ipset v7.10: Set cannot be destroyed: it is in use by a kernel component

Richard G

Verified User
Joined
Jul 6, 2008
Messages
13,773
Location
Maastricht
We have 2 VPS systems with Contabo. One is with 64 GB memory and 10 cores, no issue at all.
This one is with 8 cores and 32 GB ram and this is having the issue that when restarting csf/lfd by issueing the csf -ra command in cli, this error apears in between.
ipset v7.10: Set cannot be destroyed: it is in use by a kernel component
I have tried reboot, no result
I have tried to set faststart=0. At first it worked, then the error came back.
Also set safechainupdate=1 because it's a VPS, same error.

It might all have to do with ipv6, however, the other vps is also working with ipv6 and no issue.

Code:
server# ipset list | egrep 'Name: |References: '
Name: chain_DENY
References: 2
Name: chain_6_DENY
References: 2
Name: chain_ALLOW
References: 2
Name: chain_6_ALLOW
References: 2

and
Code:
server#  ipset list | grep 'Name: '
Name: chain_DENY
Name: chain_6_DENY
Name: chain_ALLOW
Name: chain_6_ALLOW

Any way to fix this? @factor, @eva2000 any clue? Seen this before anyone?
 
Maybe this helps :
According to that link I should ignore it if I read correctly.
Seems odd to me, if one restarts CSF one would expect all lines to be rebuild, ipv4 as well as ipv6. But here the ipv6 won't be rebuild due to this kernel thing.
I don't quite understand, and I don't understand why it's not happening on the other VPS either.

Only difference is the other VPS is Almalinux and this VPS is Debian 11.
 
Back
Top