Re: Fresh install (ubuntu) permissions issues

--===============7543842622096081781==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="W4sBco9O4B49WP81"
Content-Disposition: inline


--W4sBco9O4B49WP81
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, May 30, 2026 at 01:06:36PM -0400, [email protected] w=
rote:
> I've done a lot of digging into this, and while I have not solved it yet,=
 I want to document in case anyone else runs into this problem and finds th=
is through archives of this mailing list.
>=20
> First off, this is an issue introduced with the recently released Ubuntu =
26.04 LTS.  I fired up a spare machine that had 24.04 LTS running on it, an=
d all I had to do was "sudo apt install apache2" and "sudo apt install back=
uppc", start both with systemctl and was instantly up and running, with no =
problems modifying the configuration files.  If I don't get this figured ou=
t I may just go and load 24.04 on my backuppc server box, but would prefer =
to be more up to date.

[...]

This is (almost certainly by now) a new "hardening" feature of
systemd, which mounts (-bind, I think) some things (but only for
some daemons!), among others /usr, /boot, /efi and, depending on
config, /etc read-only.

This explains nicely the -EROFS you are getting. It is not a lie.

Quoting from [1]:

  From the documentation on ProtectSystem=3D

    Takes a boolean argument or the special values "full" or
    "strict". If true, mounts the /usr and the boot loader
    directories (/boot and /efi) read-only for processes
    invoked by this unit. If set to "full", the /etc directory
    is mounted read-only, too.

So systemd trying to be helpful, it seems.

Cheers

[1] https://askubuntu.com/questions/1275668/logrotate-succeeds-when-manuall=
y-run-as-root-but-fails-with-read-only-file-sys
--=20
tom=C3=A1s

--W4sBco9O4B49WP81
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQRp53liolZD6iXhAoIFyCz1etHaRgUCahscvwAKCRAFyCz1etHa
Rj6AAJ9BylbpynkgKZQI/XE4TeNgnuguxwCeNLyY+cSqZGXNjl8sLJ2P4I0QQRQ=
=UFC4
-----END PGP SIGNATURE-----

--W4sBco9O4B49WP81--


--===============7543842622096081781==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============7543842622096081781==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
BackupPC-users mailing list
[email protected]
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    https://github.com/backuppc/backuppc/wiki
Project: https://backuppc.github.io/backuppc/

--===============7543842622096081781==--