<div dir="ltr">I'm not getting this lxc.mount.hook problem anymore. Maybe because I restart the lxcfs. There are a little different errors this time and fewer ones. It has something like 'Error loading the seccomp policy'. And there are some permissions related errors above. <div>The log look like this now, I'm highlighting the errors part:</div><div><br></div><div><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style="">Name: t7</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style="">Architecture: armv7l</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style="">Created: 2016/04/21 10:15 UTC</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style="">Status: Stopped</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style="">Type: persistent</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style="">Profiles: default</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span style=""></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style="">Log:</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span style=""></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151526.802 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 231072 range 65536</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151526.803 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 231072 range 65536</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.029 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 231072 range 65536</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.030 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 231072 range 65536</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.191 INFO lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 3</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.191 INFO lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 8</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.208 INFO lxc_container - lxccontainer.c:do_lxcapi_start:797 - Attempting to set proc title to [lxc monitor] /var/lib/lxd/containers t7</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.211 INFO lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 8</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.212 INFO lxc_lsm - lsm/lsm.c:lsm_init:48 - LSM security driver nop</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.215 INFO lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .reject_force_umount # comment this to allow umount -f; not recommended.</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.215 INFO lxc_seccomp - seccomp.c:parse_config_v2:436 - Adding native rule for reject_force_umount action 0</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.215 INFO lxc_seccomp - seccomp.c:do_resolve_add_rule:216 - Setting seccomp rule to reject force umounts</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span style=""></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.215 INFO lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .[all].</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.216 INFO lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .kexec_load errno 1.</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.216 INFO lxc_seccomp - seccomp.c:parse_config_v2:436 - Adding native rule for kexec_load acti</span>on 327681</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.216 INFO lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .open_by_handle_at errno 1.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.216 INFO lxc_seccomp - seccomp.c:parse_config_v2:436 - Adding native rule for open_by_handle_at action 327681</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.216 INFO lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .init_module errno 1.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.216 INFO lxc_seccomp - seccomp.c:parse_config_v2:436 - Adding native rule for init_module action 327681</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.216 INFO lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .finit_module errno 1.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.216 INFO lxc_seccomp - seccomp.c:parse_config_v2:436 - Adding native rule for finit_module action 327681</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.217 INFO lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .delete_module errno 1.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.217 INFO lxc_seccomp - seccomp.c:parse_config_v2:436 - Adding native rule for delete_module action 327681</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.217 INFO lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/bin/lxd callhook /var/lib/lxd 18 start' for container 't7', config section 'lxc'</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.217 INFO lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 3</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.218 INFO lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 8</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.246 INFO lxc_monitor - monitor.c:lxc_monitor_sock_name:178 - using monitor sock name lxc/d78a9d7e97b4b375//var/lib/lxd/containers</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.605 DEBUG lxc_start - start.c:setup_signal_fd:289 - sigchild handler set</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.609 DEBUG lxc_console - console.c:lxc_console_peer_default:473 - no console peer</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.610 INFO lxc_start - start.c:lxc_init:488 - 't7' is initialized</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.613 DEBUG lxc_start - start.c:__lxc_start:1302 - Not dropping cap_sys_boot or watching utmp</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.613 INFO lxc_start - start.c:resolve_clone_flags:999 - Cloning a new user namespace</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.644 DEBUG lxc_conf - conf.c:instantiate_veth:2613 - instantiated veth 'vethGRAE0B/vethCQVHU6', index is '13'</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.644 INFO lxc_cgroup - cgroup.c:cgroup_init:68 - cgroup driver cgroupfs-ng initing for t7</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.837 DEBUG lxc_conf - conf.c:lxc_assign_network:3047 - move 'eth0' to '2913'</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.884 NOTICE lxc_start - start.c:do_start:763 - switching to gid/uid 0/0 in new user namespace</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo">
