[lxc-users] sshd-keygen fails during container boot

[Peter Steele]

On 12/09/2015 06:43 PM, Serge Hallyn wrote:
> Ok, systemd does behave differently if it shouldn't be able
> to create devices.  If you add
> 	lxc.cap.drop = mknod sys_rawio
> to your configs does that help?
This did not help. I took it a step further and did an install with the 
lxc capabilities configured to be as similar as possible to my libvirt 
containers and even with this I saw the systemd errors. The only 
difference between the cap sets of the two was cap_audit_control; the 
lxc containers would not start without this capability but libvirt 
containers didn't seem to need it.