Hello Am 01.02.21 um 09:56 schrieb Lorenzo Benazzi:
Package: python3-firewall Version: 0.9.3-1 Severity: normalDear Maintainer, I was following this guide to setup ipset: https://www.linode.com/community/questions/11143/top-tip-firewalld-and-ipset-country-blacklist In /var/log/firewall, I've got: WARNING: ipset not usable, disabling ipset usage in firewall. # which ipset /usr/sbin/ipset After looking ad /usr/lib/python3/dist-packages/firewall, I've tried: # ln -s /usr/sbin/ipset /sbin/ipset # systemctl restart firewalld.service It looks like that firewalld is looking for /sbin/ipset and not /usr/sbin/ipset
Appears to be a recent change in ipset, which broke firewalld:
ipset (7.10-1) unstable; urgency=medium
...
* [e44a46b] Fix the breakout-link lintian warning
* Install the binary and library in /usr/sbin and
/usr/lib/<arch triplet> respectively
The lintian warning about the breakout-link of
usr/lib/<arch triplet>/libipset.so points to
lib/<arch triplet>/libipset.so.13.x.x, install in the proper location
would be a solution
...
-- Neutron Soutmun <[email protected]> Sat, 30 Jan 2021 18:31:37 +0700
https://salsa.debian.org/pkg-netfilter-team/pkg-ipset/-/commit/e44a46baec5a454448ba2edd0e2c7895656eaab6
@Neutron: Since this potentially breaks reverse dependencies of ipset,
you should probably notify them about this change. Unfortunately, you
can't yet expect, that users have a merged-usr system, where such a
change would cause no breakage.
Regards, Michael
OpenPGP_signature
Description: OpenPGP digital signature

