openshift-node service fails to start due to xtables lock

Solution In Progress - Updated -

Issue

Openshift-node service fails after reboot. You have to wait some time until it can be started:

# systemctl status openshift-node
openshift-node.service - OpenShift Node
   Loaded: loaded (/usr/lib/systemd/system/openshift-node.service; enabled)
  Drop-In: /usr/lib/systemd/system/openshift-node.service.d
           └─openshift-sdn-ovs.conf
   Active: failed (Result: exit-code) since Tue 2015-09-22 12:22:22 CEST; 2min 22s ago
     Docs: https://github.com/openshift/origin
  Process: 2565 ExecStart=/usr/bin/openshift start node --config=${CONFIG_FILE} $OPTIONS (code=exited, status=255)
 Main PID: 2565 (code=exited, status=255)

Sep 22 12:22:22 node1.demo.lan openshift-node[2565]: + ip route add 10.10.0.0/16 dev tun0 proto kernel scope link
Sep 22 12:22:22 node1.demo.lan systemd[1]: openshift-node.service: main process exited, code=exited, status=255/n/a
Sep 22 12:22:22 node1.demo.lan systemd[1]: Unit openshift-node.service entered failed state.

journald logs contian errors related to xtables lock

Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: ++ iptables -nvL INPUT --line-numbers
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: ++ grep 'state RELATED,ESTABLISHED'
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: ++ awk '{print $1}'
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: + lineno=
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: + iptables -I INPUT -p udp -m multiport --dports 4789 -m comment --comment '001 vxlan incoming' -j ACCEPT
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
Sep 22 12:22:22 node1.demo.lan openshift-node[2587]: E0930 12:22:22.222222    2587 kube.go:39] Error executing setup script.

Environment

  • OpenShift Enterprise 3.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content