[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10138?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16248651#comment-16248651
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10138:
---------------------------------------------

ustcweizhou commented on issue #2319: CLOUDSTACK-10138: Load br_netfilter in 
security_group management script
URL: https://github.com/apache/cloudstack/pull/2319#issuecomment-343692713
 
 
   What if module br_netfilter does not exist ? for example on Ubuntu 12.04 or 
CentOS 7 ?
   
   As I know, the issue only happens on Ubuntu 16.04.
   
   Actually we fixed it by chef
   ```
   execute 'modprobe br_netfilter' do
     command 'if [[ $(modinfo br_netfilter 2>1 /dev/null) ]]; then 
/sbin/modprobe br_netfilter; fi'
     only_if { node['platform_version'] == '16.04' }
   end
   ```

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Load br_netfilter in security_group management script
> -----------------------------------------------------
>
>                 Key: CLOUDSTACK-10138
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10138
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the 
> default.) 
>          Components: cloudstack-agent
>    Affects Versions: 4.10.0.0
>         Environment: Ubuntu 14.04
>            Reporter: Ivan Kudryavtsev
>
> When setting 
> sysctl -w net.bridge.bridge-nf-call-arptables=1
> sysctl -w net.bridge.bridge-nf-call-iptables=1
> sysctl -w net.bridge.bridge-nf-call-ip6tables=1
> /usr/share/cloudstack-common/scripts/vm/network/security_group.py
> doesn't check that br_netfilter is load.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to