</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.886 DEBUG lxc_conf - conf.c:setup_rootfs:1215 - mounted '/var/lib/lxd/containers/t7/rootfs' on '/usr/lib/arm-linux-gnueabihf/lxc'</span></p></div><div><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.886 INFO lxc_conf - conf.c:setup_utsname:843 - 't7' hostname has been setup</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.931 DEBUG lxc_conf - conf.c:setup_hw_addr:2144 - mac address '00:16:3e:06:a4:8d' on 'eth0' has been setup</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.932 DEBUG lxc_conf - conf.c:setup_netdev:2371 - 'eth0' has been setup</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.932 INFO lxc_conf - conf.c:setup_network:2392 - network has been setup</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.933 INFO lxc_conf - conf.c:mount_autodev:1072 - Mounting container /dev</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.933 INFO lxc_conf - conf.c:mount_autodev:1095 - Mounted tmpfs onto /usr/lib/arm-linux-gnueabihf/lxc/dev</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.933 INFO lxc_conf - conf.c:mount_autodev:1113 - Mounted container /dev</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.935 DEBUG lxc_conf - conf.c:mount_entry:1657 - remounting /proc/sys/fs/binfmt_misc on /usr/lib/arm-linux-gnueabihf/lxc/proc/sys/fs/binfmt_misc to respect bind or remount options</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.935 DEBUG lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /proc/sys/fs/binfmt_misc was 4096, required extra flags are 0</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.935 DEBUG lxc_conf - conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.936 DEBUG lxc_conf - conf.c:mount_entry:1707 - mounted '/proc/sys/fs/binfmt_misc' on '/usr/lib/arm-linux-gnueabihf/lxc/proc/sys/fs/binfmt_misc', type 'none'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"> lxc 20160421151846.936 <span style="background-color:rgb(0,0,255)"><font color="#ffffff">ERROR</font></span> lxc_utils - utils.c:mkdir_p:253 - Permission denied - failed to create directory '/usr/lib/arm-linux-gnueabihf/lxc/sys/firmware/efi/'</p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.936 WARN lxc_conf - conf.c:mount_entry_create_dir_file:1755 - Failed to create mount target '/usr/lib/arm-linux-gnueabihf/lxc/sys/firmware/efi/efivars'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.936 DEBUG lxc_conf - conf.c:mount_entry:1657 - remounting /sys/fs/fuse/connections on /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/fuse/connections to respect bind or remount options</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.936 DEBUG lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /sys/fs/fuse/connections was 4096, required extra flags are 0</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.936 DEBUG lxc_conf - conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.937 DEBUG lxc_conf - conf.c:mount_entry:1707 - mounted '/sys/fs/fuse/connections' on '/usr/lib/arm-linux-gnueabihf/lxc/sys/fs/fuse/connections', type 'none'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"> lxc 20160421151846.937 <font style="background-color:rgb(0,0,255)" color="#ffffff">ERROR</font> lxc_utils - utils.c:mkdir_p:253 - Permission denied - failed to create directory '/usr/lib/arm-linux-gnueabihf/lxc/sys/fs/pstore'</p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.937 WARN lxc_conf - conf.c:mount_entry_create_dir_file:1755 - Failed to create mount target '/usr/lib/arm-linux-gnueabihf/lxc/sys/fs/pstore'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.937 DEBUG lxc_conf - conf.c:mount_entry:1657 - remounting /sys/kernel/debug on /usr/lib/arm-linux-gnueabihf/lxc/sys/kernel/debug to respect bind or remount options</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.937 DEBUG lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /sys/kernel/debug was 40</span>96, required extra flags are 0</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.937 DEBUG lxc_conf - conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.938 DEBUG lxc_conf - conf.c:mount_entry:1707 - mounted '/sys/kernel/debug' on '/usr/lib/arm-linux-gnueabihf/lxc/sys/kernel/debug', type 'none'</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"> lxc 20160421151846.938 <span style="background-color:rgb(0,0,255)"><font color="#ffffff">ERROR</font></span> lxc_utils - utils.c:mkdir_p:253 - Permission denied - failed to create directory '/usr/lib/arm-linux-gnueabihf/lxc/sys/kernel/security'</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.938 WARN lxc_conf - conf.c:mount_entry_create_dir_file:1755 - Failed to create mount target '/usr/lib/arm-linux-gnueabihf/lxc/sys/kernel/security'</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.938 DEBUG lxc_conf - conf.c:mount_entry:1657 - remounting /dev/mqueue on /usr/lib/arm-linux-gnueabihf/lxc/dev/mqueue to respect bind or remount options</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.938 DEBUG lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /dev/mqueue was 4096, required extra flags are 0</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.938 DEBUG lxc_conf - conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.938 DEBUG lxc_conf - conf.c:mount_entry:1707 - mounted '/dev/mqueue' on '/usr/lib/arm-linux-gnueabihf/lxc/dev/mqueue', type 'none'</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.939 DEBUG lxc_conf - conf.c:mount_entry:1657 - remounting /var/lib/lxd/devlxd on /usr/lib/arm-linux-gnueabihf/lxc/dev/lxd to respect bind or remount options</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo">
