Created attachment 1043936 [details]
Updated spec file with correct configure options
Description of problem:
I previously reported a problem (#1195303) affecting the fwknop package in the Fedora repositories, where systemd would attempt to start the service before the network was online, causing it to fail.
fwknopd does not start after a reboot or from cold boot. The service fails and checking the service status with systemctl, it lists the status as failed and the only interesting bit of information reported is a line that says "Warning: could not use the 'comment' match".
It appears this problem stems from the use of an incorrect configure option in the package spec: '--with-firewalld' which isn't actually a supported option (see: https://github.com/mrash/fwknop/issues/157).
Building the package with the correct configure options to enable support for firewalld (--with-firewall-cmd) fixes this problem.
Version-Release number of selected component (if applicable): 2.6.5-2.fc21
How reproducible: 100% on my system, prior to installing package built with correct options.
Steps to Reproduce:
1. Install fwknop from Fedora repository (2.6.5-2.fc21)
2. Configure fwknop for SPA
3. Reboot system
4. fwknop will not start and list previously mentioned 'comment check' error if you look at `systemctl status fwknopd`
Actual results: fwknopd doesn't restart upon reboot/cold boot.
Expected results: fwknopd should restart successfully after system reboot/cold boot.
Additional info: see https://github.com/mrash/fwknop/issues/157 for discussion with software author. Corrected spec file is attached. Will post corrected systemd unit file in reply.
Created attachment 1043937 [details]
Revised systemd unit file for fwknopd
Commented upstream. Sorry that I didn't test it properly last time. Now I did your test case and it worked well.
Can you make sure if it works for you before I will do whole batch of updates? There is scratch build:
I also did upgrade to latest release.
Another comments upstream. I didn't receive any response here so I will push it to repositories, also with new version.
For now, there is copr repo:
fwknop-2.6.6-1.fc22 has been submitted as an update for Fedora 22.
fwknop-2.6.6-1.el7 has been submitted as an update for Fedora EPEL 7.
fwknop-2.6.6-1.fc21 has been submitted as an update for Fedora 21.
* should fix your issue,
* was pushed to the Fedora 21 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing fwknop-2.6.6-1.fc21'
as soon as you are able to.
Please go to the following url:
then log in and leave karma (feedback).
fwknop-2.6.6-1.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.
fwknop-2.6.6-1.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
fwknop-2.6.6-1.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.