-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Wed, May 16, 2018 at 09:17:42PM +0800, Elias Mårtenson wrote: > On 16 May 2018 at 21:14, Marek Marczykowski-Górecki < > [email protected]> wrote: > > ... this log is from 20:47:38. > > > > See for earlier log entries. > > > > You are right. I'm stupid. > > Here's the relevant log. There was indeed an error: > > May 16 20:44:47 sys-firewall qubes-iptables[417]: iptables: Applying > firewall rules: Another app is currently holding the xtables lock. Perhaps > you want to use the -w option?
Here is a hint how to fix this. The problem is that iptables-restore -w is not available in (still supported) Debian jessie, which makes applying this fix a little bit more complex. Independently, it would be interesting to find out what is that "Another app". You can either look at the log and correlate "Starting ..." and "Started ..." messages. Or use `systemd-analyze plot` and look closely what else is running at the time of qubes-iptables startup. Or don't bother, because we already know the fix. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlr8XkIACgkQ24/THMrX 1yzvtQf9HCci9sgA1EMDC3wtdLZt9cJYjZOpZwrPCaPof7uJGJZClN310B7sctiY EhgJMY1FNau/+E6ulF+z0oSkBWOE9bxT7dvc6eyl1ks5CaOfioEXC/aUpq+L7ePM A3zXhSdZGkR0qrD+Qs+3MgkZeZ64rvB/8WSfORYmZR4OIXZHu0VmUcJC82zQvNPi kDIlCf7b3HqGueerjSZsYE6RPEzdADFr7U60RCHePkz8AK2IQo/syGnRL32V6Xjl jyUKar3PaNjAOCnsEnsMXzwy4S9fBYBn/M1Uxs+k+uonXCTFqkOwBpy4VZJpuKMw yCvp2aRLo5FiEqYty+zfxkrdWCIbCQ== =kJg7 -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/20180516163721.GK1291%40mail-itl. For more options, visit https://groups.google.com/d/optout.
