I've upgraded my system to net-analyzer/fail2ban-0.9.4 (among other packages) as well as performing a kernel update, and after the reboot, fail2ban refuses to start. The error message: # /etc/init.d/fail2ban start * Starting fail2ban ... * start-stop-daemon: start does not exist * Failed to start fail2ban * ERROR: fail2ban failed to start Running the init script in debug mode yields # /etc/init.d/fail2ban -d start + _conf_d=/etc/init.d/../conf.d + _c=fail2ban + '[' -n fail2ban -a fail2ban '!=' fail2ban ']' + unset _c + sourcex -e /etc/init.d/../conf.d/fail2ban.default + '[' -e = -e ']' + shift + '[' -e /etc/init.d/../conf.d/fail2ban.default ']' + return 1 + sourcex -e /etc/init.d/../conf.d/fail2ban + '[' -e = -e ']' + shift + '[' -e /etc/init.d/../conf.d/fail2ban ']' + . /etc/init.d/../conf.d/fail2ban ++ FAIL2BAN_OPTIONS=-x + unset _conf_d + sourcex -e /etc/rc.conf + '[' -e = -e ']' + shift + '[' -e /etc/rc.conf ']' + . /etc/rc.conf ++ rc_shell=/sbin/sulogin ++ unicode=YES ++ rc_tty_number=12 + '[' -d /etc/rc.conf.d ']' + sourcex /lib64/rc/sh/s6.sh + '[' /lib64/rc/sh/s6.sh = -e ']' + . /lib64/rc/sh/s6.sh ++ '[' -z '' ']' ++ s6_service_path=/var/svc.d/fail2ban + sourcex /lib64/rc/sh/start-stop-daemon.sh + '[' /lib64/rc/sh/start-stop-daemon.sh = -e ']' + . /lib64/rc/sh/start-stop-daemon.sh + yesno '' + '[' -z '' ']' + return 1 + for _cmd in '"$@"' + '[' start '!=' status -a start '!=' describe ']' + '[' -n '' ']' ++ command -v cgroup_add_service + '[' cgroup_add_service = cgroup_add_service ']' + '[' -d /sys/fs/cgroup -a '!' -w /sys/fs/cgroup ']' + cgroup_add_service /sys/fs/cgroup/openrc + for d in '/sys/fs/cgroup/*' + '[' -f /sys/fs/cgroup/openrc/tasks ']' + printf %d 0 + openrc_cgroup=/sys/fs/cgroup/openrc + '[' -d /sys/fs/cgroup/openrc ']' + cgroup=/sys/fs/cgroup/openrc/fail2ban + mkdir -p /sys/fs/cgroup/openrc/fail2ban + '[' -f /sys/fs/cgroup/openrc/fail2ban/tasks ']' + printf %d 0 + cgroup_add_service /sys/fs/cgroup/systemd/system + for d in '/sys/fs/cgroup/*' + '[' -f /sys/fs/cgroup/openrc/tasks ']' + printf %d 0 + openrc_cgroup=/sys/fs/cgroup/openrc + '[' -d /sys/fs/cgroup/openrc ']' + cgroup=/sys/fs/cgroup/openrc/fail2ban + mkdir -p /sys/fs/cgroup/openrc/fail2ban + '[' -f /sys/fs/cgroup/openrc/fail2ban/tasks ']' + printf %d 0 ++ command -v cgroup_set_limits + '[' cgroup_set_limits = cgroup_set_limits ']' + cgroup_set_limits + local blkio= + '[' -n '' ']' + local cpu= + '[' -n '' ']' + local cpuacct= + '[' -n '' ']' + local cpuset= + '[' -n '' ']' + local devices= + '[' -n '' ']' + local hugetlb= + '[' -n '' ']' + local memory= + '[' -n '' ']' + local net_cls= + '[' -n '' ']' + local net_prio= + '[' -n '' ']' + local pids= + '[' -n '' ']' + return 0 + break + sourcex /etc/init.d/fail2ban + '[' /etc/init.d/fail2ban = -e ']' + . /etc/init.d/fail2ban ++ extra_started_commands='reload showlog' ++ FAIL2BAN='/usr/bin/fail2ban-client -x' + read _d + eval 'printf '\''%s\n'\'' ' ++ printf '%s\n' + '[' -n '' ']' + read _d + '[' 0 -ne 0 ']' + unset _d + read _f + eval 'printf '\''%s\n'\'' ' ++ printf '%s\n' + '[' -n '' ']' + read _f + '[' 0 -ne 0 ']' + unset _f + '[' -n '' ']' + '[' -n start ']' + '[' start = depend ']' + for _cmd in describe start stop status '${extra_commands:-$opts}' '$extra_started_commands' '$extra_stopped_commands' + '[' describe = start ']' + for _cmd in describe start stop status '${extra_commands:-$opts}' '$extra_started_commands' '$extra_stopped_commands' + '[' start = start ']' ++ command -v start + '[' start = start ']' + yesno + '[' -z '' ']' + return 1 + for _cmd in '$extra_started_commands' + '[' reload = start ']' + for _cmd in '$extra_started_commands' + '[' showlog = start ']' + for _cmd in '$extra_stopped_commands' + '[' cgroup_cleanup = start ']' + unset _cmd + case $1 in + verify_boot + '[' '!' -e /run/openrc/softlevel ']' + return 0 ++ command -v start_pre + '[' '' = start_pre ']' + start + ebegin 'Starting fail2ban' * Starting fail2ban ... + mkdir -p /run/fail2ban + rm -f /run/fail2ban/fail2ban.sock + start-stop-daemon --start --exec /usr/bin/fail2ban-client -x start --pidfile /run/fail2ban/fail2ban.pid * start-stop-daemon: start does not exist + eend 1 'Failed to start fail2ban' * Failed to start fail2ban [ !! ] + exit 1 * ERROR: fail2ban failed to start
Please post your `emerge --info net-analyzer/fail2ban' output in a comment.
