crowdsec is a rootfull container see /var/lib/nethserver
2 Likes
It’s https://app.crowdsec.net, see also CrowdSec — NS8 documentation
shorter
I would have prefered that you restart only the service rather the whole system, I wanted to determinate who was the culprit, the kernel/system or more targeted on the crowdsec side.
For what I read the decision was done by crowdsec and applied by the bouncer but no clue why nftables did not receive it
It did’t work.
In my limited knowledge the response to the command
systemctl --user restart crowdsec1-firewall-bouncer
was
Failed to connect to bus: Kein Medium gefunden
thats why I asked about where to find it 
1 Like
systemctl restart crowdsec1-firewall-bouncer crowdsec1
rootfull container 
2 Likes
ahhhh. ok, thank you.
and how could I know that this would be a rootfull container?
1 Like
[root@R1-pve ~]# ls /var/lib/nethserver/crowdsec1/
else rootless are in /home