Hi, Le jeudi 14 mars 2013, à 15:23 +0100, Christian Berendt a écrit :
There are problems with quantum-dhcp-agent, because there entries in /etc/quantum/rootwrap.d/iptables-firewall.filters are not correct.
---snip--- [Filters]
# quantum/agent/linux/iptables_manager.py # "iptables-save", ... iptables-save: CommandFilter, /sbin/iptables-save, root iptables-restore: CommandFilter, /sbin/iptables-restore, root ip6tables-save: CommandFilter, /sbin/ip6tables-save, root ip6tables-restore: CommandFilter, /sbin/ip6tables-restore, root
# quantum/agent/linux/iptables_manager.py # "iptables", "-A", ... iptables: CommandFilter, /sbin/iptables, root ip6tables: CommandFilter, /sbin/ip6tables, root ---snap---
But on SUSE we have /usr/sbin/iptables-save, /usr/sbin/iptables-restore, ...
I'll add a patch to the openstack-quantum package to fix this issue.
Looks like there are also issues in dhcp.filter. dnsmasq is also in /usr/sbin and not in /sbin.
FWIW, I would think the proper fix is something like https://review.openstack.org/#/c/16766/ (not sure why it wasn't done for quantum?) Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-cloud+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-cloud+owner@opensuse.org