Skip to content

Commit

Permalink
B #6299: Increase delay before ipset destroy
Browse files Browse the repository at this point in the history
This will give kernel some more time to clean up before attemting to
destroy the associated ipsets. Otherwise it may fail with: "Set cannot be
destroyed: it is in use by a kernel component"
  • Loading branch information
brodriguez-opennebula authored and rsmontero committed Sep 21, 2023
1 parent c1a0e5b commit 253e2d3
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/vnm_mad/remotes/lib/security_groups_iptables.rb
Original file line number Diff line number Diff line change
Expand Up @@ -616,7 +616,7 @@ def self.nic_deactivate(vm, nic)
remove_chains_6.each {|c| commands.add :ip6tables, "-X #{c}" }

# delay to allow kernel to clean up
commands.add 'sleep', '0.1'
commands.add 'sleep', '0.5'

ipset_list.lines.each do |line|
if line.match(/^#{chain}(-|$)/)
Expand Down

0 comments on commit 253e2d3

Please sign in to comment.