Can't start Multipass with UFW enabled

Project Discussion Multipass
1

I’m not able to start up a Multipass when I have UFW enabled.

I’m using the Multipass snap and running it on my Ubuntu 20.10 desktop computer, not over any network.

Does anyone know what port I can open with UFW to allow me to keep UFW enabled?

2

Not for sure — but have you tried 443?

3

443 doesn’t work, but thanks for the suggestion

1 Like
4

Hi @RickAndTired,

You shouldn’t have to add any special UFW rules, but you may be hitting this issue about incompatible iptables variants (legacy vs. nftables). Multipass adds its own iptables rules (depending on the driver) and the snap currently ships with the legacy iptables. Using the nftables variant at the same time will step on that.

What does iptables -V say?

1 Like
5

On host
$ iptables -V
iptables v1.8.5 (nf_tables)

In multipass shell
$ iptables -V
iptables v1.8.4 (legacy)

6

Yeah, so I’m afraid you’re hitting that bug :slightly_frowning_face:

The iptables variant inside the instance itself should have no effect though. The conflict is with the iptables variant that the snap ships and uses.

7

Hi @RickAndTired,

You can try running the script I posted in the bug and see if that helps.

8

Hi, that script didn’t solve my issue.

$ multipass start ubuntu-dl
start failed: The following errors occurred:
ubuntu-dl: timed out waiting for response

If I disable UFW then $ multipass start ubuntu-dl works fine

9

Hi @RickAndTired,

Then I believe UFW is blocking access to the Multipass subnet from your host. I’m not familiar with UFW configuration, but I’m sure there is some way to configure it to allow access.

10

BTW, you can get the Multipass subnet from doing ifconfig mpbr0 and look at what inet reports. For example, if inet has 10.229.75.1, then Multipass is using the 10.229.75.x subnet.

11

You might be able to allow traffic through your UFW firewall with
sudo ufw allow in on mpqemubr0 && sudo ufw allow out on mpqemubr0

1 Like
12

This also happens in MacbookPro

13

i got same issue, anyone can helps? please… :smiling_face_with_tear:

14

how do you disable the ufw without shell the instance? please tell me …

15

I’m not sure I understand your question, but I needed to disable UFW on the host machine, not the VM
sudo ufw disable

16

Ubuntu Discourse moderator here.

Normally we don’t allow technical support on this site, but the Multipass team seems to have allowed this thread.

HOWEVER

It is generally not a good idea to necro-bump an old thread that has been dead for a certain amount of time, in this case 2 years, and again 9 months later. This thread started back in 2020.

When this happens, it’s best to start a new topic.

I’m going to leave this open for now, but I’d very much like to hear from the Multipass team what they’d prefer.

17

@eeickmeyer is right. We generally try to help people out as best we can, but a new GH issue is the correct option to report problems with Multipass.

That said, I don’t think that new question in this thread was addressed to us and I personally didn’t understand it.

18

Thanks, @ricab .

With that in mind, this topic is now closed. Any further technical support issues with Multipass need to be brought to https://github.com/canonical/multipass/issues.