ironic-inspector - Executable not found: iptables

Bug #1626539 reported by Waldemar Znoinski
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
kolla
Fix Released
High
Waldemar Znoinski

Bug Description

host/container os: ubuntu xenial

iptables seems not be installed in the container (image)

to reproduce build images from source using current kolla master and apply fixes from:
https://review.openstack.org/#/c/374727/

INFO:__main__:Kolla config strategy set to: COPY_ALWAYS
INFO:__main__:Loading config file at /var/lib/kolla/config_files/config.json
INFO:__main__:Validating config file
INFO:__main__:Copying service configuration files
INFO:__main__:Removing existing destination: /etc/ironic-inspector/ironic.conf
INFO:__main__:Copying /var/lib/kolla/config_files/ironic.conf to /etc/ironic-inspector/ironic.conf
INFO:__main__:Setting permissions for /etc/ironic-inspector/ironic.conf
INFO:__main__:Writing out command to execute
Running command: 'ironic-inspector --config-file /etc/ironic-inspector/ironic.conf'
2016-09-22 12:30:49.220 7 WARNING oslo_config.cfg [-] Option "identity_uri" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-22 12:30:49.221 7 WARNING oslo_config.cfg [-] Option "os_auth_url" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-22 12:30:49.221 7 WARNING oslo_config.cfg [-] Option "os_password" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-22 12:30:49.222 7 WARNING oslo_config.cfg [-] Option "os_tenant_name" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-22 12:30:49.222 7 WARNING oslo_config.cfg [-] Option "os_username" from group "ironic" is deprecated for removal. Its value may be silently ignored in the future.
2016-09-22 12:30:49.836 7 WARNING ironic_inspector.main [-] Introspection data will not be stored. Change "[processing] store_data" option if this is not the desired behavior
2016-09-22 12:30:49.869 7 INFO ironic_inspector.main [-] Enabled processing hooks: ['ramdisk_error', 'root_disk_selection', 'scheduler', 'validate_interfaces', 'capabilities', 'pci_devices']
2016-09-22 12:30:50.322 7 WARNING ironic_inspector.firewall [-] iptables does not support -w flag, please update it to at least version 1.4.21
2016-09-22 12:30:52.035 7 ERROR ironic_inspector.firewall [-] iptables ('-N', 'ironic-inspector') failed: /var/lib/kolla/venv/bin/ironic-inspector-rootwrap: Executable not found: iptables (filter match = iptables).
2016-09-22 12:30:52.036 7 CRITICAL ironic_inspector [-] CalledProcessError: Command '('sudo', 'ironic-inspector-rootwrap', '/etc/ironic-inspector/rootwrap.conf', 'iptables', '-N', 'ironic-inspector')' returned non-zero exit status 96
2016-09-22 12:30:52.036 7 ERROR ironic_inspector Traceback (most recent call last):
2016-09-22 12:30:52.036 7 ERROR ironic_inspector File "/var/lib/kolla/venv/bin/ironic-inspector", line 10, in <module>
2016-09-22 12:30:52.036 7 ERROR ironic_inspector sys.exit(main())
2016-09-22 12:30:52.036 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 465, in main
2016-09-22 12:30:52.036 7 ERROR ironic_inspector service.run(args, app)
2016-09-22 12:30:52.036 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 456, in run
2016-09-22 12:30:52.036 7 ERROR ironic_inspector self.init()
2016-09-22 12:30:52.036 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 423, in init
2016-09-22 12:30:52.036 7 ERROR ironic_inspector firewall.init()
2016-09-22 12:30:52.036 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 87, in init
2016-09-22 12:30:52.036 7 ERROR ironic_inspector _iptables('-N', CHAIN)
2016-09-22 12:30:52.036 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 45, in _iptables
2016-09-22 12:30:52.036 7 ERROR ironic_inspector subprocess.check_output(cmd, **kwargs)
2016-09-22 12:30:52.036 7 ERROR ironic_inspector File "/usr/lib/python2.7/subprocess.py", line 574, in check_output
2016-09-22 12:30:52.036 7 ERROR ironic_inspector raise CalledProcessError(retcode, cmd, output=output)
2016-09-22 12:30:52.036 7 ERROR ironic_inspector CalledProcessError: Command '('sudo', 'ironic-inspector-rootwrap', '/etc/ironic-inspector/rootwrap.conf', 'iptables', '-N', 'ironic-inspector')' returned non-zero exit status 96

summary: - ironic-inspector source code has to be installed instead of pip
+ ironic-inspector - Executable not found: iptables
Changed in kolla:
assignee: nobody → Waldemar Znoinski (wznoinsk)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla (master)

Fix proposed to branch: master
Review: https://review.openstack.org/374970

Changed in kolla:
status: New → In Progress
Changed in kolla:
importance: Undecided → High
milestone: none → newton-rc2
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (master)

Reviewed: https://review.openstack.org/374970
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=40ed2c46cddd1e813ffc077359b465ba1aef5229
Submitter: Jenkins
Branch: master

commit 40ed2c46cddd1e813ffc077359b465ba1aef5229
Author: Waldemar Znoinski <email address hidden>
Date: Thu Sep 22 12:55:13 2016 +0000

    install iptables in ironic-inspector container

    Change-Id: I5c153b367ef21eb76bc3fbe8bd724c71aa251f3c
    Closes-bug: #1626539

Changed in kolla:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla 3.0.0.0rc2

This issue was fixed in the openstack/kolla 3.0.0.0rc2 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.