Rancher 2.0 works fine with ipsec but not with vxlan:
The r-core-services-vxlan-router does not start:
Oct 16 16:02:05 worker-node-01 dockerd[894]: time="2017-10-16T16:02:05.965035618+02:00" level=error msg="containerd: start container" error="oci runtime error: sysctl \"io.rancher.container.orchestration\" is not in a separate kernel namespace\n" id=896d212dd9673e65972577ee79e10f3c80c2b795d95918639a40fcaf63571b13
Oct 16 16:02:05 worker-node-01 dockerd[894]: time="2017-10-16T16:02:05.969648164+02:00" level=error msg="Create container failed with error: invalid header field value \"oci runtime error: sysctl \\\"io.rancher.container.orchestration\\\" is not in a separate kernel namespace\\n\""
Oct 16 16:02:06 worker-node-01 dockerd[894]: time="2017-10-16T16:02:06.016641519+02:00" level=error msg="Handler for POST /v1.24/containers/896d212dd9673e65972577ee79e10f3c80c2b795d95918639a40fcaf63571b13/start returned error: invalid header field value \"oci runtime error: sysctl \\\"io.rancher.container.orchestration\\\" is not in a separate kernel namespace\\n\""
Oct 16 16:02:06 worker-node-01 dockerd[894]: time="2017-10-16T16:02:06.020529115+02:00" level=error msg="Handler for POST /v1.24/containers/896d212dd9673e65972577ee79e10f3c80c2b795d95918639a40fcaf63571b13/kill returned error: Cannot kill container 896d212dd9673e65972577ee79e10f3c80c2b795d95918639a40fcaf63571b13: Container 896d212dd9673e65972577ee79e10f3c80c2b795d95918639a40fcaf63571b13 is not running"
Does someone have an idea or documentation to configure it ?