Re: Fresh install (ubuntu) permissions issues
[email protected] Sat, 30 May 2026 14:15:26 -0400
| Newsgroups | gmane.comp.sysutils.backup.backuppc.general |
|---|---|
| Message-ID | <[email protected]> |
--===============8744692528189861525== Content-Type: multipart/alternative; boundary=0cbcc140dd599e970cfe1bcecc1b2faf00fa2dac --0cbcc140dd599e970cfe1bcecc1b2faf00fa2dac Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Tomas: You are a genius. Adding "ReadWritePaths=3D/etc/backuppc" to /lib/systemd/system/apache2.s= ervice (and to /lib/systemd/system/[email protected] for good measure) an= d doing a systemctl daemon-reload (and restarting apache2 and backuppc f= or good measure also) solved the problem. On Sat, May 30, 2026, at 1:22 PM, [email protected] wrote: > On Sat, May 30, 2026 at 01:06:36PM -0400, [email protected].= org wrote: > > I've done a lot of digging into this, and while I have not solved it= yet, I want to document in case anyone else runs into this problem and = finds this through archives of this mailing list. > >=20 > > First off, this is an issue introduced with the recently released Ub= untu 26.04 LTS. I fired up a spare machine that had 24.04 LTS running o= n it, and all I had to do was "sudo apt install apache2" and "sudo apt i= nstall backuppc", start both with systemctl and was instantly up and run= ning, with no problems modifying the configuration files. If I don't ge= t this figured out I may just go and load 24.04 on my backuppc server bo= x, but would prefer to be more up to date. >=20 > [...] >=20 > This is (almost certainly by now) a new "hardening" feature of > systemd, which mounts (-bind, I think) some things (but only for > some daemons!), among others /usr, /boot, /efi and, depending on > config, /etc read-only. >=20 > This explains nicely the -EROFS you are getting. It is not a lie. >=20 > Quoting from [1]: >=20 > From the documentation on ProtectSystem=3D >=20 > Takes a boolean argument or the special values "full" or > "strict". If true, mounts the /usr and the boot loader > directories (/boot and /efi) read-only for processes > invoked by this unit. If set to "full", the /etc directory > is mounted read-only, too. >=20 > So systemd trying to be helpful, it seems. >=20 > Cheers >=20 > [1] https://askubuntu.com/questions/1275668/logrotate-succeeds-when-ma= nually-run-as-root-but-fails-with-read-only-file-sys > --=20 > tom=C3=A1s >=20 > _______________________________________________ > BackupPC-users mailing list > [email protected] > List: https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki: https://github.com/backuppc/backuppc/wiki > Project: https://backuppc.github.io/backuppc/ >=20 >=20 > *Attachments:* > =E2=80=A2 signature.asc --0cbcc140dd599e970cfe1bcecc1b2faf00fa2dac Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <!DOCTYPE html><html><head><title></title></head><body><div style=3D"fon= t-family:Verdana;">Tomas:</div><div style=3D"font-family:Verdana;"><br><= /div><div style=3D"font-family:Verdana;">You are a genius.</div><div sty= le=3D"font-family:Verdana;"><br></div><div style=3D"font-family:Verdana;= ">Adding "ReadWritePaths=3D/etc/backuppc" to /lib/systemd/system/apache2= .service (and to /lib/systemd/system/[email protected] for good meas= ure) and doing a systemctl daemon-reload (and restarting apache2 and bac= kuppc for good measure also) solved the problem.<br></div><div style=3D"= font-family:Verdana;"><br></div><div>On Sat, May 30, 2026, at 1:22 PM,&n= bsp;<a href=3D"mailto:[email protected]">[email protected]</a> wrote:</div= ><blockquote type=3D"cite" id=3D"qt" style=3D""><div style=3D"font-famil= y:Verdana;">On Sat, May 30, 2026 at 01:06:36PM -0400, <a href=3D"ma= ilto:[email protected]">[email protected]</a= > wrote:</div><div style=3D"font-family:Verdana;">> I've done a lot o= f digging into this, and while I have not solved it yet, I want to docum= ent in case anyone else runs into this problem and finds this through ar= chives of this mailing list.