Some more debugging into it: Adding a set -x to postinst:
+ [ configure = triggered ] + [ -z 241-7~deb10u8 ] + dpkg --compare-versions 241-7~deb10u8 lt 245.4-4~ + systemctl enable systemd-pstore.service + [ -z 241-7~deb10u8 ] + [ -z 241-7~deb10u8 ] + [ -z 241-7~deb10u8 ] + systemd-machine-id-setup + addgroup --quiet --system systemd-journal + adduser --quiet --system --group --no-create-home --home /run/systemd --gecos systemd Network Management systemd-network + adduser --quiet --system --group --no-create-home --home /run/systemd --gecos systemd Resolver systemd-resolve + dpkg --compare-versions 241-7~deb10u8 lt 244.1-2~ + mkdir -p /var/log/journal + mountpoint -q /proc + systemd-tmpfiles --create --prefix /var/log/journal Setting access ACL "u::rwx,g::r-x,g:adm:r-x,g:4294967295:r-x,m::r-x,o::r-x" on /var/log/journal failed: Invalid argument Setting access ACL "u::rwx,g::r-x,g:adm:r-x,g:4294967295:r-x,m::r-x,o::r-x" on /var/log/journal/0168a64537e84260bcb1172567dbc16e failed: Invalid argument Setting access ACL "u::rw-,g::r-x,g:adm:r--,g:4294967295:r-x,m::r--,o::---" on /var/log/journal/0168a64537e84260bcb1172567dbc16e/system.journal failed: Invalid argument /proc is mounted in my container. (I've made locally "systemd-tmpfiles --create --prefix /var/log/journal" a NOP to be able to proceed with the update. For the ones finding this bug report, the file to edit: /var/lib/dpkg/info/systemd.postinst) -- tobi