Your message dated Tue, 31 Jan 2023 18:06:58 +0000
with message-id <[email protected]>
and subject line Bug#956106: fixed in shorewall 5.2.8-1
has caused the Debian Bug report #956106,
regarding Shorewall does not work with docker
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
956106: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=956106
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: shorewall
Version: 5.2.3.4-1

I tried following the instructions here:

https://shorewall.org/Docker.html

but unfortunately, even with the systemd override it still clobbered my iptables rules, and led to other problems with docker networking.

I rebuilt the debian packages using `5.2.4` (for `shorewall` and `shorewall-core`) and this fixed the problem - docker starts/restarts before/after shorewall, and iptables are preserved correctly.

Debian testing/unstable/experimental all use < 5.2.4 so i would imagine the problem is the same for those versions.

i reported the bug upstream, to hopefully prevent others from wasting time trying to figure why it would not work:

https://gitlab.com/shorewall/debian/-/issues/1

--- End Message ---
--- Begin Message ---
Source: shorewall
Source-Version: 5.2.8-1
Done: Romain Francoise <[email protected]>

We believe that the bug you reported is fixed in the latest version of
shorewall, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Romain Francoise <[email protected]> (supplier of updated shorewall package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 31 Jan 2023 17:42:53 +0100
Source: shorewall
Architecture: source
Version: 5.2.8-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Shorewall Team <[email protected]>
Changed-By: Romain Francoise <[email protected]>
Closes: 588349 932473 956106 959119 960211 971430 971855 986152 1002852
Changes:
 shorewall (5.2.8-1) unstable; urgency=medium
 .
   * Change AUTOHELPERS default value to 'No' (closes: #959119).
   * debian/*.postrm: Fix typos.
   * Upload to unstable.
 .
 shorewall (5.2.8-1~exp1) experimental; urgency=medium
 .
   [ Jeremy Sowden ]
   * New upstream version 5.2.8 (Closes: #588349, #956106, #960211, #971430,
     #986152, #1002852)
     .
     Upstream releases a separate tar-ball for each Shorewall component,
     and in previous releases, each binary Debian package has had its own
     source package corresponding to one of the upstream tar-balls, with
     its packaging managed separately in git.  In order to reduce the
     maintenance effort, in this release all the upstream tar-balls and
     their related packaging have been consolidated to create one source
     package.
   * d/watch
     + bump version to 4
     + use pgpmode=auto
     + use substitution strings in URL
     + use HTTPS URL
     + watch all upstream tar-balls
   * d/gbp.conf
     + default: set debian and upstream branches and tag-formats
     + default: sign tags
     + dch: set commit-msg format.
     + import-orig: set `pristine-tar` to true.
     + import-orig: import upstream sigs
     + add support for importing all upstream tar-balls
   * Remove non-functional debconf templates
   * Update 5.2.3.1-1 packaging for shorewall to support new source layout
     and merge of other components
   * Merge 5.2.3.1-1 packaging for shorewall6
   * Merge 5.2.3.1-1 packaging for shorewall6-lite
   * Merge 5.2.3.1-1 packaging for shorewall-core
   * Merge 5.2.3.1-1 packaging for shorewall-doc
   * Merge 5.2.3.1-1 packaging for shorewall-init
   * Merge 5.2.3.1-1 packaging for shorewall-lite
   * Run wrap-and-sort.
   * d/.gitignore
     + add file to ignore build artefacts
   * d/build-htmldocs:
     + suppress warning if html directory exists
   * d/clean, d/rules:
     + clean up build
   * d/compat, d/control
     + remove compat and add a build-dep on `debhelper-compat = 13` to control.
   * d/control
     + bump Standards-Version to 4.6.2
     + set Rules-Requires-Root: no.
     + change maintainer to [email protected]
     + add myself as uploader.
     + add Romain Francoise to uploaders.
     + update home-page.
     + update Vcs-* fields to point to Salsa
     + replace perl dependency with ${perl:Depends}.
     + remove superfluous perl dependency.
     + remove obsolete packages from `Replaces:`
     + remove obsolete packages from `Conflicts:`
     + remove obsolete packages from `Depends:`
     + remove obsolete version restrictions from `Depends:`
     + remove obsolete package from `Breaks:`
