Describe the bug
After bumping systemd from 253.6 to 254.3, a oneshot service using credentials no longer starts:
Oct 01 12:15:59 azazel systemd[1]: Starting Wallabag install service...
Oct 01 12:15:59 azazel (ll-start)[519003]: wallabag-install.service: Failed to set up credentials: Protocol error
Oct 01 12:15:59 azazel (ll-start)[519003]: wallabag-install.service: Failed at step CREDENTIALS spawning /nix/store/mlwk9kpwsvq82phwcwcq42da0giwsypr-unit-script-wallabag-install-start/bin/wallabag-install-start: Protocol error
Oct 01 12:16:00 azazel systemd[1]: wallabag-install.service: Main process exited, code=exited, status=243/CREDENTIALS
Oct 01 12:16:00 azazel systemd[1]: wallabag-install.service: Failed with result 'exit-code'.
Oct 01 12:16:00 azazel systemd[1]: Failed to start Wallabag install service.
Steps To Reproduce
Trying to switch to a configuration with this service: https://github.com/jtojnar/nixfiles/blob/384248379d6d6a8bddbc6f8334ecbea886671483/hosts/azazel/ogion.cz/bag/default.nix#L201-L204
wallabag-install.service
[Unit]
After=postgresql.service
Before=phpfpm-bag.service
Description=Wallabag install service
[Service]
Environment="LOCALE_ARCHIVE=/nix/store/23j503pfa2gvdi4hgldsqkwzg80bdicn-glibc-locales-2.37-8/lib/locale/locale-archive"
Environment="PATH=/nix/store/y9gr7abwxvzcpg5g73vhnx1fpssr5frr-coreutils-9.3/bin:/nix/store/ysdsy30i42qbm0d4sl0illn52bam46rk-php-with-extensions-8.2.10/bin:/nix/store/binxgxrbqm8bavili2kr7vy1s2257mzv-composer-2.6.3/bin:/nix/store/y9gr7abwxvzcpg5g73vhnx1fpssr5frr-coreutils-9.3/bin:/nix/store/b6izr8wh0p7dyvh3cyg14wq2rn8d31ik-findutils-4.9.0/bin:/nix/store/xafzciap7acqhfx84dvqkp18bg4lrai3-gnugrep-3.11/bin:/nix/store/x23by79p38ll0js1alifmf3y56vqfs49-gnused-4.9/bin:/nix/store/1zmmnm0r0bdga398rl7fc7s4hkyqxjk4-systemd-254.3/bin:/nix/store/y9gr7abwxvzcpg5g73vhnx1fpssr5frr-coreutils-9.3/sbin:/nix/store/ysdsy30i42qbm0d4sl0illn52bam46rk-php-with-extensions-8.2.10/sbin:/nix/store/binxgxrbqm8bavili2kr7vy1s2257mzv-composer-2.6.3/sbin:/nix/store/y9gr7abwxvzcpg5g73vhnx1fpssr5frr-coreutils-9.3/sbin:/nix/store/b6izr8wh0p7dyvh3cyg14wq2rn8d31ik-findutils-4.9.0/sbin:/nix/store/xafzciap7acqhfx84dvqkp18bg4lrai3-gnugrep-3.11/sbin:/nix/store/x23by79p38ll0js1alifmf3y56vqfs49-gnused-4.9/sbin:/nix/store/1zmmnm0r0bdga398rl7fc7s4hkyqxjk4-systemd-254.3/sbin"
Environment="TZDIR=/nix/store/dk5vk3c9zknbjzzxmiglzv46qgv32gb0-tzdata-2023c/share/zoneinfo"
CacheDirectory=wallabag
CacheDirectoryMode=700
ConfigurationDirectory=wallabag
ExecStart=/nix/store/mlwk9kpwsvq82phwcwcq42da0giwsypr-unit-script-wallabag-install-start/bin/wallabag-install-start
LoadCredential=secret:/run/agenix/bag.ogion.cz-secret
LogsDirectory=wallabag
StateDirectory=wallabag
StateDirectoryMode=700
Type=oneshot
User=bag
More minimal steps TBD.
I tried building a minimal configuration in a VM but it worked there.
Expected behavior
The service should start without issue as before.
Additional context
I am using LoadCredential with agenix path owned by the user service:
$ ls -la /run/agenix/bag.ogion.cz-secret
-r-------- 1 bag bag 49 Oct 1 12:38 /run/agenix/bag.ogion.cz-secret
It fails with store path as well.
There are some credentials-related changes in 254: https://github.com/systemd/systemd/blob/174e8e9897c2d1c8b2c8324f07a6c784d7127410/NEWS#L304-L309
Notify maintainers
Metadata
This is running on VPSAdminOS so maybe there is something weird going on.
[user@system:~]$ nix-shell -p nix-info --run "nix-info -m"
- system: `"x86_64-linux"`
- host os: `Linux 6.5.4, NixOS, 23.11 (Tapir), 23.11.20230927.eb9b1d1`
- multi-user?: `no`
- sandbox: `yes`
- version: `nix-env (Nix) 2.15.1`
- channels(jtojnar): `""`
- channels(root): `""`
- nixpkgs: `not found`
Describe the bug
After bumping systemd from 253.6 to 254.3, a oneshot service using credentials no longer starts:
Steps To Reproduce
Trying to switch to a configuration with this service: https://github.com/jtojnar/nixfiles/blob/384248379d6d6a8bddbc6f8334ecbea886671483/hosts/azazel/ogion.cz/bag/default.nix#L201-L204
wallabag-install.service
More minimal steps TBD.
I tried building a minimal configuration in a VM but it worked there.
Expected behavior
The service should start without issue as before.
Additional context
I am usingLoadCredentialwith agenix path owned by the user service:It fails with store path as well.
There are some credentials-related changes in 254: https://github.com/systemd/systemd/blob/174e8e9897c2d1c8b2c8324f07a6c784d7127410/NEWS#L304-L309
Notify maintainers
Metadata
This is running on VPSAdminOS so maybe there is something weird going on.