SLES 15 – Common Problem 034 – Diagnosis and Fix

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

SLES 15 administrators observe firewalld blocks an application port after a default zone change. Impact ranges from delayed automation runs to user-visible service outages on affected hosts.

Environment & Reproduction

Issue surfaces on SLES 15 hosts after package transactions, configuration drift, or planned reboots. Reproduce with a snapshot, run the failing command, and capture logs from journalctl.

Root Cause Analysis

Root cause is a mismatch between expected firewalld/port-blocked state and the current runtime configuration on SLES 15. Audit logs, snapper history, and zypper history typically confirm the trigger event.

Quick Triage

Capture active failures fast: review systemctl –failed, AppArmor status, firewalld state, and the last error entries from journalctl -p err.

Step-by-Step Diagnosis

Collect deeper evidence with journalctl -xeu, zypper ps -s, snapper list, and inspect the relevant /etc and /var paths before changing production settings.

Solution – Primary Fix

Apply the SUSE-recommended remediation in order, validating after each command. Use zypper, systemctl, and snapper where appropriate, and confirm with a service restart.

Solution – Alternative Approaches

Alternative approaches include rolling back via snapper, mounting a snapshot read-write to copy out a known-good config, or temporarily switching to a known-good repository mirror until the primary fix is validated.

Verification & Acceptance Criteria

Verify by re-running the failing command without errors, confirming systemctl status reports active services, and checking that journalctl shows no further errors during a 10-minute observation window.

Rollback Plan

Roll back with snapper rollback to the pre-change snapshot, reboot, and re-validate the baseline before retrying the change in a maintenance window.

Prevention & Hardening

Harden by pinning repositories in /etc/zypp/repos.d/, enabling automatic snapper snapshots before zypper transactions, and monitoring with Salt or Prometheus node_exporter alerts.

Related Errors & Cross-Refs

Related errors include zypper exit code 4 lock failures, wicked interface flaps, and AppArmor confinement messages that point to the same firewalld/port-blocked configuration drift.

Related tutorial: View the step-by-step tutorial for SLES 15.

View all SLES 15 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

See SUSE documentation for SLES 15 administration, the SUSE knowledge base TID articles for firewalld/port-blocked, and upstream openSUSE wiki pages for community fixes.