Sergey G. Brester

Hmm... The issue (with not renaming `.tmp` by install) may happen here: https://github.com/mcmilk/7-Zip-zstd/blob/62bfad55c339f7f76b1880a59378245b6dfbbf49/C/Util/7zipInstall/7zipInstall.c#L1560 Just I still don't follow why - since it seems to add the operation to `HKLM\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations`...

Well it can be true - the detection of log rotation is based on few things: - file disappears for few moments (or e. g. received a deletion/renaming event from...

> So what happens if the log is deleted and a new log is created and populated with the same name? Obviously, since this is the way how all known...

> When I look at the fail2ban.log, it clearly shows what it is banning. No specific errors. Also for mentioned jail `asm-custom-docker`? > It's just the bans for the asm-custom-docker...

Just as an idea (to ensure it's consistent handling) - maybe it is cached file in container? See https://github.com/fail2ban/fail2ban/issues/3779#issuecomment-2198587073

> I had to manually tweak the "systemd" in /etc/fail2ban/paths-common.conf to replace Well, it depends what `paths-common.conf` does contain in your case, e. g. whether it was (incorrectly) patched by...

> Seems There is a bug with the Debian implementation of fail2ban, where the debian backend is now all systemd but fail2ban expects the old way for logging I don't...

Yep, it looks like good place for that... Just, the question is how it looks with other distros... If this is default name for the unit now, we could then...

> Had to revert it on arch. Hmm... why? There is still (unchanged) `_COMM=sshd` match what should additionally find sshd journal entries, doesn't it? Can you, please, provide a JSON...

No, it belong surely to this issue.