Bug#972064: Service does not start: Problem with tomcat-update-policy.sh in tomcat9.service

[Jan Michael Greiner]

Package: tomcat9
Version: 9.0.31-1~deb10u2
Severity: normal

Dear all,


Debian 10.6 inside LXC (Linux Container).
Freshly installed Tomcat9.


service tomcat9 start

outputs:

Job for tomcat9.service failed because the control process exited with error
code.
See "systemctl status tomcat9.service" and "journalctl -xe" for details.



Output from journalctl -xe:

Oct 11 21:55:28 tomcatsni systemd[1]: Starting Apache Tomcat 9 Web Application
Server...
-- Subject: A start job for unit tomcat9.service has begun execution
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- A start job for unit tomcat9.service has begun execution.
--
-- The job identifier is 761.
Oct 11 21:55:28 tomcatsni systemd[1164]: tomcat9.service: Failed to set up
mount namespacing: Permission denied
Oct 11 21:55:28 tomcatsni systemd[1164]: tomcat9.service: Failed at step
NAMESPACE spawning /usr/libexec/tomcat9/tomcat-update-policy.sh: Permis
-- Subject: Process /usr/libexec/tomcat9/tomcat-update-policy.sh could not be
executed
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- The process /usr/libexec/tomcat9/tomcat-update-policy.sh could not be
executed and failed.
--
-- The error number returned by this process is ERRNO.
Oct 11 21:55:28 tomcatsni systemd[1]: tomcat9.service: Control process exited,
code=exited, status=226/NAMESPACE
-- Subject: Unit process exited
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- An ExecStartPre= process belonging to unit tomcat9.service has exited.
--
-- The process' exit code is 'exited' and its exit status is 226.
Oct 11 21:55:28 tomcatsni systemd[1]: tomcat9.service: Failed with result
'exit-code'.
-- Subject: Unit failed
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- The unit tomcat9.service has entered the 'failed' state with result 'exit-
code'.
Oct 11 21:55:28 tomcatsni systemd[1]: Failed to start Apache Tomcat 9 Web
Application Server.
-- Subject: A start job for unit tomcat9.service has failed
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- A start job for unit tomcat9.service has finished with a failure.
--
-- The job identifier is 761 and the job result is failed.



After creating /var/lib/tomcat9/policy/catalina.policy by hand, and commenting
out the line

ExecStartPre=+/usr/libexec/tomcat9/tomcat-update-policy.sh

from /lib/systemd/system/tomcat9.service, everything is ok.


Best regards

Jan Michael Greiner



-- System Information:
Debian Release: 9.13
  APT prefers oldstable
  APT policy: (500, 'oldstable')
Architecture: i386 (i686)

Kernel: Linux 4.9.0-13-686-pae (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)