[Pkg-libvirt-maintainers] Bug#636712: libvirt-bin: cannot create rule since iptables tool is missing with custom nwfilters

[Luca Capello]

found 636712 0.9.3-4
thanks

Hi there!

On Fri, 05 Aug 2011 17:05:23 +0200, Luca Capello wrote:
> However, adding a simple filter like the following causes an error:
> =====
> # cat /etc/libvirt/nwfilter/allow-http.xml
> <filter name='allow-http' chain='ipv4'>
>   <rule action='accept' direction='in' >
>     <tcp dstportstart='80' />
>   </rule>
> </filter>
>
> # grep allow-http /etc/libvirt/qemu/shelob.pca.it.xml
>       <filterref filter='allow-http'/>
>
> # service libvirt-bin restart
>
> # less /var/log/syslog
[...]
> Aug  5 16:27:56 mantissa libvirtd: 16:27:56.596: error : qemuAutostartDomain:827 : \
>  Failed to autostart VM 'shelob.pca.it': internal error cannot create rule since iptables tool is missing.
> Aug  5 16:27:56 mantissa libvirtd: 16:27:56.654: warning : lxcStartup:1900 : \
>  Unable to create cgroup for driver: No such device or address
> =====

On my up-to-date sid, the error is the same, thus updating the version
information for this bug report and also providing at the end the full
output from `reportbug --template libvirt-bin`.

> NB, I do not have install-recommends on by default, but I have both
>     ebtables and iptables installed.  I tried installing libxml2-utils,
>     but the error is still present.

This is true for my sid as well, i.e. both ebtables and iptables are
installed, but not libxml2-utils nor gawk.

Thx, bye,
Gismo / Luca

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libvirt-bin depends on:
ii  adduser 3.113                            add and remove users and groups
ii  gettext 0.18.1.1-4                       GNU Internationalization utilities
ii  libavah 0.6.30-5                         Avahi client library
ii  libavah 0.6.30-5                         Avahi common library
ii  libc6   2.13-14                          Embedded GNU C Library: Shared lib
ii  libcap- 0.6.6-1                          An alternate POSIX capabilities li
ii  libdevm 2:1.02.63-3.1                    The Linux Kernel Device Mapper use
ii  libgcry 1.4.6-9                          LGPL Crypto library - runtime libr
ii  libgnut 2.12.7-4                         GNU TLS library - runtime library
ii  libnl1  1.1-7                            library for dealing with netlink s
ii  libpart 2.3-8                            disk partition manipulator - share
ii  libpcia 0.12.1-1                         Generic PCI access library for X
ii  libread 6.2-2                            GNU readline and history libraries
ii  libsasl 2.1.24~rc1.dfsg1+cvs2011-05-23-4 Cyrus SASL - authentication abstra
ii  libudev 172-1                            libudev shared library
ii  libuuid 2.19.1-5                         Universally Unique ID library
ii  libvirt 0.9.3-4                          library for interfacing with diffe
ii  libxens 4.1.1-2                          Xenstore communications library fo
ii  libxml2 2.7.8.dfsg-4                     GNOME XML library
ii  logrota 3.7.8-6                          Log rotation utility

Versions of packages libvirt-bin recommends:
ii  bridge-utils               1.5-2         Utilities for configuring the Linu
ii  dmidecode                  2.9-1.2       Dump Desktop Management Interface 
ii  dnsmasq-base               2.57-1        A small caching DNS proxy and DHCP
ii  ebtables                   2.0.9.2-2     Ethernet bridge frame table admini
pn  gawk                       <none>        (no description available)
ii  iproute                    20110629-1    networking and traffic control too
ii  iptables                   1.4.12-1      administration tools for packet fi
pn  libxml2-utils              <none>        (no description available)
ii  netcat-openbsd             1.89-4        TCP/IP swiss army knife
ii  qemu                       0.14.1+dfsg-3 fast processor emulator
ii  qemu-kvm                   0.14.1+dfsg-4 Full virtualization on x86 hardwar

Versions of packages libvirt-bin suggests:
ii  policykit-1                   0.102-1    framework for managing administrat
pn  radvd                         <none>     (no description available)

-- Configuration Files:
/etc/libvirt/qemu/networks/default.xml changed:
<network>
  <name>default</name>
  <bridge name="virbr0" />
  <forward/>
  <ip address="192.168.122.1" netmask="255.255.255.0">
    <dhcp>
      <range start="192.168.122.2" end="192.168.122.254" />
      <host mac='52:54:00:85:fa:a0' name='gismo-sid.pca.it' ip='192.168.122.4' />
    </dhcp>
  </ip>
</network>


-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-libvirt-maintainers/attachments/20110808/f3b964ba/attachment.pgp>