iptables-save failure due to missing rootwrap filter

[Endre Karlson]

# Config file for the L3 agent.
http://paste.ubuntu.com/1209478/

2012-09-16 20:30:34 DEBUG [quantum.agent.linux.utils]
Command: ['sudo', '/usr/bin/quantum-rootwrap', '/etc/quantum/rootwrap.conf', 'ip', 'netns', 'exec', 'qrouter-09baa580-2fdf-4a57-8190-71ef22618d36', '/sbin/iptables-save', '-t', 'filter']
Exit code: 99
Stdout: 'Unauthorized command: ip netns exec qrouter-09baa580-2fdf-4a57-8190-71ef22618d36 /sbin/iptables-save -t filter\n'
Stderr: ''
2012-09-16 20:30:34 ERROR [quantum.agent.l3_agent] Error running l3_nat daemon_loop
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 175, in daemon_loop
    self.do_single_loop()
  File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 228, in do_single_loop
    self.process_router(ri)
  File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 270, in process_router
    p['ip_cidr'], p['mac_address'])
  File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 443, in internal_network_added
    ri.iptables_manager.apply()
  File "/usr/lib/python2.7/dist-packages/quantum/agent/linux/iptables_manager.py", line 282, in apply
    root_helper=self.root_helper))
  File "/usr/lib/python2.7/dist-packages/quantum/agent/linux/utils.py", line 55, in execute
    raise RuntimeError(m)
RuntimeError:
Command: ['sudo', '/usr/bin/quantum-rootwrap', '/etc/quantum/rootwrap.conf', 'ip', 'netns', 'exec', 'qrouter-09baa580-2fdf-4a57-8190-71ef22618d36', '/sbin/iptables-save', '-t', 'filter']
Exit code: 99
Stdout: 'Unauthorized command: ip netns exec qrouter-09baa580-2fdf-4a57-8190-71ef22618d36 /sbin/iptables-save -t filter\n'
Stderr: ''
^CTraceback (most recent call last):
  File "/usr/bin/quantum-l3-agent", line 20, in <module>
    main()
  File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 512, in main
    mgr.daemon_loop()
  File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 179, in daemon_loop
    time.sleep(self.polling_interval)
KeyboardInterrupt

[dan wendlandt (danwent)]

 can you update the bug with the value of "filters_path" in your rootwrap.conf as well as a list of each filter file that filters_path will pick up?

[Endre Karlson (endre-karlson)]

## rootwrap.conf ##
http://paste.ubuntu.com/1209535/

## /etc/quantum/rootwrap.d/dhcp.filters ##
http://paste.ubuntu.com/1209545/

## /etc/quantum/rootwrap.d/l3.filters ##
http://paste.ubuntu.com/1209546/

## /etc/quantum/rootwrap.d/nec-plugin.filters ##
http://paste.ubuntu.com/1209547/

## /etc/quantum/rootwrap.d/openvswitch-plugin.filters ##
http://paste.ubuntu.com/1209548/

[Endre Karlson (endre-karlson)]

quantum-l3-agent 2012.2+git201209131501~precise-0ubuntu1

Is the package