Nested jobs are problematic as they usually result in a deadlock – you'll have to use "/bin/systemctl --no-block restart docker" there. Though the whole setup in general seems suspicious... <div class="gmail_quote"><div dir="ltr">On Sat, Apr 8, 2017, 18:29 Alex Chistyakov <<a href="mailto:alexclear@gmail.com">alexclear@gmail.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello, I am trying to establish a connection between firewalld and docker services. I extended the default firewalld.service unit file by adding the following: [Service] ExecStartPost=-/bin/bash -c '/usr/bin/test -f /etc/default/docker && /bin/systemctl stop docker && /bin/systemctl start docker' to /etc/systemd/system/firewalld.service.d/docker.conf. But this did not work, firewalld service timed out on start: root@ubuntu-xenial:~# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Drop-In: /etc/systemd/system/firewalld.service.d └─docker.conf Active: failed (Result: timeout) since Sat 2017-04-08 14:39:45 UTC; 1min 35s ago Process: 26050 ExecStartPost=/bin/bash -c /usr/bin/test -f /etc/default/docker && /bin/systemctl stop docker && /bin/systemctl start docker (code=killed, signal=TERM) Process: 26000 ExecStart=/usr/sbin/firewalld --nofork --nopid (code=exited, status=0/SUCCESS) Main PID: 26000 (code=exited, status=0/SUCCESS) Apr 08 14:38:10 ubuntu-xenial systemd[1]: Starting firewalld - dynamic firewall daemon... Apr 08 14:39:41 ubuntu-xenial systemd[1]: firewalld.service: Start-post operation timed out. Stopping. Apr 08 14:39:45 ubuntu-xenial systemd[1]: Failed to start firewalld - dynamic firewall daemon. Apr 08 14:39:45 ubuntu-xenial systemd[1]: firewalld.service: Unit entered failed state. Apr 08 14:39:45 ubuntu-xenial systemd[1]: firewalld.service: Failed with result 'timeout'. I am aware of BindTo and Requires but I would like to restart the docker service on every state change of firewalld so these directives do not solve my problem. Thank you, -- SY, Alex _______________________________________________ systemd-devel mailing list <a href="mailto:systemd-devel@lists.freedesktop.org" class="gmail_msg" target="_blank">systemd-devel@lists.freedesktop.org</a> <a href="https://lists.freedesktop.org/mailman/listinfo/systemd-devel" rel="noreferrer" class="gmail_msg" target="_blank">https://lists.freedesktop.org/mailman/listinfo/systemd-devel</a> </blockquote></div><div dir="ltr">-- </div><div data-smartmail="gmail_signature">Mantas Mikulėnas <<a href="mailto:grawity@gmail.com">grawity@gmail.com</a>> Sent from my phone </div>