合 华为欧拉openEuler系统启动防火墙firewalld报错 ERROR: 'python-nftables' failed: JSON blob

[root@lhropeneuler22 /]# systemctl status firewalld

● firewalld.service - firewalld - dynamic firewall daemon

     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)

     Active: active (running) since Thu 2023-08-17 09:10:31 CST; 4s ago

       Docs: man:firewalld(1)

   Main PID: 3684 (firewalld)

      Tasks: 2 (limit: 411120)

     Memory: 22.7M

     CGroup: /docker/bba70ff6ec100a6017917eefc34d32474a461919f5b29bc4976f594d4e773ae6/system.slice/firewalld.service

             └─ 3684 /usr/bin/python3 -s /usr/sbin/firewalld --nofork --nopid

 

Aug 17 09:10:31 lhropeneuler22 systemd[1]: Starting firewalld - dynamic firewall daemon...

Aug 17 09:10:31 lhropeneuler22 systemd[1]: Started firewalld - dynamic firewall daemon.

Aug 17 09:10:31 lhropeneuler22 firewalld[3684]: ERROR: 'python-nftables' failed:

                                                JSON blob:

                                                {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "mangle_PREROUTING", "type": "filter", "hook": "prerouting", "prio": -140}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "mangle_PREROUTING_POLICIES_pre"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "mangle_PREROUTING_ZONES"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "mangle_PREROUTING_POLICIES_post"}}}, {"add": {"rule": {"family": "inet", "table": "firewalld", "chain": "mangle_PREROUTING", "expr": [{"jump": {"target": "mangle_PREROUTING_ZONES"}}]}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "nat_PREROUTING", "type": "nat", "hook": "prerouting", "prio": -90}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "nat_PREROUTING_POLICIES_pre"}}}, {"add": {"chain": {"family": "inet", "table": "firewall>

                                                {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "mangle_PREROUTING", "type": "filter", "hook": "prerouting", "prio": -140}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "mangle_PREROUTING_POLICIES_pre"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "mangle_PREROUTING_ZONES"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "mangle_PREROUTING_POLICIES_post"}}}, {"add": {"rule": {"family": "inet", "table": "firewalld", "chain": "mangle_PREROUTING", "expr": [{"jump": {"target": "mangle_PREROUTING_ZONES"}}]}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "nat_PREROUTING", "type": "nat", "hook": "prerouting", "prio": -90}}}, {"add": {"chain": {"family": "inet", "table": "firewalld", "name": "nat_PREROUTING_POLICIES_pre"}}}, {"add": {"chain": {"family": "inet", "table": "firewall>

[root@lhropeneuler22 /]#

[root@lhropeneuler22 /]# firewall-cmd --add-port=0-65535/tcp --permanent

firewall-cmd --add-port=0-65535/udp --permanentsuccess

[root@lhropeneuler22 /]# firewall-cmd --add-port=0-65535/udp --permanent

success

[root@lhropeneuler22 /]# firewall-cmd --reload

firewall-cmd --list-portsError: COMMAND_FAILED: 'python-nftables' failed:

JSON blob:

{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld_policy_drop"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld_policy_drop", "name": "filter_input", "type": "filter", "hook": "input", "prio": 9, "policy": "drop"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld_policy_drop", "name": "filter_forward", "type": "filter", "hook": "forward", "prio": 9, "policy": "drop"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld_policy_drop", "name": "filter_output", "type": "filter", "hook": "output", "prio": 9, "policy": "drop"}}}, {"add": {"rule": {"family": "inet", "table": "firewalld_policy_drop", "chain": "filter_input", "expr": [{"match": {"left": {"ct": {"key": "state"}}, "op": "in", "right": {"set": ["established", "related"]}}}, {"accept": null}]}}}, {"add": {"rule": {"family": "inet", "table": "firewalld_policy_drop", "chain": "filter_forward", "expr": [{"match": {"left": {"ct": {"key": "state"}}, "op": "in", "right": {"set": ["established", "related"]}}}, {"accept": null}]}}}, {"add": {"rule": {"family": "inet", "table": "firewalld_policy_drop", "chain": "filter_output", "expr": [{"match": {"left": {"ct": {"key": "state"}}, "op": "in", "right": {"set": ["established", "related"]}}}, {"accept": null}]}}}]}

