[v1.28.0-pre3/v.1.28.0] Systemctl fails to start

[fu-sen]

When I use .deb package on my Debian server, systemctl fails to start.

$ sudo apt install ./anubis_1.28.0_amd64.deb
Note, selecting 'anubis' instead of './anubis_1.28.0_amd64.deb'
Upgrading:
  anubis

Summary:
  Upgrading: 1, Installing: 0, Removing: 0, Not Upgrading: 0
  Download size: 0 B / 25.0 MB
  Space needed: 33.8 kB / 6,232 MB available

Get:1 /home/balloon/anubis_1.28.0_amd64.deb anubis amd64 1.28.0 [25.0 MB]
Reading changelogs... Done  
(Reading database ... 45367 files and directories currently installed.)
Preparing to unpack .../anubis_1.28.0_amd64.deb ...
Unpacking anubis (1.28.0) over (1.28.0~pre2) ...
Setting up anubis (1.28.0) ...

$ sudo systemctl daemon-reload
$ sudo systemctl stop anubis@web
$ sudo systemctl start anubis@web
Job for anubis@web.service failed because the control process exited with error code.
See "systemctl status anubis@web.service" and "journalctl -xeu anubis@web.service" for details.

anubis_1.28.0.pre2_amd64.deb can be started.
anubis_1.28.0.pre3_amd64.deb encounters the same problems.

If necessary, please add this to the issue.

[Xe]

Can you paste the logs from that failed start?

[fu-sen]

Nothing seems to be output in that log.

$ systemctl status anubis@web.service
● anubis@web.service - "Anubis HTTP defense proxy (instance web)"
     Loaded: loaded (/usr/lib/systemd/system/anubis@.service; enabled; preset: >
     Active: activating (auto-restart) (Result: exit-code) since Fri 2026-10-09>
 Invocation: 4a35db90b071414d9bce2af04d401783
    Process: 347266 ExecStartPre=/usr/bin/systemd-sysusers --inline g anubis - >
    Process: 347267 ExecStartPre=/usr/bin/install -d -m 2775 -o root -g anubis >
   Mem peak: 1.8M
        CPU: 17ms

$ journalctl -xeu anubis@web.service
Hint: You are currently not seeing messages from other users and the system.
      Users in groups 'adm', 'systemd-journal' can see all messages.
      Pass -q to turn off this notice.
~
:
~
-- No entries --

[Xe]

What is the contents of your policy file?

[fu-sen]

I only changed that file to openGraph:, but even after changing it to the default, it still wouldn't start.

# Open Graph passthrough configuration, see here for more information:
# https://anubis.techaro.lol/docs/admin/configuration/open-graph/
openGraph:
  # Enables Open Graph passthrough
  enabled: true
  # Enables the use of the HTTP host in the cache key, this enables
  # caching metadata for multiple http hosts at once.
  considerHost: true
  # How long cached OpenGraph metadata should last in memory
  ttl: 24h

Also, the web.env on this server contains the same content as default.env.

$ cd /etc/anubis/

$ more default.env
BIND=:8923
DIFFICULTY=4
METRICS_BIND=:9090
SERVE_ROBOTS_TXT=0
TARGET=http://localhost:3000

$ more web.env
BIND=:8923
DIFFICULTY=4
METRICS_BIND=:9090
SERVE_ROBOTS_TXT=0
TARGET=http://localhost:3000

What is happening?

[Xe]

I have found the issue. A security patch that tried to isolate Anubis further seems to have backfired. I am going to revert it and push .1 immediately.

[Xe]

Please see https://github.com/TecharoHQ/anubis/releases/tag/v1.28.1 for the fix. I am adding yet more CI to handle this unique brand of failure.

[fu-sen]

Thank you for your response. I applied v1.28.1 to my server and it started successfully.