     + add pre-dep's on `${misc:Pre-Depends}` for
       `invoke-rc.d --skip-systemd-native`.
   * d/control, d/rules
     + add strict versioned dependency on substvars
     + support `nodoc` build-profile
   * d/copyright
     + update and convert to format to DEP-5
     + add myself to debian/*.
   * d/*.dirs
     + trim directories are created by dh or during install
   * d/patches
     + refresh debian config patch
     + add patch to remove deprecated StandardOutput from service files
       (Closes: #971855)
     + add patch to fix `-x` test in init-script (Closes: #932473)
     + add patch to document systemd services
   * d/README.source
     + add a file to explain the new single source package set up
   * d/rules
     + remove redundant `true` statements from overrides.
     + remove unnecessary clean-up commands.
     + remove dh_auto_clean override
     + remove overrides of dh_fixperms: the excluded paths no longer exist.
     + delete empty directories
     + correct spelling of `dh_installinit --only-scripts`.
   * d/rules, d/shorewall.{post,pre}*
     + use dh-generated maint-script snippets to manage shorewall service.
   * d/rules, d/shorewall6.{post,pre}*
     + use dh-generated maint-script snippets to manage shorewall6 service.
   * d/rules, d/shorewall6-lite.prerm
     + use dh-generated maint-script snippets to manage shorewall6-lite service.
   * d/rules
     + use dh-generated maint-script snippets to manage shorewall-init service.
   * d/rules, d/shorewall-lite.prerm
     + use dh-generated maint-script snippets to manage shorewall-lite service.
   * d/*.post*
     + use `set -e` to pacify lintian.
   * d/shorewall.postinst
     + delete code removing obsolete postrm script.
   * d/shorewall.postrm
     + remove clean-up code for obsolete upgrade
   * d/shorewall6-lite.{pre,post}*
     + remove scripts related to upgrading from an ancient version of Shorewall.
   * d/shorewall-lite.{pre,post}*
     + remove scripts related to upgrading from an ancient version of Shorewall.
   * d/shorewall.{lintian-overrides,postinst}
     + remove path from shorewall in postinst.
   * d/shorewall6.{lintian-overrides,postinst}
     + remove path from shorewall6 in postinst.
   * d/shorewall.lintian-overrides
     + rename man-page tag.
     + override report about unusual WantedBy target.
     + update format
     + suppress warning about non-rST action.RST file
     + suppress warning about spare man-page
   * d/shorewall6.lintian-overrides
     + override report about unusual WantedBy target.
     + update format
   * d/shorewall6-lite.lintian-overrides
     + override report about unusual WantedBy target.
     + update format
   * d/shorewall-core.lintian-overrides
     + rename man-page tag.
   * d/shorewall-init.lintian-overrides
     + rename man-page tag.
     + override report about unusual WantedBy target.
     + update format
     + remove init-script override.
   * d/shorewall-lite.lintian-overrides
     + override report about unusual WantedBy target.
     + update format
   * d/source/lintian-overrides
     + add override for non-standard GFDL text.
     + add override for long lines in images and man-pages.
     + add override for missing upstream signature
 .
   [ Romain Francoise ]
   * Add default Salsa CI configuration.
   * debian/gbp.conf: Set default compression to bzip2.
   * debian/rules: We don't want the services to be automatically enabled
     or started, so adjust dh_installinit and dh_installsystemd calls
     accordingly.
   * debian/shorewall{,6}.postinst: Remove.
Checksums-Sha1:
 4459094b70bf63aae4134b984457cb76a036531b 2440 shorewall_5.2.8-1.dsc
 1d6d65a0c7c7c8ed79f7485b1d014a290799abb7 26964 shorewall_5.2.8-1.debian.tar.xz
 d8391f2cdaaebe003e089d7d422c58cf3c418f24 5887 
shorewall_5.2.8-1_source.buildinfo
Checksums-Sha256:
 41eb6984ec999803288f4475c3a95ea4a7e82fc503154a6e3f7e1f92b649e63b 2440 
shorewall_5.2.8-1.dsc
 1f0724f8372e3c3f40248a08e01de52a6998666f417dcc28c2dbace8e12dcda4 26964 
shorewall_5.2.8-1.debian.tar.xz
 f34ceb5cf0bfdc1e6a0913b0d4db87df55c2aa86e654f4d357c7529308ad9792 5887 
shorewall_5.2.8-1_source.buildinfo
Files:
 48e1efa063da5c38c04dc7438834b47d 2440 net optional shorewall_5.2.8-1.dsc
 426ca7623c419fe943919c66ad446be9 26964 net optional 
shorewall_5.2.8-1.debian.tar.xz
 ca1bde53873d063c9d7867bb426fe4ca 5887 net optional 
shorewall_5.2.8-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=PLtp
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to