Upgrade failed when "Installing package iptables from 1.4.7-11.mira2 to 1.4.7-11.el6"

[Dennis Dmitriev]

Steps:
1. Install fuel 5.1
2. Upload custom upgrade script to master node to /var directory
3. Run upgrade.sh

After applying the patch from https://bugs.launchpad.net/fuel/+bug/1388049 , upgrade.sh failed with the following error:

=================================================
2014-11-03 16:23:10 DEBUG 26607 (utils) Notice: Installing package iptables from 1.4.7-11.mira2 to 1.4.7-11.el6
2014-11-03 16:23:10 DEBUG 26607 (utils) Debug: Executing '/bin/rpm -q iptables --nosignature --nodigest --qf %{NAME} %|EPOCH?{%{EPOCH}}:{0}| %{VERSION} %{RELEASE} %{ARCH} :DESC: %{SUMMARY}\n'
2014-11-03 16:23:10 DEBUG 26607 (utils) Debug: Package[iptables](provider=yum): Downgrading package iptables from version 1.4.7-11.mira2 to 1.4.7-11.el6
2014-11-03 16:23:10 DEBUG 26607 (utils) Debug: Executing '/bin/rpm -q -a --queryformat %{NAME}|%{VERSION}-%{RELEASE}\n'
2014-11-03 16:23:10 DEBUG 26607 (utils) Debug: Executing '/usr/bin/yum -d 0 -e 0 -y downgrade iptables-1.4.7-11.el6'
2014-11-03 16:23:10 DEBUG 26607 (utils) Error: Could not update: Execution of '/usr/bin/yum -d 0 -e 0 -y downgrade iptables-1.4.7-11.el6' returned 1: Error: Package: iptables-ipv6-1.4.7-11.mira2.x86_64 (@anaconda-CentOS-201311272149.x86_64/6.3)
2014-11-03 16:23:10 DEBUG 26607 (utils) Requires: iptables = 1.4.7-11.mira2
2014-11-03 16:23:10 DEBUG 26607 (utils) Removing: iptables-1.4.7-11.mira2.x86_64 (@anaconda-CentOS-201311272149.x86_64/6.3)
2014-11-03 16:23:10 DEBUG 26607 (utils) iptables = 1.4.7-11.mira2
2014-11-03 16:23:10 DEBUG 26607 (utils) Downgraded By: iptables-1.4.7-11.el6.x86_64 (6.0_nailgun)
2014-11-03 16:23:10 DEBUG 26607 (utils) iptables = 1.4.7-11.el6
2014-11-03 16:23:10 DEBUG 26607 (utils) You could try using --skip-broken to work around the problem
2014-11-03 16:23:10 DEBUG 26607 (utils) You could try running: rpm -Va --nofiles --nodigest
2014-11-03 16:23:10 DEBUG 26607 (utils)
2014-11-03 16:23:10 DEBUG 26607 (utils) Error: /Stage[main]/Nailgun::Packages/Nailgun::Packages::Nailgun_safe_package[iptables]/Package[iptables]/ensure: change from 1.4.7-11.mira2 to 1.4.7-11.el6 failed: Could not update: Execution of '/usr/bin/yum -d 0 -e 0 -y downgrade iptables-1.4.7-11.el6' returned 1: Error: Package: iptables-ipv6-1.4.7-11.mira2.x86_64 (@anaconda-CentOS-201311272149.x86_64/6.3)
2014-11-03 16:23:10 DEBUG 26607 (utils) Requires: iptables = 1.4.7-11.mira2
2014-11-03 16:23:10 DEBUG 26607 (utils) Removing: iptables-1.4.7-11.mira2.x86_64 (@anaconda-CentOS-201311272149.x86_64/6.3)
2014-11-03 16:23:10 DEBUG 26607 (utils) iptables = 1.4.7-11.mira2
2014-11-03 16:23:10 DEBUG 26607 (utils) Downgraded By: iptables-1.4.7-11.el6.x86_64 (6.0_nailgun)
2014-11-03 16:23:10 DEBUG 26607 (utils) iptables = 1.4.7-11.el6
2014-11-03 16:23:10 DEBUG 26607 (utils) You could try using --skip-broken to work around the problem
2014-11-03 16:23:10 DEBUG 26607 (utils) You could try running: rpm -Va --nofiles --nodigest
2014-11-03 16:23:10 DEBUG 26607 (utils)
==============================================

The other issue is that this error didn't cause a rollback, so many dependences was just skipped, and 'docker' service wasn't started at the end, so Fuel is not operational after upgrade is failed in this way.

[Vladimir Kozhukalov (kozhukalov)]

Here it is not clear why puppet tried to downgrade iptables to el6. I just verified iptables version in 6.0. It is iptables-1.4.7-11.mira2.x86_64.rpm. Looks like this bug is not actual any more. And upgrade 5.1.1-6.0 was successful.

Vladimir, do you have any additional info?

[Matthew Mosesohn (raytrac3r)]

I'm trying to reproduce this now.

[Matthew Mosesohn (raytrac3r)]

Unable to reproduce on 5.1.1 all #42 6.0.all #12, both of which were built today. I assume this is fixed.