On Fri, Jan 09, 2026 at 04:47:48PM +0100, Bastien Roucaries wrote: > Le vendredi 9 janvier 2026, 13:21:32 heure normale d’Europe centrale > Juan-Rafael Fernandez a écrit : > > * What led up to the situation? > > > > I updated to 2.4.65-4 in Testing. > > > > * What was the outcome of this action? > > > > The server won't start and the following error is logged > > > > [:error] ... (30)Read-only file system: AH10082: Can't change owner of > > /etc/apache2/md/challenges > > [md:error] ... (30)Read-only file system: AH10047: setup challenges > > directory > > AH00016: Configuration Failed > > > > The cause? This, from NEWS.Debian.gz > > > > ProtectSystem is set to full by default; > > this mounts various system paths like /usr, /boot and > > /etc as read-only, enhancing overall system integrity. > > > > /etc/ is mounted read-only but apache module mod_md (included in package > > apache2) seems to need to write to /etc/apache2/md/challenges/). Maybe I > > should > > mention that I use Let's Encrypt certificates > > Yes but normally it store at root of document... > > what is your mod_md configuration ?
/etc/apache2/md contains other files that need to be writable. I fail to see how ProtectSystem=full can work there with the defaults of mod_md. Chris