</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.939 DEBUG lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /var/lib/lxd/devlxd was 1024, required extra flags are 0</span></p></div><div><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.939 DEBUG lxc_conf - conf.c:mount_entry:1681 - mountflags already was 4096, skipping remount</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.939 DEBUG lxc_conf - conf.c:mount_entry:1707 - mounted '/var/lib/lxd/devlxd' on '/usr/lib/arm-linux-gnueabihf/lxc/dev/lxd', type 'none'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.939 DEBUG lxc_conf - conf.c:mount_entry:1657 - remounting /var/lib/lxd/shmounts/t7 on /usr/lib/arm-linux-gnueabihf/lxc/dev/.lxd-mounts to respect bind or remount options</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.939 DEBUG lxc_conf - conf.c:mount_entry:1672 - (at remount) flags for /var/lib/lxd/shmounts/t7 was 1024, required extra flags are 0</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.940 DEBUG lxc_conf - conf.c:mount_entry:1681 - mountflags already was 4096, skipping remount</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.940 DEBUG lxc_conf - conf.c:mount_entry:1707 - mounted '/var/lib/lxd/shmounts/t7' on '/usr/lib/arm-linux-gnueabihf/lxc/dev/.lxd-mounts', type 'none'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.940 INFO lxc_conf - conf.c:mount_file_entries:1926 - mount points have been setup</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151846.941 INFO lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/share/lxcfs/lxc.mount.hook' for container 't7', config section 'lxc'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151847.131 INFO lxc_conf - conf.c:fill_autodev:1141 - Creating initial consoles under container /dev</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151847.131 INFO lxc_conf - conf.c:fill_autodev:1152 - Populating container /dev</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151847.132 INFO lxc_conf - conf.c:fill_autodev:1189 - Populated container /dev</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151847.133 INFO lxc_conf - conf.c:setup_dev_console:1437 - console has been setup</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151847.133 INFO lxc_utils - utils.c:mount_proc_if_needed:1726 - I am 1, /proc/self points to '1'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.170 DEBUG lxc_conf - conf.c:setup_rootfs_pivot_root:1050 - pivot_root syscall to '/usr/lib/arm-linux-gnueabihf/lxc' successful</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 INFO lxc_conf - conf.c:setup_tty:995 - 0 tty(s) has been setup</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 INFO lxc_conf - conf.c:setup_personality:1393 - set personality to '0x8'</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 DEBUG lxc_conf - conf.c:setup_caps:2055 - drop capability 'mac_admin' (33)</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 DEBUG lxc_conf - conf.c:setup_caps:2055 - drop capability 'mac_override' (32)</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 DEBUG lxc_conf - conf.c:setup_caps:2055 - drop capability 'sys_time' (25)</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 DEBUG lxc_conf - conf.c:setup_caps:2055 - drop capability 'sys_module' (16)</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 DEBUG lxc_conf - conf.c:setup_caps:2055 - drop capability 'sys_rawio' (17)</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 DEBUG lxc_conf - conf.c:setup_caps:2064 - capabilities have been setup</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421101847.172 NOTICE lxc_conf - conf.c:lxc_setup:3838 - 't7' is setup.</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"> lxc 20160421101847.173 <span style="background-color:rgb(0,0,255)"><font color="#ffffff">ERROR lxc_seccomp - seccomp.c:lxc_seccomp_load:615 - Error loading the seccomp policy</font></span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"> lxc 20160421151847.174 <font color="#ffffff"><span style="background-color:rgb(0,0,255)">ERROR</span> </font>lxc_sync - sync.c:__sync_wait:52 - An error occurred in another process (expected sequence number 4)</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"> lxc 20160421151847.174 <span style="background-color:rgb(0,0,255)"><font color="#ffffff">ERROR</font></span> lxc_start - start.c:__lxc_start:1329 - failed to spawn 't7'</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151847.174 INFO lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/share/lxcfs/lxc.reboot.hook' for container 't7', config section 'lxc'</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151847.688 INFO lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/bin/lxd callhook /var/lib/lxd 18 stop' for container 't7', config section 'lxc'</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151847.814 WARN lxc_commands - commands.c:lxc_cmd_rsp_recv:172 - command get_cgroup failed to receive response</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151914.895 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 231072 range 65536</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151914.896 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 231072 range 65536</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151914.952 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 231072 range 65536</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421151914.953 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 231072 range 65536</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421152853.688 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 231072 range 65536</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421152853.688 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 231072 range 65536</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo">
