[Users] Vzmigrate fails with error "iptables-save exited with 1"

Kevin Holly [Fusl] openvz at lists.dedilink.eu
Mon Sep 1 01:33:13 PDT 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

sorry for TOFU...

Can you try to run iptables-save *inside* the container? This is IIRC
what vzmigrate wants to do.

On 09/01/2014 03:50 AM, Corrado Fiore wrote:
> Dear All,
> 
> I'm trying to migrate online a VPS but I keep seeing the following
> error:
> 
> ============================ Live migrating container... Copying
> top ploop delta with CT suspend Sending
> /vz/private/10004/root.hdd/root.hdd Setting up checkpoint... 
> suspend... get context... Checkpointing completed successfully 
> Dumping container Setting up checkpoint... join context.. dump... 
> Can not dump container: Invalid argument Error: iptables-save
> exited with 1 Checkpointing failed Error: Failed to dump container 
> Resuming... ============================
> 
> Notes:
> 
> 1)  The container keeps working on the original node after the
> aborted attempt to migrate.
> 
> 2)  I have tried to manually issue `iptables-save` on the
> destination node and it works.
> 
> 3)  I know that the destination node must have loaded all the
> required IPtables modules.  These are the relevant lines:
> 
> 
> ====  ORIGIN NODE  ====
> 
> [root at node16 /]# uname -a Linux node16.xxxxx.com
> 2.6.32-042stab093.4 #1 SMP Mon Aug 11 18:47:39 MSK 2014 x86_64
> x86_64 x86_64 GNU/Linux
> 
> [root at node16 /]# yum list installed | grep ploop ploop.x86_64
> 1.12-1             @openvz-utils ploop-lib.x86_64     1.12-1
> @openvz-utils
> 
> [root at node16 /]# lsmod | grep ip nf_conntrack_ipv4       9946  2
> nf_nat nf_defrag_ipv4          1531  1 nf_conntrack_ipv4 
> nf_conntrack           80313  4
> vzrst,nf_nat,nf_conntrack_ipv4,vzcpt ip6t_REJECT             4711
> 0 ip6table_mangle         3669  0 ip6table_filter         3033  0 
> iptable_mangle          3493  0 iptable_filter          2937  0 
> xt_multiport            2716  0 ipt_REJECT              2399  0 
> ip_tables              18119  2 iptable_mangle,iptable_filter 
> ip6_tables             18988  2 ip6table_mangle,ip6table_filter 
> ipv6                  322874  3 vzrst,ip6t_REJECT,ip6table_mangle
> 
> 
> ====  DESTINATION NODE  ====
> 
> [root at node17 /]# uname -a Linux node17.xxxxx.com
> 2.6.32-042stab093.4 #1 SMP Mon Aug 11 18:47:39 MSK 2014 x86_64
> x86_64 x86_64 GNU/Linux
> 
> [root at node17 /]# yum list installed | grep ploop ploop.x86_64
> 1.12-1             @openvz-utils ploop-lib.x86_64     1.12-1
> @openvz-utils
> 
> [root at node17 /]# lsmod | grep ip iptable_nat             6302  0 
> nf_nat                 23213  2 iptable_nat,vzrst nf_conntrack_ipv4
> 9946  3 iptable_nat,nf_nat nf_defrag_ipv4          1531  1
> nf_conntrack_ipv4 nf_conntrack           80313  5
> iptable_nat,vzrst,nf_nat,nf_conntrack_ipv4,vzcpt ip6t_REJECT
> 4711  0 ip6table_mangle         3669  0 ip6table_filter
> 3033  0 iptable_mangle          3493  0 iptable_filter
> 2937  0 xt_multiport            2716  0 ipt_REJECT
> 2399  0 ip_tables              18119  3
> iptable_nat,iptable_mangle,iptable_filter ip6_tables
> 18988  2 ip6table_mangle,ip6table_filter ipv6
> 322874  3 vzrst,ip6t_REJECT,ip6table_mangle
> 
> 
> In fact, all the relevant modules are present on the destination
> node AFAICT.  What am I missing here?
> 
> Thanks, Corrado Fiore 
> _______________________________________________ Users mailing list 
> Users at openvz.org https://lists.openvz.org/mailman/listinfo/users
> 

- -- 
Best regards

Kevin Holly - root at hallowe.lt - http://hallowe.lt/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJUBC9IAAoJELAaqP3QtzpMdowH/Rm7A4E/zC855/leVXgJJ8vh
x/e7OEzMaoEmRfd6bYV8BaE26Pt/ejGFpG0+v9Fhjd4C8+5klzskgtMzPRRMSJT5
UkTZ/Mr+4oIZhsS7hf+aQkKTNcosEkScKscpCpcwsWs1+mR2LF62HiS4s/zEBU4M
al+/9F6egIVp8+qdEDtWeiX+aB6QeSqvRvcPNKNyXRLZBKDbBnCHQWIassl520yK
EU5I08n+ct4edCc4BhZKXHpj7/tD35blwBfjsLy54S4iLMKG7XX0qPEAHZxzDk9K
cTWar8ZerTQNH0q9fxgH18mYBXV1gguedtS9ofsBFZN+a9uew566WTMXC1VDUMg=
=rw48
-----END PGP SIGNATURE-----


More information about the Users mailing list