root@pingu-mobil:~$ systemctl status e2scrub_reap
● e2scrub_reap.service - Remove Stale Online ext4 Metadata Check Snapshots
Loaded: loaded (/lib/systemd/system/e2scrub_reap.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Tue 2021-12-28 14:14:39 CET; 23h ago
Docs: man:e2scrub_all(8)
Main PID: 9677 (code=exited, status=218/CAPABILITIES)
$ systemctl edit e2scrub_reap
[Service]
CapabilityBoundingSet=
NoNewPrivileges=no
Dann nur mit CababilityBoundingSet? verschwindet zwar der Fehler 218/CAPABILITIES. Dann kommt jedoch der gute alte 227/NO_NEW_PRIVILEGES zum Vorschein. :-) Mit beiden Anweisungen in der Override-Datei lässt sich der Service nun jedoch starten.
$ systemctl restart e2scrub_reap
$ systemctl status e2scrub_reap
● e2scrub_reap.service - Remove Stale Online ext4 Metadata Check Snapshots
Loaded: loaded (/lib/systemd/system/e2scrub_reap.service; enabled; vendor preset: enabled)
Drop-In: /etc/systemd/system/e2scrub_reap.service.d
└─override.conf
Active: inactive (dead) since Wed 2021-12-29 13:52:27 CET; 1s ago
Docs: man:e2scrub_all(8)
Process: 1697 ExecStart?=/sbin/e2scrub_all -A -r (code=exited, status=0/SUCCESS)
Main PID: 1697 (code=exited, status=0/SUCCESS)