On Wed, Nov 20, 2024 at 05:35:58PM +0100, Jean-François Bachelet wrote:
> Hello Tomas :)
>
> Le 20/11/2024 à 13:38, tomas@tuxteam.de a écrit :
> > On Wed, Nov 20, 2024 at 01:19:24PM +0100, Jean-François Bachelet wrote:
> > > Hello folks :)
> > >
> > > I got a machine to look at, so I've issued a 'systemctl status' and see a
> > > 'degraded' state.
> > >
> > > so I've done a 'systemctl status --failed' and see that 'fwlogwatch.service'
> > > was never started and shows 'exit code' as reasons...
> > >
> > > looking at the logs it appears it has never started fine since debian 12
> > > install on this machine...
> > Guessing by the package description, fwlogwatch just collects diverse
> > firewall logs and (optionally) may take actions. Moreover, the description
> > encourages the guess that you might try starting it manually, to see
> > what kind of complaints it has?
>
> it is started by systemd at boot but crash.
>
> I've tested starting it manualy with 'systemctl start fwlogwatch' but or
> reboot after disabling ufw, but no changes.
I was proposing you start it "directly" to perhaps see better what's
going wrong...
> it seems to be installed by default, but if it not work what's the point ?
> :/
>
> > It seems to have a man page.
>
> checked it, nothing special in it, the only thing turned on is the
> 'fwlogwatch.pid' file that must be found by systemd in /run...
>
> after check that file hasn't be created at installation time...
>
> so I've 'touched' it ;)
>
> and tried again a start... crash but some more infos now :
>
>
> 'systemctl start fwlogwatch.service' (root mode ;))
>
> failed with exit code...
>
>
> 'systemctl status fwlogwatch.service' :
...ah I see now you are seeing more...
> > fwlogwatch.service - Firewall log analyzer
> > Loaded: loaded (/lib/systemd/system/fwlogwatch.service; enabled;
> > preset: enabled)
> > Active: failed (Result: exit-code) since Wed 2024-11-20 17:02:18
> > CET; 1min 27s ago
> > Docs: man:fwlogwatch
> > Process: 294164 ExecStart=/bin/sh -c if [ "x${START_DAEMON}" !=
> > "xtrue" ]; then echo "aborted"; exit 1; fi; exec /usr/sbin/fwlogwatch
> > -c /etc/fwlogwatch/fwlogwatch.config -R ${PARAMS} (code=exited,
> > status=1/FAILURE)
> > CPU: 16ms
but alas, not much. Systemd seems to be more interested in itself
than in others. Oh, well. That's what nowadays is called a "service",
I s'ppose.
I'd try to running the thing manually, perhaps under strace if nothing
else helps. Perhaps it has a "debug" option? What does the man page
say?
Cheers
--
t
Attachment:
signature.asc
Description: PGP signature