[Pkg-utopia-maintainers] Bug#981547: Bug#981547: python3-firewall: firewalld ipset not usable

[Michael Biebl]

Hello

Am 01.02.21 um 09:56 schrieb Lorenzo Benazzi:
> Package: python3-firewall
> Version: 0.9.3-1
> Severity: normal
> 
> Dear Maintainer,
> 
>    I was following this guide to setup ipset: https://www.linode.com/community/questions/11143/top-tip-firewalld-and-ipset-country-blacklist
> 
>    In /var/log/firewall, I've got: WARNING: ipset not usable, disabling ipset usage in firewall.
>    # which ipset  /usr/sbin/ipset
>    After looking ad /usr/lib/python3/dist-packages/firewall, I've tried:  # ln -s /usr/sbin/ipset /sbin/ipset  # systemctl restart firewalld.service
>    It looks like that firewalld is looking for /sbin/ipset and not /usr/sbin/ipset
> 

Appears to be a recent change in ipset, which broke firewalld:


ipset (7.10-1) unstable; urgency=medium

...

   * [e44a46b] Fix the breakout-link lintian warning
     * Install the binary and library in /usr/sbin and
       /usr/lib/<arch triplet> respectively
       The lintian warning about the breakout-link of
       usr/lib/<arch triplet>/libipset.so points to
       lib/<arch triplet>/libipset.so.13.x.x, install in the proper location
       would be a solution
...

  -- Neutron Soutmun <neutrons at debian.org>  Sat, 30 Jan 2021 18:31:37 +0700


https://salsa.debian.org/pkg-netfilter-team/pkg-ipset/-/commit/e44a46baec5a454448ba2edd0e2c7895656eaab6


@Neutron: Since this potentially breaks reverse dependencies of ipset, 
you should probably notify them about this change. Unfortunately, you 
can't yet expect, that users have a merged-usr system, where such a 
change would cause no breakage.

Regards,
Michael

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20210201/12f380bc/attachment.sig>