calico-compute postinst script should be retired, or at least survive failures

Bug #1555056 reported by Nell Jerram
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
networking-calico
New
Undecided
Unassigned

Bug Description

Copy of https://github.com/projectcalico/calico/issues/983:

It makes the calico-compute package uninstallable in a docker build (no iptables), and it's not as good as fixing the issues up at runtime anyway.

Ideally we'd get rid of the script, failing that allowing the postinst scripts to fail without aborting installation would make dockerisation possible.

https://git.openstack.org/cgit/openstack/networking-calico/tree/debian/calico-compute.postinst

If memory serves the DHCP checksum-fill rule isn't needed for Kilo and Liberty anyway, and we just needed to properly backport the fix to Icehouse / Juno.

The sysctls might be better set up on Felix startup (concern: will this work if Felix is running inside a container or that part of the filesystem emulated?).

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.