Hardened service fails to start

Dear community,
I’m currently trying to create a test setup with Matrix’s Synapse in LXC.
The package itself uses systemd’s sandbox feature.

When I try to start the service in the LXC container, it produces the following error:

Jan 06 11:47:06 playtime systemd[1]: Starting Synapse Matrix homeserver (master)...
Jan 06 11:47:06 playtime systemd[159]: synapse.service: Failed to set up mount namespacing: /run/systemd/unit-root/proc/sys/kernel/domainname: No such file or directory
Jan 06 11:47:06 playtime systemd[159]: synapse.service: Failed at step NAMESPACE spawning /usr/bin/python3: No such file or directory
Jan 06 11:47:06 playtime systemd[1]: synapse.service: Main process exited, code=exited, status=226/NAMESPACE
Jan 06 11:47:06 playtime systemd[1]: synapse.service: Failed with result 'exit-code'.
Jan 06 11:47:06 playtime systemd[1]: Failed to start Synapse Matrix homeserver (master).

Online research indicated that this may be a bug in LXC, so I raised an issue on Github. But since this does not get attention, I would like to try and ask if anyone of you know what’s going on. Please refer to https://github.com/lxc/lxc/issues/4052 for a detailed description of the problem.

Best
istobic

Do you have /proc/sys/kernel/domainname in your container?

Hi Stéphane and thanks for your reply.
-rw-r--r-- 1 root root 0 Jan 13 06:25 domainname is present in the container.

I don’t know if this is related, but docker also does not work inside the container.
docker.service log:


Jan 13 06:32:23 matrix systemd[1]: Starting Docker Application Container Engine...
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.870484462Z" level=info msg="Starting up"
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.871112223Z" level=info msg="libcontainerd: started new containerd process" pid=716
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.871138258Z" level=info msg="parsed scheme: \"unix\"" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.871145244Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.871170174Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/containerd/containerd.sock  <nil> 0 <nil>}] <nil> <nil>}" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.871185568Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23Z" level=warning msg="deprecated version : `1`, please switch to version `2`"
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.889782753Z" level=info msg="starting containerd" revision=1407cab509ff0d96baa4f0eb6ff9980270e6e620.m version=v1.5.9
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.908589617Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.908641902Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.909967551Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.12-arch1-1\\n\"): skip plugin" type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.909992740Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.910152535Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/docker/containerd/daemon/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.910171473Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.910202574Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured"
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.910219026Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.910249093Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919436991Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919645817Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/docker/containerd/daemon/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919668178Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919703605Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured"
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919720022Z" level=info msg="metadata content store policy set" policy=shared
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919826080Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919850612Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919894529Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919942865Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919966563Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.919988193Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920008242Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920026838Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920050402Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920069982Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920089272Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920164035Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920275184Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920602553Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920643776Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920692163Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920705722Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920717296Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920727400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920738536Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920749755Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920762145Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920782329Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920794017Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920831769Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920846405Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920856996Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.920883738Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.921024434Z" level=info msg=serving... address=/var/run/docker/containerd/containerd-debug.sock
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.921072072Z" level=info msg=serving... address=/var/run/docker/containerd/containerd.sock.ttrpc
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.921122607Z" level=info msg=serving... address=/var/run/docker/containerd/containerd.sock
Jan 13 06:32:23 matrix dockerd[716]: time="2022-01-13T06:32:23.921137418Z" level=info msg="containerd successfully booted in 0.031891s"
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.925703756Z" level=info msg="parsed scheme: \"unix\"" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.925729026Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.925747665Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/containerd/containerd.sock  <nil> 0 <nil>}] <nil> <nil>}" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.925756713Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.926319047Z" level=info msg="parsed scheme: \"unix\"" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.926337600Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.926351584Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/containerd/containerd.sock  <nil> 0 <nil>}] <nil> <nil>}" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.926360917Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.934902196Z" level=info msg="[graphdriver] using prior storage driver: overlay2"
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.943920449Z" level=warning msg="Unable to find memory controller"
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.943946791Z" level=warning msg="Unable to find cpu controller"
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.943955298Z" level=warning msg="Unable to find io controller"
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.943960989Z" level=warning msg="Unable to find cpuset controller"
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.943966407Z" level=warning msg="Unable to find pids controller"
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.944122542Z" level=info msg="Loading containers: start."
Jan 13 06:32:23 matrix dockerd[704]: time="2022-01-13T06:32:23.978140183Z" level=warning msg="Running modprobe bridge br_netfilter failed with message: modprobe: WARNING: Module bridge not found in directory /lib/modules/5.15.12-arch1-1\nmodprobe: WARNING: Module br_netfilter not found in directory /lib/modules/5.15.12-arch1-1\n, error: exit status 1"
Jan 13 06:32:24 matrix dockerd[704]: time="2022-01-13T06:32:24.296661709Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address"
Jan 13 06:32:24 matrix dockerd[704]: time="2022-01-13T06:32:24.384992015Z" level=info msg="Loading containers: done."
Jan 13 06:32:24 matrix dockerd[704]: time="2022-01-13T06:32:24.404343900Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: running in a user namespace" storage-driver=overlay2
Jan 13 06:32:24 matrix dockerd[704]: time="2022-01-13T06:32:24.404794871Z" level=info msg="Docker daemon" commit=459d0dfbbb graphdriver(s)=overlay2 version=20.10.12
Jan 13 06:32:24 matrix dockerd[704]: time="2022-01-13T06:32:24.404921236Z" level=info msg="Daemon has completed initialization"
Jan 13 06:32:24 matrix systemd[1]: Started Docker Application Container Engine.
Jan 13 06:32:24 matrix dockerd[704]: time="2022-01-13T06:32:24.429782505Z" level=info msg="API listen on /run/docker.sock"
Jan 13 06:32:37 matrix dockerd[716]: time="2022-01-13T06:32:37.296104553Z" level=info msg="starting signal loop" namespace=moby path=/run/docker/containerd/daemon/io.containerd.runtime.v2.task/moby/f98c4760d461a4b2f0c8461d56655aeae088638c948039ad37f7486846f68b9f pid=953
Jan 13 06:32:37 matrix dockerd[716]: time="2022-01-13T06:32:37.333952582Z" level=info msg="shim disconnected" id=f98c4760d461a4b2f0c8461d56655aeae088638c948039ad37f7486846f68b9f
Jan 13 06:32:37 matrix dockerd[716]: time="2022-01-13T06:32:37.333998804Z" level=warning msg="cleaning up after shim disconnected" id=f98c4760d461a4b2f0c8461d56655aeae088638c948039ad37f7486846f68b9f namespace=moby
Jan 13 06:32:37 matrix dockerd[716]: time="2022-01-13T06:32:37.334019776Z" level=info msg="cleaning up dead shim"
Jan 13 06:32:37 matrix dockerd[716]: time="2022-01-13T06:32:37.357366012Z" level=warning msg="cleanup warnings time=\"2022-01-13T06:32:37Z\" level=info msg=\"starting signal loop\" namespace=moby pid=974\n"
Jan 13 06:32:37 matrix dockerd[716]: time="2022-01-13T06:32:37.357623409Z" level=error msg="copy shim log" error="read /proc/self/fd/13: file already closed"
Jan 13 06:32:37 matrix dockerd[704]: time="2022-01-13T06:32:37.358083490Z" level=error msg="stream copy error: reading from a closed fifo"
Jan 13 06:32:37 matrix dockerd[704]: time="2022-01-13T06:32:37.489192956Z" level=error msg="f98c4760d461a4b2f0c8461d56655aeae088638c948039ad37f7486846f68b9f cleanup: failed to delete container from containerd: no such container"
Jan 13 06:32:37 matrix dockerd[704]: time="2022-01-13T06:32:37.503386743Z" level=error msg="Handler for POST /v1.41/containers/f98c4760d461a4b2f0c8461d56655aeae088638c948039ad37f7486846f68b9f/start returned error: failed to create shim: OCI runtime create failed: container_linux.go:380: starting container process caused: process_linux.go:402: getting the final child's pid from pipe caused: EOF: unknown"

Is there anything I can do to debug this? Or is it an unintended use case?

Hmm, nothing super obvious here.

What kernel are you running on?

I’m running 5.16.1-arch1-1 #1 SMP PREEMPT.

@brauner any idea (mostly about the initial bit of systemd weirdness)?

For the matrix install, could you provide step by step instructions for what you did?
Specifically looking for what image you used and what package you’re installing from where so we can try to reproduce it here.

Yes, of course.
In the first post you can find the link to the corresponding issue on Github.
I provided the step-by-step instructions in Steps to reproduce. There is also a link to an asciinema showing the complete steps.
According to this comment I think @brauner was able to reproduce the issue.

Let me know if I can provide you with anything else that helps you.

Ok, I figured this out.

So in your override-hardened.conf you have the line

ProcSubset=pid

set. This line will cause procfs to be mounted with the subset=pid option. The subset=pid option means that only /proc/<pid> directories will be visible and no other procfs files.

Consequently, the /run/systemd/unit-root/proc/sys/kernel/domainname file will not be available to the synapse.service. So in order to have a functioning service you will need to disable ProcSubset=pid in your override-hardened.conf. The subset=pid mount option for procfs will be available on reletaviely new kernels. Older kernels that do not support this option will work.

