Skip to main content
Question

install_vertica " Linux iptables (firewall) has some non-trivial rules in tables: mangle"

  • September 19, 2019
  • 4 replies
  • 11 views

dgrumann
Forum|alt.badge.img+2

On CentOS 7.6, it seems like I always need to add --failure-threshold=FAIL to my install_vertica command to avoid this warning:
WARN (N0010): https://www.vertica.com/docs/9.2.x/HTML/index.htm#cshid=N0010
Linux iptables (firewall) has some non-trivial rules in tables: mangle
but there is no "mangle" rule:

iptables -L

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

so I am confused. Even doing "iptables -F" and "systemctl stop firewalld" does not seem to avoid this N0010 warning. Am I missing something?

4 replies

chaima
Forum|alt.badge.img+2
  • Participating Frequently
  • September 20, 2019

Hi, looks like this is a known issue since in the documentation it states:
You may encounter the N0010 issue even when the firewall is disabled. If this occurs, you can workaround this issue and install Vertica by ignoring installer WARN messages. To do this, install (or update) with a failure threshold of FAIL. For example, /opt/vertica/sbin/install_vertica --failure-threshold FAIL .
There is a workaround in this jira: http://jira.verticacorp.com:8080/jira/browse/VER-53033 (I never tested it)
KR
Chaima


dgrumann
Forum|alt.badge.img+2
  • Author
  • Participating Frequently
  • September 20, 2019

Thank you Chaima for pointing out this is a known bug in Vertica, but instead of just telling customer to rerun install ignoring all warnings, the bug should really get fixed. I am a Micro Focus employee but outside the Vertica devteam so no access to the jira. If the internal workaround is better than re-running the installer with --failure-threshold FAIL, please do tell. Thanks!


Vertiguy
Forum|alt.badge.img+2
  • Participating Frequently
  • September 20, 2019

The bug does exist in our JIRA database without any associated customers. Currently on our backlog list of things to do, however, without customers pressuring us to change this I don't think we will get to it anytime soon.


dgrumann
Forum|alt.badge.img+2
  • Author
  • Participating Frequently
  • August 26, 2020

This is still causing confusion in people trying to install Vertica - sure would be good to check whether firewall is disabled and ignore this warning in that case!