On Wed, Nov 20, 2024 at 05:35:58PM +0100, Jean-François Bachelet wrote: > Hello Tomas :) > > Le 20/11/2024 à 13:38, to...@tuxteam.de a écrit : > > On Wed, Nov 20, 2024 at 01:19:24PM +0100, Jean-François Bachelet wrote: > > > Hello folks :) > > > > > > I got a machine to look at, so I've issued a 'systemctl status' and see a > > > 'degraded' state. > > > > > > so I've done a 'systemctl status --failed' and see that > > > 'fwlogwatch.service' > > > was never started and shows 'exit code' as reasons... > > > > > > looking at the logs it appears it has never started fine since debian 12 > > > install on this machine... > > Guessing by the package description, fwlogwatch just collects diverse > > firewall logs and (optionally) may take actions. Moreover, the description > > encourages the guess that you might try starting it manually, to see > > what kind of complaints it has? > > it is started by systemd at boot but crash. > > I've tested starting it manualy with 'systemctl start fwlogwatch' but or > reboot after disabling ufw, but no changes.
I was proposing you start it "directly" to perhaps see better what's
going wrong...
> it seems to be installed by default, but if it not work what's the point ?
> :/
>
> > It seems to have a man page.
>
> checked it, nothing special in it, the only thing turned on is the
> 'fwlogwatch.pid' file that must be found by systemd in /run...
>
> after check that file hasn't be created at installation time...
>
> so I've 'touched' it ;)
>
> and tried again a start... crash but some more infos now :
>
>
> 'systemctl start fwlogwatch.service' (root mode ;))
>
> failed with exit code...
>
>
> 'systemctl status fwlogwatch.service' :
...ah I see now you are seeing more...
> > fwlogwatch.service - Firewall log analyzer
> > Loaded: loaded (/lib/systemd/system/fwlogwatch.service; enabled;
> > preset: enabled)
> > Active: failed (Result: exit-code) since Wed 2024-11-20 17:02:18
> > CET; 1min 27s ago
> > Docs: man:fwlogwatch
> > Process: 294164 ExecStart=/bin/sh -c if [ "x${START_DAEMON}" !=
> > "xtrue" ]; then echo "aborted"; exit 1; fi; exec /usr/sbin/fwlogwatch
> > -c /etc/fwlogwatch/fwlogwatch.config -R ${PARAMS} (code=exited,
> > status=1/FAILURE)
> > CPU: 16ms
but alas, not much. Systemd seems to be more interested in itself
than in others. Oh, well. That's what nowadays is called a "service",
I s'ppose.
I'd try to running the thing manually, perhaps under strace if nothing
else helps. Perhaps it has a "debug" option? What does the man page
say?
Cheers
--
t
signature.asc
Description: PGP signature
