<div dir="ltr">Hi David. Those are excellent points. Actually, I regret not mentioning my purpose in the original e-mail. To clarify, I don't intend to run a host mariadb and a container mariadb simultaneously. Also, this is definitely not for production. This is primarily for my development environment. I intend to test my web applications inside various containers which will all have different configurations. The web applications are developed inside the host, and tested with these varying configurations within the containers. However, the dummy development data from the mysql host is always consistent. That is basically the only thing that does not change. I know I could easily copy this data over to the containers and then apply the required permissions that way, but I prefer to implement a "shared" drive/dir instead. Of course, like I said before, only one database server will be running at any given time on the data-dir</div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jul 9, 2018 at 5:35 PM, David Favor <span dir="ltr"><<a href="mailto:david@davidfavor.com" target="_blank">david@davidfavor.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">Tony P wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
What's the correct way to share the mysql/mariadb data dir of the host system to a container and map the permissions correctly? I have been struggling with this for a couple of days. I'm sorry if this question has been asked before, but I have searched thoroughly and not been able to find the solution yet. Basically what I have done so far:<br>
<br>
Install mariadb-server on both host and container and:<br>
<br>
$ printf "lxd:$(id -u mysql):1\nroot:$(id -u mysql):1\n" | sudo tee -a /etc/subuid<br>
$ printf "lxd:$(id -g mysql):1\nroot:$(id -g mysql):1\n" | sudo tee -a /etc/subgid<br>
$ sudo systemctl restart lxd<br>
$ printf "uid $(id -u mysql) 1000\ngid $(id -g mysql) 1000" | lxc config set $CONTAINER_NAME raw.idmap -<br>
$ lxc restart $CONTAINER_NAME<br>
$ sudo lxc config device add $CONTAINER_NAME mysql disk source=/var/lib/mysql path=/var/lib/mysql<br>
Unfortunately, this breaks the container and prevents it from starting since the mapping isn't allowed.<br>
<br>
$ sudo lxc info --show-log ub1804x64-3<br>
<br>
Name: ub1804x64-3<br>
Remote: unix://<br>
Architecture: x86_64<br>
Created: 2018/07/09 15:30 UTC<br>
Status: Stopped<br>
Type: persistent<br>
Profiles: default<br>
<br>
Log:<br>
<br>
lxc ub1804x64-3 20180709154554.682 ERROR lxc_conf - conf.c:lxc_map_ids:2919 - newuidmap failed to write mapping "newuidmap: uid range [1000-1001) -> [114-115) not allowed": newuidmap 6725 0 100000 1000 1000 114 1 1001 101001 64535<br>
lxc ub1804x64-3 20180709154554.682 ERROR lxc_start - start.c:lxc_spawn:1661 - Failed to set up id mapping.<br>
lxc ub1804x64-3 20180709154554.755 WARN lxc_network - network.c:lxc_delete_network_p<wbr>riv:2607 - Failed to remove interface "veth38DOB9" from "lxdbr0": Invalid argument<br>
lxc ub1804x64-3 20180709154554.755 ERROR lxc_container - lxccontainer.c:wait_on_daemoni<wbr>zed_start:834 - Received container state "ABORTING" instead of "RUNNING"<br>
lxc ub1804x64-3 20180709154554.756 ERROR lxc_start - start.c:__lxc_start:1887 - Failed to spawn container "ub1804x64-3"<br>
lxc 20180709154554.775 WARN lxc_commands - commands.c:lxc_cmd_rsp_recv:13<wbr>0 - Connection reset by peer - Failed to receive response for command "get_state"<br>
