ztlockdown fails on centos: ufw throws "problem running"

[andrewgdotcom]

ztlockdown attempts to work around this by running the ufw invocation twice, sleeping between invocations, but this does not work reliably. We need to track down and address the root cause.

[andrewgdotcom]

Experiments show that it will eventually work, in this case it works at the third attempt.

[root@woomera ~]# PORT=997
[root@woomera ~]# while ! ufw allow to any port $PORT; do sleep 1; done
ERROR: problem running
ERROR: problem running
Skipping adding existing rule
Skipping adding existing rule (v6)
[root@woomera ~]# PORT=996
[root@woomera ~]# while ! ufw allow to any port $PORT; do sleep 1; done
ERROR: problem running
ERROR: problem running
Skipping adding existing rule
Skipping adding existing rule (v6)
[root@woomera ~]# PORT=995
[root@woomera ~]# while ! ufw allow to any port $PORT; do sleep 1; done
ERROR: problem running
ERROR: problem running
Skipping adding existing rule
Skipping adding existing rule (v6)
[root@woomera ~]# 

[andrewgdotcom]

workaround improved in 71a3a2a