[lxc-users] Out of kernel resources

[Federico Alves]

I have Fedora 22 Workstation and many Fedora 22  containers with GUI
(vncserver).

After I start a few, after 35 containers, vncserver refuses to start in a
new container, under a regular user (falves)
This is the error:
Jul 02 23:14:13 voice38 runuser[515]: pam_unix(runuser-l:session): session
opened for user falves by (uid=0)
Jul 02 23:14:13 voice38 runuser[515]: runuser: failed to execute /bin/bash:
Resource temporarily unavailable
Jul 02 23:14:13 voice38 runuser[515]: pam_unix(runuser-l:session): session
closed for user falves
Jul 02 23:14:13 voice38 systemd[1]: vncserver@:0.service: control process
exited, code=exited status=126
Jul 02 23:14:13 voice38 systemd[1]: Failed to start Remote desktop service
(VNC).
-- Subject: Unit vncserver@:0.service has failed

for that user (falves)
ulimit -a
core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 1048576
max locked memory       (kbytes, -l) unlimited
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1048576
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) 8192
cpu time               (seconds, -t) unlimited
max user processes              (-u) 4096
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited


At the host and at the container:
 /sbin/sysctl fs.file-nr
fs.file-nr = 105472     0       26412773

It seems I am breaking some limit, either at the kernel or per user. I
don´t want to start vncserver as root, because Chrome does not run as root.

Any idea how to unblock this sutuation?

Yours

Federico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20150702/2d487f44/attachment.html>