Solr - Another app is currently holding the xtables lock

[sozotech]

An update to address this case was published to the cpanel-plugins YUM repo. Ensure to run the "yum update" command on systems without automatic package updates enabled to update the cpanel-dovecot-solr RPM. Once the update completes, you can see the fix in the RPM change log for the package when running the "rpm -q --changelog cpanel-dovecot-solr" command:

rpm -q --changelog cpanel-dovecot-solr
* Thu Apr 27 2017 Felipe Gasper <[email protected]> 6.4.0-5.cp1162
- Don’t start the service on RPM upgrade if the service is disabled.

Thank you.

I see this rpm update has been applied on our system(s) but we still continue to see solr failing to start.

May 02 09:17:42 XXXXXX cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock; waiting (3s) for it to exit...
May 02 09:17:42 XXXXXX  cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock; waiting (5s) for it to exit...
May 02 09:17:42 XXXXXX  cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock; waiting (7s) for it to exit...
May 02 09:17:42 XXXXXX  cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock; waiting (9s) for it to exit...
May 02 09:17:42 XXXXXX  cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock. Stopped waiting after 10s.
May 02 09:17:42 XXXXXX cpanel_dovecot_solr_firewall[393489]: : The subprocess reported error number 4 when it ended. at /usr/local/cpanel/Cpanel/IpTables.pm line 291.
May 02 09:17:42 XXXXXX  systemd[1]: cpanel-dovecot-solr.service: control process exited, code=exited status=4
May 02 09:17:42 XXXXXX  systemd[1]: Failed to start Solr for cPanel Dovecot.
May 02 09:17:42 XXXXXX  systemd[1]: Unit cpanel-dovecot-solr.service entered failed state.
May 02 09:17:42 XXXXXX  systemd[1]: cpanel-dovecot-solr.service failed.

Do we need to do something after this update to fix the issue?

Best regards,
Eric

 

[cPanelMichael]

Hello Eric,

I moved this post to a new thread as it's unrelated to the cases discussed on the previous thread.

May 02 09:17:42 XXXXXX cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock. Stopped waiting after 10s.

The error message suggests another application is modifying your iptables firewall rules, which is preventing the cpanel_dovecot_solr_firewall script from completing.

Is this system running a firewall management utility such as CSF? If so, try restarting the CSF service to see if that allows cpanel_dovecot_solr to successfully start.

Thank you.