OpenVZ Forum


Home » Mailing lists » Users » checkpoint vs iptables-save,
checkpoint vs iptables-save, [message #27911] Sun, 02 March 2008 18:33 Go to next message
Dariush Pietrzak is currently offline  Dariush Pietrzak
Messages: 40
Registered: November 2007
Member
From: openvz.org
Hi, 
 recently I noticed this:
CPT ERR: failed to exec iptables-save: -2
CPT ERR: f76cb000,1089 :iptables-save exited with 255
 this is fixable by such workaround: ln -s /bin/true /sbin/iptables-save
but it probably would be nicer to skip this check if iptables-save script
does not exist(or turn this into warning).

-- 
Key fingerprint = 40D0 9FFB 9939 7320 8294  05E0 BCC7 02C4 75CC 50D9
 Total Existance Failure
Re: checkpoint vs iptables-save, [message #27916 is a reply to message #27911] Mon, 03 March 2008 08:34 Go to previous messageGo to next message
Andrey Mirkin is currently offline  Andrey Mirkin
Messages: 193
Registered: May 2006
Senior Member
From: openvz.org
Hello,

If you are not going to use iptables rules inside VE, then you can set 
IPTABLES="" in VE config.
After that iptables will not be used inside this VE and during checkpointing 
iptables-save will not be called.

BTW, more easier workaround is to install iptables-save/restore utils inside 
this VE.

Regards,
Andrey


On Sunday 02 March 2008 21:33 Dariush Pietrzak wrote:
> Hi,
>  recently I noticed this:
> CPT ERR: failed to exec iptables-save: -2
> CPT ERR: f76cb000,1089 :iptables-save exited with 255
>  this is fixable by such workaround: ln -s /bin/true /sbin/iptables-save
> but it probably would be nicer to skip this check if iptables-save script
> does not exist(or turn this into warning).
Re: checkpoint vs iptables-save, [message #27933 is a reply to message #27916] Mon, 03 March 2008 13:56 Go to previous message
Dariush Pietrzak is currently offline  Dariush Pietrzak
Messages: 40
Registered: November 2007
Member
From: openvz.org
> If you are not going to use iptables rules inside VE, then you can set 
> IPTABLES="" in VE config.
 ok, this is good, thanks

> BTW, more easier workaround is to install iptables-save/restore utils inside 
> this VE.
 it's only easier in the sense that it's easier to install full set of dvds
of SuSE software just to be able to run web server, instead of installing
only what you need.
-- 
Key fingerprint = 40D0 9FFB 9939 7320 8294  05E0 BCC7 02C4 75CC 50D9
 Total Existance Failure
Previous Topic: Debian openvz kernel package security update policy ?
Next Topic: new 2.6.24 ovz002 release VS sysfs: duplicate filename ':0000288' can not be created
Goto Forum:
  


Current Time: Wed Oct 16 22:03:18 GMT 2019