[ZBX-16038] MSI Fails when firewall rules cannot be modified Created: 2019 Apr 24  Updated: 2024 Apr 10  Resolved: 2019 May 13

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Agent (G)
Affects Version/s: 4.2.1
Fix Version/s: 4.4 (plan)

Type: Problem report Priority: Minor
Reporter: Matt Assignee: Michael Veksler
Resolution: Fixed Votes: 0
Labels: packaging, windows
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Team: Team A
Sprint: Sprint 51 (Apr 2019), Sprint 52 (May 2019)
Story Points: 1

 Description   

On 3 servers when I ran the MSI the installation failed with no error other than ended "prematurely" and was rolled back.  I enabled logging via the command line and they all reported this:

[lines above truncated]
Action start 0:43:11: InstallFinalize.
TemplateFiles_Deferred: MSI Extensions 1.5.918.0
TemplateFiles_Deferred: C:\Program Files\Zabbix Agent\zabbix_agentd.conf => C:\Program Files\Zabbix Agent\zabbix_agentd.conf
ExecFirewallExceptions:  Installing firewall exception2 Zabbix Agent listen port on port 10050, protocol 6
ExecFirewallExceptions:  Error 0x800706d9: failed trying to find existing port rule
ExecFirewallExceptions:  Error 0x800706d9: failed to add/update port exception for name 'Zabbix Agent listen port' on port 10050, protocol 6
Action ended 0:43:12: InstallFinalize. Return value 3.
ExecFirewallExceptions:  Uninstalling firewall exception2 Zabbix Agent listen port on port 10050, protocol 6
ExecFirewallExceptions:  Error 0x800706d9: failed to remove authorized app
ExecFirewallExceptions:  Error 0x800706d9: failed to remove port exception for name 'Zabbix Agent listen port' on port 10050, protocol 6
Action ended 0:43:12: INSTALL. Return value 3.
Action ended 0:43:12: ExecuteAction. Return value 3.
Action start 0:43:12: FatalError.
Action ended 0:43:13: FatalError. Return value 2.
Action ended 0:43:13: INSTALL. Return value 3.
=== Logging stopped: 4/24/2019  0:43:13 ===
MSI (c) (1C:C0) [00:43:13:087]: Product: Zabbix Agent (64-bit) – Installation failed.

MSI (c) (1C:C0) [00:43:13:102]: Windows Installer installed the product. Product Name: Zabbix Agent (64-bit). Product Version: 4.2.1.92832. Product Language: 1033. Installation success or error status: 1603.

Each of these servers are windows server 2008.  Two of them are "R2" and one is just standard.  I have installed it fine on many other 2008/R2s and also on 2016's no problem.



 Comments   
Comment by Matt [ 2019 Apr 24 ]

Just to add a note- each of these servers had the Windows Firewall set to "disabled".  I tried setting it to "manual" and even rebooting with it set as such and it still wouldn't install.  I did not want to start the firewall on these seasoned production servers.  I checked some of my other 2008 servers and those were set to "automatic" and were running.  So one would obviously come to the conclusion that the firewall service needs to be running to have the install go through, but I have not tested this yet.  Note that I have the firewall disabled via GPO which effects all of my servers.  However, this keeps the service itself running, apparently, and just disables its effects.

With that said, I think the MSI should detect if the service is disabled and/or just ignore such errors.  A MSI switch should/could also be added to skip firewall settings.

Comment by Michael Veksler [ 2019 May 07 ]

Implementation was tested for the following cases:

Nr FW SKIP Mode Action result
1.1.1 on    UI Install
1.1.2 on    UI Uninstall
1.2.1 on    UI Install
1.2.2 on    UI Upgrade
1.2.3 on    UI Uninstall
2.1.1 on   Silent Install
2.1.2 on   Silent Uninstall
2.2.1 on   Silent Install
2.2.2 on   Silent Upgrade
2.2.3 on   Silent Uninstall
3.1.1 off    UI Install
3.1.2 off    UI Uninstall
3.2.1 off    UI Install
3.2.2 off    UI Upgrade
3.2.3 off    UI Uninstall
4.1.1 off fw Silent Install
4.1.2 off   Silent Uninstall
4.2.1 off fw Silent Install
4.2.2 off   Silent Upgrade
4.2.3 off   Silent Uninstall
 5.1 off    UI Install
 5.2 on    UI Uninstall
 5.3 on    UI Install
 5.4 off    UI Uninstall
 6.1 off fw Silent Install
 6.2 on   Silent Uninstall
 6.3 on   Silent Install
 6.4 off   Silent Uninstall
7.1.1 off    UI Install
7.1.2 on    UI Upgrade
7.1.3 off    UI Uninstall
7.2.1 off    UI Install
7.2.2 on    UI Upgrade
7.2.3 on    UI Uninstall
7.3.1 on    UI Install
7.3.2 off    UI Upgrade
7.3.3 off    UI Uninstall
7.4.1 on    UI Install
7.4.2 off    UI Upgrade
7.4.3 on    UI Uninstall
8.1.1 off  fw Silent Install
8.1.2 on   Silent Upgrade
8.1.3 off   Silent Uninstall
8.2.1 off  fw Silent Install
8.2.2 on   Silent Upgrade
8.2.3 on   Silent Uninstall
8.3.1 on   Silent Install
8.3.2 off   Silent Upgrade
8.3.3 off   Silent Uninstall
8.4.1 on   Silent Install
8.4.2 off   Silent Upgrade
8.4.3 on   Silent Uninstall

 

Available for testing in r2408 from svn://svnint.zabbix.lan/jenkins/precompiled-agent-win/msi

Please, merge r2388 to the build-agents.git before applying r2408 to the git version.

Comment by Matt [ 2019 May 07 ]

Any way I can test the fixed version?

Comment by richlv [ 2019 May 07 ]

It would be so awesomely great if Zabbix decided to go open and share access to things like the Jenkins instance mentioned above

Generated at Sat Apr 27 00:46:33 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.