Ubuntu
shorewall package

shorewall systemd service not enabled on install

Bug #1571972 reported by Stephen Warren
28
This bug affects 6 people
Affects Status Importance Assigned to Milestone
One Hundred Papercuts
Confirmed
Medium
Unassigned
shorewall (Ubuntu)
Confirmed
Medium
Unassigned

Bug Description

The postint script doesn't enable the systemd service on install, which leads at least inexperienced systemd users like myself to spend a lot of time trying to work out why shorewall doesn't start at boot. I'm pretty sure all the other packages I installed (e.g. apache2, sshd, hostapd, dovecot, ...) all enable their services automatically.

I believe this is because of the following diff in the DEBIAN/* files:

[swarren@sprint shorewall]$ diff -u debian/extracted/DEBIAN/postinst ubuntu-xenial/extracted/DEBIAN/postinst
--- debian/extracted/DEBIAN/postinst 2016-03-31 10:59:35.000000000 -0600
+++ ubuntu-xenial/extracted/DEBIAN/postinst 2016-01-22 04:10:26.000000000 -0700
@@ -44,7 +44,6 @@
                     fi
                 elif [ -x "/usr/bin/deb-systemd-invoke" ] && [ -f "/lib/systemd/system/shorewall.service" ]
                 then
- deb-systemd-helper enable shorewall.service
                     deb-systemd-invoke restart shorewall.service
                 fi
             else
[swarren@sprint shorewall]$ diff -u debian/extracted/DEBIAN/prerm ubuntu-xenial/extracted/DEBIAN/prerm
--- debian/extracted/DEBIAN/prerm 2016-03-31 10:59:35.000000000 -0600
+++ ubuntu-xenial/extracted/DEBIAN/prerm 2016-01-22 04:10:26.000000000 -0700
@@ -13,7 +13,6 @@
             fi
         elif [ -x "/usr/bin/deb-systemd-invoke" ] && [ -f "/lib/systemd/system/shorewall.service" ]
         then
- deb-systemd-helper disable shorewall.service
             deb-systemd-invoke stop shorewall.service
         fi
         ;;

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: shorewall 5.0.4-1
ProcVersionSignature: Ubuntu 4.4.0-18.34-generic 4.4.6
Uname: Linux 4.4.0-18-generic x86_64
NonfreeKernelModules: nvidia_uvm nvidia_modeset nvidia
ApportVersion: 2.20.1-0ubuntu2
Architecture: amd64
CurrentDesktop: XFCE
Date: Mon Apr 18 23:43:08 2016
InstallationDate: Installed on 2016-03-03 (47 days ago)
InstallationMedia: Ubuntu 16.04 LTS "Xenial Xerus" - Alpha amd64 (20160122.2)
PackageArchitecture: all
SourcePackage: shorewall
UpgradeStatus: No upgrade log present (probably fresh install)
modified.conffile..etc.shorewall.conntrack: [inaccessible: [Errno 13] Permission denied: '/etc/shorewall/conntrack']
modified.conffile..etc.shorewall.params: [inaccessible: [Errno 13] Permission denied: '/etc/shorewall/params']

Revision history for this message
Stephen Warren (srwarren) wrote :
Revision history for this message
Stephen Warren (srwarren) wrote :

The link to the Debian source package commit that fixed this is:

https://sourceforge.net/p/shorewall/debian/ci/84faab9917c3f483e9f2cc22ed7dd06812d561b0/

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in shorewall (Ubuntu):
status: New → Confirmed
Alberto Salvia Novella (es20490446e)
Changed in shorewall (Ubuntu):
importance: Undecided → Medium
Changed in hundredpapercuts:
status: New → Confirmed
importance: Undecided → Medium
Revision history for this message
Brian Burch (brian-pingtoo) wrote :

This bug applies to both shorewall and shorewall6. It is a known bug in the shorewall installer for debian.

Proof: systemctl is-enabled shorewall (displays disabled)

Circumvention: sudo systemctl enable shorewall

The current package in the xenial repository is 5.0.4-1. The latest stable release of shorewall is 5.0.12.

Scott Emmons (lscotte)
summary: - systemd service not enabled on install
+ shorewall systemd service not enabled on install
Revision history for this message
Oleg Moiseichuk (berroll) wrote :

This bug still present in Kubuntu 20.04. Shorewall package version: 5.2.3.4-1

> systemctl is-enabled shorewall.service
disabled

> systemctl status shorewall.service
● shorewall.service - Shorewall IPv4 firewall
     Loaded: loaded (/lib/systemd/system/shorewall.service; disabled; vendor preset: enabled)
     Active: inactive (dead)

Manual enabling fixes the issue:
> sudo systemctl enable shorewall.service
 Synchronizing state of shorewall.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable shorewall
Created symlink /etc/systemd/system/basic.target.wants/shorewall.service → /lib/systemd/system/shorewall.service.

Paul White (paulw2u)
tags: added: focal
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.