Bug#923921: systemd: Updating systemd breaks Dovecot (and possibly other services)

[Michael Biebl]

On Thu, 07 Mar 2019 08:33:57 +0100 Nico Haase <debian at nicohaase.de> wrote:
> Package: systemd
> Version: 241-1~bpo9+1
> Severity: normal
> 
> Dear Maintainer,
> 
> this morning, apticron reminded me (once more) to upgrade some packages from stretch-backports. These included dovecot-core and systemd (and others). After having installed all of them, Dovecot refused to start.
> 
> The following lines were reported in daemon.log:
> 
> Mar  7 07:35:25 host systemd[1]: Started Dovecot IMAP/POP3 email server.
> Mar  7 07:35:25 host systemd[30913]: dovecot.service: Failed to set up mount namespacing: Permission denied
> Mar  7 07:35:25 host systemd[30913]: dovecot.service: Failed at step NAMESPACE spawning /usr/sbin/dovecot: Permission denied
> Mar  7 07:35:25 host systemd[1]: dovecot.service: Main process exited, code=exited, status=226/NAMESPACE
> Mar  7 07:35:25 host systemd[1]: dovecot.service: Failed with result 'exit-code'.
> 
> I have no clue how to solve this, as there a no canonical sources for that messages. The only obvious thing was to downgrade systemd to 232-25+deb9u9 again, which let me start Dovecot again.
> 
> If there is anything I can do to help you spot the error, please ask. I'm not that experienced with systemd, but I'd be able to run upgrades or other commands that could provide more information.

https://support.plesk.com/hc/en-us/articles/115001908314-Unable-to-start-Dovecot-Failed-at-step-NAMESPACE-spawning-usr-sbin-dovecot-Permission-denied
is a similar problem.
Might be worth checking if apparmor is installed and active.

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20190309/2891d90d/attachment.sig>