Original goal: Enable ACME after TLS certificate expired 1. Enable ACME option in forgejo config 2. Everything is working fine. Decide to make an update (worst mistake of my life) 3. Everything is working fine. Decide to Reboot 4. SSH don't work... 5. Librejo don't work... 6. VNC into the VM. Realize root passwords has disappeared???? 7. Try to enable sshd service. Hangs indefinitely 7. Forgejo and Postgresql service works fine 8. Try to connect to librejo through directed port. Time out 9. Disable nftable. Still don't work. 10. Realize the VM have no more IP 11. Call out the host 12. Host is reacting fast. 13. Try to run cloud-init. cloud-init report success. failed in practice, still no ip 14. Check cloud-init config /dev/. Fucked up VNC fonts. 15. Reboot 16. Still don't work. 17. Host propose to rename VM to rerun cloud-init 18. Change VM name 19. Reboot 20. Root magically have password now???? 21. Host reset password to empty. 22. Don't work 23. Reboot. 24. Don't work. reset password to "a" 25. Don't work 26. Reboot. 27. Working. Get in root 28. Still no ip 29. Realize you only exist to suffer 30. Host realize systemd-networkd fail. 31. journalctl don't work. 32. journalctl works for host 33. Host realize that the binary have "Permission denied" 34. Host realize someone had the same issue in september 2020 on reddit. Systemd's fault, only solution is reinstall. (https://reddit.com/r/linuxquestions/comments/iyk0bp/boot_permission_denied_issue/) 35. Buy another VM and attach the old disk to it. 36. Install linux 37. Install linux hardened kernel and forget to update grub. 38. Can't boot obviously. 39. Reinstall 40. Realize you forgot to screenshot the nftable config 41. Realize the nftable config is in the attached old disk. 42. Copy postgresql files from old disk to new 43. Reboot systemd service. It works. 44. Copy forgejo files from old disk to new 45. Reboot systemd service. It works 46. Can't connect to librejo through web browser... 47. use curl over ssh. Works fine in local 48. Use IP directly. Works fine (not really since openssl will not accept an https over ip) 49. Search why the domain don't work. 50. try to install dig. Fail the password three times. 51. Lost 10 minutes of my life. 52. Realize its browser fault. Restart web browser 53. Works fine. 54. Write this report. Conclusion: I lost 2GB of RAM in my VM and I hate systemd. Thanks to naphtha at Kyun.host for the help.