On Fri, Dec 01, 2023 at 11:52:12AM +0100, Adrian Zaugg wrote:
> In addition what you did, use insserv to create the necessary .depend.boot,
> .depend.start, and .depend.stop files:
>
> insserv -v
Thanks, Adrian!
According to the man page, this is triggered by update-rc.d.
As confirmation, a previous .depend.start file from my first
invocation of update-rc.d contains the name of the new init
script.
> Regards, Adrian
>
>
> In der Nachricht vom Friday, 1 December 2023 11:24:49 CET schrieb Joel Roth
> via Dng:
> > Hi,
> >
> > I made a script to load rules for an nft firewall.
> > It's executable, runs from the command line
> > with start/stop/status options.
> >
> > But it doesn't start during system boot.
> >
> > I created symlinks with update-rc.d
> > and links appear in the rc*.d directories
> > where * is 2,3,4,5.
> >
> > For example:
> >
> > $ ls /etc/rc2.d | grep firewall
> > S02firewall
> >
> > Also, I couldn't find evidence in any log files.
> > There was no /var/log/firewall, nothing in /var/boot.
> >
> > TIA for any suggestions.
> >
> > Here is the script:
> >
> > $ cat /etc/init.d/firewall
> >
> > #! /bin/sh
> > ### BEGIN INIT INFO
> > # Provides: firewall
> > # Required-Start:
> > # Required-Stop:
> > # Should-Start:
> > # Should-Stop:
> > # Default-Start: 2 3 4 5
> > # Default-Stop:
> > # Short-Description: Initialize firewall
> > # Description: Start nft firewall settings for desktop
> > # Applies to first wifi device
> > ### END INIT INFO
> >
> > PATH=/sbin:/bin:/usr/sbin:/usr/bin
> > export PATH
> >
> > . /lib/lsb/init-functions
> >
> > do_start () {
> > #WLAN=`cat /proc/net/wireless | perl -ne '/(\w+):/ && print $1'`
> > # above isn't available until wifi device is associated
> > WLAN=`iwconfig | perl -ne '/(wlan\d)/ and print $1'`
> > export WLAN
> > log_action_msg "Starting firewall on wifi device $WLAN"
> > perl -pe 's/WLAN/$ENV{WLAN}/' /etc/nft-firewall > /etc/nft-firewall-
> wifi
> > nft -f /etc/nft-firewall-wifi
> > }
> >
> > case "$1" in
> > start)
> > do_start
> > ;;
> > stop)
> > log_action_msg "Stopping firewall"
> > nft flush ruleset
> > ;;
> > status)
> > log_action_msg "Showing firewall ruleset"
> > log_action_msg "# start ruleset"
> > nft list ruleset
> > log_action_msg "# end ruleset"
> > ;;
> > *)
> > echo "Usage: $0 start|stop|status" >&2
> > exit 3
> > ;;
> > esac
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
--
Joel Roth
::
Re: [DNG] Sysvinit script doesn't t…
