On 30/05/2023 23.59, Cyril Brulebois wrote:
My question is why that wouldn't show up for crowdsec-firewall-bouncer as well since the logic is essentially the same! (It does a little firewall detection, and there's basically a s/custom/firewall/ for a few filenames, but the cscli part is exactly the same. And they both only have crowdsec listed in Recommends.)
You just got lucky in the configuration order: first crowdsec, thereafter crowdsec-firewall-bouncer This heavily depends on apt's serialization of the dependency dag ... installation of some unrelated packaged might influence the outcome. ... Selecting previously unselected package crowdsec. Preparing to unpack .../13-crowdsec_1.4.6-3+b2_i386.deb ... Unpacking crowdsec (1.4.6-3+b2) ... Selecting previously unselected package crowdsec-firewall-bouncer. Preparing to unpack .../14-crowdsec-firewall-bouncer_0.0.25-2+b1_i386.deb ... Unpacking crowdsec-firewall-bouncer (0.0.25-2+b1) ... Setting up libsqlite3-0:i386 (3.40.1-2) ... Setting up libssl3:i386 (3.0.8-1) ... Setting up libjansson4:i386 (2.14-2) ... Setting up libmnl0:i386 (1.0.4-3) ... Setting up libxtables12:i386 (1.8.9-2) ... Setting up netbase (6.4) ... Setting up openssl (3.0.8-1) ... Setting up libbsd0:i386 (0.11.7-2) ... Setting up libedit2:i386 (3.1-20221030-2) ... Setting up libnftnl11:i386 (1.2.4-2) ... Setting up ca-certificates (20230311) ... Updating certificates in /etc/ssl/certs... 140 added, 0 removed; done. Setting up crowdsec (1.4.6-3+b2) ... I: Registering to LAPI (/etc/crowdsec/local_api_credentials.yaml) W: Missing /etc/machine-id, initializing I: Registering to CAPI (/etc/crowdsec/online_api_credentials.yaml) I: Setting up offline hub (see README.Debian) I: Enabling upstream-recommended items, first installation (via symlinks from /etc/crowdsec) I: Enabling WAL for SQLite [fstype=] (see README.Debian) Setting up libnftables1:i386 (1.0.6-2) ... Setting up nftables (1.0.6-2) ... Setting up crowdsec-firewall-bouncer (0.0.25-2+b1) ... I: Configuring nftables [see README.Debian] To adjust the config: editor /etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml.local && systemctl restart crowdsec-firewall-bouncer Processing triggers for libc-bin (2.36-9) ... Processing triggers for ca-certificates (20230311) ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done.