</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421152853.742 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 231072 range 65536</span></p></div><div><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span style=""> lxc 20160421152853.742 INFO lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 231072 range 65536</span></p></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Apr 21, 2016 at 2:16 AM, Serge Hallyn <span dir="ltr"><<a href="mailto:serge.hallyn@ubuntu.com" target="_blank">serge.hallyn@ubuntu.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
edit that script to do 'set -x', so that we can see what the script<br>
is doing in the container debug log.<br>
<span class=""><br>
Quoting Muneeb Ahmad (<a href="mailto:muneeb.gandapur@gmail.com">muneeb.gandapur@gmail.com</a>):<br>
> lxcfs=2.0.0<br>
> lxc=2.0.0.rc9<br>
> And the contents of lxc.mount.hook are;<br>
><br>
> #!/bin/sh -e<br>
><br>
><br>
> # We're dealing with mount entries, so expand any symlink<br>
><br>
</span>> LXC_ROOTFS_MOUNT=$(readlink -f *${LXC_ROOTFS_MOUNT}*)<br>
<span class="">><br>
><br>
> # /proc files<br>
><br>
> if [ -d /var/lib/lxcfs/proc/ ]; then<br>
><br>
> for entry in /var/lib/lxcfs/proc/*; do<br>
><br>
</span>> [ -e *"${LXC_ROOTFS_MOUNT}/proc/$(basename $entry)"* ] || continue<br>
><br>
> mount -n --bind *$entry* *${LXC_ROOTFS_MOUNT}*/proc/$(basename<br>
> *$entry*)<br>
<span class="">><br>
> done<br>
><br>
> fi<br>
><br>
><br>
><br>
> # Allow nesting lxcfs<br>
><br>
</span>> if [ -d *${LXC_ROOTFS_MOUNT}*/var/lib/lxcfs/ ]; then<br>
><br>
> mount -n --bind /var/lib/lxcfs *${LXC_ROOTFS_MOUNT}*/var/lib/lxcfs/<br>
<span class="">><br>
> fi<br>
><br>
><br>
> # no need for lxcfs cgroups if we have cgroup namespaces<br>
><br>
</span>> [ -n *"$LXC_CGNS_AWARE"* ] && [ -f /proc/self/ns/cgroup ] && exit 0<br>
><br>
><br>
> # Don*'t mess with containers that don'*t have /sys/fs/cgroup configured<br>
<span class="">><br>
> # (lxc.mount.auto = cgroup:mixed)<br>
><br>
</span>> if *touch* *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/lxcfs; then<br>
><br>
> *rm* *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/lxcfs<br>
<span class="">><br>
> else<br>
><br>
> exit 0<br>
><br>
> fi<br>
><br>
><br>
> # /sys/fs/cgroup files<br>
><br>
</span>> if [ -d *"${LXC_ROOTFS_MOUNT}/sys/fs/cgroup"* ]; then<br>
<span class="">><br>
> if [ -d /var/lib/lxcfs/cgroup ]; then<br>
><br>
> # Cleanup existing mounts<br>
><br>
</span>> for entry in *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/*; do<br>
><br>
> DEST=$(basename *$entry*)<br>
><br>
><br>
> if [ *"${DEST}"* = *"cgmanager"* ]; then<br>
><br>
> continue<br>
><br>
> fi<br>
><br>
><br>
> if [ ! -d *"${LXC_ROOTFS_MOUNT}/sys/fs/cgroup/${DEST}"* ]; then<br>
><br>
> continue<br>
><br>
> fi<br>
><br>
><br>
> while *grep* -q *"${LXC_ROOTFS_MOUNT}/sys/fs/cgroup/${DEST}"*<br>
> /proc/self/mountinfo; do<br>
><br>
> *grep* *"${LXC_ROOTFS_MOUNT}/sys/fs/cgroup/${DEST}"*<br>
> /proc/self/mountinfo | cut -d*' '* -f5 | while read line; do<br>
><br>
> [ -e *"${line}"* ] && umount -l *"${line}"* || true<br>
><br>
> done<br>
><br>
> done<br>
><br>
><br>
> *rm* -Rf *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/*${DEST}*<br>
<span class="">><br>
> done<br>
><br>
><br>
> # Mount the new entries<br>
><br>
> for entry in /var/lib/lxcfs/cgroup/*; do<br>
><br>
</span>> DEST=$(basename *$entry*)<br>
><br>
> if [ *"$DEST"* = *"name=systemd"* ]; then<br>
><br>
> DEST=*"systemd"*<br>
><br>
> fi<br>
><br>
><br>
> if [ ! -d *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/*${DEST}* ]; then<br>
><br>
> *mkdir* *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/*${DEST}*<br>
><br>
> fi<br>
><br>
><br>
> mount -n --bind *$entry* *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/<br>
> *$DEST*<br>
<span class="">><br>
><br>
> # make sure that cpu,cpuacct shows up as cpu and cpuacct<br>
><br>
> # separately, else systemd is unhappy<br>
><br>
</span>> if *echo* *$DEST* | *grep* -q *","*; then<br>
><br>
> arr=$(*echo* *$DEST* | tr *","* *"\n"*)<br>
><br>
> for single in *$arr*<br>
><br>
> do<br>
><br>
> if [ ! -L *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/*$single*<br>
> ]; then<br>
><br>
> *ln* -s *$DEST* *${LXC_ROOTFS_MOUNT}*/sys/fs/cgroup/<br>
> *$single*<br>
<div class="HOEnZb"><div class="h5">><br>
> fi<br>
><br>
> done<br>
><br>
> fi<br>
><br>
> done<br>
><br>
> fi<br>
><br>
> fi<br>
><br>
><br>
> exit 0<br>
><br>
><br>
><br>
> On Sat, Apr 16, 2016 at 12:33 AM, Serge Hallyn <<a href="mailto:serge.hallyn@ubuntu.com">serge.hallyn@ubuntu.com</a>><br>
> wrote:<br>
><br>
> > /usr/share/lxcfs/lxc.mount.hook failed. Can you please who us its<br>
> > contents? What are your versions of lxc and lxcfs?<br>
> ><br>
> > Quoting Muneeb Ahmad (<a href="mailto:muneeb.gandapur@gmail.com">muneeb.gandapur@gmail.com</a>):<br>
> > > I updated the kernel for user namespaces and everything is enabled when I<br>
> > > run "lxc-checkconfig". But I encountered the same error when I tried to<br>
> > run<br>
> > > a container. Container log shows different errors now:<br>
> > ><br>
> > > Name: ubuntu-test<br>
> > ><br>
> > > Architecture: armv7l<br>
> > ><br>
> > > Created: 2016/04/10 21:41 UTC<br>
> > ><br>
> > > Status: Stopped<br>
> > ><br>
> > > Type: persistent<br>
> > ><br>
> > > Profiles: default<br>
> > ><br>
> > ><br>
> > > Log:<br>
> > ><br>
> > ><br>
> > > lxc 20160410214156.082 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214156.082 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214401.643 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214401.643 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214401.815 INFO lxc_start -<br>
