Hello

Am 01.02.21 um 09:56 schrieb Lorenzo Benazzi:
Package: python3-firewall
Version: 0.9.3-1
Severity: normal

Dear Maintainer,

   I was following this guide to setup ipset: 
https://www.linode.com/community/questions/11143/top-tip-firewalld-and-ipset-country-blacklist

   In /var/log/firewall, I've got: WARNING: ipset not usable, disabling ipset 
usage in firewall.
   # which ipset  /usr/sbin/ipset
   After looking ad /usr/lib/python3/dist-packages/firewall, I've tried:  # ln 
-s /usr/sbin/ipset /sbin/ipset  # systemctl restart firewalld.service
   It looks like that firewalld is looking for /sbin/ipset and not 
/usr/sbin/ipset


Appears to be a recent change in ipset, which broke firewalld:


ipset (7.10-1) unstable; urgency=medium

...

  * [e44a46b] Fix the breakout-link lintian warning
    * Install the binary and library in /usr/sbin and
      /usr/lib/<arch triplet> respectively
      The lintian warning about the breakout-link of
      usr/lib/<arch triplet>/libipset.so points to
      lib/<arch triplet>/libipset.so.13.x.x, install in the proper location
      would be a solution
...

 -- Neutron Soutmun <[email protected]>  Sat, 30 Jan 2021 18:31:37 +0700


https://salsa.debian.org/pkg-netfilter-team/pkg-ipset/-/commit/e44a46baec5a454448ba2edd0e2c7895656eaab6


@Neutron: Since this potentially breaks reverse dependencies of ipset, you should probably notify them about this change. Unfortunately, you can't yet expect, that users have a merged-usr system, where such a change would cause no breakage.

Regards,
Michael

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to