I noticed that during the first boot up after the upgrade that firewalld failed to start. Hoping to get a meaningful error message, I attempted to start it manually:
# systemctl start firewalld.service
Job for firewalld.service failed because the control process exited with error code.
See "systemctl status firewalld.service" and "journalctl -xeu firewalld.service" for details.
# systemctl status firewalld.service
× firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2023-08-22 15:24:48 EDT; 24min ago
Docs: man:firewalld(1)
Process: 29656 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=1/FAILURE)
Main PID: 29656 (code=exited, status=1/FAILURE)
Aug 22 15:24:48 linux-desktop systemd[1]: Starting firewalld - dynamic firewall daemon...
Aug 22 15:24:48 linux-desktop systemd[1]: firewalld.service: Main process exited, code=exited, status=1/FAILURE
Aug 22 15:24:48 linux-desktop systemd[1]: firewalld.service: Failed with result 'exit-code'.
Aug 22 15:24:48 linux-desktop systemd[1]: Failed to start firewalld - dynamic firewall daemon.
# journalctl -xeu firewalld.service
[snip: I tried more than once.]
Aug 22 15:49:57 linux-desktop systemd[1]: Starting firewalld - dynamic firewall daemon...
░░ Subject: A start job for unit firewalld.service has begun execution
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit firewalld.service has begun execution.
░░
░░ The job identifier is 3465.
Aug 22 15:49:57 linux-desktop systemd[1]: firewalld.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ An ExecStart= process belonging to unit firewalld.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Aug 22 15:49:57 linux-desktop systemd[1]: firewalld.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ The unit firewalld.service has entered the 'failed' state with result 'exit-code'.
Aug 22 15:49:57 linux-desktop systemd[1]: Failed to start firewalld - dynamic firewall daemon.
░░ Subject: A start job for unit firewalld.service has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit firewalld.service has finished with a failure.
░░
░░ The job identifier is 3465 and the job result is failed.
Thinking it may be a configuration issue, I attempted to run the YaST firewall config utility. A few errors popped up with all of them indicating an issue with Python3 not being able to find the ‘gi’ module; the first one for example:
Execution of command "[["firewall-cmd", "--state"]]" failed.
Exit code: 1
Error output: Traceback (most recent call last):
File "/usr/bin/firewall-cmd", line 24, in <module>
from gi.repository import GObject
ModuleNotFoundError: No module named 'gi'
An attempt to run firewall-cmd from a command line confirmed the issue.
Is this the reason firewalld fails to start?
I find no gi-repository package related to Python3, but I do find these:
> zypper se girepository
Loading repository data...
Reading installed packages...
S | Name | Summary | Type
---+-----------------------------+-------------------------------------+--------
i+ | girepository-1_0 | Base GObject Introspection Bindings | package
i+ | libgirepository-1_0-1 | GObject Introspection Library | package
| libgirepository-1_0-1-32bit | GObject Introspection Library | package
> zypper if girepository-1_0 libgirepository-1_0-1
Loading repository data...
Reading installed packages...
Information for package girepository-1_0:
-----------------------------------------
Repository : Main Repository
Name : girepository-1_0
Version : 1.70.0-150400.2.10
Arch : x86_64
Vendor : SUSE LLC <https://www.suse.com/>
Installed Size : 717.7 KiB
Installed : Yes
Status : up-to-date
Source package : gobject-introspection-1.70.0-150400.2.10.src
Upstream URL : https://wiki.gnome.org/Projects/GObjectIntrospection
Summary : Base GObject Introspection Bindings
Description :
The goal of the project is to describe the APIs and collect them in
a uniform, machine readable format.
Information for package libgirepository-1_0-1:
----------------------------------------------
Repository : Main Repository
Name : libgirepository-1_0-1
Version : 1.70.0-150400.2.10
Arch : x86_64
Vendor : SUSE LLC <https://www.suse.com/>
Installed Size : 240.8 KiB
Installed : Yes
Status : up-to-date
Source package : gobject-introspection-1.70.0-150400.2.10.src
Upstream URL : https://wiki.gnome.org/Projects/GObjectIntrospection
Summary : GObject Introspection Library
Description :
The goal of the project is to describe the APIs and collect them in
a uniform, machine readable format.
Am I missing a package? Or … something else?