nf_conntrack_ftp needed on computes to use active ftp with instances

[HippiePete]

When trying to use ftp (ie to kernel.org) from an instance, active will fail on the return path if nf_conntrack_ftp is not loaded on the hypervisor due to the nature of active's port assignments. After loading the module, active ftp worked.

This specific incident was on version 10.1.8, but I suspect others as well.

[Bjoern (bjoern-t)]

You can add custom modules inside the override kernel_modules, for example

rpc_deployment/vars/config_vars/container_config_nova_compute.yml

Personally I don't see need for active FTP anymore, since the majority of workload is running passive and that should be the recommendation to anyone.

[Jesse Pretorius (jesse-pretorius)]

openstack_host_kernel_modules can be overridden in user_varaibles for kilo+ - be sure to include the existing list from playbooks/roles/openstack_hosts/defaults/main.yml !!!