https://bugzilla.redhat.com/show_bug.cgi?id=1033606
--- Comment #15 from Josh Poimboeuf jpoimboe@redhat.com ---
The debug trace you posted seemed to show that docker0 already existed. So what I'm still confused about is how is the the docker0 device getting created to start with? It looks like somebody created docker0 without setting up its needed iptables rules.
I wouldn't assume this, since the rules are executed no matter if the docker0 interface is started up or not:
https://github.com/dotcloud/docker/blob/v0.7.0/iptables/iptables.go#L105
This bridge was created by running the systemd service, no other tool created it.
Actually the rules that seem to be missing are the ones in the FORWARD table, which are created whenever the docker0 bridge is created:
https://github.com/dotcloud/docker/blob/v0.7.0/network.go#L180