axsh/wakame-vdc — pull request #190 by hansode (2013-03-21 02:40:22+00:00)
Title: Feature vmapp lxc ignore sysctl

### keeping lxc host sysctl params.

conclusion:
* should flush lxc container /etc/sysctl.ctl

current issues:

* netfilter disabled on bridges on lxc host.
* lxc system container will overwrite lxc host parameter even if running sysctl in a lxc container.
* unless running flush a lxc container /etc/sysctl.ctl, the lxc host parameters will be set to rhel6 default value.

rhel6 defualt net.bridge.bridge-nf-call configuration:
```
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
```

netfilter(security groups) requirements

```
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-arptables = 1
```

because need to avoid to overwrite lxc host sysctl in a lxc container at least system vm.

solution:
* flushing /etc/sysctl.ctl
* `lxc-container$ : > /etc/sysctl.ctl`