Hi Christian and thanks for looking into it.

If I’m understanding your explanation correctly, the override-hardened.conf would also not work on the host system of the LXC container, since they both run the same kernel.
Could you explain why the same package (including override-hardened.conf) works on the host but not inside the LXC container? Or am I missing something?

Do the host override-hardened.conf and the container’s override-hardened.conf match?

They’re installed with the package manager. But I double-checked and can confirm that they match.
The only difference I noticed just now, that inside the LXC-container there is another Drop-In listed (zzz-lxc-service.conf) at the synapse.service unit:
Inside LXC:

[root@playtime /]# systemctl status synapse.service
● synapse.service - Synapse Matrix homeserver (master)
     Loaded: loaded (/usr/lib/systemd/system/synapse.service; disabled; vendor preset: disabled)
    Drop-In: /usr/lib/systemd/system/synapse.service.d
             └─override-hardened.conf
             /run/systemd/system/service.d
             └─zzz-lxc-service.conf
     Active: activating (auto-restart) (Result: exit-code) since Fri 2022-01-21 11:35:38 UTC; 837ms ago
    Process: 109 ExecStart=/usr/bin/python3 -m synapse.app.homeserver --config-path=/etc/synapse/homeserver.yaml (code=exited, status=226/NAM>
   Main PID: 109 (code=exited, status=226/NAMESPACE)
        CPU: 10ms

Host:

● synapse.service - Synapse Matrix homeserver (master)
     Loaded: loaded (/etc/systemd/system/synapse.service; disabled; vendor preset: disabled)
    Drop-In: /usr/lib/systemd/system/synapse.service.d
             └─override-hardened.conf
     Active: active (running) since Fri 2022-01-21 12:28:13 CET; 6min ago
   Main PID: 13751 (python3)
      Tasks: 7 (limit: 19045)
     Memory: 126.2M
        CPU: 3.024s
     CGroup: /system.slice/synapse.service
             └─13751 /usr/bin/python3 -m synapse.app.homeserver --config-path=/etc/synapse/homeserver.yaml

Content of zzz-lxc-service.conf:

[Service]
ProtectProc=default
ProtectControlGroups=no
ProtectKernelTunables=no
NoNewPrivileges=no
LoadCredential=
ProtectHome=no
ProtectSystem=no
PrivateDevices=no
PrivateTmp=no
ProtectKernelLogs=no
ProtectKernelModules=no
ReadWritePaths=

Huh, can you do nsenter --all --target $MAIN_PID and show me the output of findmnt or cat /proc/self/mountinfo? If the --all switchi doesn’t work you can do nsenter --mount --target $MAIN_PID.

I mean, for the working service on the host.

That file seems auto-generated.

