Docker fails to start if iptables is not installed

Bug #1899060 reported by Mark Goddard
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Medium
Mark Goddard
Stein
New
Medium
Unassigned
Train
Fix Released
Medium
Mark Goddard
Ussuri
Fix Released
Medium
Mark Goddard
Victoria
Fix Released
Medium
Mark Goddard

Bug Description

If iptables is not installed, e.g. in the CentOS 8 cloud image, and Docker iptables management is enabled, we get the following error:

Failed to find iptables: exec: \"iptables\": executable file not found in $PATH
failed to start daemon: Error initializing network controller: error obtaining controller instance: failed to create NAT chain DOCKER: Iptables not found

$ docker --version
Docker version 19.03.13, build 4484c46d9d

Mark Goddard (mgoddard)
description: updated
Mark Goddard (mgoddard)
Changed in kolla-ansible:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/756891

Changed in kolla-ansible:
assignee: nobody → Mark Goddard (mgoddard)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/756891
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=bc1d02d89681b92f379b3e356d7778aa6044f297
Submitter: Zuul
Branch: master

commit bc1d02d89681b92f379b3e356d7778aa6044f297
Author: Mark Goddard <email address hidden>
Date: Thu Oct 8 17:43:37 2020 +0100

    baremetal: Install iptables for Docker if enabled

    If iptables is not installed, e.g. in the CentOS 8 cloud image, and
    Docker iptables management is enabled, we get the following errors:

    Failed to find iptables: exec: \"iptables\": executable file not found
    in $PATH failed to start daemon: Error initializing network controller:
    error obtaining controller instance: failed to create NAT chain DOCKER:
    Iptables not found

    This change installs the iptables package Docker iptables management is
    enabled.

    Change-Id: I3ba5318debccafb28c3cbce8e4e9813c28b086fc
    Closes-Bug: #1899060

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/ussuri)

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/758070

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/train)

Fix proposed to branch: stable/train
Review: https://review.opendev.org/758071

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/ussuri)

Reviewed: https://review.opendev.org/758070
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=a9af6cebf1c75cb7149d75ec8f054388d4cc2739
Submitter: Zuul
Branch: stable/ussuri

commit a9af6cebf1c75cb7149d75ec8f054388d4cc2739
Author: Mark Goddard <email address hidden>
Date: Thu Oct 8 17:43:37 2020 +0100

    baremetal: Install iptables for Docker if enabled

    If iptables is not installed, e.g. in the CentOS 8 cloud image, and
    Docker iptables management is enabled, we get the following errors:

    Failed to find iptables: exec: \"iptables\": executable file not found
    in $PATH failed to start daemon: Error initializing network controller:
    error obtaining controller instance: failed to create NAT chain DOCKER:
    Iptables not found

    This change installs the iptables package Docker iptables management is
    enabled.

    Change-Id: I3ba5318debccafb28c3cbce8e4e9813c28b086fc
    Closes-Bug: #1899060
    (cherry picked from commit bc1d02d89681b92f379b3e356d7778aa6044f297)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/train)

Reviewed: https://review.opendev.org/758071
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=70fe644bca55c8f22a825cb9e641ababd2f744c8
Submitter: Zuul
Branch: stable/train

commit 70fe644bca55c8f22a825cb9e641ababd2f744c8
Author: Mark Goddard <email address hidden>
Date: Thu Oct 8 17:43:37 2020 +0100

    baremetal: Install iptables for Docker if enabled

    If iptables is not installed, e.g. in the CentOS 8 cloud image, and
    Docker iptables management is enabled, we get the following errors:

    Failed to find iptables: exec: \"iptables\": executable file not found
    in $PATH failed to start daemon: Error initializing network controller:
    error obtaining controller instance: failed to create NAT chain DOCKER:
    Iptables not found

    This change installs the iptables package Docker iptables management is
    enabled.

    Change-Id: I3ba5318debccafb28c3cbce8e4e9813c28b086fc
    Closes-Bug: #1899060
    (cherry picked from commit bc1d02d89681b92f379b3e356d7778aa6044f297)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 10.2.0

This issue was fixed in the openstack/kolla-ansible 10.2.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 9.3.0

This issue was fixed in the openstack/kolla-ansible 9.3.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.