Package: netfilter-persistent
Version: 1.0.3
Followup-For: Bug #780738
-- System Information:
Debian Release: 8.0
APT prefers testing-updates
APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages netfilter-persistent depends on:
ii init-system-helpers 1.22
ii lsb-base 4.1+Debian13+nmu1
netfilter-persistent recommends no packages.
netfilter-persistent suggests no packages.
-- no debconf information
If IPv6 is disabled, then netfilter-persistent should fail to attempt to load
any rules.v6 file, regardless of their existence, because otherwise failures
cascade into many other places.
(systemd believes it is in a degraded state due to service failure, needrestart
fails to run from dpkg failures related...)
Please shortcircuit any IPv6 conditionals based upon /proc/sys/net/ipv6
non-existence as recommended by original bug report.
sdowdy-jessie-vm:~# cat /proc/cmdline
BOOT_IMAGE=/boot/vmlinuz-3.16.0-4-amd64
root=UUID=797c2b0f-fb63-4857-9b73-f67a9d4eed31 ro ipv6.disable=1
sdowdy-jessie-vm:~# systemctl status netfilter-persistent
* netfilter-persistent.service - netfilter persistent configuration
Loaded: loaded (/lib/systemd/system/netfilter-persistent.service;
enabled)
Active: failed (Result: exit-code) since Mon 2015-04-20 16:58:50 MDT;
56s ago
Process: 20901 ExecStart=/usr/sbin/netfilter-persistent start
(code=exited, status=1/FAILURE)
Main PID: 20901 (code=exited, status=1/FAILURE)
Apr 20 16:58:50 sdowdy-jessie-vm netfilter-persistent[20901]: run-parts:
executing /usr/share/netfilter-persistent/plugins.d/15-ip4tables start
Apr 20 16:58:50 sdowdy-jessie-vm netfilter-persistent[20901]: run-parts:
executing /usr/share/netfilter-persistent/plugins.d/25-ip6tables start
Apr 20 16:58:50 sdowdy-jessie-vm netfilter-persistent[20901]: run-parts:
/usr/share/netfilter-persistent/plugins.d/25-ip6tables exited with return code 2
Apr 20 16:58:50 sdowdy-jessie-vm systemd[1]: netfilter-persistent.service:
main process exited, code=exited, status=1/FAILURE
Apr 20 16:58:50 sdowdy-jessie-vm systemd[1]: Failed to start netfilter
persistent configuration.
Apr 20 16:58:50 sdowdy-jessie-vm systemd[1]: Unit
netfilter-persistent.service entered failed state.
file /etc/iptables/rules.v6 accidentally created when not thinking in dpkg
dialog during package updates by asking to save IPv6 rules.
dowdy-jessie-vm:~# cat /etc/iptables/rules.v6
# Generated by ip6tables-save v1.4.21 on Tue Dec 9 20:17:39 2014
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT
# Completed on Tue Dec 9 20:17:39 2014
aptitude safe-upgrade with needrestart borks:
needrestart is being skipped since dpkg has failed
E: Sub-process /usr/bin/dpkg returned an error code (1)
Failed to perform requested operation on package. Trying to recover:
Setting up netfilter-persistent (1.0.3) ...
update-rc.d: warning: start and stop actions are no longer supported;
falling back to defaults
Job for netfilter-persistent.service failed. See 'systemctl status
netfilter-persistent.service' and 'journalctl -xn' for details.
invoke-rc.d: initscript netfilter-persistent, action "start" failed.
dpkg: error processing package netfilter-persistent (--configure):
subprocess installed post-installation script returned error exit status 1
dpkg: dependency problems prevent configuration of iptables-persistent:
iptables-persistent depends on netfilter-persistent (= 1.0.3); however:
Package netfilter-persistent is not configured yet.
dpkg: error processing package iptables-persistent (--configure):
dependency problems - leaving unconfigured
Errors were encountered while processing:
netfilter-persistent
iptables-persistent
Current status: 39 updates [-552].
sdowdy-jessie-vm:~# systemctl is-system-running
degraded
sdowdy-jessie-vm:~# systemctl list-units --state=,failed, --no-legend
netfilter-persistent.service loaded failed failed netfilter persistent
configuration
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
