Setting up ssh containers without internet connection does not work as expected

This problem does not occur every time but I still think it is a blocker. I have a following structure:

root
    root-child
ssh1
    ssh1-child
ssh2
    ssh2-child
broker

where each instance (except for root) has ip tables set up to only allow ssh connection. Basically what I've done (might be more understandable):

1. create 4 instances on openstack (root, ssh1, ssh2, broker)
2. on instances ssh1, ssh2, broker set iptables to this
3. on root get the product (R15), uncomment user in etc/users.properties
4. build our "blank-project" https://gitlab.cee.redhat.com/jboss-fuse-qe/jbossqe-fuse/tree/6.3.x/fuse-tests/fabric-related-tests/blank-project (optional)
5. start fuse
6. fabric:create --resolver localip --global-resolver localip
7. fabric:profile-create --parent default --parent feature-cxf --parent feature-camel --parent mq-client complex-create
8. fabric:profile-edit -f camel-jetty -f camel-jdbc -f camel-amq -f camel-jms -f fabric-cxf -f camel-jaxb -f camel-stream complex-create
9. fabric:profile-edit -f activemq-camel -f camel-cxf -f fabric-cxf-registry -f spring-jdbc -f camel-jetty -f jetty complex-create
10. fabric:profile-edit -b mvn:org.jboss.fuse.qa.test/useless-artifact/1.0 complex-create
11. mq-create --port openwire=11111 testbroker
12. profile-create --parent mq-broker-default.testbroker override
13. profile-edit --pid io.fabric8.mq.fabric.server-testbroker/openwire-port=11112 override
14. fabric:container-create-ssh --user hudson --password redhat --host $1 ssh1
15. fabric:container-create-ssh --profile complex-create --profile feature-camel --user hudson --password redhat --host $1 ssh1
16. fabric:container-create-child root offline-root-child
17. fabric:container-create-child --profile complex-create ssh1 ssh1-child
18. fabric:container-create-child --profile complex-create ssh2 ssh2-child

there will be a reproducer in attached files. It does NOT happen every time with these reproducers but it seems to happen every time using automated test with Fafram. From the latest attempt to reproduce this ssh2-child failed to be created correctly. This was not occurring in the previous patch (R14).

NOTE: Reproducer is done for our openstack instances. It will NOT work on any other machine due to hardcoded paths. In order to run it in different workspace please first modify the paths.
NOTE2: I can provide you with scripts to provision openstack instances on our openstack if you'd like.
NOTE3: Since FaFram is more reliable in reproducing it I will attempt to fix it in order to keep the environments.