Comment 3 for bug 1069966

Revision history for this message
Akihiro Motoki (amotoki) wrote :

rootwrap expects the command name is not absolute, so rootwrap filter is not found when /sbin/iptables is used.
I think changing '/sbin/iptables-save' to 'iptables' is a reasonable solution for it.

@garyk
iptables-save always fails in l3-agent when I ran devstack with use_namespaces=False. Does it only happen only the first time that l3-agent runs?