2021年CentOS7關于Firewalld防火墻失效報錯問題處理-有解無憂

今天發現了一個問題，就是在我進行firewalld防火墻增加指定埠訪問的策略時出現了報錯問題，firewalld命令用不了，提示什么沒有GI模塊:

Traceback (most recent call last):  File "/usr/bin/firewall-cmd", line 24, in <module>
    from gi.repository import GObject
ImportError: No module named repository

咱也不知道是什么原因使用了systemctl status firewalld.service 命令提示讓我使用"journalctl -xe"查看具體的報錯資訊

[root@local ~]# systemctl restart firewalld.service 
Job for firewalld.service failed because the control process exited with error code. See "systemctl status firewalld.service" and "journalctl -xe" for details.

于是我使用journalctl -xe查看了一下資訊:

[root@local ~]# journalctl -xe
-- 
-- Unit session-739379.scope has begun starting up.
2月 23 11:42:01 local CROND[139925]: (root) CMD (  python /usr/sbin/qemu-ga_check.py)
2月 23 11:42:03 local node_exporter[85654]: level=error ts=2021-02-23T03:42:03.119Z caller=collector.go:161 msg="collector failed" name=pressure duration_seconds=3.9051e-05 err="failed to retrieve pressure s
2月 23 11:42:18 local node_exporter[85654]: level=error ts=2021-02-23T03:42:18.118Z caller=collector.go:161 msg="collector failed" name=pressure duration_seconds=4.5741e-05 err="failed to retrieve pressure s
2月 23 11:42:33 local node_exporter[85654]: level=error ts=2021-02-23T03:42:33.116Z caller=collector.go:161 msg="collector failed" name=pressure duration_seconds=0.000106178 err="failed to retrieve pressure 
2月 23 11:42:48 local node_exporter[85654]: level=error ts=2021-02-23T03:42:48.117Z caller=collector.go:161 msg="collector failed" name=pressure duration_seconds=4.5471e-05 err="failed to retrieve pressure s
2月 23 11:43:01 local systemd[1]: Started Session 739380 of user root.
-- Subject: Unit session-739380.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-739380.scope has finished starting up.
-- 
-- The start-up result is done.
2月 23 11:43:01 local systemd[1]: Starting Session 739380 of user root.
-- Subject: Unit session-739380.scope has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-739380.scope has begun starting up.
2月 23 11:43:01 local CROND[140519]: (root) CMD (  python /usr/sbin/qemu-ga_check.py)
2月 23 11:43:03 local node_exporter[85654]: level=error ts=2021-02-23T03:43:03.116Z caller=collector.go:161 msg="collector failed" name=pressure duration_seconds=2.5102e-05 err="failed to retrieve pressure s
2月 23 11:43:18 local node_exporter[85654]: level=error ts=2021-02-23T03:43:18.119Z caller=collector.go:161 msg="collector failed" name=pressure duration_seconds=6.0881e-05 err="failed to retrieve pressure s
2月 23 11:43:31 local polkitd[937]: Registered Authentication Agent for unix-process:140847:3963471907 (system bus name :1.1480956 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop
2月 23 11:43:31 local systemd[1]: Starting firewalld - dynamic firewall daemon...
-- Subject: Unit firewalld.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit firewalld.service has begun starting up.
2月 23 11:43:31 local systemd[1]: firewalld.service: main process exited, code=exited, status=1/FAILURE
2月 23 11:43:31 local systemd[1]: Failed to start firewalld - dynamic firewall daemon.
-- Subject: Unit firewalld.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit firewalld.service has failed.
-- 
-- The result is failed.
2月 23 11:43:31 local systemd[1]: Unit firewalld.service entered failed state.
2月 23 11:43:31 local systemd[1]: firewalld.service failed.
2月 23 11:43:31 local polkitd[937]: Unregistered Authentication Agent for unix-process:140847:3963471907 (system bus name :1.1480956, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale zh_CN
2月 23 11:43:33 local node_exporter[85654]: level=error ts=2021-02-23T03:43:33.117Z caller=collector.go:161 msg="collector failed" name=pressure duration_seconds=2.6909e-05 err="failed to retrieve pressure s
lines 3909-3952/3952 (END)

里面有一行提示Failed to start firewalld - dynamic firewall daemon.
翻譯出來為:無法啟動firewalld-動態防火墻守護程式，
這是為啥呢？？？
看到了網上的人說和系統本地的Python有關，網上說CentOS7的firewalld防火墻默認指向的是Python2的版本，于是我查看了一下我的電腦本身的Python版本，發現有Python2.7和Python3.7兩種:

