calico-compute postinst script should be retired, or at least survive failures
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
networking-calico |
New
|
Undecided
|
Unassigned |
Bug Description
Copy of https:/
It makes the calico-compute package uninstallable in a docker build (no iptables), and it's not as good as fixing the issues up at runtime anyway.
Ideally we'd get rid of the script, failing that allowing the postinst scripts to fail without aborting installation would make dockerisation possible.
https:/
If memory serves the DHCP checksum-fill rule isn't needed for Kilo and Liberty anyway, and we just needed to properly backport the fix to Icehouse / Juno.
The sysctls might be better set up on Felix startup (concern: will this work if Felix is running inside a container or that part of the filesystem emulated?).