[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
This bug was fixed in the package lxc - 1.0.8-0ubuntu0.3 --- lxc (1.0.8-0ubuntu0.3) trusty; urgency=medium * Cherry-pick from upstream: - Fix preserve_ns to work on < 3.8 kernels. (LP: #1516971) lxc (1.0.8-0ubuntu0.2) trusty; urgency=medium * Cherry-pick from upstream: - Fix ubuntu-cloud template to detect compression algorithm instead of hardcoding xz. Also update list of supported releases and use trusty as the fallback release. (LP: #1515463) * Update lxc-tests description to make it clear that this package is meant to be used by developers and by automated testing. lxc (1.0.8-0ubuntu0.1) trusty; urgency=medium * New upstream bugfix release. (MRE tracking bug: LP: #1514623) (LP: #1429140) - Changelog at: https://linuxcontainers.org/lxc/news/ * Drop proxy detection from the autopkgtest exercise script. * Add patch: - 0001-Trusty-Swap-out-the-CVE-2015-1335-fix-with-the-trust.patch This is a patch by Serge Hallyn to cope with the trusty 3.13 kernel. It updates the upstream CVE fix to the version which trusty ended up with after the few round of fixes. -- Stéphane GraberWed, 18 Nov 2015 13:42:07 -0500 ** Changed in: lxc (Ubuntu Trusty) Status: Fix Committed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2015-1335 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: Fix Released Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: Fix Committed Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
Hello Daniel, or anyone else affected, Accepted lxc into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/lxc/1.0.8-0ubuntu0.3 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Tags removed: verification-done ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: Fix Committed Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
I just test the proposed package version 1.0.8-0ubuntu0.2 and it fix my issue. Thanks a lot. ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: Fix Committed Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
Hello Daniel, or anyone else affected, Accepted lxc into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/lxc/1.0.8-0ubuntu0.2 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Tags removed: verification-done ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: Fix Committed Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
I just test the proposed package version 1.0.8-0ubuntu0.1 and it fix my issue. Thanks a lot ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: Fix Committed Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
** Changed in: lxc (Ubuntu Trusty) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: Fix Committed Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
Hello Daniel, or anyone else affected, Accepted lxc into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/lxc/1.0.8-0ubuntu0.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Changed in: lxc (Ubuntu Trusty) Status: In Progress => Fix Committed ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: Fix Committed Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
** Also affects: lxc (Ubuntu Trusty) Importance: Undecided Status: New ** Changed in: lxc (Ubuntu) Status: Fix Committed => Fix Released ** Changed in: lxc (Ubuntu Trusty) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Released Status in lxc source package in Trusty: In Progress Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec >> /tmp/lxc-net.log 2>&1” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
** Changed in: lxc (Ubuntu) Status: Triaged = Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Fix Committed Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec /tmp/lxc-net.log 21” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
Thanks - a patch has been sent upstream and should be in 1.0.8 in trusty soon. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Triaged Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec /tmp/lxc-net.log 21” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
Hello, * Distribution Trusty Thar * lxc version 1.0.7-0ubuntu0.1 Steps to reproduce: 1) fresh boot, bridge is up and running 2) sudo iptables -F INPUT 3) sudo stop lxc-net stop: Job failed while stopping 4) ip link show lxcbr0 3: lxcbr0: BROADCAST,MULTICAST mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default link/ether ca:ca:b6:d1:d4:26 brd ff:ff:ff:ff:ff:ff So the bridge is not stopped correctly and recovering is difficult. Regards. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Incomplete Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec /tmp/lxc-net.log 21” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
Note I tested this on vivid with a /downitpables script containing: #!/bin/sh LXC_BRIDGE=lxcbr0 LXC_NETWORK=10.0.3.0/24 use_iptables_lock=-w iptables -w -L -n /dev/null 21 || use_iptables_lock= iptables $use_iptables_lock -D INPUT -i ${LXC_BRIDGE} -p udp --dport 67 -j ACCEPT iptables $use_iptables_lock -D INPUT -i ${LXC_BRIDGE} -p tcp --dport 67 -j ACCEPT iptables $use_iptables_lock -D INPUT -i ${LXC_BRIDGE} -p udp --dport 53 -j ACCEPT iptables $use_iptables_lock -D INPUT -i ${LXC_BRIDGE} -p tcp --dport 53 -j ACCEPT iptables $use_iptables_lock -D FORWARD -i ${LXC_BRIDGE} -j ACCEPT iptables $use_iptables_lock -D FORWARD -o ${LXC_BRIDGE} -j ACCEPT iptables $use_iptables_lock -t nat -D POSTROUTING -s ${LXC_NETWORK} ! -d ${LXC_NETWORK} -j MASQUERADE || true iptables $use_iptables_lock -t mangle -D POSTROUTING -o ${LXC_BRIDGE} -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill I raun /downitpables, then did 'sudo stop lxc-net', which succeeded. Then did 'sudo start lxc-net', which succeeded. ** Changed in: lxc (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Incomplete Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec /tmp/lxc-net.log 21” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
Hi, which release are you seeing this in? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: Incomplete Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec /tmp/lxc-net.log 21” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1429140] Re: lxc-net upstart script fails on nonexistent iptables rules
The attachment Do not crash when removing iptables rules seems to be a patch. If it isn't, please remove the patch flag from the attachment, remove the patch tag, and if you are a member of the ~ubuntu- reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.] ** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1429140 Title: lxc-net upstart script fails on nonexistent iptables rules Status in lxc package in Ubuntu: New Bug description: Hello, On Trusty, the stop of lxc-net fails if the iptables rules are not present. I added “exec /tmp/lxc-net.log 21” at the beginning of pre-start and post-stop and get: iptables: Bad rule (does a matching rule exist in that chain?). On Precise, a “|| true” was added to avoid errors. I attach a patch to disable exit on failing iptables call. Regards. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1429140/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp