this bug still happens. Neutron openvswitch agent container tries to run ip6tables-restore and fails because there is no ip6table_filter module loaded. The module normally is loaded by the command itself. But inside the container we don't provide /lib/modules ... With proper host mount the error is gone.
** Changed in: neutron Status: Invalid => Confirmed ** Changed in: neutron Assignee: (unassigned) => Vladislav Belogrudov (vlad-belogrudov) ** Summary changed: - ip6tables-restore fails + ip6tables-restore fails in neutron_openvswitch_agent -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1615715 Title: ip6tables-restore fails in neutron_openvswitch_agent Status in neutron: Confirmed Bug description: 2016-08-22 11:54:58.697 1 DEBUG neutron.agent.linux.utils [-] Running command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', 'exec', 'qrouter-baa3335b-0013-42dd-856a-64a5c2557a01', 'ip6tables-restore', '-n'] create_process /var/lib/kolla/venv/lib/python2.7/site-packages/neutron/agent/linux/utils.py:83 2016-08-22 11:54:58.970 1 ERROR neutron.agent.linux.utils [-] Exit code: 2; Stdin: # Generated by iptables_manager Usage: ip6tables-restore [-b] [-c] [-v] [-t] [-h] [ --binary ] [ --counters ] [ --verbose ] [ --test ] [ --help ] [ --noflush ] [ --modprobe=<command>] It seems iptables-1.4.21-16.el7.x86_64 does not support '-n' option used in the command above. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1615715/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp