rootwrap expects the command name is not absolute, so rootwrap filter is not found when /sbin/iptables is used.
I think changing '/sbin/iptables-save' to 'iptables' is a reasonable solution for it.
@garyk
iptables-save always fails in l3-agent when I ran devstack with use_namespaces=False. Does it only happen only the first time that l3-agent runs?
rootwrap expects the command name is not absolute, so rootwrap filter is not found when /sbin/iptables is used. iptables- save' to 'iptables' is a reasonable solution for it.
I think changing '/sbin/
@garyk False. Does it only happen only the first time that l3-agent runs?
iptables-save always fails in l3-agent when I ran devstack with use_namespaces=