[Lxc-users] Failed to setup networking within container

[Daniel Baumann]

On 01/05/2012 05:05 AM, Vedran Furač wrote:
> In template ${_PARENT_AREA} was always empty (thus getting invalid
> sources.lost) no matter what I selected so I had to replace it with
> "main contrib non-free" Same goes for ${_PARENT_ARCHIVE_AREAS}.

this was fixed a couple of days in my git[0] tree, but i didn't upload 
it yet (wanted 0.7.5-17 to migrate first).

> Shadow passwords are now on.
> adduser: Only one or two names allowed.
> chpasswd: (user ) pam_chauthtok() failed, error:
> Authentication token manipulation error
> chpasswd: (line 1, user ) password not changed

this is a bug in "user-setup" (that's a package) handling, i'd need the 
full debug output in order to reproduce it; i suspect there's an 
uncovered edge-case somewhere, it has been working for me.

> I had to chroot and then manually set password, but I still get when
> "booting":
>
> hostname: you must be root to change the host name
> mount: permission denied
> mount: permission denied
> mount: permission denied
> Mount point '/dev/console' does not exist. Skipping mount. ... (warning).
> Mount point '/dev/tty1' does not exist. Skipping mount. ... (warning).
> ...
> startpar: service(s) returned failure: hostname.sh ... failed!

by default, the sys_admin capability is dropped, hence the container is 
not allowed to set the hostname. this errors that come from that are 
harmless and can be ignored.

> Starting OpenBSD Secure Shell server: sshdCould not load host key:
> /etc/ssh/ssh_host_ecdsa_key

this however looks like you have not been installing "linux-container" 
(that's a package), are you sure you followed my advice (putting the 
linux-container deb in /usr/share/lxc when creating squeeze systems, as 
squeeze does not have linux-container). this also would explain the 
error you had with "user-setup".

-- 
Address:        Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern
Email:          daniel.baumann at progress-technologies.net
Internet:       http://people.progress-technologies.net/~daniel.baumann/