Hint: Some lines were ellipsized, use -l to show in full.somehost-test

 

[tjk]

This may not be PBS related, testing a couple of other things out to make sure.