[lxc-users] Start container from systemd

Mark Clarkson mark.clarkson at smorg.co.uk
Tue Mar 3 09:54:05 UTC 2015


On Mon, 2015-03-02 at 17:15 +0000, Serge Hallyn wrote:
> >  ExecStart=/usr/bin/lxc-start -F -n ubtr1
> 
> Could you add "-l trace -o /tmp/lxc.out" to the ExecStart args here
> and
> show us the contents of /tmp/lxc.out?
> 

NOTES:
* Starting from systemd:
  - lxc-start -n <ct> .. doesn't work
  - lxc-start -f <conf> -n <ct> .. does work
    + but container cannot be stopped either
      * within systemd (ExecStop) .. doesn't work
      * from the cmdline (lxc-stop -n <ct>) .. doesn't work

  - lxc-autostart -A .. does work
    + containers can be started and stopped

#----- SYSTEM SET UP --------------------------

# apt-get update
# apt-get upgrade
# dpkg-query -W lxc

lxc     1.1.0+master~20150224-0137-0ubuntu1~vivid

# lsb_release -a

No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu Vivid Vervet (development branch)
Release:        15.04
Codename:       vivid

# reboot


#----- SYSTEMD SET UP --------------------------

# systemctl daemon-reload
# systemctl cat lxc-start at ubtr1
[Unit]
Description=Linux Container %I
After=network.target

[Service]
Type=simple
Restart=always
ExecStart=/usr/bin/lxc-start -F -n %i -l trace -o /tmp/lxc.out
ExecStop=/usr/bin/lxc-stop -n %i

[Install]
WantedBy=multi-user.target

#----- RUN --------------------------

# rm /tmp/lxc.out
# systemctl start lxc-start at ubtr1
# journalctl -u lxc-start at ubtr1.service
-- Logs begin at Tue 2015-03-03 09:08:19 UTC, end at Tue 2015-03-03
09:22:17 UTC. --
Mar 03 09:21:52 lxchst03 systemd[1]: Started Linux Container ubtr1.
Mar 03 09:21:52 lxchst03 systemd[1]: Starting Linux Container ubtr1...
Mar 03 09:21:52 lxchst03 lxc-start[1454]: lxc-start: lxc_start.c: main:
295 Executing '/sbin/init' with no configuration fi
Mar 03 09:21:52 lxchst03 systemd[1]: lxc-start at ubtr1.service: main
process exited, code=exited, status=1/FAILURE
Mar 03 09:21:52 lxchst03 lxc-stop[1457]: ubtr1 is not running
Mar 03 09:21:52 lxchst03 systemd[1]: lxc-start at ubtr1.service: control
process exited, code=exited status=2
Mar 03 09:21:52 lxchst03 systemd[1]: Unit lxc-start at ubtr1.service
entered failed state.
Mar 03 09:21:52 lxchst03 systemd[1]: lxc-start at ubtr1.service failed.
Mar 03 09:21:53 lxchst03 systemd[1]: lxc-start at ubtr1.service holdoff
time over, scheduling restart.

