secubox-deb/packages/secubox-vhost/debian
CyberMind-FR 24000d67ea fix(services): add RuntimeDirectoryPreserve=yes to 96 secubox-* units
Hub + portal stayed `inactive (dead)` on real-hardware boot. The
journal error was `Failed to set up mount namespacing: /run/systemd/
unit-root/run/secubox: No such file or directory` at the NAMESPACE
step. Root cause: 96 services declare `RuntimeDirectory=secubox`
without the matching `RuntimeDirectoryPreserve=yes`. When any of them
stops (including any of the LXC-backed services that fail their
health probe and Restart=on-failure for a few cycles), systemd
removes /run/secubox on the way out. The next service with the same
RuntimeDirectory= that tries to namespace its inputs hits the gap
and falls into 226/NAMESPACE failure — Restart hammers a few times,
then the unit goes failed-permanent.

Earlier fmrelay + sentinelle units got the fix individually
(v2.12.0/v2.12.3 era). Now applied to all 96 remaining units in a
single sweep via:

  sed -i '/^RuntimeDirectory=secubox/a RuntimeDirectoryPreserve=yes' "$f"

No version bumps in changelog — `dpkg -i --force-depends` in the
live-USB slipstream picks up the new .deb regardless of version
number.
2026-05-26 09:50:22 +02:00
..
changelog feat(mail): Debian LXC containers for Postfix/Dovecot/Roundcube 2026-03-22 10:40:00 +01:00
control feat(mail): Debian LXC containers for Postfix/Dovecot/Roundcube 2026-03-22 10:40:00 +01:00
postinst feat: modular nginx config + hub roadmap + new modules 2026-03-21 20:34:01 +01:00
prerm fix: prerm scripts preserve nginx configs on upgrade + auth fixes 2026-03-21 21:07:14 +01:00
rules feat: three-fold architecture for streamlit, haproxy, metablogizer 2026-03-22 07:28:33 +01:00
secubox-vhost.install Initial commit: SecuBox-DEB migration from OpenWrt to Debian 2026-03-21 09:41:06 +01:00
secubox-vhost.service fix(services): add RuntimeDirectoryPreserve=yes to 96 secubox-* units 2026-05-26 09:50:22 +02:00
secubox.yaml feat(secubox): complete meta-script generator Tasks 14-17 2026-05-11 05:32:29 +02:00