Comment 3 for bug 1872940

Revision history for this message
Ian Kumlien (pomac) wrote :

So, doing something like:
--- a/neutron_vpnaas/services/vpn/device_drivers/libreswan_ipsec.py
+++ b/neutron_vpnaas/services/vpn/device_drivers/libreswan_ipsec.py
@@ -39,7 +39,8 @@ class LibreSwanProcess(ipsec.OpenSwanProcess):
         """
         ip_wrapper = ip_lib.IPWrapper(namespace=self.namespace)
         mount_paths = {'/etc': '%s/etc' % self.config_dir,
- '/var/run': '%s/var/run' % self.config_dir}
+ '/var/run': '%s/var/run' % self.config_dir,
+ '/run': '%s/run' % self.config_dir}
         mount_paths_str = ','.join(
             "%s:%s" % (source, target)
             for source, target in mount_paths.items())
---

Doesn't seem to be the solution -- I suspect that in my case it's a bad error message?... or something... Since any change that causes ipsec to run in a netns instead results in thousands of spawned pluto processes.. (and more error messages)

So it becomes a issue of knowing what error messages can be ignored...