http://bugzilla.opensuse.org/show_bug.cgi?id=996203 http://bugzilla.opensuse.org/show_bug.cgi?id=996203#c8 --- Comment #8 from Per Jessen --- (In reply to Petr Gajdos from comment #6)

(In reply to Dr. Werner Fink from comment #5)

...

or similar therefore I's like to suggest something like

PrivateTmp=false NoNewPrivileges=yes

Per, could you please test this setting? I know that you said it can not be reproduced reliably, but I am afraid we do not have any other possibility than narrow the problem.

Hi Petr I have just used those settings on a different apache (openSUSE 12.3), didn't see any problems. I'll update with the status from the xen guest with 13.2. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=996203 http://bugzilla.opensuse.org/show_bug.cgi?id=996203#c11 --- Comment #11 from Per Jessen --- Have just tried reloading apache on mysogo - SSL certificate renewal: Nov 04 08:28:28 mysogo systemd[1]: Reloading The Apache Webserver. Nov 04 08:28:28 mysogo systemd[26320]: Failed at step NAMESPACE spawning /usr/sbin/start_apache2: Operation not permitted Nov 04 08:28:28 mysogo systemd[1]: apache2.service: control process exited, code=exited status=226 Nov 04 08:28:28 mysogo systemd[1]: Reload failed for The Apache Webserver. Nov 04 08:28:36 mysogo systemd[1]: Reloading The Apache Webserver. Nov 04 08:28:36 mysogo systemd[26325]: Failed at step NAMESPACE spawning /usr/sbin/start_apache2: Operation not permitted Nov 04 08:28:36 mysogo systemd[1]: apache2.service: control process exited, code=exited status=226 Nov 04 08:28:36 mysogo systemd[1]: Reload failed for The Apache Webserver. # systemctl cat apache2 # /usr/lib/systemd/system/apache2.service [Unit] Description=The Apache Webserver Wants=network.target nss-lookup.target After=network.target nss-lookup.target Before=getty@tty1.service plymouth-quit.service xdm.service [Service] Type=notify PrivateTmp=true EnvironmentFile=/etc/sysconfig/apache2 ExecStart=/usr/sbin/start_apache2 -D SYSTEMD -DFOREGROUND -k start ExecReload=/usr/sbin/start_apache2 -D SYSTEMD -DFOREGROUND -k graceful ExecStop=/usr/sbin/start_apache2 -D SYSTEMD -DFOREGROUND -k graceful-stop [Install] WantedBy=multi-user.target Alias=httpd.service # /etc/systemd/system/apache2.service.d/extra.conf [Service] KillMode=mixed -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=996203 http://bugzilla.opensuse.org/show_bug.cgi?id=996203#c19 Archie Cobbs changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |archie.cobbs@gmail.com --- Comment #19 from Archie Cobbs --- FWIW, I just saw a similar problem. Totally out of the blue. I have an RPM that includes the SSL certificate. To update the SSL certificate I build and install a new version of the RPM. The RPM contains this script: %post # Reload apache if systemctl -q is-active apache2.service; then systemctl reload-or-try-restart apache2.service fi This has worked normally for years on 10+ different machines. Suddenly today instead I got this error: apache2.service: Failed at step NAMESPACE spawning /usr/sbin/start_apache2: No such file or directory Here is the relevant journalctl output: Nov 22 12:42:19 prod systemd[1]: Stopping The Apache Webserver... Nov 22 12:42:19 prod systemd[2793]: apache2.service: Failed at step NAMESPACE spawning /usr/sbin/start_apache2: No such file or directory Nov 22 12:42:19 prod systemd[1]: apache2.service: Control process exited, code=exited status=226 Nov 22 12:42:19 prod systemd[1]: Stopped The Apache Webserver. Nov 22 12:42:19 prod systemd[1]: apache2.service: Unit entered failed state. Nov 22 12:42:19 prod systemd[1]: apache2.service: Failed with result 'exit-code'. Nov 22 12:42:19 prod systemd[1]: Starting The Apache Webserver... Nov 22 12:42:19 prod systemd[1]: Started The Apache Webserver. I then logged in and did "systemctl restart apache2" and everything was fine. Running "rpm -V apache2" showed nothing amiss. This smells to me like some kind of systemd internal race condition bug. Let me know if I can provide more info. Versions: openSUSE Leap 15.0 apache2-2.4.33-lp150.2.23.1.x86_64 systemd-234-lp150.20.15.1.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.