On Thu, Dec 18, 2014 at 09:16:17AM +0000, Richard W.M. Jones wrote:
On Wed, Dec 17, 2014 at 07:39:34PM +0000, Richard W.M. Jones wrote:
>
>
https://bugzilla.redhat.com/show_bug.cgi?id=1132129
>
> It looks as if this was fixed in RHOS 5 and upstream (16a766d81) back
> in August.
>
> I've just cloned this bug for Rawhide where it is still not fixed:
>
>
https://bugzilla.redhat.com/show_bug.cgi?id=1175460
>
> Surely bugs should be fixed first upstream, then in Rawhide, and
> then in RHOS?
It turns out the commit fixing the bug was reverted upstream.
The bug still happens in a freshly created Rawhide VM that just runs
'packstack --allinone'. Any idea who/what it is that adds
net.bridge.bridge-nf-call-* rules into /etc/sysctl.conf?
Looking up Bugzilla, seems like it's needed to get Neutron networking
security groups working correctly, this is the bug
https://bugzilla.redhat.com/show_bug.cgi?id=981144 -- need to set
net.bridge.bridge-nf-call-iptables=1 for --allinone installation
which says
For the single node deployment with "packstack --allinone",
following kernel parms should be set so that the security group
works correctly.
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-arptables = 1
--
/kashyap