<HTML><head><META content="text/html; charset=us-ascii" http-equiv="Content-Type">
<STYLE><!-- /* Style Definitions */ p.2becdf86-2238-4e68-97d8-c182dcd7daee, li.2becdf86-2238-4e68-97d8-c182dcd7daee, div.2becdf86-2238-4e68-97d8-c182dcd7daee, table.2becdf86-2238-4e68-97d8-c182dcd7daeeTable {margin:0cm; margin-bottom:.0001pt;}div.Section1 {page:Section1;}--></STYLE>
</head><BODY>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT FACE="Arial" SIZE="2"><div>Hello lxc users!</div><div><br></div><div>I'm working on an app deployment platform that uses Supervisor (<a href="http://supervisord.org/">http://supervisord.org/</a>) to start/stop processes. I'd like to have apps run in lxc containers to limit their filesystem access (and in the future, other resource consumption). I've got a script to start an app in an lxc, and it works from a bash prompt , but when I run the same script from Supervisor I get this:</div><div><br></div><div><div><div><div>lxc-execute: failed to mount the console</div><div>lxc-execute: failed to setup the console for 'testlxc'</div><div>lxc-execute: failed to setup the container</div></div></div></div><div><br></div><div>(I get the same error whether using lxc-execute or lxc-start.) </div><div><br></div><div>Is it expected that some things that work from a console will fail when run non-interactively?</div><div><br></div><div>Here's a sample lxc config that exhibits the problem:</div><div><br></div><div><div>root@lucid64:/tmp# cat test.lxc </div><div>lxc.utsname = testlxc</div><div>lxc.mount.entry = /bin /tmp/testlxc/bin none bind 0 0 </div><div>lxc.mount.entry = /dev /tmp/testlxc/dev none bind 0 0 </div><div>lxc.mount.entry = /etc /tmp/testlxc/etc none bind 0 0 </div><div>lxc.mount.entry = /lib /tmp/testlxc/lib none bind 0 0 </div><div>lxc.mount.entry = /lib64 /tmp/testlxc/lib64 none bind 0 0 </div><div>lxc.mount.entry = /opt /tmp/testlxc/opt none bind 0 0 </div><div>lxc.mount.entry = /usr /tmp/testlxc/usr none bind 0 0</div><div>lxc.rootfs = /tmp/testlxc</div></div><div><br></div><div>This script works on the command line but fails in Supervisor:</div><div><br></div><div><div>root@lucid64:/tmp# cat start_ping.sh </div><div>#!/bin/bash</div><div>lxc-execute --name testlxc -f /tmp/test.lxc -- ping google.com</div></div><div><br></div><div>And in case it becomes relevant, here's the Supervisor "program" section that configures running the script:</div><div><br></div><div><div>[program:testlxc]</div><div>command=/tmp/start_ping.sh</div><div>autostart=true</div><div>autorestart=true</div><div>stdout_logfile=/tmp/ping.log</div><div>user=root</div><div>directory=/tmp/testlxc</div><div>redirect_stderr=true</div></div><div><br></div><div>Thank you for your help,</div><div>Brent</div></FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"> </P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT FACE="Arial">---------</FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT COLOR="#68696b" FACE="Arial" SIZE="2"><STRONG>Brent Tubbs</STRONG></FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT COLOR="#68696b" FACE="Arial" SIZE="2"></FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"> </P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT COLOR="#737477" FACE="Arial"><IMG ALIGN="baseline" ALT="YouGovPolimetrix" BORDER="0" HSPACE="0" SRC="cid:image88c9fa.png@d1801d38.13c9450e"></FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT COLOR="#68696b" FACE="Arial" SIZE="1">285 Hamilton Avenue<br>Suite #200</FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT COLOR="#68696b" FACE="Arial" SIZE="1">Palo Alto, CA 94301</FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT COLOR="#0000ff" FACE="Arial" SIZE="1"><a href="mailto:brent.tubbs@yougov.com">brent.tubbs@yougov.com</a></FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT COLOR="#0000ff" FACE="Arial" SIZE="1"><A HREF="http://www.yougov.com/">http://www.yougov.com/</A></FONT></P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT FACE="Arial" SIZE="2"></FONT> </P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"> </P>
<P CLASS="2becdf86-2238-4e68-97d8-c182dcd7daee"><FONT FACE="Arial" SIZE="2"></FONT></P><A></A></BODY></HTML>