[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-08-20 Thread Bug Watch Updater
** Changed in: nftables (Debian) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1936902 Title: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest To

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Launchpad Bug Tracker
This bug was fixed in the package nftables - 0.9.8-3ubuntu1 --- nftables (0.9.8-3ubuntu1) impish; urgency=medium * d/p/lp-1936902-payload-check-icmp-dependency-before-removing-previo.patch Fix a regression in nftables 0.9.8 that made nftables too greedy in removing icmp depe

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Christian Ehrhardt 
I re-ran the full test - it really seems good now: 242 tests were successful. 2 tests were skipped. Thanks Graham for the second pair of eyes on this. I Uploaded it to Impish and hope to unblock nftables by that. -- You received this bug notification because you are a member of Ubuntu Bugs,

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Bug Watch Updater
** Changed in: nftables (Debian) Status: Unknown => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1936902 Title: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest To mana

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Graham Inggs
fix-lp-1936902-impish.debdiff looks good to me -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1936902 Title: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest To manage notifications about thi

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Christian Ehrhardt 
** Also affects: nftables (Debian) via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991309 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1936902 T

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Ubuntu Foundations Team Bug Bot
** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1936902 Title: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest To manage notifications about this bug go to: https://bugs.

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Christian Ehrhardt 
After confirming the build and effect of the fix in PPA https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/4626/+packages I recreated the same in a VM and isolated the broken tests. Then I updated to the PPA and with these tests I was able to confirm that they now pass. 97: ICMP block

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Christian Ehrhardt 
The fix is upstream accepted by now: https://git.netfilter.org/nftables/commit/?id=533565244d88a818d8828ebabd7625e5a8a4c374 And it is released as part of v0.9.9 0.9.9 might change a bunch of other things we are not prepared for, so for the time being I'd try to resolve this regression in a backpor

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Christian Ehrhardt 
Fail #2 - stdout mismatch # -*- compilation -*- 124. rhbz1855140.at:1: testing rich rule icmptypes with one family ... ./rhbz1855140.at:1: if ! cp "${FIREWALLD_DEFAULT_CONFIG}/firewalld.conf" ./firewalld.conf; then exit 77; fi ./rhbz1855140.at:1: sed -i 's/^CleanupOnEx

[Bug 1936902] Re: new nftables 0.9.8-3 breaks firewalld 0.9.3 autopkgtest

2021-07-20 Thread Christian Ehrhardt 
Fail #1 - stdout mismatch # -*- compilation -*- 97. icmp_block_in_forward_chain.at:1: testing ICMP block present FORWARD chain ... ./icmp_block_in_forward_chain.at:1: if ! cp "${FIREWALLD_DEFAULT_CONFIG}/firewalld.conf" ./firewalld.conf; then exit 77; fi ./icmp_block_