yahoo-eng-team team mailing list archive

[Tom Carroll <Thomas.Carroll@xxxxxxxx>]

Public bug reported:

I'm testing icehouse on Xenserver release Creedance (what will be 6.5).
The kernel is 3.10. When iptables-restore is called via neutron-
rootwrap-xen-dom0, the iptables-restore produces warnings that the state
netfilter module is obsolete (but the command does exits with 0). The
response cannot be parsed by rootwrap as valid XenAPI xml rpc. rootwrap
terminates with exit code 96 and the previous iptables rules are
restored. The effect of this failure is that the bridges are not
configured. Log entries are provided at the end of this message.

If instances of "-m state --state" are translated to "-m conntrack
--ctstate", the error stops and the bridges can be correctly configured.

TRACE neutron.plugins.openvswitch.agent.ovs_neutron_agent Command:
['/usr/bin/neutron-rootwrap-xen-dom0', '/etc/neutron/rootwrap.conf',
'iptables-restore', '-c']

2014-08-27 06:35:28.609 1392 TRACE neutron.plugins.openvswitch.agent.ovs_neutron_agent Exit code: 96
2014-08-27 06:35:28.609 1392 TRACE neutron.plugins.openvswitch.agent.ovs_neutron_agent Stdout: ''
2014-08-27 06:35:28.609 1392 TRACE neutron.plugins.openvswitch.agent.ovs_neutron_agent Stderr: 'Traceback (most recent call last):\n  File "/usr/bin/neutron-rootwrap-xen-dom0", line 118, in run_command\n    {\'cmd\': json.dumps(user_args), \'cmd_input\': json.dumps(cmd_input)})\n  File "/usr/lib/python2.7/dist-packages/XenAPI.py", line 235, in __call__\n    return self.__send(self.__name, args)\n  File "/usr/lib/python2.7/dist-packages/XenAPI.py", line 139, in xenapi_request\n    result = _parse_result(getattr(self, methodname)(*full_params))\n  File "/usr/lib/python2.7/dist-packages/XenAPI.py", line 209, in _parse_result\n    raise Failure(result[\'ErrorDescription\'])\nFailure: [\'XENAPI_PLUGIN_FAILURE\', \'run_command\', \'PluginError\', \'WARNING: The state match is obsolete. Use conntrack instead.\\nWARNING: The state match is obsolete. Use conntrack instead.\\nWARNING: The state match is obsolete. Use conntrack instead.\\nWARNING: The state match is obsolete. Use conntrack instead.\\n\']\n'

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1362301

Title:
  neutron.plugins.openvswitch.agent.ovs_neutron_agent fails to configure
  bridges

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  I'm testing icehouse on Xenserver release Creedance (what will be
  6.5). The kernel is 3.10. When iptables-restore is called via neutron-
  rootwrap-xen-dom0, the iptables-restore produces warnings that the
  state netfilter module is obsolete (but the command does exits with
  0). The response cannot be parsed by rootwrap as valid XenAPI xml rpc.
  rootwrap terminates with exit code 96 and the previous iptables rules
  are restored. The effect of this failure is that the bridges are not
  configured. Log entries are provided at the end of this message.

  If instances of "-m state --state" are translated to "-m conntrack
  --ctstate", the error stops and the bridges can be correctly
  configured.

  TRACE neutron.plugins.openvswitch.agent.ovs_neutron_agent Command:
  ['/usr/bin/neutron-rootwrap-xen-dom0', '/etc/neutron/rootwrap.conf',
  'iptables-restore', '-c']

  2014-08-27 06:35:28.609 1392 TRACE neutron.plugins.openvswitch.agent.ovs_neutron_agent Exit code: 96
  2014-08-27 06:35:28.609 1392 TRACE neutron.plugins.openvswitch.agent.ovs_neutron_agent Stdout: ''
  2014-08-27 06:35:28.609 1392 TRACE neutron.plugins.openvswitch.agent.ovs_neutron_agent Stderr: 'Traceback (most recent call last):\n  File "/usr/bin/neutron-rootwrap-xen-dom0", line 118, in run_command\n    {\'cmd\': json.dumps(user_args), \'cmd_input\': json.dumps(cmd_input)})\n  File "/usr/lib/python2.7/dist-packages/XenAPI.py", line 235, in __call__\n    return self.__send(self.__name, args)\n  File "/usr/lib/python2.7/dist-packages/XenAPI.py", line 139, in xenapi_request\n    result = _parse_result(getattr(self, methodname)(*full_params))\n  File "/usr/lib/python2.7/dist-packages/XenAPI.py", line 209, in _parse_result\n    raise Failure(result[\'ErrorDescription\'])\nFailure: [\'XENAPI_PLUGIN_FAILURE\', \'run_command\', \'PluginError\', \'WARNING: The state match is obsolete. Use conntrack instead.\\nWARNING: The state match is obsolete. Use conntrack instead.\\nWARNING: The state match is obsolete. Use conntrack instead.\\nWARNING: The state match is obsolete. Use conntrack instead.\\n\']\n'

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1362301/+subscriptions