)]}'
{"id":"openstack%2Fdevstack~755554","triplet_id":"openstack%2Fdevstack~master~Ic8fa257af92f78bc621f27f6765bb26dbb71de3a","project":"openstack/devstack","branch":"master","topic":"bug/1898065","attention_set":{},"removed_from_attention_set":{"23804":{"account":{"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},"last_update":"2022-06-30 07:35:14.000000000","reason":"Change was abandoned"}},"hashtags":[],"change_id":"Ic8fa257af92f78bc621f27f6765bb26dbb71de3a","subject":"Don\u0027t start iptables-service on CentOS/Fedora","status":"ABANDONED","created":"2020-10-01 15:19:14.000000000","updated":"2025-03-15 21:33:35.000000000","total_comment_count":6,"unresolved_comment_count":1,"has_review_started":true,"meta_rev_id":"87f0f85b4c0da523bb8af0c503ab582482d0d94e","_number":755554,"virtual_id_number":755554,"owner":{"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":11952,"name":"Flavio Fernandes","email":"flavio@flaviof.com","username":"ffernand"},{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},{"date":"2020-10-01 16:33:11.000000000","_account_id":29963,"name":"Intel_Zuul","display_name":"Intel Corporation CI","email":"intel-openstack-ci@intel.com","username":"Intel_Zuul"},{"tag":"autogenerated:zuul:check","value":1,"date":"2020-10-01 23:48:54.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"date":"2020-10-02 19:36:23.000000000","_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},{"date":"2020-10-02 07:45:39.000000000","_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},{"_account_id":8655,"name":"Jakub Libosvar","email":"libosvar@redhat.com","username":"jlibosva"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"recommended":{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},"disliked":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"all":[{"value":1,"date":"2020-10-02 09:30:57.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":11952,"name":"Flavio Fernandes","email":"flavio@flaviof.com","username":"ffernand"},{"value":-1,"date":"2020-10-02 06:24:21.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},{"value":1,"date":"2020-10-02 11:22:57.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},{"value":1,"date":"2020-10-02 09:42:40.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},{"value":1,"date":"2021-06-08 14:17:02.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},{"value":-1,"date":"2021-05-11 14:35:42.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":29963,"name":"Intel_Zuul","display_name":"Intel Corporation CI","email":"intel-openstack-ci@intel.com","username":"Intel_Zuul"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},{"value":1,"date":"2020-10-02 09:44:09.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":8655,"name":"Jakub Libosvar","email":"libosvar@redhat.com","username":"jlibosva"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":-1,"default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":11952,"name":"Flavio Fernandes","email":"flavio@flaviof.com","username":"ffernand"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},{"_account_id":29963,"name":"Intel_Zuul","display_name":"Intel Corporation CI","email":"intel-openstack-ci@intel.com","username":"Intel_Zuul"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},{"value":0,"permitted_voting_range":{"min":-1,"max":0},"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},{"_account_id":8655,"name":"Jakub Libosvar","email":"libosvar@redhat.com","username":"jlibosva"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":11952,"name":"Flavio Fernandes","email":"flavio@flaviof.com","username":"ffernand"},{"value":0,"permitted_voting_range":{"min":-1,"max":2},"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},{"value":0,"date":"2021-11-23 09:56:10.000000000","permitted_voting_range":{"min":0,"max":2},"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":29963,"name":"Intel_Zuul","display_name":"Intel