CentOS 8 and CyberPanel on OpenVZ virtualization

[merkys7]

Hello, We at Hostinger use CentOS7 with CyberPanel and it works truly flawlesly. However, when we are trying to install it on CentOS8 and OpenVZ, we receive errors related to firewalld and nf_tables. I can confirm that those errors doesn't appear on KVM virtualization, only on OpenVZ. Perhaps you guys have any recommendations/solutions for this case? If needed, I can supply OpenVZ VPS Container for testing.

JSON blob:
{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"ct helper": {"family": "inet", "table": "firewalld", "name": "helper-ftp-tcp", "type": "ftp", "protocol": "tcp"}}}]}
Adding port: 25
success
success
Error: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Invalid argument

JSON blob:
{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"ct helper": {"family": "inet", "table": "firewalld", "name": "helper-ftp-tcp", "type": "ftp", "protocol": "tcp"}}}]}
Adding port: 587
success
success
Error: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Invalid argument

JSON blob:
{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"ct helper": {"family": "inet", "table": "firewalld", "name": "helper-ftp-tcp", "type": "ftp", "protocol": "tcp"}}}]}
Adding port: 465
success
success
Error: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Invalid argument

JSON blob:
{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"ct helper": {"family": "inet", "table": "firewalld", "name": "helper-ftp-tcp", "type": "ftp", "protocol": "tcp"}}}]}
Adding port: 110
success
success
Error: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Invalid argument

JSON blob:
{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"ct helper": {"family": "inet", "table": "firewalld", "name": "helper-ftp-tcp", "type": "ftp", "protocol": "tcp"}}}]}
Adding port: 143
success
success
Error: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Invalid argument

JSON blob:
{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"ct helper": {"family": "inet", "table": "firewalld", "name": "helper-ftp-tcp", "type": "ftp", "protocol": "tcp"}}}]}
Adding port: 993
success
success

[qtwrk]

https://bugzilla.redhat.com/show_bug.cgi?id=1817205

do you have all these 3 things running at same time ?

[merkys7]

I have double-checked and I can confirm that it's nothing related to CyberPanel. It's related to OpenVZ issues with CentOS8 and firewalld https://bugs.openvz.org/browse/OVZ-7223

Thank you for your time!