From: Pavel Tikhomirov <ptikhomi...@virtuozzo.com> We see that k8s_weave-npc container fails with:
Thu Oct 29 09:19:53 2020 <5> ulogd.c:981 building new pluginstance stack: 'log1:NFLOG,base1:BASE,pcap1:PCAP' Thu Oct 29 09:19:53 2020 <7> ulogd_inppkt_NFLOG.c:552 unable to bind to log group 86 Thu Oct 29 09:19:53 2020 <7> ulogd.c:948 error starting `log1' Thu Oct 29 09:19:53 2020 <8> ulogd.c:1597 not even a single working plugin stack Fatal error. It needs nfnetlink_log module to be loaded. Need this to be able to run kubernetes in centos-8 containers where it uses nft logs. https://jira.sw.ru/browse/PSBM-121652 Signed-off-by: Pavel Tikhomirov <ptikhomi...@virtuozzo.com> (cherry picked from vz7 commit fdec083048f8 ("ve/kmod: make nfnetlink_log autoloadable upon request from a CT") Signed-off-by: Konstantin Khorenko <khore...@virtuozzo.com> --- kernel/kmod.c | 1 + 1 file changed, 1 insertion(+) diff --git a/kernel/kmod.c b/kernel/kmod.c index f3bd4afb81e1..1ff56543f59d 100644 --- a/kernel/kmod.c +++ b/kernel/kmod.c @@ -254,6 +254,7 @@ static const char * const ve0_allowed_mod[] = { "nfnetlink-subsys-1", /* NFNL_SUBSYS_CTNETLINK */ "nfnetlink-subsys-2", /* NFNL_SUBSYS_CTNETLINK_EXP */ "nfnetlink-subsys-3", /* NFNL_SUBSYS_QUEUE */ + "nfnetlink-subsys-4", /* NFNL_SUBSYS_ULOG */ "nfnetlink-subsys-10", /* nf_tables */ "nfnetlink-subsys-11", /* nft_compat */ _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel