[libvirt] bug: network lock-out

[Zdenek Styblik]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jiri,

thank you for very prompt reply.

On 10/05/10 21:44, Jiri Denemark wrote:
>> 21:31:09.298: error : virRunWithHook:857 : internal error
>> '/usr/sbin/iptables --table mangle --insert POSTROUTING --out-interface
>> virbr0 --protocol udp --destination-port 68 --jump CHECKSUM
>> --checksum-fill' exited with non-zero status 2 and signal 0: iptables
>> v1.4.7: unknown option `--checksum-fill'
>> Try `iptables -h' or 'iptables --help' for more information.
> 
> This is harmless and ignored by libvirt. If DHCP still works in your guests,
> you don't need worry about this feature. The warning below tries to suggest
> the error was ignored...
> 

Uh huh ok.

>> 21:31:09.299: warning : networkAddIptablesRules:873 : Could not add rule
>> to fixup DHCP response checksums on network 'default'.
>> 21:31:09.299: warning : networkAddIptablesRules:874 : May need to update
>> iptables package & kernel to support CHECKSUM rule.
>> 21:31:09.301: error : virRunWithHook:857 : internal error
>> '/usr/sbin/dnsmasq --strict-order --bind-interfaces
>> --pid-file=/var/run/libvirt/network/default.pid --conf-file=
>> --listen-address 10.117.9.1 --except-interface lo' exited with non-zero
>> status 1 and signal 0: libvir: error : cannot execute binary
>> /usr/sbin/dnsmasq: No such file or directory
> 
> This is the really important error for you; /usr/sbin/dnsmasq could not be
> found.
>

Well, so is it reason not to bring up an interface? (Answer is - YES)
I've removed dnsmasq because it was giving away IP addresses, although
DHCP has not been defined in XML. I've mentioned this some time ago in
an e-mail with poetic subj: "dnsmasq, dhcp - bug or feature" :)

Umm thanks for helping me to solve this one, yet I still think it's -
odd. I mean ... you know ... oh well :| (how to put it - head down,
walking away) :)

Have a good night!

Zdenek

- -- 
Zdenek Styblik
Net/Linux admin
OS TurnovFree.net
email: stybla at turnovfree.net
jabber: stybla at jabber.turnovfree.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkyrgi4ACgkQ8MreUbSH7inx9gCguntYbSTtLMFu7RGO1Q3PWVWy
hlAAoNRB48+11JXP4zkzp8+DylLKl7uA
=byJC
-----END PGP SIGNATURE-----