Corporation CI","email":"intel-openstack-ci@intel.com","username":"Intel_Zuul"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-1,"max":2},"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":8655,"name":"Jakub Libosvar","email":"libosvar@redhat.com","username":"jlibosva"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"}],"REVIEWER":[{"_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},{"_account_id":8655,"name":"Jakub Libosvar","email":"libosvar@redhat.com","username":"jlibosva"},{"_account_id":11952,"name":"Flavio Fernandes","email":"flavio@flaviof.com","username":"ffernand"},{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},{"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},{"_account_id":29963,"name":"Intel_Zuul","display_name":"Intel Corporation CI","email":"intel-openstack-ci@intel.com","username":"Intel_Zuul"},{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-10-01 16:33:11.000000000","updated_by":{"_account_id":29963,"name":"Intel_Zuul","display_name":"Intel Corporation CI","email":"intel-openstack-ci@intel.com","username":"Intel_Zuul"},"reviewer":{"_account_id":29963,"name":"Intel_Zuul","display_name":"Intel Corporation CI","email":"intel-openstack-ci@intel.com","username":"Intel_Zuul"},"state":"REVIEWER"},{"updated":"2020-10-01 23:48:54.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-10-02 06:24:21.000000000","updated_by":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"reviewer":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"state":"REVIEWER"},{"updated":"2020-10-02 09:30:57.000000000","updated_by":{"_account_id":11952,"name":"Flavio Fernandes","email":"flavio@flaviof.com","username":"ffernand"},"reviewer":{"_account_id":11952,"name":"Flavio Fernandes","email":"flavio@flaviof.com","username":"ffernand"},"state":"REVIEWER"},{"updated":"2020-10-02 09:42:40.000000000","updated_by":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"reviewer":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"state":"REVIEWER"},{"updated":"2020-10-02 09:44:09.000000000","updated_by":{"_account_id":8655,"name":"Jakub Libosvar","email":"libosvar@redhat.com","username":"jlibosva"},"reviewer":{"_account_id":8655,"name":"Jakub Libosvar","email":"libosvar@redhat.com","username":"jlibosva"},"state":"REVIEWER"},{"updated":"2020-10-02 11:22:57.000000000","updated_by":{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},"reviewer":{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},"state":"REVIEWER"},{"updated":"2020-10-02 19:36:23.000000000","updated_by":{"_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},"reviewer":{"_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},"state":"REVIEWER"},{"updated":"2021-04-27 12:08:30.000000000","updated_by":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"reviewer":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"state":"REVIEWER"},{"updated":"2021-04-27 12:08:30.000000000","updated_by":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"reviewer":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"state":"REVIEWER"},{"updated":"2021-04-27 12:08:30.000000000","updated_by":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"reviewer":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"state":"REVIEWER"},{"updated":"2025-03-15 21:33:35.000000000","updated_by":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"reviewer":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"state":"CC"}],"messages":[{"id":"832f8e67a2d36de7524d27a5df5c73d2a07b2213","author":{"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},"date":"2020-10-01 15:19:14.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"62a17941056bbb30ce6861fbd657b7f401014e08","author":{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},"date":"2020-10-01 15:23:14.