[root@lhropeneuler22 /]# firewall-cmd --list-ports

 

[root@lhropeneuler22 /]# firewall-cmd --reload

Error: COMMAND_FAILED: 'python-nftables' failed:

JSON blob:

{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld_policy_drop"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld_policy_drop", "name": "filter_input", "type": "filter", "hook": "input", "prio": 9, "policy": "drop"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld_policy_drop", "name": "filter_forward", "type": "filter", "hook": "forward", "prio": 9, "policy": "drop"}}}, {"add": {"chain": {"family": "inet", "table": "firewalld_policy_drop", "name": "filter_output", "type": "filter", "hook": "output", "prio": 9, "policy": "drop"}}}, {"add": {"rule": {"family": "inet", "table": "firewalld_policy_drop", "chain": "filter_input", "expr": [{"match": {"left": {"ct": {"key": "state"}}, "op": "in", "right": {"set": ["established", "related"]}}}, {"accept": null}]}}}, {"add": {"rule": {"family": "inet", "table": "firewalld_policy_drop", "chain": "filter_forward", "expr": [{"match": {"left": {"ct": {"key": "state"}}, "op": "in", "right": {"set": ["established", "related"]}}}, {"accept": null}]}}}, {"add": {"rule": {"family": "inet", "table": "firewalld_policy_drop", "chain": "filter_output", "expr": [{"match": {"left": {"ct": {"key": "state"}}, "op": "in", "right": {"set": ["established", "related"]}}}, {"accept": null}]}}}]}

[root@lhropeneuler22 /]# ll  /usr/lib/firewalld/policies/allow-host-ipv6.xml

-rw-r--r-- 1 root root 649 Jan 25  2022 /usr/lib/firewalld/policies/allow-host-ipv6.xml

[root@lhropeneuler22 /]# rm  /usr/lib/firewalld/policies/allow-host-ipv6.xml

rm: remove regular file '/usr/lib/firewalld/policies/allow-host-ipv6.xml'? y

[root@lhropeneuler22 /]# rm /etc/firewalld/policies/allow-host-ipv6.xml

rm: cannot remove '/etc/firewalld/policies/allow-host-ipv6.xml': No such file or directory

[root@lhropeneuler22 /]# systemctl restart firewalld

[root@lhropeneuler22 /]#

[root@lhropeneuler22 /]#

 

[root@lhropeneuler22 /]# systemctl status firewalld

● firewalld.service - firewalld - dynamic firewall daemon

     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)

     Active: active (running) since Thu 2023-08-17 09:12:08 CST; 5s ago

       Docs: man:firewalld(1)

   Main PID: 3745 (firewalld)

      Tasks: 2 (limit: 411120)

     Memory: 21.0M

     CGroup: /docker/bba70ff6ec100a6017917eefc34d32474a461919f5b29bc4976f594d4e773ae6/system.slice/firewalld.service

             └─ 3745 /usr/bin/python3 -s /usr/sbin/firewalld --nofork --nopid

 

Aug 17 09:12:08 lhropeneuler22 systemd[1]: Starting firewalld - dynamic firewall daemon...

Aug 17 09:12:08 lhropeneuler22 systemd[1]: Started firewalld - dynamic firewall daemon.

Aug 17 09:12:08 lhropeneuler22 firewalld[3745]: ERROR: 'python-nftables' failed:

                                                JSON blob:

                                                {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]}

Aug 17 09:12:08 lhropeneuler22 firewalld[3745]: ERROR: COMMAND_FAILED: 'python-nftables' failed:

                                                JSON blob:

                                                {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]}

[root@lhropeneuler22 /]# systemctl status firewalld

● firewalld.service - firewalld - dynamic firewall daemon

     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)

     Active: active (running) since Thu 2023-08-17 09:12:08 CST; 1min 57s ago

       Docs: man:firewalld(1)

   Main PID: 3745 (firewalld)

      Tasks: 2 (limit: 411120)

     Memory: 21.0M

     CGroup: /docker/bba70ff6ec100a6017917eefc34d32474a461919f5b29bc4976f594d4e773ae6/system.slice/firewalld.service

             └─ 3745 /usr/bin/python3 -s /usr/sbin/firewalld --nofork --nopid

 

Aug 17 09:12:08 lhropeneuler22 systemd[1]: Starting firewalld - dynamic firewall daemon...