[root@local ~]# python
python             python2.7          python2-config     python3.7          python3.7m         python3-config     python-config      
python2            python2.7-config   python3            python3.7-config   python3.7m-config  python.bak

誒？
是不是因為firewalld本身的python指向有問題了？
我查看了一下firewalld的啟動檔案查看了一下第一行的python指向路徑:

[root@local ~]# vim /usr/sbin/firewalld

#!/usr/bin/python -Es
# -*- coding: utf-8 -*-
#
# Copyright (C) 2010-2016 Red Hat, Inc.
# Authors:
# Thomas Woerner <twoerner@redhat.com>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
# python fork magic derived from setroubleshoot
# Copyright (C) 2006,2007,2008,2009 Red Hat, Inc.
# Authors:
#   John Dennis <jdennis@redhat.com>
#   Dan Walsh <dwalsh@redhat.com>

import os
import sys
import dbus
import traceback
import argparse

from firewall import config
from firewall.functions import firewalld_is_active
from firewall.core.logger import log, FileLog

def parse_cmdline():
    parser = argparse.ArgumentParser()
    parser.add_argument('--debug',
                        nargs='?', const=1, default=0, type=int,
                        choices=range(1, log.DEBUG_MAX+1),
                        help="""Enable logging of debug messages.
                                Additional argument in range 1..%s can be used
                                to specify log level.""" % log.DEBUG_MAX,
"/usr/sbin/firewalld" 176L, 6310C                                                                                                                                                            1,1          頂端

發現了第一行的Python指向的路徑，我查看了該路徑下的Python版本發現為3.7版本:

發現不對了網上說的firewalld應當指向Python2.0版本而不是3.0版本，于是我到/usr/bin/下查看相關的Python版本，找到了Python2.7

這次需要VIM工具修改/usr/bin/firewall-offline-cmd和/usr/sbin/firewalld 里面的第一行Python指向，將兩個檔案第一行的 #!/usr/bin/python -Es 改成 #!/usr/bin/python2.7 -Es

#!/usr/bin/python2.7 -Es
# -*- coding: utf-8 -*-

然后執行 systemctl status firewalld.service 命令還是提示錯誤，我已經修改了Python了還是出錯？
我直接敲firewalld命令看看是什么意思:

[root@local ~]# firewalld 
Traceback (most recent call last):
  File "/usr/sbin/firewalld", line 29, in <module>
    import dbus
ImportError: No module named dbus

他跟我說沒有什么什么DBUS的模塊，
？？？？
沒有？那我就還得安裝這個模塊唄？
于是我就網上繼續找，發現應該是需要安裝python-gobject
有位老哥說安裝了python-gobject后還需要再安裝python-firewall
于是乎我就 yum install python-gobject -y 和yum install python-firewall -y

[root@local ~]# yum install python-firewall
===========================================================================================================
 Package                        架構                版本                       源                     大小
===========================================================================================================
正在安裝:
 python-firewall                noarch              0.4.4.4-6.el7              LocalISO              325 k
為依賴而安裝:
 dbus-python                    x86_64              1.1.1-9.el7                LocalISO              206 k
 libselinux-python              x86_64              2.5-11.el7                 LocalISO              234 k
 python-decorator               noarch              3.4.0-3.el7                LocalISO               27 k
 python-slip                    noarch              0.4.0-2.el7                LocalISO               30 k
 python-slip-dbus               noarch              0.4.0-2.el7                LocalISO               31 k

事務概要
===========================================================================================================
安裝  1 軟體包 (+5 依賴軟體包)
已安裝:
  python-gobject.x86_64 0:3.22.0-1.el7                                                                     

作為依賴被安裝:
  cairo.x86_64 0:1.14.8-2.el7                         cairo-gobject.x86_64 0:1.14.8-2.el7                  
  libXdamage.x86_64 0:1.1.4-4.1.el7                   libXfixes.x86_64 0:5.0.3-1.el7                       
  libXxf86vm.x86_64 0:1.1.4-1.el7                     libxshmfence.x86_64 0:1.2-1.el7                      
  mesa-libEGL.x86_64 0:17.0.1-6.20170307.el7          mesa-libGL.x86_64 0:17.0.1-6.20170307.el7            
  mesa-libgbm.x86_64 0:17.0.1-6.20170307.el7          mesa-libglapi.x86_64 0:17.0.1-6.20170307.el7         
  pycairo.x86_64 0:1.8.10-8.el7                       python-gobject-base.x86_64 0:3.22.0-1.el7            