> > > start.c:lxc_check_inherited:251 - closed inherited fd 3<br>
> > ><br>
> > > lxc 20160410214401.816 INFO lxc_start -<br>
> > > start.c:lxc_check_inherited:251 - closed inherited fd 8<br>
> > ><br>
> > > lxc 20160410214401.833 INFO lxc_container -<br>
> > > lxccontainer.c:do_lxcapi_start:797 - Attempting to set proc title to [lxc<br>
> > > monitor] /var/lib/lxd/containers ubuntu-test<br>
> > ><br>
> > > lxc 20160410214401.836 INFO lxc_start -<br>
> > > start.c:lxc_check_inherited:251 - closed inherited fd 8<br>
> > ><br>
> > > lxc 20160410214401.837 INFO lxc_lsm -<br>
> > lsm/lsm.c:lsm_init:48<br>
> > > - LSM security driver nop<br>
> > ><br>
> > > lxc 20160410214401.840 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:342 - processing: .reject_force_umount #<br>
> > comment<br>
> > > this to allow umount -f; not recommended.<br>
> > ><br>
> > > lxc 20160410214401.840 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:436 - Adding native rule for<br>
> > reject_force_umount<br>
> > > action 0<br>
> > ><br>
> > > lxc 20160410214401.840 INFO lxc_seccomp -<br>
> > > seccomp.c:do_resolve_add_rule:216 - Setting seccomp rule to reject force<br>
> > > umounts<br>
> > ><br>
> > ><br>
> > > lxc 20160410214401.840 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:342 - processing: .[all].<br>
> > ><br>
> > > lxc 20160410214401.840 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:342 - processing: .kexec_load errno 1.<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:436 - Adding native rule for kexec_load action<br>
> > > 327681<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:342 - processing: .open_by_handle_at errno 1.<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:436 - Adding native rule for open_by_handle_at<br>
> > > action 327681<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:342 - processing: .init_module errno 1.<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:436 - Adding native rule for init_module action<br>
> > > 327681<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:342 - processing: .finit_module errno 1.<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:436 - Adding native rule for finit_module<br>
> > action<br>
> > > 327681<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:342 - processing: .delete_module errno 1.<br>
> > ><br>
> > > lxc 20160410214401.842 INFO lxc_seccomp -<br>
> > > seccomp.c:parse_config_v2:436 - Adding native rule for delete_module<br>
> > action<br>
> > > 327681<br>
> > ><br>
> > > lxc 20160410214401.841 INFO lxc_start -<br>
> > > start.c:lxc_check_inherited:251 - closed inherited fd 3<br>
> > ><br>
> > > lxc 20160410214401.842 INFO lxc_conf -<br>
> > > conf.c:run_script_argv:367 - Executing script '/usr/bin/lxd callhook<br>
> > > /var/lib/lxd 2 start' for container 'ubuntu-test', config section 'lxc'<br>
> > ><br>
> > > lxc 20160410214401.842 INFO lxc_start -<br>
> > > start.c:lxc_check_inherited:251 - closed inherited fd 8<br>
> > ><br>
> > > lxc 20160410214401.858 INFO lxc_monitor -<br>
> > > monitor.c:lxc_monitor_sock_name:178 - using monitor sock name<br>
> > > lxc/d78a9d7e97b4b375//var/lib/lxd/containers<br>
> > ><br>
> > > lxc 20160410214402.096 DEBUG lxc_start -<br>
> > > start.c:setup_signal_fd:289 - sigchild handler set<br>
> > ><br>
> > > lxc 20160410214402.099 DEBUG lxc_console -<br>
> > > console.c:lxc_console_peer_default:473 - no console peer<br>
> > ><br>
> > > lxc 20160410214402.099 INFO lxc_start -<br>
> > > start.c:lxc_init:488 - 'ubuntu-test' is initialized<br>
> > ><br>
> > > lxc 20160410214402.102 DEBUG lxc_start -<br>
> > > start.c:__lxc_start:1302 - Not dropping cap_sys_boot or watching utmp<br>
> > ><br>
> > > lxc 20160410214402.102 INFO lxc_start -<br>
> > > start.c:resolve_clone_flags:999 - Cloning a new user namespace<br>
> > ><br>
> > > lxc 20160410214402.112 DEBUG lxc_conf -<br>
> > > conf.c:instantiate_veth:2613 - instantiated veth 'vethAMHI20/vethM7FMG6',<br>
> > > index is '7'<br>
> > ><br>
> > > lxc 20160410214402.113 INFO lxc_cgroup -<br>
> > > cgroup.c:cgroup_init:68 - cgroup driver cgroupfs-ng initing for<br>
> > ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.129 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214402.129 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214402.206 DEBUG lxc_conf -<br>
> > > conf.c:lxc_assign_network:3047 - move 'eth0' to '1465'<br>
> > ><br>
> > > lxc 20160410214402.241 NOTICE lxc_start -<br>
> > > start.c:do_start:763 - switching to gid/uid 0/0 in new user namespace<br>
> > ><br>
> > > lxc 20160410214402.243 DEBUG lxc_conf -<br>
> > > conf.c:setup_rootfs:1215 - mounted<br>
> > > '/var/lib/lxd/containers/ubuntu-test/rootfs' on<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc'<br>
> > ><br>
> > > lxc 20160410214402.243 INFO lxc_conf -<br>
> > > conf.c:setup_utsname:843 - 'ubuntu-test' hostname has been setup<br>
> > ><br>
> > > lxc 20160410214402.276 DEBUG lxc_conf -<br>
> > > conf.c:setup_hw_addr:2144 - mac address '00:16:3e:f1:c3:05' on 'eth0' has<br>
> > > been setup<br>
> > ><br>
> > > lxc 20160410214402.277 DEBUG lxc_conf -<br>
> > > conf.c:setup_netdev:2371 - 'eth0' has been setup<br>
> > ><br>
> > > lxc 20160410214402.277 INFO lxc_conf -<br>
> > > conf.c:setup_network:2392 - network has been setup<br>
> > ><br>
> > > lxc 20160410214402.277 INFO lxc_conf -<br>
> > > conf.c:mount_autodev:1072 - Mounting container /dev<br>
> > ><br>
> > > lxc 20160410214402.278 INFO lxc_conf -<br>
> > > conf.c:mount_autodev:1095 - Mounted tmpfs onto<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/dev<br>
> > ><br>
> > > lxc 20160410214402.279 INFO lxc_conf -<br>
> > > conf.c:mount_autodev:1113 - Mounted container /dev<br>
> > ><br>
