Bug#607041: linux-image-2.6.32-5-openvz-amd64: amd64 ip6tables broken in OpenVZ VE

Hi

This is a forward of a bug report in the Debian bugtracking system. It is onlt partly included below as the original one is rather long.

Please see http://bugs.debian.org/607041 for more relevant information.

Best regards,

// Ola

------ Part of original bug report in Debian bugtracking system below ----

Package: linux-image-2.6.32-5-openvz-amd64
Version: 2.6.32-29

Hi,

I noticed that on kernel 2.6.32-5-openvz-amd64 (Debian 2.6.32-29), the
amd64 build of ip6tables does not work at all in an OpenVZ VE, but the
i386 build does. Within the OpenVZ host itself though (VE0), both
versions work. So I'm inclined to say this is more likely a kernel/OpenVZ
bug than a bug in ip6tables.

IPv4 iptables works fine in all cases.

I tested this within a OpenVZ VE, which is an amd64 Debian lenny install,
with an i386 chroot inside of it:


# dpkg-query -Wf '${Package}-${Version}_${Architecture}\n' iptables
iptables-1.4.2-6_amd64

# ip6tables -L
FATAL: Could not load /lib/modules/2.6.32-5-openvz-amd64/modules.dep: No
such file or directory
ip6tables v1.4.2: can't initialize ip6tables table `filter': Permission
denied (you must be root)
Perhaps ip6tables or your kernel needs to be upgraded.


# chroot lenny-i386/ dpkg-query -Wf
'${Package}-${Version}_${Architecture}\n' iptables
iptables-1.4.2-6_i386

# chroot lenny-i386/ ip6tables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
...