Why does chkpnt require iptables? [message #35106] |
Sun, 01 March 2009 10:01  |
rlawley
Messages: 2 Registered: January 2009
|
Junior Member |
|
|
We're running the latest stable versions of OpenVZ on a Debian 4 HN, and one thing keeps confusing me - if I try and suspend a VPS using vzctl chkpnt CTID, this fails if the container does not have iptables installed.
The first thing I did when finding this out was to ensure that all of our templates come with iptables installed. However, this does not account for the fact that users are still in control of their containers - one of ours has removed iptables from his container and it can no longer be suspended using the chkpnt command...
Can not dump container: Invalid argument
Error: iptables-save exited with 255
Checkpointing failed
Is there a reason why chkpnt requires iptables to be present? I assume it is used to take a running copy of the iptables rules that are running prior to saving the machine, but if iptables isn't present then it stands to reason that there are no iptables rules to save, and this step could be skipped.
If there's something else I'm missing here, please point me in the right direction!
Regards,
Richard
|
|
|
|
|
|