openshift-node service fails to start due to xtables lock

Solution In Progress - Updated -

Issue

Openshift-node service fails after reboot. You have to wait some time until it can be started:

# systemctl status openshift-node
openshift-node.service - OpenShift Node
   Loaded: loaded (/usr/lib/systemd/system/openshift-node.service; enabled)
  Drop-In: /usr/lib/systemd/system/openshift-node.service.d
           └─openshift-sdn-ovs.conf
   Active: failed (Result: exit-code) since Tue 2015-09-22 12:22:22 CEST; 2min 22s ago
     Docs: https://github.com/openshift/origin
  Process: 2565 ExecStart=/usr/bin/openshift start node --config=${CONFIG_FILE} $OPTIONS (code=exited, status=255)
 Main PID: 2565 (code=exited, status=255)

Sep 22 12:22:22 node1.demo.lan openshift-node[2565]: + ip route add 10.10.0.0/16 dev tun0 proto kernel scope link
Sep 22 12:22:22 node1.demo.lan systemd[1]: openshift-node.service: main process exited, code=exited, status=255/n/a
Sep 22 12:22:22 node1.demo.lan systemd[1]: Unit openshift-node.service entered failed state.

journald logs contian errors related to xtables lock

Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: ++ iptables -nvL INPUT --line-numbers
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: ++ grep 'state RELATED,ESTABLISHED'
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: ++ awk '{print $1}'
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: + lineno=
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: + iptables -I INPUT -p udp -m multiport --dports 4789 -m comment --comment '001 vxlan incoming' -j ACCEPT
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: E0930 12:22:22.222222    2587 kube.go:39] Error executing setup script.

Environment

  • OpenShift Enterprise 3.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In