> > > lxc 20160410214402.280 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1657 - remounting /proc/sys/fs/binfmt_misc on<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/proc/sys/fs/binfmt_misc to respect bind<br>
> > or<br>
> > > remount options<br>
> > ><br>
> > > lxc 20160410214402.280 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1672 - (at remount) flags for /proc/sys/fs/binfmt_misc<br>
> > > was 4096, required extra flags are 0<br>
> > ><br>
> > > lxc 20160410214402.280 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount<br>
> > ><br>
> > > lxc 20160410214402.280 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1707 - mounted '/proc/sys/fs/binfmt_misc' on<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/proc/sys/fs/binfmt_misc', type 'none'<br>
> > ><br>
> > > lxc 20160410214402.281 ERROR lxc_utils -<br>
> > utils.c:mkdir_p:253<br>
> > > - Permission denied - failed to create directory<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/sys/firmware/efi/'<br>
> > ><br>
> > > lxc 20160410214402.281 WARN lxc_conf -<br>
> > > conf.c:mount_entry_create_dir_file:1755 - Failed to create mount target<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/sys/firmware/efi/efivars'<br>
> > ><br>
> > > lxc 20160410214402.281 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1657 - remounting /sys/fs/fuse/connections on<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/fuse/connections to respect bind<br>
> > or<br>
> > > remount options<br>
> > ><br>
> > > lxc 20160410214402.281 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1672 - (at remount) flags for /sys/fs/fuse/connections<br>
> > > was 4096, required extra flags are 0<br>
> > ><br>
> > > lxc 20160410214402.281 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount<br>
> > ><br>
> > > lxc 20160410214402.281 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1707 - mounted '/sys/fs/fuse/connections' on<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/sys/fs/fuse/connections', type 'none'<br>
> > ><br>
> > > lxc 20160410214402.281 ERROR lxc_utils -<br>
> > utils.c:mkdir_p:253<br>
> > > - Permission denied - failed to create directory<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/sys/fs/pstore'<br>
> > ><br>
> > > lxc 20160410214402.281 WARN lxc_conf -<br>
> > > conf.c:mount_entry_create_dir_file:1755 - Failed to create mount target<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/sys/fs/pstore'<br>
> > ><br>
> > > lxc 20160410214402.282 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1657 - remounting /sys/kernel/debug on<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/kernel/debug to respect bind or<br>
> > > remount options<br>
> > ><br>
> > > lxc 20160410214402.282 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1672 - (at remount) flags for /sys/kernel/debug was<br>
> > > 4096, required extra flags are 0<br>
> > ><br>
> > > lxc 20160410214402.282 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount<br>
> > ><br>
> > > lxc 20160410214402.282 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1707 - mounted '/sys/kernel/debug' on<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/sys/kernel/debug', type 'none'<br>
> > ><br>
> > > lxc 20160410214402.282 ERROR lxc_utils -<br>
> > utils.c:mkdir_p:253<br>
> > > - Permission denied - failed to create directory<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/sys/kernel/security'<br>
> > ><br>
> > > lxc 20160410214402.282 WARN lxc_conf -<br>
> > > conf.c:mount_entry_create_dir_file:1755 - Failed to create mount target<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/sys/kernel/security'<br>
> > ><br>
> > > lxc 20160410214402.283 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1657 - remounting /dev/mqueue on<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/dev/mqueue to respect bind or remount<br>
> > > options<br>
> > ><br>
> > > lxc 20160410214402.283 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1672 - (at remount) flags for /dev/mqueue was 4096,<br>
> > > required extra flags are 0<br>
> > ><br>
> > > lxc 20160410214402.283 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1681 - mountflags already was 20480, skipping remount<br>
> > ><br>
> > > lxc 20160410214402.283 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1707 - mounted '/dev/mqueue' on<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/dev/mqueue', type 'none'<br>
> > ><br>
> > > lxc 20160410214402.283 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1657 - remounting /var/lib/lxd/devlxd on<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/dev/lxd to respect bind or remount<br>
> > options<br>
> > ><br>
> > > lxc 20160410214402.283 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1672 - (at remount) flags for /var/lib/lxd/devlxd was<br>
> > > 1024, required extra flags are 0<br>
> > ><br>
> > > lxc 20160410214402.283 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1681 - mountflags already was 4096, skipping remount<br>
> > ><br>
> > > lxc 20160410214402.283 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1707 - mounted '/var/lib/lxd/devlxd' on<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/dev/lxd', type 'none'<br>
> > ><br>
> > > lxc 20160410214402.284 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1657 - remounting /var/lib/lxd/shmounts/ubuntu-test on<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/dev/.lxd-mounts to respect bind or<br>
> > remount<br>
> > > options<br>
> > ><br>
> > > lxc 20160410214402.284 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1672 - (at remount) flags for<br>
> > > /var/lib/lxd/shmounts/ubuntu-test was 1024, required extra flags are 0<br>
> > ><br>
> > > lxc 20160410214402.284 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1681 - mountflags already was 4096, skipping remount<br>
> > ><br>
> > > lxc 20160410214402.284 DEBUG lxc_conf -<br>
> > > conf.c:mount_entry:1707 - mounted '/var/lib/lxd/shmounts/ubuntu-test' on<br>
> > > '/usr/lib/arm-linux-gnueabihf/lxc/dev/.lxd-mounts', type 'none'<br>
> > ><br>
> > > lxc 20160410214402.284 INFO lxc_conf -<br>
> > > conf.c:mount_file_entries:1926 - mount points have been setup<br>
> > ><br>
> > > lxc 20160410214402.285 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1292 - Remounted<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/systemd read-only<br>
> > ><br>
> > > lxc 20160410214402.285 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1298 - Mounting<br>
> > > /sys/fs/cgroup/systemd//lxc/ubuntu-test onto<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/systemd//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.285 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1306 - Completed second stage<br>
> > > cgroup automounts for<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/systemd//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.286 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1292 - Remounted<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/freezer read-only<br>
> > ><br>
> > > lxc 20160410214402.286 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1298 - Mounting<br>
> > > /sys/fs/cgroup/freezer//lxc/ubuntu-test onto<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/freezer//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.286 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1306 - Completed second stage<br>
> > > cgroup automounts for<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/freezer//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.287 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1292 - Remounted<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/blkio read-only<br>
> > ><br>
> > > lxc 20160410214402.287 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1298 - Mounting<br>
> > > /sys/fs/cgroup/blkio//lxc/ubuntu-test onto<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/blkio//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.287 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1306 - Completed second stage<br>
> > > cgroup automounts for<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/blkio//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.287 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1292 - Remounted<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/cpu read-only<br>
> > ><br>
> > > lxc 20160410214402.287 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1298 - Mounting<br>
> > > /sys/fs/cgroup/cpu//lxc/ubuntu-test onto<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/cpu//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.288 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1306 - Completed second stage<br>
> > > cgroup automounts for<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/cpu//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.288 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1292 - Remounted<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/net_cls read-only<br>
> > ><br>
> > > lxc 20160410214402.288 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1298 - Mounting<br>
> > > /sys/fs/cgroup/net_cls//lxc/ubuntu-test onto<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/net_cls//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.288 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1306 - Completed second stage<br>
> > > cgroup automounts for<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/net_cls//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.289 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1292 - Remounted<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/devices read-only<br>
> > ><br>
> > > lxc 20160410214402.289 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1298 - Mounting<br>
> > > /sys/fs/cgroup/devices//lxc/ubuntu-test onto<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/devices//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.289 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1306 - Completed second stage<br>
> > > cgroup automounts for<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/devices//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.289 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1292 - Remounted<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/cpuset read-only<br>
> > ><br>
> > > lxc 20160410214402.289 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1298 - Mounting<br>
> > > /sys/fs/cgroup/cpuset//lxc/ubuntu-test onto<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/cpuset//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.289 INFO lxc_cgfsng -<br>
> > > cgfsng.c:do_secondstage_mounts_if_needed:1306 - Completed second stage<br>
> > > cgroup automounts for<br>
> > > /usr/lib/arm-linux-gnueabihf/lxc/sys/fs/cgroup/cpuset//lxc/ubuntu-test<br>
> > ><br>
> > > lxc 20160410214402.289 INFO lxc_conf -<br>
> > > conf.c:run_script_argv:367 - Executing script<br>
> > > '/usr/share/lxcfs/lxc.mount.hook' for container 'ubuntu-test', config<br>
> > > section 'lxc'<br>
> > ><br>
> > > lxc 20160410214402.495 ERROR lxc_conf -<br>
> > > conf.c:run_buffer:347 - Script exited with status 1<br>
> > ><br>
> > > lxc 20160410214402.495 ERROR lxc_conf -<br>
> > > conf.c:lxc_setup:3751 - failed to run mount hooks for container<br>
> > > 'ubuntu-test'.<br>
> > ><br>
> > > lxc 20160410214402.495 ERROR lxc_start -<br>
> > > start.c:do_start:819 - failed to setup the container<br>
> > ><br>
> > > lxc 20160410214402.495 ERROR lxc_sync -<br>
> > > sync.c:__sync_wait:52 - An error occurred in another process (expected<br>
> > > sequence number 2)<br>
> > ><br>
> > > lxc 20160410214402.495 WARN lxc_conf -<br>
> > > conf.c:lxc_delete_network:2908 - failed to remove interface 7 'eth0'<br>
> > ><br>
> > > lxc 20160410214402.497 ERROR lxc_start -<br>