完畢！

[root@local ~]# yum install python-firewall -y
===========================================================================================================
 Package                        架構                版本                       源                     大小
===========================================================================================================
正在安裝:
 python-firewall                noarch              0.4.4.4-6.el7              LocalISO              325 k
為依賴而安裝:
 dbus-python                    x86_64              1.1.1-9.el7                LocalISO              206 k
 libselinux-python              x86_64              2.5-11.el7                 LocalISO              234 k
 python-decorator               noarch              3.4.0-3.el7                LocalISO               27 k
 python-slip                    noarch              0.4.0-2.el7                LocalISO               30 k
 python-slip-dbus               noarch              0.4.0-2.el7                LocalISO               31 k

事務概要
===========================================================================================================
安裝  1 軟體包 (+5 依賴軟體包)

已安裝:
  python-firewall.noarch 0:0.4.4.4-6.el7                                                                   

作為依賴被安裝:
  dbus-python.x86_64 0:1.1.1-9.el7                     libselinux-python.x86_64 0:2.5-11.el7               
  python-decorator.noarch 0:3.4.0-3.el7                python-slip.noarch 0:0.4.0-2.el7                    
  python-slip-dbus.noarch 0:0.4.0-2.el7               

完畢！

再次重啟firewalld防火墻試試:

[root@local ~]# firewall
firewall-cmd          firewalld             firewall-offline-cmd  
[root@local ~]# systemctl status firewalld.service 
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since 二 2021-02-23 11:43:31 CST; 21min ago
     Docs: man:firewalld(1)
  Process: 140855 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=1/FAILURE)
 Main PID: 140855 (code=exited, status=1/FAILURE)

2月 23 11:43:31 local systemd[1]: Starting firewalld - dynamic firewall daemon...
2月 23 11:43:31 local systemd[1]: firewalld.service: main process exited, code=exited, status=1/FAILURE
2月 23 11:43:31 local systemd[1]: Failed to start firewalld - dynamic firewall daemon.
2月 23 11:43:31 local systemd[1]: Unit firewalld.service entered failed state.
2月 23 11:43:31 local systemd[1]: firewalld.service failed.
[root@local ~]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since 二 2021-02-23 11:43:31 CST; 22min ago
     Docs: man:firewalld(1)
  Process: 140855 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=1/FAILURE)
 Main PID: 140855 (code=exited, status=1/FAILURE)

2月 23 11:43:31 local systemd[1]: Starting firewalld - dynamic firewall daemon...
2月 23 11:43:31 local systemd[1]: firewalld.service: main process exited, code=exited, status=1/FAILURE
2月 23 11:43:31 local systemd[1]: Failed to start firewalld - dynamic firewall daemon.
2月 23 11:43:31 local systemd[1]: Unit firewalld.service entered failed state.
2月 23 11:43:31 local systemd[1]: firewalld.service failed.
[root@local ~]# systemctl restart firewalld
[root@local ~]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since 二 2021-02-23 12:05:37 CST; 3s ago
     Docs: man:firewalld(1)
 Main PID: 7159 (firewalld)
   CGroup: /system.slice/firewalld.service
           └─7159 /usr/bin/python2.7 -Es /usr/sbin/firewalld --nofork --nopid

2月 23 12:05:37 local systemd[1]: Starting firewalld - dynamic firewall daemon...
2月 23 12:05:37 local systemd[1]: Started firewalld - dynamic firewall daemon.
2月 23 12:05:37 local firewalld[7159]: WARNING: ICMP type 'beyond-scope' is not supported by the ke...pv6.
2月 23 12:05:37 local firewalld[7159]: WARNING: beyond-scope: INVALID_ICMPTYPE: No supported ICMP t...ime.
2月 23 12:05:37 local firewalld[7159]: WARNING: ICMP type 'failed-policy' is not supported by the k...pv6.
2月 23 12:05:37 local firewalld[7159]: WARNING: failed-policy: INVALID_ICMPTYPE: No supported ICMP ...ime.
2月 23 12:05:37 local firewalld[7159]: WARNING: ICMP type 'reject-route' is not supported by the ke...pv6.
2月 23 12:05:37 local firewalld[7159]: WARNING: reject-route: INVALID_ICMPTYPE: No supported ICMP t...ime.
Hint: Some lines were ellipsized, use -l to show in full.

OK！解決了！我的天！就是這樣本地Python指向出現了問題，

轉載請註明出處，本文鏈接：https://www.uj5u.com/qita/263415.html

標籤：其他

上一篇：希望我能幫助你：關于軟體開發的建議

下一篇：大資料面試總結 - scala & sqoop