Aug 17 09:12:08 lhropeneuler22 systemd[1]: Started firewalld - dynamic firewall daemon.

Aug 17 09:12:08 lhropeneuler22 firewalld[3745]: ERROR: 'python-nftables' failed:

                                                JSON blob:

                                                {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]}

Aug 17 09:12:08 lhropeneuler22 firewalld[3745]: ERROR: COMMAND_FAILED: 'python-nftables' failed:

                                                JSON blob:

                                                {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]}

[root@lhropeneuler22 /]# tailf /var/log/firewalld

{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"delete": {"table": {"family": "inet", "name": "firewalld"}}}]}

2023-08-17 09:12:08 ERROR: COMMAND_FAILED: 'python-nftables' failed:

JSON blob:

{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"delete": {"table": {"family": "inet", "name": "firewalld"}}}]}

2023-08-17 09:12:08 ERROR: 'python-nftables' failed:

JSON blob:

{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]}

2023-08-17 09:12:08 ERROR: COMMAND_FAILED: 'python-nftables' failed:

JSON blob:

{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]}

 

^C

[root@lhropeneuler22 /]# grep Conflicts /usr/lib/systemd/system/firewalld.service

Conflicts=iptables.service ip6tables.service ebtables.service ipset.service nftables.service

[root@lhropeneuler22 /]#  dnf info firewalld

Last metadata expiration check: 0:07:00 ago on Thu Aug 17 09:08:32 2023.

Installed Packages

Name         : firewalld

Version      : 1.0.2

Release      : 2.oe2203

Architecture : noarch

Size         : 3.1 M

Source       : firewalld-1.0.2-2.oe2203.src.rpm

Repository   : @System

From repo    : OS

Summary      : A firewall daemon with D-Bus interface providing a dynamic firewall

URL          : http://www.firewalld.org

License      : GPLv2+

Description  : firewalld is a firewall service daemon that provides a dynamic customizable

             : firewall with a D-Bus interface.

 

Available Packages

Name         : firewalld

Version      : 1.0.2

Release      : 2.oe2203

Architecture : src

Size         : 1.9 M

Source       : None

Repository   : source

Summary      : A firewall daemon with D-Bus interface providing a dynamic firewall

URL          : http://www.firewalld.org

License      : GPLv2+

Description  : firewalld is a firewall service daemon that provides a dynamic customizable

             : firewall with a D-Bus interface.

 

[root@lhropeneuler22 /]#  rpm -q firewalld

firewalld-1.0.2-2.oe2203.noarch

[root@lhropeneuler22 /]# ll /etc/firewalld/policies/allow-host-ipv6.xml

ls: cannot access '/etc/firewalld/policies/allow-host-ipv6.xml': No such file or directory

[root@lhropeneuler22 /]# ll  /usr/lib/firewalld/policies/allow-host-ipv6.xml

ls: cannot access '/usr/lib/firewalld/policies/allow-host-ipv6.xml': No such file or directory

[root@lhropeneuler22 /]# vi /etc/firewalld/firewalld.conf

[root@lhropeneuler22 /]#

[root@lhropeneuler22 /]# systemctl restart firewalld

[root@lhropeneuler22 /]# systemctl status firewalld

● firewalld.service - firewalld - dynamic firewall daemon

     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)

     Active: active (running) since Thu 2023-08-17 09:17:25 CST; 4s ago

       Docs: man:firewalld(1)

   Main PID: 4000 (firewalld)

      Tasks: 2 (limit: 411120)

     Memory: 20.3M

     CGroup: /docker/bba70ff6ec100a6017917eefc34d32474a461919f5b29bc4976f594d4e773ae6/system.slice/firewalld.service

             └─ 4000 /usr/bin/python3 -s /usr/sbin/firewalld --nofork --nopid

 

Aug 17 09:17:25 lhropeneuler22 systemd[1]: Starting firewalld - dynamic firewall daemon...

Aug 17 09:17:25 lhropeneuler22 systemd[1]: Started firewalld - dynamic firewall daemon.

[root@lhropeneuler22 /]#

[root@lhropeneuler22 /]# firewall-cmd --reload

firewall-cmd --list-portssuccess

[root@lhropeneuler22 /]# firewall-cmd --list-ports

0-65535/tcp 0-65535/udp