Various test suite failure on Debian sid

[mbiebl]

Various test suite failure on Debian sid

[thom311]

/gh290.at:15: grep "ERROR:.*mismatched tag" ./firewalld.log
stderr:
stdout:
2024-01-06 13:58:25 ERROR: Failed to load direct rules file './/direct.xml': INVALID_TYPE: Not a valid file: mismatched tag: line 5, column 2
2024-01-06 13:58:23 ERROR: '/usr/sbin/ebtables-restore --noflush' failed: ebtables-restore: nft-cache.c:69: nft_cache_level_set: Assertion `!strcmp(req->table, cmd->table)' failed.
2024-01-06 13:58:23 ERROR: COMMAND_FAILED: '/usr/sbin/ebtables-restore --noflush' failed: ebtables-restore: nft-cache.c:69: nft_cache_level_set: Assertion `!strcmp(req->table, cmd->table)' failed.
/gh290.at:16: hard failure
244. gh290.at:1: 244. invalid syntax in xml files (gh290.at:1): FAILED (gh290.at:16)

Looks like an iptables issue?

[mbiebl]

iptables kernel or user space ?

[erig0]

I vaguely recall hitting this or similar issue. Possibly fixed by ebtables (iptables-nft) commit c1083acea707 ("ebtables: Fix corner-case noflush restore bug").

[mbiebl]

Thanks for the reference, will check

[mbiebl]

Nod, I can confirm that pulling in c1083acea707 fixes the firewalld failure.
Will forward the issue to the iptables maintainer in Debian.
Thanks!