<div>it seems that lxc cannot handle cgroups when capabilities are not all in the same mount<br></div><div>it fails now because it cannot write the devices.deny in the cgroup</div><div>if i comment out all the lxc.cgroup.devices lines in the config of the container then i can actually start it</div>
<div><br></div><div>I would think that the way lxc identifies the cgroup mount might be the part that needs patching</div><div><br></div><div><br></div><br><div class="gmail_quote">On Tue, May 31, 2011 at 11:00 AM, Ramez Hanna <span dir="ltr"><<a href="mailto:rhanna@informatiq.org">rhanna@informatiq.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div class="h5">On Sat, May 28, 2011 at 3:33 PM, Ramez Hanna <span dir="ltr"><<a href="mailto:rhanna@informatiq.org" target="_blank">rhanna@informatiq.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>I have failed to start a container on f15 although it worked fine on 14<br></div><div>here is the log</div><div>==snip</div><div>[root@hovercraft boss]# cat lxc.log <br> lxc-start 1306584262.160 DEBUG lxc_conf - allocated pty '/dev/pts/9' (4/5)<br>
lxc-start 1306584262.160 DEBUG lxc_conf - allocated pty '/dev/pts/10' (6/7)<br> lxc-start 1306584262.160 DEBUG lxc_conf - allocated pty '/dev/pts/11' (8/9)<br> lxc-start 1306584262.160 DEBUG lxc_conf - allocated pty '/dev/pts/12' (10/11)<br>
lxc-start 1306584262.160 INFO lxc_conf - tty's configured<br> lxc-start 1306584262.160 ERROR lxc_caps - failed to cap_get_flag: Invalid argument<br> lxc-start 1306584262.160 DEBUG lxc_console - using '/dev/tty' as console<br>
lxc-start 1306584262.160 DEBUG lxc_start - sigchild handler set<br> lxc-start 1306584262.161 INFO lxc_start - 'boss' is initialized<br> lxc-start 1306584262.161 ERROR lxc_namespace - failed to clone(0x6c020000): Operation not permitted<br>
lxc-start 1306584262.161 ERROR lxc_start - Operation not permitted - failed to fork into a new namespace<br> lxc-start 1306584262.161 ERROR lxc_start - failed to spawn 'boss'<br> lxc-start 1306584262.161 DEBUG lxc_cgroup - using cgroup mounted at '/sys/fs/cgroup/systemd'<br>
lxc-start 1306584262.161 ERROR lxc_cgroup - No such file or directory - failed to remove cgroup '/sys/fs/cgroup/systemd/boss'<br>== end</div><div><br></div><div>mounts</div><div>[root@hovercraft boss]# mount |grep cgroup<br>
tmpfs on /sys/fs/cgroup type tmpfs (rw,nosuid,nodev,noexec,relatime,mode=755)<br>cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,release_agent=/lib/systemd/systemd-cgroups-agent,name=systemd)<br>
cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset)<br>cgroup on /sys/fs/cgroup/ns type cgroup (rw,nosuid,nodev,noexec,relatime,ns)<br>cgroup on /sys/fs/cgroup/cpu type cgroup (rw,nosuid,nodev,noexec,relatime,cpu)<br>
cgroup on /sys/fs/cgroup/cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpuacct)<br>cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory)<br>cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices)<br>
cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer)<br>cgroup on /sys/fs/cgroup/net_cls type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls)<br>cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio)<br>
<br></div><div>it looks like lxc is trying to create the container's cgroup under systemd which seems to be the wrong location</div><div>any leads on how can i debug further</div><div>how does lxc find where cgroup is mounted?</div>
<div><br></div><div>see bug <a href="https://bugzilla.redhat.com/show_bug.cgi?id=683667" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=683667</a></div>
</blockquote><div><br></div><div><br></div></div></div><div>upgraded to lxc-0.7.4.1-1.1.x86_64</div><div><br></div><div>[root@hovercraft ~]# lxc-start -n boss -l DEBUG -o log<br>lxc-start: open /sys/fs/cgroup/systemd/boss/devices.deny : No such file or directory<br>
lxc-start: failed to setup the cgroups for 'boss'<br>lxc-start: failed to setup the container<br>lxc-start: invalid sequence number 1. expected 2<div class="im"><br>lxc-start: failed to spawn 'boss'</div>
</div><div><br>[root@hovercraft ~]# cat log<br>
lxc-start 1306828803.471 DEBUG lxc_conf - allocated pty '/dev/pts/9' (4/5)<br> lxc-start 1306828803.471 DEBUG lxc_conf - allocated pty '/dev/pts/10' (6/7)<br> lxc-start 1306828803.471 DEBUG lxc_conf - allocated pty '/dev/pts/11' (8/9)<br>
lxc-start 1306828803.471 DEBUG lxc_conf - allocated pty '/dev/pts/12' (10/11)<br> lxc-start 1306828803.471 INFO lxc_conf - tty's configured<br> lxc-start 1306828803.471 DEBUG lxc_console - using '/dev/tty' as console<br>
lxc-start 1306828803.471 DEBUG lxc_start - sigchild handler set<br> lxc-start 1306828803.471 INFO lxc_start - 'boss' is initialized<br> lxc-start 1306828803.478 DEBUG lxc_cgroup - using cgroup mounted at '/sys/fs/cgroup/systemd'<br>
lxc-start 1306828803.479 DEBUG lxc_cgroup - cgroup flags is 0x2<br> lxc-start 1306828803.485 INFO lxc_conf - network has been setup<br> lxc-start 1306828803.485 DEBUG lxc_conf - mounted '/var/lib/lxc/boss/rootfs' on '/usr/lib64/lxc/rootfs'<br>
lxc-start 1306828803.485 DEBUG lxc_conf - mounted 'proc' on '/usr/lib64/lxc/rootfs//proc', type 'proc'<br> lxc-start 1306828803.486 DEBUG lxc_conf - mounted 'devpts' on '/usr/lib64/lxc/rootfs//dev/pts', type 'devpts'<br>
lxc-start 1306828803.486 DEBUG lxc_conf - mounted 'sysfs' on '/usr/lib64/lxc/rootfs//sys', type 'sysfs'<br> lxc-start 1306828803.486 INFO lxc_conf - mount points have been setup<br>
lxc-start 1306828803.486 DEBUG lxc_cgroup - using cgroup mounted at '/sys/fs/cgroup/systemd'<br> lxc-start 1306828803.486 ERROR lxc_cgroup - open /sys/fs/cgroup/systemd/boss/devices.deny : No such file or directory<br>
lxc-start 1306828803.486 ERROR lxc_conf - failed to setup the cgroups for 'boss'<br> lxc-start 1306828803.486 ERROR lxc_start - failed to setup the container<br> lxc-start 1306828803.486 ERROR lxc_sync - invalid sequence number 1. expected 2<br>
lxc-start 1306828803.486 ERROR lxc_start - failed to spawn 'boss'<br> lxc-start 1306828803.486 DEBUG lxc_cgroup - using cgroup mounted at '/sys/fs/cgroup/systemd'<br> lxc-start 1306828803.491 DEBUG lxc_cgroup - '/sys/fs/cgroup/systemd/boss' unlinked<br>
<br><br><br></div>
</blockquote></div><br>