Bring back the sleep 10 to wait for docker's iptable rules

See comment in code for further details
2016-01-05 21:11:41 +01:00
parent 98ecc24425
commit fd9dcd065a
1 changed files with 4 additions and 1 deletions
@@ -127,11 +127,14 @@ mkfs.btrfs -L UserHome "${USER_DATA_FILE}"
 echo "${USER_DATA_FILE} ${USER_DATA_DIR} btrfs loop,nosuid 0 0" >> /etc/fstab
 mkdir -p "${USER_DATA_DIR}" && mount "${USER_DATA_FILE}"

-# give docker sometime to start up and create iptables rules
 systemctl daemon-reload
 systemctl enable docker
 systemctl start docker

+# give docker sometime to start up and create iptables rules
+# those rules come in after docker has started, and we want to wait for them to be sure iptables-save has all of them
+sleep 10
+
 # Disable forwarding to metadata route from containers
 iptables -I FORWARD -d 169.254.169.254 -j DROP