> > > start.c:__lxc_start:1329 - failed to spawn 'ubuntu-test'<br>
> > ><br>
> > > lxc 20160410214402.606 INFO lxc_conf -<br>
> > > conf.c:run_script_argv:367 - Executing script '/usr/bin/lxd callhook<br>
> > > /var/lib/lxd 2 stop' for container 'ubuntu-test', config section 'lxc'<br>
> > ><br>
> > > lxc 20160410214402.793 WARN lxc_commands -<br>
> > > commands.c:lxc_cmd_rsp_recv:172 - command get_cgroup failed to receive<br>
> > > response<br>
> > ><br>
> > > lxc 20160410214402.793 WARN lxc_commands -<br>
> > > commands.c:lxc_cmd_rsp_recv:172 - command get_cgroup failed to receive<br>
> > > response<br>
> > ><br>
> > > lxc 20160410214402.831 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214402.832 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214513.301 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214513.301 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214513.362 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214513.363 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214826.048 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214826.048 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214826.117 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > > lxc 20160410214826.117 INFO lxc_confile -<br>
> > > confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 165536<br>
> > > range 65536<br>
> > ><br>
> > ><br>
> > > Please someone help me out.<br>
> > > regards<br>
> > ><br>
> > > On Sat, Apr 9, 2016 at 9:25 PM, Serge Hallyn <<a href="mailto:serge.hallyn@ubuntu.com">serge.hallyn@ubuntu.com</a>><br>
> > > wrote:<br>
> > ><br>
> > > > Ok, fwiw rpi2 should work with Ubuntu as well iiuc.<br>
> > > ><br>
> > > > Quoting Muneeb Ahmad (<a href="mailto:muneeb.gandapur@gmail.com">muneeb.gandapur@gmail.com</a>):<br>
> > > > > I'm using Raspberry pi 2 actually. And I'll take a look at debian<br>
> > and see<br>
> > > > > if their kernel have the userns_allow_unpriv option.<br>
> > > > ><br>
> > > > > On Sat, Apr 9, 2016 at 9:00 AM, Serge Hallyn <<br>
> > <a href="mailto:serge.hallyn@ubuntu.com">serge.hallyn@ubuntu.com</a>><br>
> > > > > wrote:<br>
> > > > ><br>
> > > > > > Quoting Muneeb Ahmad (<a href="mailto:muneeb.gandapur@gmail.com">muneeb.gandapur@gmail.com</a>):<br>
> > > > > > > It's not in there.<br>
> > > > > > > Do you have any Raspberry pi OS recommendations for me? I'm<br>
> > > > > ><br>
> > > > > > This is a rpi , not 2 or 3, so ubuntu isn't an option? But<br>
> > > > > > debian is, right? And their kernel should have the<br>
> > userns_allow_unpriv<br>
> > > > > > or whatever sysctl, which would let you do it.<br>
> > > > > ><br>
> > > > > > > interested in running lxc containers and openstack(nova only)?<br>
> > > > > > ><br>
> > > > > > > Thanks. On Sat, Apr 09, 2016 at 2:51 AM, Serge Hallyn <<br>
> > > > > > > <a href="mailto:serge.hallyn@ubuntu.com">serge.hallyn@ubuntu.com</a> [<a href="mailto:serge.hallyn@ubuntu.com">serge.hallyn@ubuntu.com</a>] > wrote:<br>
> > > > > > > Quoting Muneeb Ahmad (<a href="mailto:muneeb.gandapur@gmail.com">muneeb.gandapur@gmail.com</a>):<br>
> > > > > > > > Thanks for the answer. Is there a work around for this? Or<br>
> > should I<br>
> > > > > > > > just go for some other OS?<br>
> > > > > > ><br>
> > > > > > > Sorry I don't know the recommended way to build/use a custom<br>
> > kernel<br>
> > > > > > > in mint.<br>
> > > > > > ><br>
> > > > > > > Actually, check /proc/sys/kernel/*user*. Is there something like<br>
> > > > > > > unpriv_userns_allow? You may be able to just echo 1 > that.<br>
> > > > > > ><br>
> > > > > > > -serge<br>
> > > > > > > _______________________________________________<br>
> > > > > > > lxc-users mailing list<br>
> > > > > > > <a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
> > > > > > > <a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a><br>
> > > > > ><br>
> > > > > > > _______________________________________________<br>
> > > > > > > lxc-users mailing list<br>
> > > > > > > <a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
> > > > > > > <a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a><br>
> > > > > ><br>
> > > > > > _______________________________________________<br>
> > > > > > lxc-users mailing list<br>
> > > > > > <a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
> > > > > > <a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a><br>
> > > > > ><br>
> > > ><br>
> > > > > _______________________________________________<br>
> > > > > lxc-users mailing list<br>
> > > > > <a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
> > > > > <a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a><br>
> > > ><br>
> > > > _______________________________________________<br>
> > > > lxc-users mailing list<br>
> > > > <a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
> > > > <a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a><br>
> > > ><br>
> ><br>
> > > _______________________________________________<br>
> > > lxc-users mailing list<br>
> > > <a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
> > > <a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a><br>
> ><br>
> > _______________________________________________<br>
> > lxc-users mailing list<br>
> > <a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
> > <a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a><br>
> ><br>
<br>
> _______________________________________________<br>
> lxc-users mailing list<br>
> <a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
> <a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a><br>
<br>
_______________________________________________<br>
lxc-users mailing list<br>
<a href="mailto:lxc-users@lists.linuxcontainers.org">lxc-users@lists.linuxcontainers.org</a><br>
<a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.org/listinfo/lxc-users</a></div></div></blockquote></div><br></div>