CPANEL-43012 - Recreate nft inet filter cpanel-dovecot-solr
The latest cpanel-dovecot-solr update mucked up something in the nft tables on a server and now solr will not start.
[plain][nftables] "/sbin/nft flush chain inet filter cpanel-dovecot-solr" failed: Error: Could not process rule: No such file or directory
flush chain inet filter cpanel-dovecot-solr
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
The subprocess reported error number 1 when it ended. at /usr/local/cpanel/Cpanel/NFTables.pm line 77.[/plain]
I've uninstalled Solr and reinstalled it, but that apparently doesn't recreate whatever is necessary for [plain]inet filter cpanel-dovecot-solr[/plain]
-
Before deep-diving the rabbit hole, is anyone getting this Dovecot Solr issue since the last update today for v112: Cpanel::Exception::HTTP::Network/(XID xw8c6m) The system failed to send an HTTP "GET" request to "
restartsrv_cpanel_dovecot_solr doesn't make any impact neither is uninstalling to reinstall with CLI or GUI:Cpanel::Exception::Services::StartError Service Status undefined status from Cpanel::ServiceManager::Services::Cpanel_dovecot_solr Service Error (XID ******) The "cpanel_dovecot_solr" service failed to start. Startup Log Java not found, or an error was encountered when running java. A working Java 8 JRE is required to run Solr! Please install latest version of Java 8 or set JAVA_HOME properly. Command that we tried: 'java -version', with response: /home/cpanelsolr/bin/solr: line 144: java: command not found Debug information: JAVA_HOME: N/A Active Path: /bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/local/sbin --- truncated ----0 -
OK ... the situation was such that one couldn't even uninstall previously: Failed: cpanel-dovecot-solr-8.11.2-3.13.1.cpanel.noarch Cpanel::Exception::ProcessFailed::Error/(XID xkvf3x) "/usr/bin/yum" reported error code "1" when it ended: ---- truncated ---- Cpanel::Plugins::uninstall_plugins("cpanel-dovecot-solr") called at /usr/local/cpanel/scripts/uninstall_dovecot_fts line 18 scripts::uninstall_dovecot_fts::run() called at /usr/local/cpanel/scripts/uninstall_dovecot_fts line 15
But it seems that dealing with the external process and then uninstalling/reinstalling did the trick. Repeat on all servers given that this affected all.0 -
Hey everyone - I merged some threads so we can keep all the information for this in one place. 0 -
site:forums.cpanel.net solr The thread was ancient and didn't apply, but I did discover THIS thread on the bottom (similar threads) section. Due to the convenience (and accuracy), I almost always use google's site:TLD.com search instead of using on-site search. Have the forums stopped indexing their content with Google? I'd like to believe this was on accident, but hard to judge with the recent moves your parent company has made
0 -
No, it's just that this thread is only about 12 hours old. 0 -
PHEW! Good to know 0 -
Not sure my issue is related to @MajorLancelot's issue (but not saying it's not). Either way, restarting csf did not resolve the issue for me. Although, truth be told, I may have gone through a lot of other things trying to resolve the issue before trying a csf restart. What worked for me was to recreate the cpanel-dovecot-solr filter: [font="courier new">nft add chain inet filter cpanel-dovecot-solr And then restarting solr worked. I'm not sure how the cpanel-dovecot-solr filter got removed. But equally perplexing was that it did not get recreated when I forced a reinstall of solr. 0 -
Update - this is fixed in version 114, and we do plan to backport this to 110 and 112. 0 -
Update - this is resolved in version 112.0.5. 0 -
Update - this is resolved in 110.0.9. 0 -
Update - this is resolved in 110.0.9.
Unfortunately we still have a problem, Almalinux 8.8 cPanel 112.0.5, please advise. Jul 31 09:45:35 server.sevaer.com systemd[1]: Starting Solr for cPanel Dovecot... Jul 31 09:45:35 server.sevaer.com cpanel_dovecot_solr_firewall[557490]: [nftables] "/usr/sbin/nft add chain inet filter INPUT { type filter hook input priority 0; policy accept; }" failed: Error: Could not process rule: Device or resource busy Jul 31 09:45:35 server.sevaer.com cpanel_dovecot_solr_firewall[557490]: add chain inet filter INPUT { type filter hook input priority 0; policy accept; } Jul 31 09:45:35 server.sevaer.com cpanel_dovecot_solr_firewall[557490]: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Jul 31 09:45:35 server.sevaer.com cpanel_dovecot_solr_firewall[557490]: : The subprocess reported error number 1 when it ended. at /usr/local/cpanel/Cpanel/NFTables.pm line 79. Jul 31 09:45:35 server.sevaer.com systemd[1]: cpanel-dovecot-solr.service: Control process exited, code=exited status=1 Jul 31 09:45:35 server.sevaer.com systemd[1]: cpanel-dovecot-solr.service: Failed with result 'exit-code'. Jul 31 09:45:35 server.sevaer.com systemd[1]: Failed to start Solr for cPanel Dovecot.0 -
@asfik - can you run this and then see if things start normally? nft delete chain inet filter OUTPUT0 -
@asfik - can you run this and then see if things start normally?
nft delete chain inet filter OUTPUT
Thank you so much for the prompt reply, unfortunately it doesn't seems to be working well: [root@server ~]# nft delete chain inet filter OUTPUT Error: Could not process rule: No such file or directory delete chain inet filter OUTPUT ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Do you mean INPUT instead of OUTPUT?0 -
Interesting - could you submit a ticket to our team so we can take a look at that system? 0
Please sign in to leave a comment.
Comments
16 comments