#----- /tmp/lxc.out --------------------------

# cat /tmp/lxc.out 
      lxc-start 1425374512.580 INFO     lxc_start_ui -
lxc_start.c:main:264 - using rcfile /var/lib/lxc/ ubtr1/config
      lxc-start 1425374512.580 WARN     lxc_log - log.c:lxc_log_init:316
- lxc_log_init called with log already initialized
      lxc-start 1425374512.605 WARN     lxc_cgmanager -
cgmanager.c:cgm_get:962 - do_cgm_get exited with error
      lxc-start 1425374512.606 ERROR    lxc_start_ui -
lxc_start.c:main:295 - Executing '/sbin/init' with no configuration file
may crash the host
      lxc-start 1425374513.156 INFO     lxc_start_ui -
lxc_start.c:main:264 - using rcfile /var/lib/lxc/ ubtr1/config
      lxc-start 1425374513.157 WARN     lxc_log - log.c:lxc_log_init:316
- lxc_log_init called with log already initialized
      lxc-start 1425374513.179 WARN     lxc_cgmanager -
cgmanager.c:cgm_get:962 - do_cgm_get exited with error
      lxc-start 1425374513.180 ERROR    lxc_start_ui -
lxc_start.c:main:295 - Executing '/sbin/init' with no configuration file
may crash the host
      lxc-start 1425374513.399 INFO     lxc_start_ui -
lxc_start.c:main:264 - using rcfile /var/lib/lxc/ ubtr1/config
      lxc-start 1425374513.399 WARN     lxc_log - log.c:lxc_log_init:316
- lxc_log_init called with log already initialized
      lxc-start 1425374513.418 WARN     lxc_cgmanager -
cgmanager.c:cgm_get:962 - do_cgm_get exited with error
      lxc-start 1425374513.419 ERROR    lxc_start_ui -
lxc_start.c:main:295 - Executing '/sbin/init' with no configuration file
may crash the host
      lxc-start 1425374513.654 INFO     lxc_start_ui -
lxc_start.c:main:264 - using rcfile /var/lib/lxc/ ubtr1/config
      lxc-start 1425374513.654 WARN     lxc_log - log.c:lxc_log_init:316
- lxc_log_init called with log already initialized
      lxc-start 1425374513.669 WARN     lxc_cgmanager -
cgmanager.c:cgm_get:962 - do_cgm_get exited with error
      lxc-start 1425374513.670 ERROR    lxc_start_ui -
lxc_start.c:main:295 - Executing '/sbin/init' with no configuration file
may crash the host
      lxc-start 1425374513.896 INFO     lxc_start_ui -
lxc_start.c:main:264 - using rcfile /var/lib/lxc/ ubtr1/config
      lxc-start 1425374513.896 WARN     lxc_log - log.c:lxc_log_init:316
- lxc_log_init called with log already initialized
      lxc-start 1425374513.927 WARN     lxc_cgmanager -
cgmanager.c:cgm_get:962 - do_cgm_get exited with error
      lxc-start 1425374513.928 ERROR    lxc_start_ui -
lxc_start.c:main:295 - Executing '/sbin/init' with no configuration file
may crash the host

#----- LXC-START WORKS WITH -f BUT CAN'T BE STOPPED ------

# vim
# systemctl daemon-reload
# systemctl cat lxc-start at ubtr1
...
ExecStart=/usr/bin/lxc-start -F -f /var/lib/lxc/ubtr1/config -n %i -l
trace -o /tmp/lxc.out
...
# rm /tmp/lxc.out
# systemctl start lxc-start at ubtr1
# ps axf
 1552 ?        Ss     0:00 /usr/bin/lxc-start -F -f /var/lib/lxc/ubtr1/c
 1559 ?        Ss     0:01  \_ /sbin/init
 2044 ?        S      0:00      \_ upstart-socket-bridge --daemon
 2938 ?        S      0:00      \_ upstart-udev-bridge --daemon
 2951 ?        Ss     0:00      \_ /lib/systemd/systemd-udevd --daemon
 3019 ?        Ssl    0:00      \_ rsyslogd
 3021 ?        S      0:00      \_ upstart-file-bridge --daemon
 3036 ?        Ss     0:00      \_ dhclient -1 -v -pf /run/dhclient.eth0
 3102 ?        Ss+    0:00      \_ /sbin/getty -8 38400 tty4
 3104 pts/1    Ss+    0:00      \_ /sbin/getty -8 38400 tty2
 3105 ?        Ss+    0:00      \_ /sbin/getty -8 38400 tty3
 3116 ?        Ss     0:00      \_ cron
 3148 pts/1    Ss+    0:00      \_ /sbin/getty -8 38400 console
 3153 pts/0    Ss+    0:00      \_ /sbin/getty -8 38400 tty1

