Please enable iptables support in kernel build in support of OpenStack

[Clark Laughlin]

The following message is being logged repeatedly in the OpenStack nova log:

iptables v1.4.12: can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

This is a request to enable CONFIG_IP_NF_IPTABLES for the kernel to add iptables for OpenStack support.

[Andrey Konovalov (andrey-konovalov)]

CONFIG_IP_NF_IPTABLES=m and CONFIG_IP6_NF_IPTABLES=m have been added to ubuntu-minimal.conf:
https://git.linaro.org/gitweb?p=kernel/configs.git;a=commitdiff;h=110738cdcf314361b682821a4ef51b63a7d18abd

This change is included into linux-linaro starting from ll_20130524.0. Next llct update will also get this change.

[Clark Laughlin (clark-laughlin)]

The originally requested config options were added, as were several others that are supposed to be enabled for iptables support in the kernel. However, iptables still does not work. The same error (in the original bug description) is displayed when attempting to user the 'filter' and 'nat' tables. ufw also reports a similar error.

I don't know if one of these are the problem:

- The config flags are still not all present?
- The modules are not available in the image to load (I can't find anything but ip_tables.ko) -- is there something in the packaging config that needs to pick them up?
- The version of the iptables tool does not match the kernel module version?
- I'm just not doing something right?