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"eff01040eb32e35fe8075a17f47d88d1caace5f3","author":{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},"date":"2020-10-01 15:24:34.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"1bc33da88f1fdde1c9b0b310b25c97b5ab782033","author":{"_account_id":29963,"name":"Intel_Zuul","display_name":"Intel Corporation CI","email":"intel-openstack-ci@intel.com","username":"Intel_Zuul"},"date":"2020-10-01 16:33:11.000000000","message":"Patch Set 1:\n\nBuild SUCCESSFUL (check pipeline).\n\n- devstack-nfv-numa http://52.27.155.124/54/755554/1/check/devstack-nfv-numa/d1c60c6/ : SUCCESS in 51m 48s","accounts_in_message":[],"_revision_number":1},{"id":"7863c90cc0b5a066c9c4a3ce56f89268a871d064","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-10-01 23:48:54.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- grenade https://zuul.opendev.org/t/openstack/build/495d20cef767440d92677751c68a0384 : SUCCESS in 1h 01m 56s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/976cac255fc94d51a95f8e74f300236b : SUCCESS in 1h 18m 38s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9dafab24f28545f1b53bb74af8fd6f5f : SUCCESS in 6m 50s\n- devstack https://zuul.opendev.org/t/openstack/build/6b8f524cdec1465e9784dca4a5018069 : SUCCESS in 29m 29s\n- devstack-ipv6 https://zuul.opendev.org/t/openstack/build/938ca7eb6c704a138d287eba36855227 : SUCCESS in 34m 02s\n- devstack-platform-opensuse-15 https://zuul.opendev.org/t/openstack/build/415c0d51f2e14f3791ddb5b894e73c66 : FAILURE in 1h 08m 19s (non-voting)\n- devstack-platform-fedora-latest https://zuul.opendev.org/t/openstack/build/7dd410014f584b788a3f9f0e4d9cde2f : SUCCESS in 1h 28m 03s (non-voting)\n- devstack-platform-centos-8 https://zuul.opendev.org/t/openstack/build/cdd03f94c8394ddd82702e10efd965e3 : SUCCESS in 1h 39m 30s (non-voting)\n- devstack-platform-bionic https://zuul.opendev.org/t/openstack/build/6360263f681340138241ba1e82e4c580 : SUCCESS in 1h 38m 43s (non-voting)\n- devstack-multinode https://zuul.opendev.org/t/openstack/build/f7884d65c43a43f1978fc065c8ff57d0 : SUCCESS in 37m 41s\n- devstack-unit-tests https://zuul.opendev.org/t/openstack/build/a7dac70802ab4773aaff59940b5acc51 : SUCCESS in 3m 23s\n- openstack-tox-bashate https://zuul.opendev.org/t/openstack/build/e98974a2805b4e139e1bbb090ea290a0 : SUCCESS in 3m 13s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/49b02c0fe0224f34a46092777e31fa56 : FAILURE in 15m 11s (non-voting)\n- neutron-grenade-multinode https://zuul.opendev.org/t/openstack/build/05d35f161c9e4ed9abe5569494f5a127 : SUCCESS in 1h 12m 53s\n- neutron-tempest-linuxbridge https://zuul.opendev.org/t/openstack/build/c16c2bbf75d6471498c9c65cea0141fc : SUCCESS in 1h 11m 40s\n- neutron-ovn-tempest-ovs-release https://zuul.opendev.org/t/openstack/build/6a52664221c84a108a159e2f1bc6358b : SUCCESS in 1h 20m 43s (non-voting)\n- tempest-multinode-full-py3 https://zuul.opendev.org/t/openstack/build/2669e5cd00ee4576975d9769e3cfbe8b : SUCCESS in 1h 24m 11s (non-voting)\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/5b9daed443aa4338b85ee7baad5a5be9 : SUCCESS in 55m 24s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/2f14a8b81bb34c1b9e325ba508621d88 : SUCCESS in 1h 07m 15s\n- nova-ceph-multistore https://zuul.opendev.org/t/openstack/build/595e20dc0188479ab4dd13330d2a137b : SUCCESS in 1h 07m 05s\n- nova-live-migration https://zuul.opendev.org/t/openstack/build/b6fc0808d76d40da88c8f7cf79517082 : SUCCESS in 51m 50s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"b8a593e703318b49b0c0dd6209408b3acb23134b","author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"date":"2020-10-02 06:24:21.000000000","message":"Patch Set 1: Code-Review-1\n\nBetter make sure to set up iptables rules properly, that code is in place for a reason. Without any rules, test instances may get exploitable as open resolvers or similar.","accounts_in_message":[],"_revision_number":1},{"id":"d2959be0592868d37dd261ca7b84f7e93b6eaa15","author":{"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},"date":"2020-10-02 07:45:39.000000000","message":"Patch Set 1:\n\n\u003e Better make sure to set up iptables rules properly, that code is in\n \u003e place for a reason. Without any rules, test instances may get\n \u003e exploitable as open resolvers or similar.