search

crowdsecurity / spksrc-crowdsec

Other
14 stars 3 forks source link

crowdsec-firewall-bouncer Fails to Start #9

Open daygle opened 1 year ago

daygle commented 1 year ago

Is this a new Bug?

Package Name

crowdsec-firewall-bouncer_braswell-7.0_0.0.22-5.spk

Package Version

crowdsec-firewall-bouncer_braswell-7.0_0.0.22-5.spk

Device Model

Synology NAS DS216+II

Device Architecture

x86_64

Firmware Version

DSM 7.1.1-42962 Update 1

What happened?

crowdsec-firewall-bouncer not starting up automatically when Synology device started/rebooted.

Service starts correctly when manually started after reboot/startup.

Reproduction steps

1. Reboot/or start Synology device.
2. crowdsec-firewall-bouncer fails to start automatically.

Install Log

2023/01/17 10:39:49 (system) trigger crowdsec-firewall-bouncer 0.0.22-5 Begin start-stop-status stop
2023/01/17 10:40:19 (system) trigger crowdsec-firewall-bouncer 0.0.22-5 End start-stop-status stop ret=[0]
2023/01/17 10:43:25 (system) trigger crowdsec-firewall-bouncer 0.0.22-5 Begin start-stop-status start
2023/01/17 10:43:32 (system) trigger crowdsec-firewall-bouncer 0.0.22-5 End start-stop-status start ret=[0]
2023/01/17 10:51:35 start crowdsec-firewall-bouncer 0.0.22-5 Begin start-stop-status stop
2023/01/17 10:51:35 start crowdsec-firewall-bouncer 0.0.22-5 End start-stop-status stop ret=[0]
2023/01/17 10:51:44 start crowdsec-firewall-bouncer 0.0.22-5 Begin start-stop-status start
 ip_set_hash_net
 ip_set
insmod: ERROR: could not insert module /lib/modules/nfnetlink.ko: File exists
insmod: ERROR: could not insert module /var/packages/crowdsec-firewall-bouncer/target/lib/modules/3.10.108/kernel/net/netfilter/ipset/ip_set.ko: File exists
insmod: ERROR: could not insert module /var/packages/crowdsec-firewall-bouncer/target/lib/modules/3.10.108/kernel/net/netfilter/ipset/ip_set_hash_net.ko: File exists
2023/01/17 10:51:46 start crowdsec-firewall-bouncer 0.0.22-5 End start-stop-status start ret=[0]

Service Log

Tue Jan 17 10:51:44 AEDT 2023
Begin service_prestart
Fix permissions: crowdsec-firewall-bouncer
Modify initial config file: /var/packages/crowdsec/etc/bouncers/crowdsec-firewall-bouncer.yaml
INFO: API key already registered…
iptables found
nftables is not present
Fix permissions: crowdsec-firewall-bouncer
INFO: unloading ipset kernel modules…
ERROR: unloading ipset kernel modules!
INFO: loading ipset kernel modules from /var/packages/crowdsec-firewall-bouncer/target/lib/modules/3.10.108
INFO: ipset kernel modules loaded…
End service_prestart
Starting CrowdSec-Firewall-Bouncer command /var/packages/crowdsec-firewall-bouncer/target/usr/sbin/crowdsec-firewall-bouncer -c /var/packages/crowdsec/etc/bouncers/crowdsec-firewall-bouncer.yaml
time="2023-01-17T10:51:46+11:00" level=info msg="crowdsec-firewall-bouncer v0.0.22-synology-0.0.22-1"

Other Logs

n/a
erdoukki commented 1 month ago

please read the readme for installation this is not a bug this issue is explained and may be fixed with the manual installation @crowdsecurity this issue can be closed