Skip to content

[BUG] 防火墙在机器重启后报错 #5269

@QYG2297248353

Description

@QYG2297248353

联系方式

[email protected]

1Panel 版本

v1.10.9-lts

问题描述

机器重启后 reboot 防火墙报错,日志显示和Docker网络相关,但是重启防火墙就正常了,Docker的网络很奇怪,又没有动过,也不知道是不是1Panel的问题

两台云服务器均存在此问题,并且都安装的最新版 1Panel 以前没有此问题

重现步骤

reboot

systemctl status firewalld.service

期待的正确结果

有类似问题的,请帮忙排查排查

相关日志输出

[root@iZ2vcbyvsren4abr3rgp0mZ ~]# systemctl status firewalld.service 
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since Tue 2024-06-04 11:02:21 CST; 2min 40s ago
     Docs: man:firewalld(1)
 Main PID: 614 (firewalld)
    Tasks: 2
   Memory: 22.7M
   CGroup: /system.slice/firewalld.service
           └─614 /usr/bin/python2 -Es /usr/sbin/firewalld --nofork --nopid

Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -F DOCKER' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t nat -X DOCKER' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-1' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION-STAGE-2' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.
Jun 04 11:02:34 iZ2vcbyvsren4abr3rgp0mZ firewalld[614]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -X DOCKER-ISOLATION' failed: iptables: No chain/target/match by that name.

附加信息

No response

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions