<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<br>
<div class="moz-cite-prefix">On 07/23/2015 06:22 AM, Сергей Мамонов
wrote:<br>
</div>
<blockquote
cite="mid:CAG2oxtqEBH4VeEq+xHVuiSf2xnzmV9bnxypqZA=9DiFe2u53Mw@mail.gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div dir="ltr">And many added to bugzilla. And many already fixed
from you and other guys from OpenVZ team.
<div>But the all picture, unfortunately, it has not changed
cardinally, yet. Some people afraid use it, yet.<br>
</div>
<div><br>
</div>
<div>PS And suspend container failed without iptables-save since
2007 year )</div>
<div><a moz-do-not-send="true"
href="https://bugzilla.openvz.org/show_bug.cgi?id=3154">https://bugzilla.openvz.org/show_bug.cgi?id=3154</a><br>
</div>
<div>When with not exist ip6tables-save it work correctly.</div>
</div>
</blockquote>
<br>
All of the official templates have iptables-save binary. If you
create<br>
your own templates, please make sure they have that binary<br>
(even it it's just a symlink to /bin/true).<br>
<br>
There is no other way to save/restore iptables and the kernel is
just being strict.<br>
It's a feature, not a bug.<br>
<br>
Similar thing, a container without /sbin/init can not be started,
and it's not a bug.<br>
<br>
</body>
</html>