Red Hat Bugzilla – Bug 969869
Multinode nstall fails with "iptables: Resource temporarily unavailable."
Last modified: 2014-01-17 06:13:45 EST
Created attachment 756082 [details] Packstall Install Log Description of problem: When doing a multi-node install, installer will fail with the error message: -- ERROR : Error during puppet run : err: /Firewall[001 nova compute incoming]/ensure: change from absent to present failed: Execution of '/sbin/iptables -I INPUT 1 -t filter -p tcp -m multiport --dports 5900:5999 -m comment --comment 001 nova compute incoming -j ACCEPT' returned 4: iptables: Resource temporarily unavailable. -- On a set of 5 servers, it will fail 2/3 of the time for me. Version-Release number of selected component (if applicable): Grizzly-3 How reproducible: Do a packstack install Steps to Reproduce: 1. yum install -q -y http://rdo.fedorapeople.org/openstack/openstack-grizzly/rdo-release-grizzly-3.noarch.rpm 2. yum install -q -y openstack-packstack 3. packstack --install-hosts=172.29.84.71,172.29.84.72,172.29.84.73,172.29.84.74,172.29.84.75 Actual results: Installer Errors out Expected results: Installer completes successfully Additional info: A very similar bug was filed and fixed for Folsom: https://bugzilla.redhat.com/show_bug.cgi?id=908695 I wonder if those patches just need to be applied to Grizzly?
Created attachment 756083 [details] IP tables on the controller
Created attachment 756084 [details] IP tables on the compute node
An easy workaround seems to be just re-run packstack, but this time instead of using --install-hosts= option, give it the --answer-file= option and with the answer file generated by the failed install.
Can you please try RDO Havana is the problem still persist? There has been firewall refactor between those two releases. Currently I'm not able to reproduce it neither for Havana nor Grizzly.
I won't be able to at this late date.
Please reopen this bug or create a new one in case you will hit the same problem. Thanks.