[lxc-users] Unprivileged Lxc won't start on Debian Sid

[zer0 divide]

Hi,
I try to start an unprivileged Lxc container under Debian Sid for a 
while, I tried a lot of things, but it does not work.

Futhermore, I asked here if it was a bug, but it seems not :
https://github.com/lxc/lxc/issues/414#issuecomment-71414827

Now, I'am wondering if it is not a Debian specific problem related to 
some right access on /sys/fs/cgroup.

Here the ouput of systemctl status cgconfig

/hur//aira//@debian:~$ systemctl status cgconfig //
//● cgconfig.service//
//   Loaded: not-found (Reason: No such file or directory)//
//   Active: inactive (dead)/


Here some packages installed on my system :
/lxc            1:1.0.7-1    amd64//
//cgmanager      0.35-1       amd64//
//cgroup-bin     0.41-6       all//
//cgroup-tools   0.41-6       amd64//
//libcgmanager0: 0.35-1       amd64//
//libcgroup1:amd 0.41-6       amd64//
//libpam-cgroup: 0.41-6//      amd64/

Here the log *lxc-start -n test -l DEBUG -o /tmp/lxc_test.log -f 
~/.config/lxc/default.conf*:
/
//      lxc-start 1422302714.376 INFO     lxc_confile - 
confile.c:config_idmap:1325 - read uid map: type u nsid 0 hostid 1214112 
range 65536//
//      lxc-start 1422302714.376 INFO     lxc_confile - 
confile.c:config_idmap:1325 - read uid map: type g nsid 0 hostid 1214112 
range 65536//
//      lxc-start 1422302714.377 WARN     lxc_log - 
log.c:lxc_log_init:316 - lxc_log_init called with log already initialized//
//      lxc-start 1422302714.378 INFO     lxc_confile - 
confile.c:config_idmap:1325 - read uid map: type u nsid 0 hostid 1214112 
range 65536//
//      lxc-start 1422302714.378 INFO     lxc_confile - 
confile.c:config_idmap:1325 - read uid map: type g nsid 0 hostid 1214112 
range 65536//
//      lxc-start 1422302714.378 WARN     lxc_cgfs - 
cgfs.c:lxc_cgroup_get_container_info:1100 - Not attaching to cgroup 
cpuset unknown to /home/huraira/.local/share/lxc test//
//      lxc-start 1422302714.378 WARN     lxc_cgfs - 
cgfs.c:lxc_cgroup_get_container_info:1100 - Not attaching to cgroup 
perf_event unknown to /home/huraira/.local/share/lxc test//
//      lxc-start 1422302714.378 WARN     lxc_cgfs - 
cgfs.c:lxc_cgroup_get_container_info:1100 - Not attaching to cgroup cpu 
unknown to /home/huraira/.local/share/lxc test//
//      lxc-start 1422302714.378 WARN     lxc_cgfs - 
cgfs.c:lxc_cgroup_get_container_info:1100 - Not attaching to cgroup 
net_cls unknown to /home/huraira/.local/share/lxc test//
//      lxc-start 1422302714.378 WARN     lxc_cgfs - 
cgfs.c:lxc_cgroup_get_container_info:1100 - Not attaching to cgroup 
blkio unknown to /home/huraira/.local/share/lxc test//
//      lxc-start 1422302714.378 WARN     lxc_cgfs - 
cgfs.c:lxc_cgroup_get_container_info:1100 - Not attaching to cgroup 
memory unknown to /home/huraira/.local/share/lxc test//
//      lxc-start 1422302714.378 WARN     lxc_cgfs - 
cgfs.c:lxc_cgroup_get_container_info:1100 - Not attaching to cgroup 
freezer unknown to /home/huraira/.local/share/lxc test//
//      lxc-start 1422302714.378 WARN     lxc_cgfs - 
cgfs.c:lxc_cgroup_get_container_info:1100 - Not attaching to cgroup 
devices unknown to /home/huraira/.local/share/lxc test//
//      lxc-start 1422302714.378 INFO     lxc_lsm - 
lsm/lsm.c:lsm_init:48 - LSM security driver nop//
//      lxc-start 1422302714.378 DEBUG    lxc_start - 
start.c:setup_signal_fd:247 - sigchild handler set//
//      lxc-start 1422302714.378 INFO     lxc_start - 
start.c:lxc_init:443 - 'test' is initialized//
//      lxc-start 1422302714.379 DEBUG    lxc_start - 
start.c:__lxc_start:1058 - Not dropping cap_sys_boot or watching utmp//
//      lxc-start 1422302714.379 INFO     lxc_start - 
start.c:lxc_spawn:802 - Cloning a new user namespace//
//      lxc-start 1422302714.379 INFO     lxc_cgroup - 
cgroup.c:cgroup_init:62 - cgroup driver cgroupfs initing for test//
//      lxc-start 1422302714.379 ERROR    lxc_cgfs - 
cgfs.c:lxc_cgroupfs_create:956 - Permission denied - Could not create 
cgroup '/test' in '/sys/fs/cgroup/devices'.//
//      lxc-start 1422302714.379 ERROR    lxc_cgfs - 
cgfs.c:cgroup_rmdir:207 - Permission denied - cgroup_rmdir: failed to 
delete /sys/fs/cgroup/devices///
//      lxc-start 1422302714.379 ERROR    lxc_cgfs - 
cgfs.c:cgroup_rmdir:207 - Permission denied - cgroup_rmdir: failed to 
delete /sys/fs/cgroup/freezer///
//      lxc-start 1422302714.379 ERROR    lxc_cgfs - 
cgfs.c:cgroup_rmdir:207 - Permission denied - cgroup_rmdir: failed to 
delete /sys/fs/cgroup/memory///
//      lxc-start 1422302714.379 ERROR    lxc_cgfs - 
cgfs.c:cgroup_rmdir:207 - Permission denied - cgroup_rmdir: failed to 
delete /sys/fs/cgroup/blkio///
//      lxc-start 1422302714.380 ERROR    lxc_cgfs - 
cgfs.c:cgroup_rmdir:207 - Permission denied - cgroup_rmdir: failed to 
delete /sys/fs/cgroup/net_cls,net_prio///
//      lxc-start 1422302714.380 ERROR    lxc_cgfs - 
cgfs.c:cgroup_rmdir:207 - Permission denied - cgroup_rmdir: failed to 
delete /sys/fs/cgroup/cpu,cpuacct///
//      lxc-start 1422302714.380 ERROR    lxc_cgfs - 
cgfs.c:cgroup_rmdir:207 - Permission denied - cgroup_rmdir: failed to 
delete /sys/fs/cgroup/perf_event///
//      lxc-start 1422302714.380 ERROR    lxc_cgfs - 
cgfs.c:cgroup_rmdir:207 - Permission denied - cgroup_rmdir: failed to 
delete /sys/fs/cgroup/cpuset///
//      lxc-start 1422302714.380 ERROR    lxc_start - 
start.c:lxc_spawn:861 - failed creating cgroups//
//      lxc-start 1422302714.380 ERROR    lxc_start - 
start.c:__lxc_start:1080 - failed to spawn 'test'//
//      lxc-start 1422302714.380 WARN     lxc_conf - 
conf.c:lxc_delete_autodev:1575 - Failed to locate autodev /dev/.lxc and 
/dev/.lxc/user.//
//      lxc-start 1422302714.380 ERROR    lxc_start_ui - 
lxc_start.c:main:342 - The container failed to start./
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20150126/eb74f558/attachment.html>