# emerge --info net-analyzer/fail2ban Portage 2.2.28 (python 2.7.10-final-0, default/linux/amd64/13.0, gcc-4.9.3, glibc-2.22-r4, 4.4.6-gentoo x86_64) ================================================================= System Settings ================================================================= System uname: Linux-4.4.6-gentoo-x86_64-AMD_Phenom-tm-_II_X4_955_Processor-with-gentoo-2.2 KiB Mem: 7923396 total, 2810644 free KiB Swap: 16777212 total, 16740008 free Timestamp of repository gentoo: Sat, 07 May 2016 19:30:01 +0000 sh bash 4.3_p42-r1 ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1 app-shells/bash: 4.3_p42-r1::gentoo dev-java/java-config: 2.2.0-r3::gentoo dev-lang/perl: 5.20.2::gentoo dev-lang/python: 2.7.10-r1::gentoo, 3.4.3-r1::gentoo dev-util/cmake: 3.3.1-r1::gentoo dev-util/pkgconfig: 0.28-r2::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.19.1::gentoo sys-apps/sandbox: 2.10-r1::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69::gentoo sys-devel/automake: 1.7.9-r3::gentoo, 1.11.6-r1::gentoo, 1.14.1::gentoo, 1.15::gentoo sys-devel/binutils: 2.25.1-r1::gentoo sys-devel/gcc: 4.9.3::gentoo sys-devel/gcc-config: 1.7.3::gentoo sys-devel/libtool: 2.4.6::gentoo sys-devel/make: 4.1-r1::gentoo sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers) sys-libs/glibc: 2.22-r4::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 gcpan_zathras location: /usr/local/portage masters: gentoo priority: 0 godin location: /var/lib/layman/godin masters: gentoo priority: 1 ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=amdfam10 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.3/conf /var/bind" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.6/ext-active/ /etc/php/cgi-php5.6/ext-active/ /etc/php/cli-php5.6/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=amdfam10 -O2 -pipe" DISTDIR="/usr/portage/distfiles" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://distfiles.gentoo.org" LANG="C" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j5" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="X a52 acl amd64 apache2 avahi avi bash-completion berkdb bzip2 cli cracklib crypt cxx dbus divx4linux dri dv dvdread fame fortran gdbm iconv ipv6 mjpeg mmx mmxext modules mpeg multilib ncurses nls nptl nptlonly ogg openmp pam pcre quicktime readline samba seccomp session slp sse sse2 ssl tcpd unicode vhosts xattr xulrunner xvid zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_core uthn_dbd authn_dbm authn_default authn_file authz_core authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_connect proxy_http rewrite setenvif so socache_shmcb speling status unique_id unixd userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext popcnt sse sse2 sse3 sse4a" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="de en" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="amdgpu fbdev intel nouveau radeon radeonsi vesa dummy v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON ================================================================= Package Settings ================================================================= net-analyzer/fail2ban-0.9.4::gentoo was built with the following: USE="(-selinux) -systemd" ABI_X86="64" PYTHON_SINGLE_TARGET="python2_7 -pypy -python3_3 -python3_4 -python3_5" PYTHON_TARGETS="python2_7 python3_4 -pypy -python3_3 -python3_5"
It looks like in your case, -x is interpreted by s-s-d, but in my case it clearly isn't - for me that just happens to work. Since we do not maintain the init.d script ourselves, please report this upstream.
(In reply to Jeroen Roovers from comment #3) > It looks like in your case, -x is interpreted by s-s-d, but in my case it > clearly isn't - for me that just happens to work. Since we do not maintain > the init.d script ourselves, please report this upstream. Done --> https://github.com/fail2ban/fail2ban/issues/1434
FYI, https://github.com/fail2ban/fail2ban/issues/1434 was fixed by upstream
Fixed in 0.9.5.
