防火墙在机器重启后报错

[QYG2297248353]

联系方式

[email protected]

1Panel 版本

v1.10.9-lts

问题描述

机器重启后 reboot 防火墙报错，日志显示和Docker网络相关，但是重启防火墙就正常了，Docker的网络很奇怪，又没有动过，也不知道是不是1Panel的问题

两台云服务器均存在此问题，并且都安装的最新版 1Panel 以前没有此问题

重现步骤

reboot

systemctl status firewalld.service

期待的正确结果

有类似问题的，请帮忙排查排查

相关日志输出

[root@iZ2vcbyvsren4abr3rgp0mZ ~]# systemctl status firewalld.service 
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since Tue 2024-06-04 11:02:21 CST; 2min 40s ago
     Docs: man:firewalld(1)
 Main PID: 614 (firewalld)
    Tasks: 2
   Memory: 22.7M
   CGroup: /system.slice/firewalld.service
           └─614 /usr/bin/python2 -Es /usr/sbin/firewalld --nofork --nopid

Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -F DOCKER' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -X DOCKER' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.

附加信息

No response

[wanghe-fit2cloud]

通过上述日志，可以看出的是 iptables 规则链中不存在名为 DOCKER 的链。
具体原因建议检查一下 Docker 和 iptables 的日志来获取更多的详细信息。

[QYG2297248353]

配置中却没有

配置中应该有

还是使用了其他方法实现

[wanghe-fit2cloud]

iptables 配置好像默认是 true。