{"action":"created","issue":{"url":"https://api.github.com/repos/lxc/lxd/issues/1978","repository_url":"https://api.github.com/repos/lxc/lxd","labels_url":"https://api.github.com/repos/lxc/lxd/issues/1978/labels{/name}","comments_url":"https://api.github.com/repos/lxc/lxd/issues/1978/comments","events_url":"https://api.github.com/repos/lxc/lxd/issues/1978/events","html_url":"https://github.com/lxc/lxd/issues/1978","id":152203080,"number":1978,"title":"iptables-save does not work inside lxd containers","user":{"login":"pgassmann","id":460192,"avatar_url":"https://avatars.githubusercontent.com/u/460192?v=3","gravatar_id":"","url":"https://api.github.com/users/pgassmann","html_url":"https://github.com/pgassmann","followers_url":"https://api.github.com/users/pgassmann/followers","following_url":"https://api.github.com/users/pgassmann/following{/other_user}","gists_url":"https://api.github.com/users/pgassmann/gists{/gist_id}","starred_url":"https://api.github.com/users/pgassmann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pgassmann/subscriptions","organizations_url":"https://api.github.com/users/pgassmann/orgs","repos_url":"https://api.github.com/users/pgassmann/repos","events_url":"https://api.github.com/users/pgassmann/events{/privacy}","received_events_url":"https://api.github.com/users/pgassmann/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2016-05-01T14:53:45Z","updated_at":"2016-05-05T03:54:23Z","closed_at":"2016-05-01T18:21:43Z","body":"# Issue description\r\n\r\n`iptables-save` command returns no output while `iptables -nL` works as expected\r\n\r\n`iptables-save` is required to manage firewall with Puppet inside the containers, as puppet relies on its output for deciding with which order it should add a rule. Currently, the last rule drop all gets added at position 0 which will instantly block all traffic to that container.\r\n\r\n# Steps to reproduce\r\n\r\n 1. create a new container `lxc launch ubuntu:xenial iptables-test`\r\n 2. Enter container: `lxc exec iptables-test -- bash`\r\n 3. Add iptable rule `iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT`\r\n 4. List rules: `iptables -nL`\r\n 5. execute `iptables-save`\r\n 5. No output is returned\r\n\r\n# Required information\r\n\r\n * Distribution: Ubuntu 16.04 Xenial\r\n * The output of \"lxc info\" or if that fails:\r\napicompat: 0\r\nauth: trusted\r\nenvironment:\r\n  addresses: []\r\n  architectures:\r\n  - x86_64\r\n  - i686\r\n  driver: lxc\r\n  driverversion: 2.0.0\r\n  kernel: Linux\r\n  kernelarchitecture: x86_64\r\n  kernelversion: 4.4.0-21-generic\r\n  server: lxd\r\n  serverpid: 9073\r\n  serverversion: 2.0.0\r\n  storage: btrfs\r\n  storageversion: \"4.4\"\r\n\r\n   * Storage backend in use: Btrfs\r\n"},"comment":{"url":"https://api.github.com/repos/lxc/lxd/issues/comments/217071996","html_url":"https://github.com/lxc/lxd/issues/1978#issuecomment-217071996","issue_url":"https://api.github.com/repos/lxc/lxd/issues/1978","id":217071996,"user":{"login":"hallyn","id":1359441,"avatar_url":"https://avatars.githubusercontent.com/u/1359441?v=3","gravatar_id":"","url":"https://api.github.com/users/hallyn","html_url":"https://github.com/hallyn","followers_url":"https://api.github.com/users/hallyn/followers","following_url":"https://api.github.com/users/hallyn/following{/other_user}","gists_url":"https://api.github.com/users/hallyn/gists{/gist_id}","starred_url":"https://api.github.com/users/hallyn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hallyn/subscriptions","organizations_url":"https://api.github.com/users/hallyn/orgs","repos_url":"https://api.github.com/users/hallyn/repos","events_url":"https://api.github.com/users/hallyn/events{/privacy}","received_events_url":"https://api.github.com/users/hallyn/received_events","type":"User","site_admin":false},"created_at":"2016-05-05T03:54:23Z","updated_at":"2016-05-05T03:54:23Z","body":"I'll take a look, but it's not my highest priority.  Shout if you feel it is somewhat urgent."}}