Bug#1018692: ntp fails to start in an LXC

[Mike]

Package: ntp
Version: 1:4.2.8p12+dfsg-4
Severity: minor

Upon upgrading an LXC to Debian 10.12, the ntp package was left
half-configured because the service would not start. Output was:

------------------------------------------------------------
systemd[1]: Starting Network Time Service...
systemd[607]: ntp.service: Failed to set up mount namespacing: Permission denied
systemd[607]: ntp.service: Failed at step NAMESPACE spawning /usr/lib/ntp/ntp-systemd-wrapper: Permission denied
systemd[1]: ntp.service: Control process exited, code=exited, status=226/NAMESPACE
systemd[1]: ntp.service: Failed with result 'exit-code'.
systemd[1]: Failed to start Network Time Service.
------------------------------------------------------------

Workaround:
Set "PrivateTmp=false" in /lib/systemd/system/ntp.service.

This seems safe, since it's in an LXC already. I need no further assistance,
just reporting it for others' reference.


Environment:

Linux ... 4.19.0-21-amd64 #1 SMP Debian 4.19.249-2 (2022-06-30) x86_64 GNU/Linux

||/ Name Version Architecture Description
+++-====================-=================-============-===========================================================
ii libnss-systemd:amd64 241-7~deb10u8 amd64 nss module providing dynamic user and group name resolution
ii libpam-systemd:amd64 241-7~deb10u8 amd64 system and service manager - PAM module
ii libsystemd0:amd64 241-7~deb10u8 amd64 systemd utility library
ii ntp 1:4.2.8p12+dfsg-4 amd64 Network Time Protocol daemon and utility programs
ii systemd 241-7~deb10u8 amd64 system and service manager
ii systemd-sysv 241-7~deb10u8 amd64 system and service manager - SysV links

[Mike]

This may be related to https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787758