Installation problem - debian - status=218/CAPABILITIES - Operation not permitted

[Rob1983dev]

Hello All!

I tried to install deconz for several hours.. but know I don't know what to do - I need your help!

Result is always the same, message:

sudo journalctl -u deconz
Oct 23 14:47:38 iobroker-pve systemd[1]: deconz.service: Service RestartSec=100ms expired, scheduling restart.
Oct 23 14:47:38 iobroker-pve systemd[1]: deconz.service: Scheduled restart job, restart counter is at 1237.
Oct 23 14:47:38 iobroker-pve systemd[1]: Stopped deCONZ: ZigBee gateway -- REST API.
Oct 23 14:47:38 iobroker-pve systemd[1]: Started deCONZ: ZigBee gateway -- REST API.
Oct 23 14:47:38 iobroker-pve systemd[44205]: deconz.service: Failed to apply ambient capabilities (before UID change): Operation not permitted
Oct 23 14:47:38 iobroker-pve systemd[44205]: deconz.service: Failed at step CAPABILITIES spawning /usr/bin/deCONZ: Operation not permitted
Oct 23 14:47:38 iobroker-pve systemd[1]: deconz.service: Main process exited, code=exited, status=218/CAPABILITIES
Oct 23 14:47:38 iobroker-pve systemd[1]: deconz.service: Failed with result 'exit-code'.

lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 10 (buster)
Release:        10
Codename:       buster

--> It is a Promox CT! But that should work.. or should not create such an error. Connected via USB is a Conbee2 stick.

I know what I should create an overwrite file - but only to be sure that this is not an issue - I changed (only port is changed):

sudo nano /lib/systemd/system/deconz.service

[Unit]
Description=deCONZ: ZigBee gateway -- REST API
Wants=deconz-init.service deconz-update.service

[Service]
User=1000
ExecStart=/usr/bin/deCONZ -platform minimal --http-port=8080
Restart=on-failure
StartLimitInterval=60
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_KILL CAP_SYS_BOOT CAP_SYS_TIME

[Install]
WantedBy=multi-user.target

Further details:

root@iobroker-pve:~# groups:
root dialout
root@iobroker-pve:~# id
uid=0(root) gid=0(root) groups=0(root),20(dialout)

Created a "pi" user, too - because I thought.. maybe that is the problem:

root@iobroker-pve:~# id pi
uid=1001(pi) gid=1001(pi) groups=1001(pi),20(dialout),27(sudo)

Installation process (done with user root!):

wget http://deconz.dresden-elektronik.de/ubuntu/beta/deconz-2.05.69-qt5.deb
sudo dpkg -i deconz-2.05.69-qt5.deb
sudo apt --fix-broken install
sudo gpasswd -a $USER dialout
sudo systemctl enable deconz
sudo service deconz start

Tried the official repo, too - but .. same error message.

Hopefully it is only a small issue.

Thanks a lot!!!

Best regards
Rob

[close-issue-app]

Hi there. Thank you for filing this issue. Unfortunately, we cannot help you, because the required information is missing. Please open a new issue, using the template to provide all information.