\n\nHi Jens, thanks for the review. Some comments to this:\n\n* devstack is not intended for production environments so it\u0027s not hardened. As an example, you can see that SELinux is disabled [0].\n\n* When deploying devstack with Ubuntu, there are no firewall rules installed [1] so at the very least this patch would make it as secure as it is with Ubuntu, the default distro used by most of the jobs.\n\n* When you say that \"that code is in place for a reason\", I couldn\u0027t figure out what that reason is via git log. Could you elaborate on what\u0027s the reason that code was added for in the first place?\n\nOn top of that, I have tested this patch and now I\u0027m able to deploy devstack on CentOS 8 which is way better than the current broken state.\n\nThanks once again,\nDaniel\n\n[0] https://github.com/openstack/devstack/blob/2c07049b40923d9130a57ac931bde89586cd31d1/tools/fixup_stuff.sh#L109\n[1] http://paste.openstack.org/show/798613/","accounts_in_message":[],"_revision_number":1},{"id":"2161026f2ab236339c54ac94a753318f4a0d75de","author":{"_account_id":11952,"name":"Flavio Fernandes","email":"flavio@flaviof.com","username":"ffernand"},"date":"2020-10-02 09:30:57.000000000","message":"Patch Set 1: Code-Review+1\n\nOne of the things listed in the OVN Openstack tutorial [1] is\nto do \"sudo iptables -F\". I would like not to have that even mentioned, as this is an environment for testing/development, not to\nmake Openstack difficult to learn. Please consider allowing firewall disabled as suggested here.\n\n[1] https://docs.ovn.org/en/latest/tutorials/ovn-openstack.html#setting-up-devstack  (step 5)","accounts_in_message":[],"_revision_number":1},{"id":"8ca313839b639e5d702a17287e3e26166d1e29ec","author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"date":"2020-10-02 09:42:40.000000000","message":"Patch Set 1: Code-Review+1\n\nI agree with Daniel here.","accounts_in_message":[],"_revision_number":1},{"id":"dbd53485978ea59639b931ebf50f07fe8689aa73","author":{"_account_id":8655,"name":"Jakub Libosvar","email":"libosvar@redhat.com","username":"jlibosva"},"date":"2020-10-02 09:44:09.000000000","message":"Patch Set 1: Code-Review+1\n\nI\u0027m in favor of removing the iptables-service unless we know the reason it was added. I agree with the points Daniel made.","accounts_in_message":[],"_revision_number":1},{"id":"43d47ad145e5c7c533aeee4d55a0b03dbd6ffcb0","author":{"_account_id":6773,"name":"Lucas Alvares Gomes","email":"lucasagomes@gmail.com","username":"lucasagomes"},"date":"2020-10-02 11:22:57.000000000","message":"Patch Set 1: Code-Review+1\n\nI spoke with Daniel on IRC about this and I am fine with the change. I thought at first that just removing the rule would be a more cirurgical change for this (and would work) but I also couldn\u0027t traceback why this iptable-service is needed at all. So removing it makes sense to me.