Tried Jeffrey's patch with 3.0.1, logs below: TASK [ironic : Running Ironic Inspector bootstrap container] ******************* fatal: [localhost -> localhost]: FAILED! => {"changed": true, "failed": true, "msg": "Container exited with non-zero return code"} NO MORE HOSTS LEFT *************************************************************   to retry, use: --limit @/usr/local/share/kolla/ansible/site.retry root@openstack2:~# docker logs -f bootstrap_ironic_inspector INFO:__main__:Kolla config strategy set to: COPY_ALWAYS INFO:__main__:Loading config file at /var/lib/kolla/config_files/config.json INFO:__main__:Validating config file INFO:__main__:Copying service configuration files INFO:__main__:Copying /var/lib/kolla/config_files/inspector.conf to /etc/ironic-inspector/inspector.conf INFO:__main__:Setting permissions for /etc/ironic-inspector/inspector.conf INFO:__main__:Writing out command to execute Running command: 'ironic-inspector --config-file /etc/ironic-inspector/inspector.conf' 2016-12-16 13:23:09.274 7 WARNING ironic_inspector.main [-] Introspection data will not be stored. Change "[processing] store_data" option if this is not the desired behavior 2016-12-16 13:23:09.302 7 INFO ironic_inspector.main [-] Enabled processing hooks: ['ramdisk_error', 'root_disk_selection', 'scheduler', 'validate_interfaces', 'capabilities', 'pci_devices'] 2016-12-16 13:23:10.952 7 ERROR ironic_inspector.firewall [-] iptables ('-N', 'ironic-inspector') failed: iptables v1.6.0: can't initialize iptables table `filter': Permission denied (you must be root). Perhaps iptables or your kernel needs to be upgraded.. 2016-12-16 13:23:10.953 7 CRITICAL ironic_inspector [-] CalledProcessError: Command '('sudo', 'ironic-inspector-rootwrap', '/etc/ironic-inspector/rootwrap.conf', 'iptables', '-w', '-N', 'ironic-inspector')' returned non-zero exit status 3 2016-12-16 13:23:10.953 7 ERROR ironic_inspector Traceback (most recent call last): 2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/bin/ironic-inspector", line 10, in 2016-12-16 13:23:10.953 7 ERROR ironic_inspector sys.exit(main()) 2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 465, in main 2016-12-16 13:23:10.953 7 ERROR ironic_inspector service.run(args, app) 2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 456, in run 2016-12-16 13:23:10.953 7 ERROR ironic_inspector self.init() 2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/main.py", line 423, in init 2016-12-16 13:23:10.953 7 ERROR ironic_inspector firewall.init() 2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 87, in init 2016-12-16 13:23:10.953 7 ERROR ironic_inspector _iptables('-N', CHAIN) 2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/var/lib/kolla/venv/local/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 45, in _iptables 2016-12-16 13:23:10.953 7 ERROR ironic_inspector subprocess.check_output(cmd, **kwargs) 2016-12-16 13:23:10.953 7 ERROR ironic_inspector File "/usr/lib/python2.7/subprocess.py", line 574, in check_output 2016-12-16 13:23:10.953 7 ERROR ironic_inspector raise CalledProcessError(retcode, cmd, output=output) 2016-12-16 13:23:10.953 7 ERROR ironic_inspector CalledProcessError: Command '('sudo', 'ironic-inspector-rootwrap', '/etc/ironic-inspector/rootwrap.conf', 'iptables', '-w', '-N', 'ironic-inspector')' returned non-zero exit status 3 2016-12-16 13:23:10.953 7 ERROR ironic_inspector root@openstack2:~#