There are problems with quantum-dhcp-agent, because there entries in /etc/quantum/rootwrap.d/iptables-firewall.filters are not correct. ---snip--- [Filters] # quantum/agent/linux/iptables_manager.py # "iptables-save", ... iptables-save: CommandFilter, /sbin/iptables-save, root iptables-restore: CommandFilter, /sbin/iptables-restore, root ip6tables-save: CommandFilter, /sbin/ip6tables-save, root ip6tables-restore: CommandFilter, /sbin/ip6tables-restore, root # quantum/agent/linux/iptables_manager.py # "iptables", "-A", ... iptables: CommandFilter, /sbin/iptables, root ip6tables: CommandFilter, /sbin/ip6tables, root ---snap--- But on SUSE we have /usr/sbin/iptables-save, /usr/sbin/iptables-restore, ... I'll add a patch to the openstack-quantum package to fix this issue. Looks like there are also issues in dhcp.filter. dnsmasq is also in /usr/sbin and not in /sbin. Christian. -- Christian Berendt Cloud Computing Solution Architect Tel.: +49-171-5542175 Mail: berendt@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 -- To unsubscribe, e-mail: opensuse-cloud+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-cloud+owner@opensuse.org