\n\nAlso, this whole fixup.sh script is basically workarounds so, removing workarounds is a good thing in general :-)","accounts_in_message":[],"_revision_number":1},{"id":"e6261c79e31e97056cae0fe245c585d044000e31","author":{"_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},"date":"2020-10-02 12:45:58.000000000","message":"Patch Set 1:\n\nNot that what this patch needs is another Red Hatter opinion, but ... :)\n\nIt looks like the code to disable firewalld and instead use iptables was due to issues with f20 and firewalld. These issues were fixed by f21. Devstack has required \u003e than f21 since mitaka. Red Hat docs on using Director/tripleo show using firewall-cmd. It seems like it should be well-supported at this point to use firewalld and get rid of the whole block of code including disabling firewalld. If, for some reason firewalld needs tweaking, we could add the appropriate rules or clear them or whatever.","accounts_in_message":[],"_revision_number":1},{"id":"7a5a2f699d725493479f8b0b1a71ba97a30860df","author":{"_account_id":5756,"name":"Terry Wilson","email":"twilson@redhat.com","username":"otherwiseguy"},"date":"2020-10-02 19:36:23.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"e3a8fa05e87abed9a7d247db26fc7405a27da01c","author":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"date":"2021-04-27 12:08:30.000000000","message":"Patch Set 1: Code-Review+2 Review-Priority+1\n\nrecheck since it\u0027s been several months the check gates verified the change ... many great points raised here, after reading them all, more facts speak for this change than against, so +2","accounts_in_message":[],"_revision_number":1},{"id":"658ea3d628341e7758e73b4db81283abba1fdb86","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-04-27 14:19:48.000000000","message":"Patch Set 1:\n\nBuild succeeded (check pipeline).\n\n- grenade https://zuul.opendev.org/t/openstack/build/a62c7a58c62447a39be66cefb7d7ba3b : SUCCESS in 1h 02m 29s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/55c21978b3b74f6195ff745459496d17 : SUCCESS in 1h 08m 01s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/61fbd17d60ed4fd4941d3c9c6fe3e949 : SUCCESS in 7m 36s\n- devstack https://zuul.opendev.org/t/openstack/build/793fed9fb8b24311999a153ded1ab785 : SUCCESS in 32m 18s\n- devstack-ipv6 https://zuul.opendev.org/t/openstack/build/c6ebdd2e5ff44293b403f2104f5612cd : SUCCESS in 30m 53s\n- devstack-platform-fedora-latest https://zuul.opendev.org/t/openstack/build/93cd907e53474f08917314f7f3a26dc7 : SUCCESS in 1h 45m 08s (non-voting)\n- devstack-platform-centos-8 https://zuul.opendev.org/t/openstack/build/6f0b6b5cba4944d5b8316d47ea39cc27 : SUCCESS in 1h 47m 27s (non-voting)\n- devstack-platform-bionic https://zuul.opendev.org/t/openstack/build/795211c90add410399fd0fdb462c39fd : SUCCESS in 1h 27m 16s (non-voting)\n- devstack-async https://zuul.opendev.org/t/openstack/build/39f0532aa7794204bd5ece13852678aa : SUCCESS in 1h 16m 59s (non-voting)\n- devstack-multinode https://zuul.opendev.org/t/openstack/build/e9a3ce082c8345c38e97f5c0ca47e989 : SUCCESS in 39m 07s\n- devstack-unit-tests https://zuul.opendev.org/t/openstack/build/1967d85b58154e05997914bbc65a9816 : SUCCESS in 4m 54s\n- openstack-tox-bashate https://zuul.opendev.org/t/openstack/build/db66a596b838463fa49ce1b86e64402b : SUCCESS in 3m 24s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/091d7fa23c314c62aaacd2d491192065 : SUCCESS in 40m 21s (non-voting)\n- neutron-grenade-multinode https://zuul.opendev.org/t/openstack/build/12b2e2f2f957450ba69d8c8005d63251 : SUCCESS in 1h 01m 45s\n- neutron-tempest-linuxbridge https://zuul.opendev.org/t/openstack/build/d8d74413524a462e888fb10a8f3b707d : SUCCESS in 55m 20s\n- neutron-ovn-tempest-ovs-release https://zuul.opendev.org/t/openstack/build/b578b6ec40e848749712efd2820b723e : SUCCESS in 1h 04m 13s (non-voting)\n- tempest-multinode-full-py3 https://zuul.opendev.org/t/openstack/build/0163213bcef54a7fb9deacd4919f0044 : SUCCESS in 1h 43m 56s (non-voting)\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/1b9ba6560fa84cf79f7064c8a20d56f2 : SUCCESS in 49m 26s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/44e1b354cfee436e86de90c75b4f5860 : SUCCESS in 47m 57s\n- nova-ceph-multistore https://zuul.opendev.org/t/openstack/build/4db3893ecef1412f81cfe7dbf823ff13 : SUCCESS in 1h 13m 