ipt_comment iptables module

[Mathias Gruetzmacher]

hello,

i try to setup a software which requires several iptables modules to install properly. anything went well except the module ipt_comment. i can modprobe without error on the host and have configured the module in /etc/vz/vz.conf. lsmod is not showing the module anywhere, so i assume, it is not loaded successfully.

also, when i start a container, i get
Warning: Unknown iptable module: ipt_comment, skipped

my system is
proxmox-ve-2.6.32: 3.4-173 (running kernel: 2.6.32-44-pve)
pve-manager: 3.4-13 (running version: 3.4-13/4c745357)
pve-kernel-2.6.32-44-pve: 2.6.32-173

does anybody have a suggestion? i tried google without success.

tia,
mathias

 

[Richard]

i try to setup a software which requires several iptables modules to install properly. anything went well except the module ipt_comment. i can modprobe without error on the host and have configured the module in /etc/vz/vz.conf. lsmod is not showing the module anywhere, so i assume, it is not loaded successfully.

What is the content of the .conf file?
Did you load the responsible module in the host by modprobe bbefore starting the container?

Unfortunately there is no explicit advice possible to grant a certain kernel module to a container.

For iptables according to

https://openvz.org/Man/vzctl.8

--netfilter full should be sufficient.

 

[rikardh]

hello,

i try to setup a software which requires several iptables modules to install properly. anything went well except the module ipt_comment. i can modprobe without error on the host and have configured the module in /etc/vz/vz.conf. lsmod is not showing the module anywhere, so i assume, it is not loaded successfully.

also, when i start a container, i get
Warning: Unknown iptable module: ipt_comment, skipped

my system is
proxmox-ve-2.6.32: 3.4-173 (running kernel: 2.6.32-44-pve)
pve-manager: 3.4-13 (running version: 3.4-13/4c745357)
pve-kernel-2.6.32-44-pve: 2.6.32-173

does anybody have a suggestion? i tried google without success.

tia,
mathias

It means that you have the following in your /etc/vz/vz.conf file:
"ipt_comment" and that it is not recognised by OpenVZ.

simply remove the module from the /etc/vz/vz.conf and the issue should be resolved.