istobic@nb-istobic / % sudo nsenter --all --target 13751
[root@nb-istobic /]# findmnt
TARGET                                       SOURCE            FSTYPE        OPTIONS
/                                            /dev/nvme1n1p3    ext4          ro,nosuid,relatime
├─/home                                      tmpfs             tmpfs         rw,nosuid,relatime,inode64
├─/proc                                      proc              proc          rw,nosuid,nodev,noexec,relatime,hidepid=invisible,subset=pid
├─/root                                      tmpfs             tmpfs         rw,nosuid,relatime,inode64
├─/sys                                       sys               sysfs         ro,nosuid,nodev,noexec,relatime
│ ├─/sys/firmware/efi/efivars                efivarfs          efivarfs      ro,nosuid,nodev,noexec,relatime
│ ├─/sys/kernel/security                     securityfs        securityfs    ro,nosuid,nodev,noexec,relatime
│ ├─/sys/fs/cgroup                           cgroup2           cgroup2       ro,nosuid,nodev,noexec,relatime,nsdelegate,memory_recursiveprot
│ ├─/sys/fs/pstore                           pstore            pstore        ro,nosuid,nodev,noexec,relatime
│ ├─/sys/fs/bpf                              none              bpf           ro,nosuid,nodev,noexec,relatime,mode=700
│ ├─/sys/kernel/debug                        debugfs           debugfs       ro,nosuid,nodev,noexec,relatime
│ │ └─/sys/kernel/debug/tracing              tracefs           tracefs       ro,nosuid,nodev,noexec,relatime
│ ├─/sys/kernel/tracing                      tracefs           tracefs       ro,nosuid,nodev,noexec,relatime
│ ├─/sys/kernel/config                       configfs          configfs      ro,nosuid,nodev,noexec,relatime
│ └─/sys/fs/fuse/connections                 fusectl           fusectl       ro,nosuid,nodev,noexec,relatime
├─/run                                       run               tmpfs         rw,nosuid,nodev,relatime,mode=755,inode64
│ ├─/run/credentials                         run[/systemd/inaccessible/dir]
│ │                                                            tmpfs         ro,nosuid,nodev,noexec,relatime,mode=755,inode64
│ ├─/run/synapse                             run[/synapse]     tmpfs         rw,nosuid,nodev,relatime,mode=755,inode64
│ ├─/run/systemd/incoming                    run[/systemd/propagate/synapse.service]
│ │                                                            tmpfs         ro,nosuid,nodev,relatime,mode=755,inode64
│ ├─/run/user                                tmpfs             tmpfs         rw,nosuid,relatime,inode64
│ └─/run/snapd/ns                            run[/snapd/ns]    tmpfs         rw,nosuid,nodev,relatime,mode=755,inode64
├─/usr/lib/modules                           run[/systemd/inaccessible/dir]
│                                                              tmpfs         ro,nosuid,nodev,noexec,relatime,mode=755,inode64
├─/var/lib/synapse                           /dev/nvme1n1p3[/var/lib/synapse]
│                                                              ext4          rw,nosuid,relatime
├─/var/log/synapse                           /dev/nvme1n1p3[/var/log/synapse]
│                                                              ext4          rw,nosuid,relatime
├─/efi                                       systemd-1         autofs        rw,nosuid,relatime,fd=47,pgrp=1,timeout=120,minproto=5,maxproto=5
├─/var/lib/snapd/snap/bare/5                 /dev/loop0        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/core/11798             /dev/loop1        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/core18/2284            /dev/loop2        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/core18/2253            /dev/loop4        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/gnome-3-28-1804/145    /dev/loop5        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/gtk-common-themes/1515 /dev/loop6        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/gnome-3-28-1804/161    /dev/loop7        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/core/11993             /dev/loop3        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/gtk-common-themes/1519 /dev/loop8        squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/skype/197              /dev/loop10       squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/wine-platform-3-stable/11
│                                            /dev/loop11       squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/wine-platform-3-stable/14
│                                            /dev/loop12       squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/wine-platform-runtime/279
│                                            /dev/loop13       squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/var/lib/snapd/snap/wine-platform-runtime/280
│                                            /dev/loop14       squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/mnt/c2d777dc-dbf7-4eeb-92be-1589a5c3abca  /dev/nvme0n1p1    ext4          ro,nosuid,nodev,relatime
├─/tmp                                       tmpfs             tmpfs         rw,nosuid,nodev,size=8136668k,nr_inodes=1048576,inode64
│ ├─/tmp                                     tmpfs[/systemd-private-9d06e095291f403b9a5fb025eb9e47d7-synapse.service-IzQQ0L/tmp]
│ │                                                            tmpfs         rw,nosuid,nodev,size=8136668k,nr_inodes=1048576,inode64
│ └─/tmp/.mount_jetbraSmUVsj                 jetbrains-toolbox fuse.jetbrain ro,nosuid,nodev,relatime,user_id=1000,group_id=1000
├─/boot                                      /dev/nvme1n1p2    vfat          ro,nosuid,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=a
├─/var/lib/snapd/snap/skype/200              /dev/loop15       squashfs      ro,nosuid,nodev,relatime,errors=continue
├─/dev                                       tmpfs             tmpfs         ro,nosuid,noexec,size=4096k,nr_inodes=1048576,mode=755,inode64
│ ├─/dev/pts                                 devpts            devpts        rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000
│ ├─/dev/shm                                 tmpfs             tmpfs         rw,nosuid,nodev,inode64
│ ├─/dev/mqueue                              mqueue            mqueue        rw,nosuid,nodev,noexec,relatime
│ └─/dev/hugepages                           hugetlbfs         hugetlbfs     rw,nosuid,relatime,pagesize=2M
└─/var/tmp                                   /dev/nvme1n1p3[/var/tmp/systemd-private-9d06e095291f403b9a5fb025eb9e47d7-synapse.service-Wg1Dq7/tmp]
                                                               ext4          rw,nosuid,relatime

ls -al /proc from in there, please? :slight_smile:

