openstack/neutron
Code Issues Proposed changes

Fixed functional iptables firewall tests for newer kernels

Browse Source 
Iptables functional tests fail on Xenial and other newer kernels if
br_netfilter kernel module is not loaded, in which case sysctl knobs to
enable bridge firewalling are not available, and attempt to set them
with _enable_netfilter_for_bridges fails.

We should load the kernel module before running those tests. Luckily,
devstack has a function for just that (plus more).

Change-Id: I602d8cd02c73b18e9d719b19998e36059ae28cd8
Depends-On: Id6bfd9595f0772a63d1096ef83ebbb6cd630fafd
Related-Bug: #1622914
This commit is contained in:
Ihar Hrachyshka 2016-09-29 13:36:07 +00:00
parent 727c79f9f6
commit 80eb375ba1
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tools/configure_for_func_testing.sh
View File

@ -238,6 +238,8 @@ function _install_post_devstack {
# NOTE: the package name 'python-openvswitch' is common across
# supported distros.
install_package python-openvswitch
enable_kernel_bridge_firewall
}