Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 531390 - net-firewall/iptables: circular dependencies in systemd restore service units
Summary: net-firewall/iptables: circular dependencies in systemd restore service units
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
Depends on:
Reported: 2014-12-02 01:16 UTC by
Modified: 2021-11-06 21:00 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description 2014-12-02 01:16:45 UTC
The systemd iptables-restore.service and ip6tables-restore.service units have '' as well as ''. Between the ordering implied by and being the default dependency of all service units this creates a dependency loop. The iptables rules shouldn't be loaded before anyway since it needs things like a working filesystem. The usual is more appropriate. Also recent versions of systemd introduced a specifically for firewalls. So the two units should probably look something more like this:

> [Unit]
> Description=Restore iptables firewall rules
> Conflicts=iptables-store.service
> [Service]
> Type=oneshot
> ExecStart=/sbin/iptables-restore /var/lib/iptables/rules-save
> [Install]
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2014-12-02 10:16:11 UTC
Looks fine to me. Could some other team member ACK and commit it? It's my unit, so no need for another ACK from maintainer.
Comment 2 Matthias Maier gentoo-dev 2014-12-02 20:56:15 UTC
Looks fine for me, too.

the shouldn't be strictly necessary (however, is).