CCv0: iptables command fails unable to acquire the xtables lock

[surajssd]

The CI kata-containers-CCv0-ubuntu-20.04_sev-x86_64-CC_SEV_CRI_CONTAINERD_K8S-PR is failing with the following error:

Another app is currently holding the xtables lock. Perhaps you want to use the -w option?

Full set of logs and sample run is here:

...
09:24:56 [init.sh:34] INFO: Taint 'NoSchedule' is found. Untaint the node so pods can be scheduled.
09:24:56 node/amd-coco-ci-ubuntu2004-001 untainted
09:24:56 INFO: Run tests
09:24:56 1..5
09:25:14 not ok 1 setup_file failed
09:25:14 # (from function `configure_cc_containerd' in file confidential/../../confidential/lib.sh, line 230,
09:25:14 #  from function `setup_file' in test file confidential/sev.bats, line 57)
09:25:14 #   `configure_cc_containerd "${saved_containerd_conf_file}"' failed with status 4
09:25:14 # Installing required packages...
09:25:14 #
09:25:14 # WARNING: apt does not have a stable CLI interface. Use with caution in scripts.
09:25:14 #
09:25:14 # Reading package lists...
09:25:14 # Building dependency tree...
09:25:14 # Reading state information...
09:25:14 # cpuid is already the newest version (20200211-1).
09:25:14 # docker-compose is already the newest version (1.25.0-1).
09:25:14 # mysql-client is already the newest version (8.0.34-0ubuntu0.20.04.1).
09:25:14 # jq is already the newest version (1.6-1ubuntu0.20.04.1).
09:25:14 # python3-pip is already the newest version (20.0.2-5ubuntu1.9).
09:25:14 # The following packages were automatically installed and are no longer required:
09:25:14 #   libpython2-stdlib libpython2.7-minimal libpython2.7-stdlib python2
09:25:14 #   python2-minimal python2.7 python2.7-minimal
09:25:14 # Use 'sudo apt autoremove' to remove them.
09:25:14 # The following packages will be REMOVED:
09:25:14 #   python-is-python2
09:25:14 # The following NEW packages will be installed:
09:25:14 #   python-is-python3
09:25:14 # 0 upgraded, 1 newly installed, 1 to remove and 3 not upgraded.
09:25:14 # Need to get 0 B/2,364 B of archives.
09:25:14 # After this operation, 0 B of additional disk space will be used.
09:25:14 # (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 164258 files and directories currently installed.)
09:25:14 # Removing python-is-python2 (2.7.17-4) ...
09:25:14 # Selecting previously unselected package python-is-python3.
09:25:14 # (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 164254 files and directories currently installed.)
09:25:14 # Preparing to unpack .../python-is-python3_3.8.2-4_all.deb ...
09:25:14 # Unpacking python-is-python3 (3.8.2-4) ...
09:25:14 # Setting up python-is-python3 (3.8.2-4) ...
09:25:14 # WARNING: The directory '/home/jenkins/.cache/pip' or its parent directory is not owned or is not writable by the current user. The cache has been disabled. Check the permissions and owner of that directory. If executing pip with sudo, you may want sudo's -H flag.
09:25:14 # Requirement already satisfied: sev-snp-measure in /home/jenkins/.local/lib/python3.8/site-packages (0.0.3)
09:25:14 # time="2023-09-06T16:25:04Z" level=fatal msg="getting status of runtime: rpc error: code = Unknown desc = server is not initialized yet"
09:25:14 # time="2023-09-06T16:25:09Z" level=fatal msg="getting status of runtime: rpc error: code = Unknown desc = server is not initialized yet"
09:25:14 # Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
09:25:14 # /home/jenkins/workspace/kata-containers-CCv0-ubuntu-20.04_sev-x86_64-CC_SEV_CRI_CONTAINERD_K8S-PR/go/src/github.com/kata-containers/tests/integration/kubernetes/confidential/../../confidential/lib.sh: line 406: cd: /tmp/simple-kbs/simple-kbs: No such file or directory
09:25:14 # bats warning: Executed 1 instead of expected 5 tests
09:25:14 [run_kubernetes_tests.sh:153] ERROR: bats confidential/sev.bats
09:25:14 INFO: Run the cleanup routine
...