</div><div style=3D"font-family:Verdana;">&g= t; </div><div style=3D"font-family:Verdana;">> First off, this i= s an issue introduced with the recently released Ubuntu 26.04 LTS. = I fired up a spare machine that had 24.04 LTS running on it, and all I = had to do was "sudo apt install apache2" and "sudo apt install backuppc"= , start both with systemctl and was instantly up and running, with no pr= oblems modifying the configuration files. If I don't get this figu= red out I may just go and load 24.04 on my backuppc server box, but woul= d prefer to be more up to date.</div><div style=3D"font-family:Verdana;"= ><br></div><div style=3D"font-family:Verdana;">[...]</div><div style=3D"= font-family:Verdana;"><br></div><div style=3D"font-family:Verdana;">This= is (almost certainly by now) a new "hardening" feature of</div><div sty= le=3D"font-family:Verdana;">systemd, which mounts (-bind, I think) some = things (but only for</div><div style=3D"font-family:Verdana;">some daemo= ns!), among others /usr, /boot, /efi and, depending on</div><div style=3D= "font-family:Verdana;">config, /etc read-only.</div><div style=3D"font-f= amily:Verdana;"><br></div><div style=3D"font-family:Verdana;">This expla= ins nicely the -EROFS you are getting. It is not a lie.</div><div style=3D= "font-family:Verdana;"><br></div><div style=3D"font-family:Verdana;">Quo= ting from [1]:</div><div style=3D"font-family:Verdana;"><br></div><div s= tyle=3D"font-family:Verdana;"> From the documentation on ProtectSy= stem=3D</div><div style=3D"font-family:Verdana;"><br></div><div style=3D= "font-family:Verdana;"> Takes a boolean argument or th= e special values "full" or</div><div style=3D"font-family:Verdana;">&nbs= p; "strict". If true, mounts the /usr and the boot loader</d= iv><div style=3D"font-family:Verdana;"> directories (/= boot and /efi) read-only for processes</div><div style=3D"font-family:Ve= rdana;"> invoked by this unit. If set to "full", the /= etc directory</div><div style=3D"font-family:Verdana;">  = ; is mounted read-only, too.</div><div style=3D"font-family:Verdana;"><b= r></div><div style=3D"font-family:Verdana;">So systemd trying to be help= ful, it seems.</div><div style=3D"font-family:Verdana;"><br></div><div s= tyle=3D"font-family:Verdana;">Cheers</div><div style=3D"font-family:Verd= ana;"><br></div><div style=3D"font-family:Verdana;">[1] <a href=3D"= https://askubuntu.com/questions/1275668/logrotate-succeeds-when-manually= -run-as-root-but-fails-with-read-only-file-sys">https://askubuntu.com/qu= estions/1275668/logrotate-succeeds-when-manually-run-as-root-but-fails-w= ith-read-only-file-sys</a></div><div style=3D"font-family:Verdana;">--&n= bsp;</div><div style=3D"font-family:Verdana;">tom=C3=A1s</div><div style= =3D"font-family:Verdana;"><br></div><div style=3D"font-family:Verdana;">= _______________________________________________</div><div style=3D"font-= family:Verdana;">BackupPC-users mailing list</div><div style=3D"font-fam= ily:Verdana;"><a href=3D"mailto:[email protected]">Ba= [email protected]</a></div><div style=3D"font-family:Ve= rdana;">List: <a href=3D"https://lists.sourceforg= e.net/lists/listinfo/backuppc-users">https://lists.sourceforge.net/lists= /listinfo/backuppc-users</a></div><div style=3D"font-family:Verdana;">Wi= ki: <a href=3D"https://github.com/backuppc/backup= pc/wiki">https://github.com/backuppc/backuppc/wiki</a></div><div style=3D= "font-family:Verdana;">Project: <a href=3D"https://backuppc.github.= io/backuppc/">https://backuppc.github.io/backuppc/</a></div><div style=3D= "font-family:Verdana;"><br></div><div><br></div><div><b>Attachments:</b>= </div><ul><li>signature.asc</li></ul></blockquote><div style=3D"font-fam= ily:Verdana;"><br></div></body></html> --0cbcc140dd599e970cfe1bcecc1b2faf00fa2dac-- --===============8744692528189861525== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============8744692528189861525== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ BackupPC-users mailing list [email protected] List: https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki: https://github.com/backuppc/backuppc/wiki Project: https://backuppc.github.io/backuppc/ --===============8744692528189861525==--