[lxc-users] Fedory 20 LXC fails to start on Ubuntu 14.04 host?

[Robert Pendell]

On Mon, May 26, 2014 at 11:15 AM, Michael H. Warfield <mhw at wittsend.com> wrote:
> On Mon, 2014-05-26 at 10:58 -0400, Michael H. Warfield wrote:
>> On Mon, 2014-05-26 at 14:18 +0700, Fajar A. Nugraha wrote:
>> > On Mon, May 26, 2014 at 2:03 PM, Timotheus Pokorra
>> > <timotheus at pokorra.de> wrote:
>> >         Hello Federico,
>> >         that is strange.
>> >         I tried now on my old Laptop which runs Ubuntu 14.04, and got
>> >         the same error:
>> >         <30>systemd[1]: Listening on /dev/initctl Compatibility Named
>> >         Pipe.
>> >         <30>systemd[1]: Starting Root Slice.
>> >         <27>systemd[1]: Caught <SEGV>, dumped core as pid 11.
>> >         <30>systemd[1]: Freezing execution.
>> >
>> >
>> >         my kernel is:
>> >         uname -a
>> >         Linux timotheusp-LIFEBOOK-S7110 3.13.0-24-generic #47-Ubuntu
>> >         SMP Fri
>> >         May 2 23:31:42 UTC 2014 i686 i686 i686 GNU/Linux
>> >
>> >         I am also using the packages 1.0.3-0ubuntu3 of lxc.
>> >
>> >         What might be the difference, so that it works for you and
>> >         does not work for me?
>> >
>> >
>> >
>> >
>> >
>> > Try https://www.mail-archive.com/lxc-users@lists.linuxcontainers.org/msg00993.html
>
>> > Look for "unconfined".
>
>> Oh!  The AppArmour profile thing.  Palm / forehead / slap.  Yeah.
>
> In that other thread, Serge and I were discussion if we might just set
> that option and it would be ignored on hosts such as Fedora, CentOS, and
> Oracle which don't use AppArmour.  I just tested that and it does appear
> to be the case.  I'll probably change the template for the Fedora and
> CentOS containers to default to specifying that option.
>
> Regards,
> Mike
>

That does explain why it worked fine for me.  My host provided kernel
has it disabled so even if the packages are installed in the guest
then apparmor won't activate.