assume “in there” is inside sudo nsenter --all --target 13751

[root@nb-istobic /]# ls -al /proc
total 0
dr-xr-xr-x 9 root    root    0 21. Jan 12:28 1
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 10
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 100
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1005
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1009
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 101
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1014
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1015
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 102
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 103
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1090
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 11
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1100
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 11150
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 112
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1127
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11293
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 113
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11311
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11312
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11335
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11352
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11365
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11396
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 114
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11485
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11603
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11635
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11684
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 11902
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 12
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 12018
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 12079
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 125
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1250
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 12705
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 12706
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 12707
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 12746
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 129
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 12902
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 13
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 130
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 13021
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 131
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1312
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1313
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1314
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1317
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 132
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 13666
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 13679
dr-xr-xr-x 9 synapse synapse 0 21. Jan 12:28 13751
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 13931
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 13944
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 13970
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 13971
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14051
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14061
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14063
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14066
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14071
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14072
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14083
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14086
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14106
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14128
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14129
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14130
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14131
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14132
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14133
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14160
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14173
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14454
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14827
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14841
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14844
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14870
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14871
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14931
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14938
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14941
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 14942
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14943
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14952
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14973
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 14975
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 15
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 15015
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 15091
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 15104
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 15834
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 15893
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 15975
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 15989
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16031
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16054
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16061
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16072
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16077
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 16115
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 16176
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16440
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16497
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16565
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16603
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16627
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16638
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16664
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16673
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 16829
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 1684
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1690
dr-xr-xr-x 9 root    root    0 21. Jan 12:52 16908
dr-xr-xr-x 9 root    root    0 21. Jan 12:52 16944
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:53 16993
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 17
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:53 17002
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:53 17008
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:53 17010
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:53 17014
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:53 17060
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 171
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17146
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:53 17159
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17175
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17176
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17177
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17209
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17213
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17214
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17221
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17223
dr-xr-xr-x 9 root    root    0 21. Jan 12:53 17224
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 18
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 183
dr-xr-xr-x 9 root    nobody  0 21. Jan 12:51 1885
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1894
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1895
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1905
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1910
dr-xr-xr-x 9 root    nobody  0 21. Jan 12:51 1912
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1929
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1931
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1956
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 196
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1962
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1975
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1977
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 1994
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 2
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 20
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2019
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2024
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 21
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 22
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 221
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 222
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 223
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2258
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2262
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2263
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2265
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2267
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2276
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2284
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2290
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 23
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2305
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 232
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 233
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2331
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2333
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2336
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2342
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2351
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2354
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 236
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 2363
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2372
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2398
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 24
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2403
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2408
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2409
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2417
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 2423
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2426
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 25
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2691
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2693
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2696
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2698
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 27
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2700
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2701
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2703
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2705
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2707
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2709
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2713
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2714
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2715
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2717
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2718
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2719
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 272
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2724
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2727
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2729
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2730
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2731
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2732
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2748
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2763
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 28
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 282
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 283
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2853
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2879
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 29
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2942
dr-xr-xr-x 9 root    nobody  0 21. Jan 12:51 2966
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 2992
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 3
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 30
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 3006
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3051
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 31
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 311
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 3174
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 32
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3322
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3325
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3328
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3341
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3396
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 34
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3401
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3418
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 3459
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 346
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 35
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 350
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 36
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 362
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 37
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 375
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 376
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 377
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 378
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 38
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 380
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 381
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 382
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 383
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 384
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 389
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 39
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 395
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 396
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 4
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 404
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 41
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 42
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4262
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4271
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 43
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4317
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4379
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4382
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 44
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4402
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4422
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4423
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4426
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4467
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4474
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4486
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 45
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 4534
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4575
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 4588
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 46
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 4636
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 48
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 49
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 50
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 51
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 52
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 53
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 55
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 56
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 561
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 57
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 58
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 59
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 6
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 60
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6073
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 62
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6245
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6294
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 63
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6345
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 64
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 65
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6569
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6573
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6574
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6576
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 66
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6603
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6619
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6641
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6663
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6682
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 67
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6723
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6740
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 6743
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 680
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 682
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 69
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 70
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 71
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 7140
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 72
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 73
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 74
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 75
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 76
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 77
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 78
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 79
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 8
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 80
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 81
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 82
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 83
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 837
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 838
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 839
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 84
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 85
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 86
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 861
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 862
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 863
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 867
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 868
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 869
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 870
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 88
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 8815
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 89
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 9039
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 912
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 914
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 9147
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 92
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 934
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 941
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 953
dr-xr-xr-x 9 root    root    0 21. Jan 12:51 962
dr-xr-xr-x 9 nobody  nobody  0 21. Jan 12:51 971
lrwxrwxrwx 1 root    root    0 21. Jan 12:28 self -> 17224
lrwxrwxrwx 1 root    root    0 21. Jan 12:28 thread-self -> 17224/task/17224

Have you had a chance to look at the corresponding issue at systemd?