Bug#1040783: [Pkg-libvirt-maintainers] Bug#1040783: Bug#1040783: libvirt-daemon: libvirt firewalld zone is missing

[Michael Biebl]

On Sun, 13 Apr 2025 09:28:58 +0200 Guido =?iso-8859-1?Q?G=FCnther?= <a...@sigxcpu.org> wrote:

On Sun, Apr 13, 2025 at 01:15:28AM +0200, Andrea Bolognani wrote:
[..snip..]

> libvirt package that matches the following snippet from the upstream
> spec file:

>     %if %{with_firewalld_zone}
>     %firewalld_reload
>     %endif

Nice find!

[..snip..]

> when the network driver is installed, the way upstream and Fedora
> already do.

Instead of all packages shipping zones doing this firewalld should
likely better register a trigger, like e.g. glib does for new schemas:

/usr/share/glib-2.0/schemas libglib2.0-0t64:amd64

in /var/lib/dpkg/triggers/File

so probably best to move the issue there?

> I think what might be happening is that we don't have any code in the > > %post daemon-driver-network > It would probably make sense to at least attempt to reload firewalld

Thanks for the suggestion, seems like a reasonable idea to add a file-based trigger for the /usr/lib/firewalld/zones/ directory.

Regards
Michael

I need to check if we should include /usr/lib/firewalld/services/ as well or if firewalld picks those up automatically.

OpenPGP_signature.asc
Description: OpenPGP digital signature