Stefan Fritsch wrote: > On Monday, 16 April 2018 20:34:00 CEST Matthew Gabeler-Lee wrote: > > On Sat, 14 Apr 2018, Stefan Fritsch wrote: > > > This seems to be a systemd bug. Changing PrivateTmp from true to false in > > > apache2.service fixes the issue. But even with PrivateTmp it works for > > > some time. It would be interesting what is the trigger to make it fail > > > later on. > > > > Hmm ... I was having a problem on some systems where tmpreaper, in its > > default configuration, will eventually delete all the directories > > systemd creates to support PrivateTmp, which might explain this... > > That seems a likely explanation. I have tmpreaper installed, too. The default > keep time is 7 days, which explains why the issue does not appear immediately. > > So tmpreaper should exclude systemd-private-* files by default. Moritz, do > you > also have some cron job cleaning up stale files in /tmp ?
Good catch, in fact we do! And it's only enabled for our mediawiki installations, which would also explain why we don't run into it with our other Apache installations on stretch: https://github.com/wikimedia/puppet/blob/production/modules/profile/manifests/mediawiki/common.pp#L16 and https://github.com/wikimedia/puppet/blob/production/modules/tmpreaper/manifests/init.pp Cheers, Moritz