From: Pavel Tikhomirov <ptikhomi...@virtuozzo.com>

We see that k8s_weave-npc container fails with:

Thu Oct 29 09:19:53 2020 <5> ulogd.c:981 building new pluginstance stack: 
'log1:NFLOG,base1:BASE,pcap1:PCAP'
Thu Oct 29 09:19:53 2020 <7> ulogd_inppkt_NFLOG.c:552 unable to bind to log 
group 86
Thu Oct 29 09:19:53 2020 <7> ulogd.c:948 error starting `log1'
Thu Oct 29 09:19:53 2020 <8> ulogd.c:1597 not even a single working plugin stack
Fatal error.

It needs nfnetlink_log module to be loaded. Need this to be able to run
kubernetes in centos-8 containers where it uses nft logs.

https://jira.sw.ru/browse/PSBM-121652

Signed-off-by: Pavel Tikhomirov <ptikhomi...@virtuozzo.com>

(cherry picked from vz7 commit fdec083048f8 ("ve/kmod: make
nfnetlink_log autoloadable upon request from a CT")

Signed-off-by: Konstantin Khorenko <khore...@virtuozzo.com>
---
 kernel/kmod.c |    1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index f3bd4afb81e1..1ff56543f59d 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -254,6 +254,7 @@ static const char * const ve0_allowed_mod[] = {
        "nfnetlink-subsys-1",           /* NFNL_SUBSYS_CTNETLINK */
        "nfnetlink-subsys-2",           /* NFNL_SUBSYS_CTNETLINK_EXP */
        "nfnetlink-subsys-3",           /* NFNL_SUBSYS_QUEUE */
+       "nfnetlink-subsys-4",           /* NFNL_SUBSYS_ULOG */
        "nfnetlink-subsys-10",          /* nf_tables */
        "nfnetlink-subsys-11",          /* nft_compat */
 


_______________________________________________
Devel mailing list
Devel@openvz.org
https://lists.openvz.org/mailman/listinfo/devel

Reply via email to