[Pkg-libvirt-maintainers] Bug#758598: libvirt-bin: isolated network fails to start due to xtables lock

[Daniel Dickinson]

Package: libvirt-bin
Version: 1.2.4-3.2
Severity: normal

I observed that libvirt-bin's networks failed to autostart despite being
so configure and when I attempted to manually (via virsh) start the network I got:

error: Failed to start network vmpriv
error: internal error: Failed to apply firewall rules /sbin/iptables --table filter --insert INPUT --in-interface virbr1 --protocol tcp --destination-port 67 --jump ACCEPT: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?

After some time virsh is able to start the network but it appears that is another
process does firewall work (e.g. firewall is slow to start), then virsh fails to start
network due to the new xtables locking mechanism and failure of libvirt to use
the -w (wait) option.

Regards,

Daniel


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libvirt-bin depends on:
ii  adduser              3.113+nmu3
ii  gettext-base         0.19.2-1
ii  init-system-helpers  1.20
ii  libapparmor1         2.8.0-5.1+b1
ii  libaudit1            1:2.3.7-1
ii  libavahi-client3     0.6.31-4
ii  libavahi-common3     0.6.31-4
ii  libblkid1            2.20.1-5.8
ii  libc6                2.19-7
ii  libcap-ng0           0.7.3-1.1
ii  libdbus-1-3          1.8.6-1
ii  libdevmapper1.02.1   2:1.02.85-2
ii  libfuse2             2.9.3-15
ii  libgnutls-deb0-28    3.2.16-1
ii  libnetcf1            1:0.2.3-4
ii  libnl-3-200          3.2.24-2
ii  libnl-route-3-200    3.2.24-2
ii  libnuma1             2.0.9-1
ii  libparted2           3.2-4
ii  libpcap0.8           1.6.1-1
ii  libpciaccess0        0.13.2-3
ii  librados2            0.80.5-1
ii  librbd1              0.80.5-1
ii  libreadline6         6.3-8
ii  libsasl2-2           2.1.26.dfsg1-11
ii  libselinux1          2.3-1
ii  libssh2-1            1.4.3-3
ii  libsystemd-daemon0   208-6
ii  libudev1             208-6
ii  libvirt0             1.2.4-3.2
ii  libxen-4.3           4.3.0-3+b1
ii  libxenstore3.0       4.3.0-3+b1
ii  libxml2              2.9.1+dfsg1-4
ii  libyajl2             2.1.0-1
ii  logrotate            3.8.7-1

Versions of packages libvirt-bin recommends:
ii  bridge-utils    1.5-9
ii  dmidecode       2.12-3
ii  dnsmasq-base    2.71-1
ii  ebtables        2.0.10.4-3
ii  iproute         1:3.16.0-1
ii  iptables        1.4.21-2
ii  libxml2-utils   2.9.1+dfsg1-4
ii  netcat-openbsd  1.105-7
ii  parted          3.2-4
ii  pm-utils        1.4.1-15
ii  qemu            2.1+dfsg-2
ii  qemu-kvm        2.1+dfsg-2

Versions of packages libvirt-bin suggests:
pn  apparmor     <none>
pn  auditd       <none>
ii  policykit-1  0.105-6.1
ii  radvd        1:1.9.1-1.3
ii  systemd      208-6
pn  systemtap    <none>

-- Configuration Files:
/etc/default/libvirt-guests changed [not included]
/etc/init.d/libvirt-guests changed [not included]
/etc/libvirt/qemu.conf [Errno 13] Permission denied: u'/etc/libvirt/qemu.conf'

-- no debconf information