neutron-vpn-netns-wrapper missing in Ubuntu Package

Can you elaborate more on the issue? Are you running under DevStack, or is this an openstack installation?

Are you using openstack package from Ubuntu? If so, I'm not sure when the distro would have support for Strongswan in relationship with the release.

This is an openstack installation on Ubuntu 14.04 LTS

cat /etc/apt/sources.list.d/cloudarchive-kilo.list
deb http://ubuntu-cloud.archive.canonical.com/ubuntu trusty-updates/kilo main

dpkg -l | grep -i openstack
ii neutron-common 1:2015.1.0-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - common
ii neutron-dhcp-agent 1:2015.1.0-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - DHCP agent
rc neutron-l3-agent 1:2014.2-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - l3 agent
ii neutron-lbaas-agent 1:2015.1.0-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - LBaaS agent
ii neutron-metadata-agent 1:2015.1.0-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - metadata agent
ii neutron-plugin-ml2 1:2015.1.0-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - ML2 plugin
ii neutron-plugin-openvswitch-agent 1:2015.1.0-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - Open vSwitch plugin agent
ii neutron-vpn-agent 1:2015.1.0-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - VPN agent
ii python-barbicanclient 3.0.2-0ubuntu2~cloud0 all OpenStack Key Management API client - Python 2.x
ii python-keystoneclient 1:1.2.0-0ubuntu1~cloud0 all Client library for OpenStack Identity API
ii python-keystonemiddleware 1.5.0-0ubuntu1~cloud0 all Middleware for OpenStack Identity (Keystone) - Python 2.x
ii python-neutron 1:2015.1.0-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - Python library
ii python-neutron-fwaas 2015.1.0-0ubuntu1~cloud0 all Firewall-as-a-Service driver for OpenStack Neutron
ii python-neutron-lbaas 1:2015.1.0-0ubuntu1~cloud0 all Loadbalancer-as-a-Service driver for OpenStack Neutron
ii python-neutron-vpnaas 1:2015.1.0-0ubuntu1~cloud0 all VPN-as-a-Service driver for OpenStack Neutron
ii python-neutronclient 1:2.3.11-0ubuntu1~cloud0 all client - Neutron is a virtual network service for Openstack
ii python-novaclient 1:2.22.0-0ubuntu1~cloud0 all client library for OpenStack Compute API
ii python-oslo-concurrency 1.8.0-0ubuntu1~cloud0 all concurrency and locks for OpenStack projects - Python 2.x
ii python-oslo-config 1:1.9.3-0ubuntu1~cloud0 all Common code for Openstack Projects (configuration API) - Python 2.x
ii python-oslo-context 0.2.0-0ubuntu1~cloud0 all WSGI context helpers for OpenStack - Python 2.x
ii python-oslo-log 1.0.0-0ubuntu1~cloud0 all OpenStack l...

Status changed to 'Confirmed' because the bug affects multiple users.

I have a same problem under Ubuntu 14.04 and Openstack Kilo from Ubuntu Cloud repo.

Part of the log file:

2015-07-21 12:42:52.154 11311 ERROR neutron.agent.linux.utils [-]
Command: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', 'exec', 'qrouter-e03c565d-9667-4fd4-a239-b9d92e43678f', 'neutron-vpn-netns-wrapper', '--mount_paths=/etc:/var/lib/neutron/ipsec/e03c565d-9667-4fd4-a239-b9d92e43678f/etc,/var/run:/var/lib/neutron/ipsec/e03c565d-9667-4fd4-a239-b9d92e43678f/var/run', '--cmd=ipsec,status']
Exit code: 99
Stdin:
Stdout:
Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qrouter-e03c565d-9667-4fd4-a239-b9d92e43678f neutron-vpn-netns-wrapper --mount_paths=/etc:/var/lib/neutron/ipsec/e03c565d-9667-4fd4-a239-b9d92e43678f/etc,/var/run:/var/lib/neutron/ipsec/e03c565d-9667-4fd4-a239-b9d92e43678f/var/run --cmd=ipsec,status (no filter matched)

vpnaas.filters

ip: IpFilter, ip, root
ip_exec: IpNetnsExecFilter, ip, root
ipsec: CommandFilter, ipsec, root
keepalived: IpNetnsExecFilter, keepalived, root
neutron_netns_wrapper: CommandFilter, neutron-vpn-netns-wrapper, root
neutron_netns_wrapper_local: CommandFilter, /usr/local/bin/neutron-vpn-netns-wrapper, root

I tried and the command 'neutron-vpn-netns-wrapper' is missing.

The neutron-vpn-agent package contains:
# dpkg -L neutron-vpn-agent

/.
/lib
/lib/systemd
/lib/systemd/system
/lib/systemd/system/neutron-vpn-agent.service
/usr
/usr/share
/usr/share/doc
/usr/share/doc/neutron-vpn-agent
/usr/share/doc/neutron-vpn-agent/copyright
/usr/bin
/usr/bin/neutron-vpn-agent
/etc
/etc/init.d
/etc/init.d/neutron-vpn-agent
/etc/neutron
/etc/neutron/neutron_vpnaas.conf
/etc/neutron/vpn_agent.ini
/etc/neutron/rootwrap.d
/etc/neutron/rootwrap.d/vpnaas.filters
/etc/init
/etc/init/neutron-vpn-agent.conf
/usr/share/doc/neutron-vpn-agent/changelog.Debian.gz

This bug was fixed in the package neutron-vpnaas - 2:7.0.0~b1-0ubuntu3

---------------
neutron-vpnaas (2:7.0.0~b1-0ubuntu3) wily; urgency=medium

  * d/neutron-vpn-agent.install: Install neutron-vpn-netns-wrapper
    (LP: #1456335).
  * d/control: Add runtime dependency on conntrack (LP: #1447803).

 -- James Page <email address hidden> Fri, 24 Jul 2015 12:17:18 +0100

Status changed to 'Confirmed' because the bug affects multiple users.