| Summary: | fail2ban не работает с бэкендом systemd | ||
|---|---|---|---|
| Product: | Sisyphus | Reporter: | Вадим Илларионов <gbIMoBou> |
| Component: | fail2ban | Assignee: | Grigory Ustinov <grenka> |
| Status: | CLOSED FIXED | QA Contact: | qa-sisyphus |
| Severity: | normal | ||
| Priority: | P3 | CC: | antohami, cas, cow, evg, george, grenka, imz, kotopesutility, lav, mike, nbr, qa_viy, rider, sem, shaba, sin, slev, toni, vitty, viy |
| Version: | unstable | ||
| Hardware: | all | ||
| OS: | Linux | ||
Лечится установкой python-module-systemd. Видимо, это следует учесть в пакете fail2ban (например, сделав метапакет). |
В журнале такое: окт 08 14:32:53 gw fail2ban.jail[5866]: INFO Creating new jail 'recidive' окт 08 14:32:53 gw fail2ban.jail[5866]: ERROR Backend 'systemd' failed to initialize due to No module named systemd окт 08 14:32:53 gw fail2ban.jail[5866]: ERROR Failed to initialize any backend for Jail 'recidive' окт 08 14:32:53 gw fail2ban.transmitter[5866]: WARNING Command ['add', 'recidive', 'systemd'] has failed. Received RuntimeError("Failed to initialize any backend for Jail 'recidive'",) окт 08 14:32:53 gw fail2ban-client[5831]: ERROR NOK: ("Failed to initialize any backend for Jail 'recidive'",) [root@gw etc]# python -c 'from systemd import journal; print "OK"' Traceback (most recent call last): File "<string>", line 1, in <module> ImportError: No module named systemd [root@gw etc]# rpm -q systemd fail2ban systemd-230-alt1.M80P.1 fail2ban-0.9.3-alt3 [root@gw etc]# cat /etc/fail2ban/jail.local [DEFAULT] banaction = iptables-ipset-proto6 backend = systemd [sshd] enabled = yes [sshd-ddos] enabled = yes [recidive] enabled = yes banaction = iptables-ipset-proto6-allports В Сизифе с systemd-231 картина та же.