[Lxc-users] lxc-setcap 'Failed to set capabilities on file /usr/local/libexec/lxc-init'

[Frank Scholten]

On Fri, Oct 12, 2012 at 7:40 PM, Serge Hallyn
<serge.hallyn at canonical.com> wrote:
> Quoting Frank Scholten (frank at frankscholten.nl):
>> Hi all,
>>
>> I want to run non-root LXCs and I read I have to run sudo lxc-setcap
>> first.  I am running Ubuntu 12.04 btw.
>>
>> So I cloned the git repo, ran ./configure, make, make install but when
>> I run lxc-setcap I get:
>>
>> root at franktop:/usr/local/libexec# lxc-setcap
>> Failed to set capabilities on file `/usr/local/libexec/lxc-init' (No
>> such file or directory)
>>
>> Turns out lxc-init exists under /usr/local/libexec/lxc/lxc-init
>>
>> Is this an error in the Makefile?
>
> Yeah, bc lxc-init has moved, but supporting lxc-setcap is not interesting
> right now.  It doesn't really work anyway (there are scripts involved,
> which you cannot attach capabilities to).

Ok, I wasn't aware of that. Curious to know more about this. Which
docs / man pages can I read about this subject?

  I realize waiting is no fun, but
> we're getting really close to being able to start up containers unp-privileged
> through user namespaces.
>
> -serge
>

Looking foward to it!

Cheers,

Frank