I'm basically following this article (<a href="https://stgraber.org/2017/06/15/custom-user-mappings-in-lxd-containers/" rel="noreferrer" target="_blank">https://stgraber.org/2017/06/<wbr>15/custom-user-mappings-in-lxd<wbr>-containers/</a>) written by Stéphane Graber (the super awesome primary LXD developer) to achieve this. I'll admit that I don't fully understand what's going on here, if someone could help me understand my mistake a bit better, I'd really appreciate it. I have a feeling I have the range wrong (1000?). I previously attempted doing the same by manually adding the mysql user/group and trying to map those (instead of installing mysql), but that also didn't work out (Same error). This is what I tried before trying the mapping):<br>
<br>
$ sudo groupadd mysql<br>
$ sudo useradd -r -g mysql mysql<br>
<br>
I also tried with: $ printf "both $(id -u mysql) $(id -u mysql)" | lxc config set $CONTAINER_NAME raw.idmap -<br>
<br>
Then the error I get is:<br>
<br>
$ sudo lxc info --show-log tmp3<br>
<br>
Name: tmp3<br>
Remote: unix://<br>
Architecture: x86_64<br>
Created: 2018/07/09 20:32 UTC<br>
Status: Stopped<br>
Type: persistent<br>
Profiles: default<br>
<br>
Log:<br>
<br>
lxc tmp3 20180709204423.805 ERROR lxc_conf - conf.c:lxc_map_ids:2919 - newgidmap failed to write mapping "newgidmap: gid range [114-115) -> [114-115) not allowed": newgidmap 30081 114 114 1 0 100000 114 115 100115 65421<br>
lxc tmp3 20180709204423.805 ERROR lxc_start - start.c:lxc_spawn:1661 - Failed to set up id mapping.<br>
lxc tmp3 20180709204423.876 WARN lxc_network - network.c:lxc_delete_network_p<wbr>riv:2607 - Failed to remove interface "vethYL869L" from "lxdbr0": Invalid argument<br>
lxc tmp3 20180709204423.876 ERROR lxc_container - lxccontainer.c:wait_on_daemoni<wbr>zed_start:834 - Received container state "ABORTING" instead of "RUNNING"<br>
lxc tmp3 20180709204423.877 ERROR lxc_start - start.c:__lxc_start:1887 - Failed to spawn container "tmp3"<br>
lxc 20180709204423.897 WARN lxc_commands - commands.c:lxc_cmd_rsp_recv:13<wbr>0 - Connection reset by peer - Failed to receive response for command "get_state"<br>
<br>
<br>
I'm using LXD 3.0.1 running on host Ubuntu 18.04 amd64 and testing with a Ubuntu 18.04 amd64 container<br>
<br>
Thanks for your help in advance!!<br>
</blockquote>
<br></div></div>
Things to keep in mind.<br>
<br>
1) If you end up with a machine level instance of MariaDB running along<br>
with a container level instance of MariaDB running with a shared<br>
/var/lib/mysql, then all your data will be corrupt.<br>
<br>
Likely best to have a machine level database directory named<br>
something different than /var/lib/mysql, in case you ever accidentally<br>
install a machine level version of mariadb-server packages.<br>
<br>
2) Unsure what you're attempting to accomplish modifying idmaps + restarting<br>
LXD. Maybe you're attempting to defeat container security.<br>
<br>
A better way to do this is...<br>
<br>
lxc config set cname security.privileged true<br>
lxc restart cname<br>
<br>
3) All this said, likely be useful for you to describe your target objective.<br>
<br>
Likely knowing this, someone has already accomplished what you're trying<br>
to accomplish + will have some good suggestions.<br>
<br>
4) Keep in mind, depending on how you finalize all this, container<br>
remote move + copy operations may fail to clone your database data.<br>
<br>
Even if you do end up with a /var/lib/mysql in your newly created<br>
remote container, you'll likely loose your machine/container<br>
filesystem mapping.<div class="HOEnZb"><div class="h5"><br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
______________________________<wbr>_________________<br>
lxc-users mailing list<br>
<a href="mailto:lxc-users@lists.linuxcontainers.org" target="_blank">lxc-users@lists.linuxcontainer<wbr>s.org</a><br>
<a href="http://lists.linuxcontainers.org/listinfo/lxc-users" rel="noreferrer" target="_blank">http://lists.linuxcontainers.o<wbr>rg/listinfo/lxc-users</a></div></div></blockquote></div><br></div>