Hi, I am trying to setup a basic firewall setup on my laptop and it seems some default locale setting prevent teh service to start due to a python error. # locale -a C cs_CZ.cp1250 cs_CZ.ibm852 cs_CZ.iso88592 cs_CZ.utf8 C.utf8 en_GB.utf8 en_US en_US.iso88591 en_US.utf8 POSIX # Sep 7 20:01:41 dell-e5580 /etc/init.d/firewalld[1263]: WARNING: firewalld has already been started Sep 7 20:01:44 dell-e5580 start-stop-daemon: Will stop /usr/sbin/firewalld Sep 7 20:01:44 dell-e5580 /etc/init.d/firewalld[1422]: start-stop-daemon: no matching processes found Sep 7 20:01:44 dell-e5580 firewalld[1458]: ERROR: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Operation not supported JSON blob: {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]} Sep 7 20:01:44 dell-e5580 firewalld[1458]: ERROR: Failed to load user configuration. Falling back to full stock configuration. Sep 7 20:01:45 dell-e5580 firewalld[1458]: ERROR: 'python-nftables' failed: internal:0:0-0: Error: No such file or directory; did you mean table ‘firewalld’ in family inet? internal:0:0-0: Error: Could not process rule: Operation not supported JSON blob: {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"delete": {"table": {"family": "inet", "name": "firewalld"}}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]} Sep 7 20:01:45 dell-e5580 firewalld[1458]: ERROR: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Operation not supported JSON blob: {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]} Sep 7 20:01:45 dell-e5580 firewalld[1458]: Traceback (most recent call last): File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 649, in start self._start() File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 613, in _start self._start_apply_objects(reload=reload, complete_reload=complete_reload) File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 510, in _start_apply_objects transaction.execute(True) File "/usr/lib/python3.10/site-packages/firewall/core/fw_transaction.py", line 133, in execute raise FirewallError(errors.COMMAND_FAILED, errorMsg) firewall.errors.FirewallError: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Operation not supported JSON blob: {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]} During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3.10/site-packages/firewall/core/fw_transaction.py", line 101, in execute self.fw.rules(backend_name, rules[backend_name]) File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 1060, in rules backend.set_rules(_rules, self._log_denied) File "/usr/lib/python3.10/site-packages/firewall/core/nftables.py", line 352, in set_rules raise ValueError("'%s' failed: %s\nJSON blob:\n%s" % ("python-nftables", error, json.dumps(json_blob))) ValueError: 'python-nftables' failed: internal:0:0-0: Error: No such file or directory; did you mean table ‘firewalld’ in family inet? internal:0:0-0: Error: Could not process rule: Operation not supported JSON blob: {"nftables": [{"metainfo": {"json_schema_version": 1}}, {"delete": {"table": {"family": "inet", "name": "firewalld"}}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]} During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 654, in start self._start_failsafe() File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 645, in _start_failsafe self._start_apply_objects(reload=reload, complete_reload=complete_reload) File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 510, in _start_apply_objects transaction.execute(True) File "/usr/lib/python3.10/site-packages/firewall/core/fw_transaction.py", line 106, in execute log.error(msg) File "/usr/lib/python3.10/site-packages/firewall/core/logger.py", line 440, in error self._log(self.ERROR, _format, *args, **kwargs) File "/usr/lib/python3.10/site-packages/firewall/core/logger.py", line 709, in _log target.write(_format % _dict, level, self, is_debug) File "/usr/lib/python3.10/site-packages/firewall/core/logger.py", line 151, in write self.fd.write(data) UnicodeEncodeError: 'latin-1' codec can't encode character '\u2018' in position 122: ordinal not in range(256) Sep 7 20:01:45 dell-e5580 firewalld[1458]: Traceback (most recent call last): File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 649, in start self._start() File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 613, in _start self._start_apply_objects(reload=reload, complete_reload=complete_reload) File "/usr/lib/python3.10/site-packages/firewall/core/fw.py", line 510, in _start_apply_objects transaction.execute(True) File "/usr/lib/python3.10/site-packages/firewall/core/fw_transaction.py", line 133, in execute raise FirewallError(errors.COMMAND_FAILED, errorMsg) firewall.errors.FirewallError: COMMAND_FAILED: 'python-nftables' failed: internal:0:0-0: Error: Could not process rule: Operation not supported # emerge --info Portage 3.0.49 (python 3.11.4-final-0, default/linux/amd64/17.1/no-multilib, gcc-13, glibc-2.37-r3, 6.4.15 x86_64) ================================================================= System uname: Linux-6.4.15-x86_64-Intel-R-_Core-TM-_i7-7820HQ_CPU_@_2.90GHz-with-glibc2.37 KiB Mem: 32735928 total, 25936660 free KiB Swap: 0 total, 0 free Timestamp of repository gentoo: Thu, 07 Sep 2023 10:00:01 +0000 Head commit of repository gentoo: 3b4bdbfa9dac9dd09735c536b6f6c8c15071b2a8 Head commit of repository jgenco: 02c00b33fa6f0404fa0ca67e69a4d96e591a5d20 Head commit of repository randall: 1878db2875a45dfa0a8c37a1f38035da7deb5cbc Head commit of repository stefantalpalaru: 5ccb46f6b053f6ea3afa9209970296fb77fd6032 sh bash 5.2_p15-r6 ld GNU ld (Gentoo 2.39 p5) 2.39.0 app-misc/pax-utils: 1.3.7::gentoo app-shells/bash: 5.2_p15-r6::gentoo dev-java/java-config: 2.3.1-r1::gentoo dev-lang/perl: 5.36.0::gentoo dev-lang/python: 2.7.18_p112::stefantalpalaru, 3.10.12::gentoo, 3.11.4::gentoo, 3.12.0_beta4_p1::gentoo dev-lang/rust: 1.70.0::gentoo dev-util/cmake: 3.27.4::gentoo dev-util/meson: 1.1.0::gentoo sys-apps/baselayout: 2.14::gentoo sys-apps/openrc: 0.48::gentoo sys-apps/sandbox: 2.37::gentoo sys-devel/autoconf: 2.13-r8::gentoo, 2.69-r5::gentoo, 2.71-r7::gentoo sys-devel/automake: 1.14.1-r2::gentoo, 1.15.1-r2::gentoo, 1.16.5-r1::gentoo sys-devel/binutils: 2.39-r4::gentoo, 2.40-r6::gentoo, 2.41-r1::gentoo sys-devel/binutils-config: 5.5::gentoo sys-devel/clang: 14.0.6-r4::gentoo, 15.0.7-r3::gentoo, 16.0.6::gentoo sys-devel/gcc: 10.3.0::gentoo, 11.3.0::gentoo, 12.2.1_p20230304::gentoo, 13.2.1_p20230826::gentoo sys-devel/gcc-config: 2.11::gentoo sys-devel/libtool: 2.4.7-r1::gentoo sys-devel/lld: 14.0.6-r1::gentoo, 15.0.7::gentoo, 16.0.6::gentoo sys-devel/llvm: 14.0.6-r4::gentoo, 15.0.7-r3::gentoo, 16.0.6::gentoo sys-devel/make: 4.4.1-r1::gentoo sys-kernel/linux-headers: 6.4::gentoo (virtual/os-headers) sys-libs/glibc: 2.37-r3::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 volatile: True sync-rsync-verify-jobs: 1 sync-rsync-verify-metamanifest: yes sync-rsync-verify-max-age: 24 sync-rsync-extra-opts: jgenco location: /var/db/repos/jgenco sync-type: git sync-uri: https://github.com/jgenco/jgenco-overlay masters: gentoo volatile: False randall location: /var/db/repos/randall sync-type: git sync-uri: https://github.com/ran-dall/portage-overlay masters: gentoo volatile: False stefantalpalaru location: /var/db/repos/stefantalpalaru sync-type: git sync-uri: https://github.com/stefantalpalaru/gentoo-overlay masters: gentoo volatile: False ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="@FREE dlj-1.1 sun-bcla-java-vm Oracle-BCLA-JavaSE IBM-J1.6 NPSL Nero-EULA-US AdobeFlash-10.3 AdobeFlash-11.x OPERA-2014 RAR Intel-SDP intel-ucode Skype-TOS vmware linux-firmware fasta vienna-rna unafold GRL MSttfEULA hplip-plugin meme mRNAmarkup ApE ICS ipw3945 finchtv modeller gmap master-pdf-editor abyss swiss-prot Aladdin AVASYS truecrypt-3.0 pyvcf Non-profit-OSL-3.0 estscan bcca_2010 oncotator Adobe blat staden CeCILL-1.1 phrap STRIDE cctbx-2.0 bh-luxi ARIADNE unRAR all-rights-reserved trf annovar_personal_only stampy-academic BSD-BroadInstitute UPennState freedist free-noncomm blasr sun-jlfgr FLI-Jena PSTT netperf sun-jsr67 xv vim.org OSGi-Specification-2.0 colt mod_fastcgi googleearth google-chrome ACE AFL churchill genscan no-source-code linux-fw-redistributable ISSL JSON MPEG-4 Apache-2.0 BSD MIT BSD-2 FSFAP unicode Subversion OPERA-2018 ms-teams-pre TeamViewer PSF-2.4 merlin android julius CROSSOVER-3 lha PUEL-11 supermicro microsoft-edge" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -pipe -march=native -ftree-vectorize" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /etc/stunnel/stunnel.conf /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.3/conf /usr/share/maven-bin-3.6/conf /usr/share/maven-bin-3.8/conf /usr/share/maven-bin-3.9/conf /var/lib/hsqldb /var/spool/torque" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php8.0/ext-active/ /etc/php/apache2-php8.1/ext-active/ /etc/php/apache2-php8.2/ext-active/ /etc/php/cgi-php8.0/ext-active/ /etc/php/cgi-php8.1/ext-active/ /etc/php/cgi-php8.2/ext-active/ /etc/php/cli-php8.0/ext-active/ /etc/php/cli-php8.1/ext-active/ /etc/php/cli-php8.2/ext-active/ /etc/php/fpm-php8.1/ext-active/ /etc/php/fpm-php8.2/ext-active/ /etc/php/phpdbg-php8.1/ext-active/ /etc/php/phpdbg-php8.2/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/vmware-installer" CXXFLAGS="-O2 -pipe -march=native -ftree-vectorize" DISTDIR="/usr/portage/distfiles" ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME" FCFLAGS="-O2 -pipe -march=native -ftree-vectorize" FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg-live config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news nostrip parallel-fetch pid-sandbox preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe -march=native -ftree-vectorize" GENTOO_MIRRORS="http://ftp.fi.muni.cz/pub/linux/gentoo/ http://gentoo.mirror.web4u.cz/" LANG="en_US" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LEX="flex" LINGUAS="en_US en_GB en cs" MAKEOPTS="-j5" PKGDIR="/var/cache/binpkgs" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" SHELL="/bin/bash" USE="X a52 aac acl acpi alsa amd64 amr amrenc aom apache apache2 archive armadillo asm audit av1 avx avx2 berkdb blas bluetooth bluray bmp boost bz2 bzip2 cairo caps ccid cdda cdio cdr cdrom cgi chromium cli codec2 coin cpudetection cracklib crypt cryptlib cryptsetup cups curl cxx dav1d dbus device-mapper dhcp directfb directx dri dri3 drm dvbpsi dvd dvda dxf dxva2 egl elogind emboss encode eselect-ldso eudev exif faad fax fbcon fdk ffmpeg fftw flac fontconfig foomatic fortran gbm gcrypt gd gdal gdbm geoip geolocation georeferencer geos gimp glpk gml gmp gnutls gpm gps grass gstreamer gtk gtk3 h.264 h.265 h264 h265 hal haptic hdf5 heif hevc hpijs hwdb iconv id3tag imaging innodb inotify iproute2 ipv6 java javafx javascript jce jpeg jpeg2k jpg js jscript kdrive keymap kms ladspa lapack laptop las lcms libaom libdrm libkms libnotify librtmp libsoxr libtesseract libtirpc libv4l libxml2 live lm-sensors lm_sensors lz4 lzma mad mariadb matroska mjpeg mmal mmx modemmanager mp3 mpeg mtp mysql ncurses netcdf networkmanager nfs nftables nls nptl nptlonly nscd nss ntfsprogs nvenc objc ocr odbc ogdi ogg openal opencl opengl openh264 openmp opensc openssl opus pam parport pbs pcre pcre16 pcsc pcsc-lite pdal pdf perl php png polar policykit polkit postgres ppds pppd python qemu qml qt3support qt4 qt5 rav1e readline rendering resolvconf romio rubberband scanner seccomp server session sha slideshow smartcard sndfile sndio split-usr sqlite srt sse sse2 sse3 sse4_1 sse4_2 ssh ssl sslv3 ssse3 startup-notification suexec svg svt-av1 syslog tcl tcpd test-rust threads tiff tk tkip tools truetype twolame udev unicode unwind upnp usb v4l v4l2 vaapi vidstab vim-syntax virtualbox vmaf vnc vorbis vp8 vp9 vpx vulkan wavpack wayland webp wifi x11 x264 x265 xa xattr xcb xephyr xft xls xml xmp xorg xrandr xv xvfb xvid xvmc zlib zstd" ABI_X86="64" ADA_TARGET="gnat_2021" ALSA_CARDS="hdspm usb-usx2y" APACHE2_MODULES="alias authn_core authz_core socache_shmcb authz_host auth_basic auth_digest cgi cgid deflate dir env filter include info mem_cache mime mime_magic negotiation remoteip setenvif status userdir vhost_alias rewrite usertrack cache file_cache disk_cache charset_lite log_config log_forensic unixd" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="gpsclock navcom ntrip rtcm104v2 rtcm104v3 ublox nmea0183 nmea2000 aivdm passthrough" GRUB_PLATFORMS="efi-64 pc" INPUT_DEVICES="libinput" KERNEL="linux" L10N="en-US en-GB en cs" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" OPENMPI_RM="pbs" PHP_TARGETS="php5-4 php5-5" POSTGRES_TARGETS="postgres15" PYTHON_SINGLE_TARGET="python3_10" PYTHON_TARGETS="python2_7 python3_9 python3_10 python3_11" RUBY_TARGETS="ruby31 ruby32" VIDEO_CARDS="vesa virtualbox vboxvideo vmware vmvga vmwgfx fbdev intel iris i915 i965 d3d12" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq proto steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EMERGE_DEFAULT_OPTS, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS # emerge -pv firewalld [ebuild R ] net-firewall/firewalld-2.0.0::gentoo USE="gui iptables nftables -test" PYTHON_SINGLE_TARGET="python3_10 -python3_11" 0 KiB
Created attachment 870042 [details] firewalld errors
You can avoid this error by setting LANG to a UTF-8 locale. Based on emerge --info, you currently have LANG="en_US" (no UTF-8).
Apparently he's intentionally using a non-UTF-8 locale... See https://bugs.gentoo.org/913655#c5 Honestly, I think this is a make-work project. It's just creating work for maintainers for basically no benefit.