43s","accounts_in_message":[],"_revision_number":1},{"id":"b5b17ddcfb236fe2676364b0b5ece1974f211f19","author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"date":"2021-05-11 14:35:42.000000000","message":"Patch Set 1: Code-Review-1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"9f9fd69fddc4728bed841c8b40a5eca4b5fb78b6","author":{"_account_id":30491,"name":"Radosław Piliszek","display_name":"Radek","email":"radek@piliszek.it","username":"yoctozepto","status":"self-employed techologist, collaborating mostly with 7bulls.com"},"date":"2021-05-11 14:36:13.000000000","message":"Patch Set 1:\n\n\u003e Patch Set 1: Code-Review+2 Review-Priority+1\n\u003e \n\u003e recheck since it\u0027s been several months the check gates verified the change ... many great points raised here, after reading them all, more facts speak for this change than against, so +2\n\nI appreciate your enthusiasm, but no. 😊","accounts_in_message":[],"_revision_number":1},{"id":"9d81240e3d60f41114de7be353e8ceac003f58bc","author":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"date":"2021-06-08 14:17:02.000000000","message":"Patch Set 1: Code-Review+1 -Review-Priority\n\nlowering vote due to inactivity","accounts_in_message":[],"_revision_number":1},{"id":"79756b831df36318a8d771f368d19b3ea9cab058","author":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"date":"2021-11-23 09:56:10.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"a48ffb61d38ef931e5945fffcf573e47085445db","tag":"autogenerated:gerrit:abandon","author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"date":"2022-06-30 07:35:14.000000000","message":"Abandoned\n\nFeel free to reopen if you want to continue with this","accounts_in_message":[],"_revision_number":1},{"id":"87f0f85b4c0da523bb8af0c503ab582482d0d94e","author":{"_account_id":37598,"name":"Ivan Anfimov","display_name":"Ivan Anfimov","email":"lazekteam@gmail.com","username":"anfimovir"},"date":"2025-03-15 21:33:35.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"5ce6a9032fc5f97ca3c7c887a9763320f78ead38","revisions":{"5ce6a9032fc5f97ca3c7c887a9763320f78ead38":{"kind":"REWORK","_number":1,"created":"2020-10-01 15:19:14.000000000","uploader":{"_account_id":23804,"name":"Daniel Alvarez","email":"dalvarez@redhat.com","username":"dalvarez"},"ref":"refs/changes/54/755554/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack","ref":"refs/changes/54/755554/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack refs/changes/54/755554/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack refs/changes/54/755554/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack refs/changes/54/755554/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack refs/changes/54/755554/1"}}},"commit":{"parents":[{"commit":"29efb7282296c183d5036bc64451a9469a053056","subject":"Update DEVSTACK_SERIES to wallaby","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/29efb7282296c183d5036bc64451a9469a053056"}]}],"author":{"name":"Daniel Alvarez","email":"dalvarez@redhat.com","date":"2020-10-01 15:16:14.000000000","tz":120},"committer":{"name":"Daniel Alvarez","email":"dalvarez@redhat.com","date":"2020-10-01 15:19:10.000000000","tz":120},"subject":"Don\u0027t start iptables-service on CentOS/Fedora","message":"Don\u0027t start iptables-service on CentOS/Fedora\n\nInstalling and starting iptables service on CentOS 8 causes\na default drop rule to be installed in the host that blocks\nany incomming connection.\n\nThis patch removes the code that starts the service.\n\nCloses-Bug: #1898065\n\nChange-Id: Ic8fa257af92f78bc621f27f6765bb26dbb71de3a\nSigned-off-by: Daniel Alvarez \u003cdalvarez@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/5ce6a9032fc5f97ca3c7c887a9763320f78ead38"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/5ce6a9032fc5f97ca3c7c887a9763320f78ead38"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}