Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 609214 - mail-mta/postfix: "Protocol not supported" with systemd option `RestrictAddressFamilies`
Summary: mail-mta/postfix: "Protocol not supported" with systemd option `RestrictAddre...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: Normal normal (vote)
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-02-13 05:11 UTC by James Geboski (jgeboski)
Modified: 2018-08-28 19:40 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description James Geboski (jgeboski) 2017-02-13 05:11:46 UTC
The recent change [1] to the systemd service results in postfix failing to start [2]. Commenting out the `RestrictAddressFamilies` option resolves the issue for me. Is there a USE flag or kernel option required for this?


[1]: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6d1bfd687106fcb4a75e0d225d77153f2b9c581d
[2]: https://pastebin.osuosl.org/45171/raw/
Comment 1 Eray Aslan gentoo-dev 2017-02-17 11:40:15 UTC
Adding systemd to cc
Comment 2 Craig Andrews gentoo-dev 2017-02-17 13:32:29 UTC
There shouldn't be any requirements for this to work. Let's try to figure out how to reproduce this issue...

1. In your kernel config, do you have CONFIG_IPV6=Y, or if it's M, do you have the module loaded?

2. In /etc/postfix/main.cf, what's the value of inet_protocols?

3. Instead of removing the line, does it work if you change it to RestrictAddressFamilies=AF_INET AF_NETLINK AF_UNIX
?
Comment 3 Mike Gilbert gentoo-dev 2017-02-17 15:05:30 UTC
Please also provide emerge --info, along with the version of systemd being used.
Comment 4 James Geboski (jgeboski) 2017-02-20 22:15:48 UTC
Sorry for the delay!

> 1. In your kernel config, do you have CONFIG_IPV6=Y, or if it's M, do you have the module loaded?

CONFIG_IPV6=y

> 2. In /etc/postfix/main.cf, what's the value of inet_protocols?

inet_protocols = all

> 3. Instead of removing the line, does it work if you change it to RestrictAddressFamilies=AF_INET AF_NETLINK AF_UNIX?

It does not work, no. It still complains about both IPv6 and IPv4 not being supported protocols.



Portage 2.3.3 (python 2.7.12-final-0, default/linux/x86/13.0, gcc-5.4.0, glibc-2.24-r1, 4.4.39 i686)
=================================================================
System uname: Linux-4.4.39-i686-QEMU_Virtual_CPU_version_1.5.3-with-gentoo-2.3
KiB Mem:     1034396 total,    220616 free
KiB Swap:     786428 total,    715900 free
Timestamp of repository gentoo: Sun, 12 Feb 2017 21:15:01 +0000
sh bash 4.4_p12
ld GNU ld (Gentoo 2.27 p1.0) 2.27
app-shells/bash:          4.4_p12::gentoo
dev-lang/perl:            5.24.1::gentoo
dev-lang/python:          2.7.12::gentoo, 3.4.5::gentoo
dev-util/cmake:           3.7.2::gentoo
dev-util/pkgconfig:       0.29.1::gentoo
sys-apps/baselayout:      2.3::gentoo
sys-apps/sandbox:         2.10-r3::gentoo
sys-devel/autoconf:       2.69-r2::gentoo
sys-devel/automake:       1.15-r2::gentoo
sys-devel/binutils:       2.27::gentoo
sys-devel/gcc:            5.4.0-r3::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r2::gentoo
sys-devel/make:           4.2.1::gentoo
sys-kernel/linux-headers: 4.9::gentoo (virtual/os-headers)
sys-libs/glibc:           2.24-r1::gentoo
Repositories:

gentoo
    location: /usr/portage/gentoo
    sync-type: rsync
    sync-uri: rsync://mirror.steadfast.net/gentoo-portage
    priority: -1000

jgeboski
    location: /usr/portage/layman/jgeboski
    sync-type: laymansync
    sync-uri: https://github.com/jgeboski/ebuilds.git
    masters: gentoo
    priority: 50

Installed sets: @xonotic
ACCEPT_KEYWORDS="x86 ~x86"
ACCEPT_LICENSE="*"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=native -O2"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/easy-rsa /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.1/ext-active/ /etc/php/cgi-php7.1/ext-active/ /etc/php/cli-php7.1/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=native -O2"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--with-bdeps=y"
FCFLAGS="-O2 -march=i686 -pipe"
FEATURES="assume-digests binpkg-logs compressdebug config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -march=i686 -pipe"
GENTOO_MIRRORS="ftp://ftp.osuosl.org/pub/gentoo"
LANG="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="acl adns archive asn1 asyncns bazaar bzip2 cacert caps crypt cryptsetup ctype curl custom-cflags custom-optimization cxx device-mapper e2fsprogs exceptions expat filecaps gcrypt git glib gmp gnutls gpg gpl gzip hunspell iconv icu inotify introspection iptables ipv6 jit kmod libevent libffi libtar lto lzma lzo magic man mercurial ncurses netlink network networking nls nptl nss openmp openpty openssl otr pam pcap pcre perl pkcs11 plugins portage posix python readline realtime regex sasl seccomp sftp spell sqlite ssl subversion suid syslog systemd threads tools udev unicode unwind urandom utempter utils uuid vhosts vim vim-syntax x86 xattr xml xz zip zlib" ABI_X86="32" CPU_FLAGS_X86="mmx mmxext sse sse2 sse3" CURL_SSL="openssl" ELIBC="glibc" GRUB_PLATFORMS="pc" KERNEL="linux" L10N="en en-US" LINGUAS="en en_US" NGINX_MODULES_HTTP="access auth_basic autoindex browser charset fastcgi gzip proxy referer rewrite ssi" PYTHON_SINGLE_TARGET="python3_4" PYTHON_TARGETS="python2_7 python3_4" USERLAND="GNU"
USE_PYTHON="2.7 3.4"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 5 Christian Holpert 2017-03-15 19:18:50 UTC
This seems to be a known bug:

RestrictAddressFamilies= broken on 32-bit #4575
https://github.com/systemd/systemd/issues/4575

I can confirm, that commenting out RestrictAddressFamilies makes postfix start again.
Comment 6 Craig Andrews gentoo-dev 2018-08-28 19:40:20 UTC
This issue was fixed in systemd 233. Current stable is 236.