Comment 2 for bug 1650345

Tried Jeffrey's patch with 3.0.1, logs below:

TASK [ironic : Running Ironic Inspector bootstrap container] *******************
fatal: [localhost -> localhost]: FAILED! => {"changed": true, "failed": true, "msg": "Container exited with non-zero return code"}

NO MORE HOSTS LEFT *************************************************************
  to retry, use: --limit @/usr/local/share/kolla/ansible/site.retry

root@openstack2:~# docker logs -f bootstrap_ironic_inspector
INFO:__main__:Kolla config strategy set to: COPY_ALWAYS
INFO:__main__:Loading config file at /var/lib/kolla/config_files/config.json
INFO:__main__:Validating config file
INFO:__main__:Copying service configuration files
INFO:__main__:Copying /var/lib/kolla/config_files/inspector.conf to /etc/ironic-inspector/inspector.conf
INFO:__main__:Setting permissions for /etc/ironic-inspector/inspector.conf
INFO:__main__:Writing out command to execute
Running command: 'ironic-inspector --config-file /etc/ironic-inspector/inspector.conf'
2016-12-16 13:23:09.274 7 WARNING ironic_inspector.main [-] Introspection data will not be stored. Change "[processing] store_data" option if this is not the desired behavior
2016-12-16 13:23:09.302 7 INFO ironic_inspector.main [-] Enabled processing hooks: ['ramdisk_error', 'root_disk_selection', 'scheduler', 'validate_interfaces', 'capabilities', 'pci_devices']
2016-12-16 13:23:10.952 7 ERROR ironic_inspector.firewall [-] iptables ('-N', 'ironic-inspector') failed: iptables v1.6.0: can't initialize iptables table `filter': Permission denied (you must be root). Perhaps iptables or your kernel needs to be upgraded..
2016-12-16 13:23:10.953 7 CRITICAL ironic_inspector [-] CalledProcessError: Command '('sudo', 'ironic-inspector-rootwrap', '/etc/ironic-inspector/rootwrap.conf', 'iptables', '-w', '-N', 'ironic-inspector')' returned non-zero exit status 3
2016-12-16 13:23:10.953 7 ERROR ironic_inspector Traceback (most recent call last):
2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/bin/ironic-inspector", line 10, in <module>
2016-12-16 13:23:10.953 7 ERROR ironic_inspector sys.exit(main())
2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 465, in main
2016-12-16 13:23:10.953 7 ERROR ironic_inspector service.run(args, app)
2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 456, in run
2016-12-16 13:23:10.953 7 ERROR ironic_inspector self.init()
2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 423, in init
2016-12-16 13:23:10.953 7 ERROR ironic_inspector firewall.init()
2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 87, in init
2016-12-16 13:23:10.953 7 ERROR ironic_inspector _iptables('-N', CHAIN)
2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 45, in _iptables
2016-12-16 13:23:10.953 7 ERROR ironic_inspector subprocess.check_output(cmd, **kwargs)
2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/usr/lib/python2.7/subprocess.py", line 574, in check_output
2016-12-16 13:23:10.953 7 ERROR ironic_inspector raise CalledProcessError(retcode, cmd, output=output)
2016-12-16 13:23:10.953 7 ERROR ironic_inspector CalledProcessError: Command '('sudo', 'ironic-inspector-rootwrap', '/etc/ironic-inspector/rootwrap.conf', 'iptables', '-w', '-N', 'ironic-inspector')' returned non-zero exit status 3
2016-12-16 13:23:10.953 7 ERROR ironic_inspector
root@openstack2:~#