全新Debian 12服务器上Firewalld启动失败的问题求助
各位大佬好,想请教个Firewalld的棘手问题:
之前我的Debian 12 Bookworm VPS运行firewalld 1.3.0-1完全正常,后来因为无关问题重建了服务器,结果现在Firewalld死活启动失败。我用Ansible来做配置管理,理论上和之前的配置完全一致,会不会是这段时间apt的依赖包发生了变化?
为了方便排查,我特意在服务商那边新建了一台纯干净的Debian 12 VPS,一步步复现了问题:
- 用root账号登录新服务器
- 执行命令:
apt install firewalld --yes - 查看服务状态:
systemctl status firewalld.service,结果报了一堆nftables相关的错误:
ERROR: 'python-nftables' failed: internal:0:0-0: Error: No such file or directory; did you mean chain ‘nat_PREROUTING’ in table inet ‘firewalld’?
Error: Could not process rule: No such file or directory
Error: No such file or directory; did you mean chain ‘nat_POSTROUTING’ in table inet ‘firewalld’?
Error: Could not process rule: No such file or directory
...(类似错误持续输出)
因为Docker的限制,我本来就打算用iptables而不是nftables作为Firewalld的后端,所以我做了以下操作:
- 编辑
/etc/firewalld/firewalld.config文件,把FirewallBackend=nftables修改为FirewallBackend=iptables - 重启Firewalld服务:
systemctl restart firewalld.service - 再次查看服务状态:
systemctl status firewalld.service,结果又报了iptables相关的错误:
ERROR: '/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.8.9 (nf_tables):
CHAIN_ADD failed (No such file or directory): chain PREROUTING
RULE_APPEND failed (No such file or directory): rule in chain PREROUTING
RULE_APPEND failed (No such file or directory): rule in chain PREROUTING
CHAIN_ADD failed (No such file or directory): chain POSTROUTING
RULE_APPEND failed (No such file or directory): rule in chain POSTROUTING
RULE_APPEND failed (No such file or directory): rule in chain POSTROUTING
CHAIN_ADD failed (No such file or directory): chain OUTPUT
RULE_APPEND failed (No such file or directory): rule in chain OUTPUT
RULE_APPEND failed (No such file or directory): rule in chain OUTPUT
...(类似错误持续输出)
我实在搞不懂哪里出问题了,之前明明用得好好的,这台新服务器啥额外软件都没装、啥自定义配置都没做,按道理应该开箱即用才对。有没有大佬能指点下我哪里操作错了?
(另外这个问题我也在对应的代码仓库发布过了)
备注:内容来源于stack exchange,提问作者lonix

