Bug#1125111: apache2: Apache2 won't start, error "Read-only file system: AH10082: Can't change owner of /etc/apache2/md/challenges"

Bastien Roucaries <[email protected]> Fri, 09 Jan 2026 17:53:28 +0100
Newsgroups gmane.linux.debian.devel.apache
Message-ID <3676520.aV6nBDHxoP__7678.29351113818$1767977728$gmane$org@debian-ei>
Le vendredi 9 janvier 2026, 17:43:03 heure normale d’Europe centrale Juan Rafael Fernández García a écrit :
> On Fri, 9 Jan 2026 at 15:47, Bastien Roucaries <[email protected]> wrote:
> >
> > control: tags -1 + moreinfo
> > control: severity -1 important
> >
> > Le vendredi 9 janvier 2026, 13:21:32 heure normale d’Europe centrale Juan-Rafael Fernandez a écrit :
> 
> > > [:error] ... (30)Read-only file system: AH10082: Can't change owner of
> > > /etc/apache2/md/challenges
> 
> > Yes but normally it store at root of document...
> > what is your mod_md configuration ?
> 
> I don't know if there's specific configuration for mod_md. I haven't
> touched anything in the apache2 configuration. By the way my
> /etc/apache2/md/ subdirectories were created in 2017.
> 
> And no change in /etc/letsencrypt/ since November either, and they
> were only changes to the SSLProtocol and SSLCipherSuite directives.
> 
> The only relevant new things were upgrading apache2, which brings
> ProtectSystem full, and starting to use Mullvad VPN, with nftables
> problems I have to solve.
> 
> If you need further information please just tell me what specific files to send.
> 
> Maybe an exception permitting writing in /etc/apache2/md/challenges/
> would solve the problem?

No the solution is to move this directory to /var/cache/apache2 

What is the output of
- dpkg -L apache2 
- dpkg -S /etc/apache2/md 

rouca
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=5xJV
-----END PGP SIGNATURE-----