[Starlingx-discuss] Controller-0 could not download images

[open infra]

iptables rules http://paste.openstack.org/show/802058/

I even added few entries in /etc/hosts files and to get the
ansible-playbook running, but no luck.
http://paste.openstack.org/show/802059/

outpit of netstat http://paste.openstack.org/show/802060/

On Wed, Jan 27, 2021 at 10:07 PM open infra <openinfradn at gmail.com> wrote:

> Hi,
>
> I have installed controller-0 and bootstrap was failed at 'Download images
> and push to local registry'.
>
> I noticed that, dns resolution is failing in the controller but not in the
> host.
> controller-0:~$ dig docker.io
>
> ; <<>> DiG 9.9.4-RedHat-9.9.4-72.el7 <<>> docker.io
> ;; global options: +cmd
> ;; connection timed out; no servers could be reached
> controller-0:~$ ping quay.io
> PING quay.io (3.233.133.41) 56(84) bytes of data.
>
> --- quay.io ping statistics ---
> 3 packets transmitted, 0 received, 100% packet loss, time 2054ms
>
> I can ping from the controller.
> I have added following entries to iptables but no luck.
>
> sudo iptables -A OUTPUT -p udp -d 8.8.4.4,8.8.8.8 --dport 53 -m state
> --state NEW,ESTABLISHED -j ACCEPT
> sudo iptables -A INPUT  -p udp -s 8.8.4.4,8.8.8.8 --sport 53 -m state
> --state ESTABLISHED     -j ACCEPT
> sudo iptables -A OUTPUT -p tcp -d 8.8.4.4,8.8.8.8 --dport 53 -m state
> --state NEW,ESTABLISHED -j ACCEPT
> sudo iptables -A INPUT  -p tcp -s 8.8.4.4,8.8.8.8 --sport 53 -m state
> --state ESTABLISHED     -j ACCEPT
>
> I am not sure if my network configuration is correct.
>
> controller-0:~$ ip route list
> default via 10.10.10.1 dev ens3
> 10.10.10.0/24 dev ens3 proto kernel scope link src 10.10.10.3
> 169.254.0.0/16 dev eth1000 scope link metric 1002
> 169.254.0.0/16 dev eth1001 scope link metric 1003
> 169.254.0.0/16 dev ens3 scope link metric 1004
> 169.254.0.0/16 dev ens4 scope link metric 1005
> 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
>
> Following is my local routing configuration and host IP is 192.168.10.100.
> $ ip route list
> default via 192.168.172.3 dev eno1 proto static metric 100
> 10.10.10.0/24 dev stxbr1 proto kernel scope link src 10.10.10.1
> 192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1
> 192.168.10.0/24 dev eno1 proto kernel scope link src 192.168.10.100
> metric 100
>
> IP -a results available at http://paste.openstack.org/show/802048/
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20210128/f6e8c8da/attachment.html>