Discussion:
[libvirt-users] libvirt does not see a firewall backend
Stallard, Adam
2018-05-03 21:47:44 UTC
Permalink
Hi,

I am working with libvirt on a small buildroot image and can't get a network to start:

$ virsh net-list -all
Default inactive yes yes

$ virsh -debug=4 net-start default
Error: Failed to start network default
Error: internal error: Failed to initialize a vlid firewall backend

Reading the source in libvirt-3.7.0/src/util/virfirewall.c, I believe libvirt is checking for iptables, ip6tables, and ebtables, all of which I have installed on the system in the proper directories (according to the *_PATH macros used by libvirt code).


By removing network configuration from my domain configuration, I can start a VM just fine and see it running with virsh. But it will not start if the network is configured. What do I need to do to fix the "firewall backend" configuration so that libvirt recognizes and accepts my host configurations (iptables / ebtables)? They are installed from standard packages included with buildroot.

Thank you.

Loading...