# cat /tmp/lxc.out
... SHOWN BELOW ...

# systemctl stop lxc-start at ubtr1.service
... systemd waits for a while then ends up killing lxc-start ...
# journalctl -u lxc-start at ubtr1.service
Mar 03 09:32:30 lxchst03 systemd[1]: Stopping Linux Container ubtr1...
Mar 03 09:32:30 lxchst03 lxc-stop[3213]: ubtr1 is not running
Mar 03 09:32:30 lxchst03 systemd[1]: lxc-start at ubtr1.service: control
process exited, code=exited status=2
Mar 03 09:34:00 lxchst03 systemd[1]: lxc-start at ubtr1.service
stop-sigterm timed out. Killing.
Mar 03 09:34:00 lxchst03 systemd[1]: lxc-start at ubtr1.service: main
process exited, code=killed, status=9/KILL
Mar 03 09:34:00 lxchst03 systemd[1]: Stopped Linux Container ubtr1.
Mar 03 09:34:00 lxchst03 systemd[1]: Unit lxc-start at ubtr1.service
entered failed state.
Mar 03 09:34:00 lxchst03 systemd[1]: lxc-start at ubtr1.service failed.
# ls /sys/fs/cgroup/systemd/lxc/
cgroup.clone_children  cgroup.procs  notify_on_release  tasks   ubtr1

#----- /tmp/lxc.out --------------------------

lxc-start 1425375594.398 WARN     lxc_log - log.c:lxc_log_init:316 -
lxc_log_init called with log already initialized
lxc-start 1425375594.398 WARN     lxc_confile -
confile.c:config_pivotdir:1782 - lxc.pivotdir is ignored.  It will soon
become an error.
lxc-start 1425375594.431 WARN     lxc_cgmanager -
cgmanager.c:cgm_get:962 - do_cgm_get exited with error
lxc-start 1425375594.431 INFO     lxc_lsm - lsm/lsm.c:lsm_init:48 - LSM
security driver AppArmor
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:298 - processing: .reject_force_umount  #
comment this to allow umount -f;  not recommended.
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:371 - Adding non-compat rule for
reject_force_umount action 0
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:do_resolve_add_rule:192 - Setting seccomp rule to reject force
umounts

lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:382 - Adding compat rule for
reject_force_umount action 0
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:390 - Adding non-compat rule bc nr1 == nr2
(-1, -1)
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:do_resolve_add_rule:192 - Setting seccomp rule to reject force
umounts

lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:298 - processing: .[all].
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:298 - processing: .kexec_load errno 1.
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:371 - Adding non-compat rule for kexec_load
action 327681
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:382 - Adding compat rule for kexec_load action
327681
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:395 - Really adding compat rule bc nr1 == nr2
(283, 246)
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:298 - processing: .open_by_handle_at errno 1.
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:371 - Adding non-compat rule for
open_by_handle_at action 327681
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:382 - Adding compat rule for open_by_handle_at
action 327681
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:395 - Really adding compat rule bc nr1 == nr2
(342, 304)
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:298 - processing: .init_module errno 1.
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:371 - Adding non-compat rule for init_module
action 327681
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:382 - Adding compat rule for init_module
action 327681
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:395 - Really adding compat rule bc nr1 == nr2
(128, 175)
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:298 - processing: .finit_module errno 1.
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:371 - Adding non-compat rule for finit_module
action 327681
lxc-start 1425375594.432 WARN     lxc_seccomp -
seccomp.c:do_resolve_add_rule:209 - Seccomp: got negative # for syscall:
finit_module
lxc-start 1425375594.432 WARN     lxc_seccomp -
seccomp.c:do_resolve_add_rule:210 - This syscall will NOT be blacklisted
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:382 - Adding compat rule for finit_module
action 327681
lxc-start 1425375594.432 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:390 - Adding non-compat rule bc nr1 == nr2
(-10085, -10085)
lxc-start 1425375594.432 WARN     lxc_seccomp -
seccomp.c:do_resolve_add_rule:209 - Seccomp: got negative # for syscall:
finit_module
lxc-start 1425375594.432 WARN     lxc_seccomp -
seccomp.c:do_resolve_add_rule:210 - This syscall will NOT be blacklisted
lxc-start 1425375594.433 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:298 - processing: .delete_module errno 1.
lxc-start 1425375594.433 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:371 - Adding non-compat rule for delete_module
action 327681
lxc-start 1425375594.433 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:382 - Adding compat rule for delete_module
action 327681
lxc-start 1425375594.433 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:395 - Really adding compat rule bc nr1 == nr2
(129, 176)
lxc-start 1425375594.433 INFO     lxc_seccomp -
seccomp.c:parse_config_v2:403 - Merging in the compat seccomp ctx into
the main one
lxc-start 1425375594.433 DEBUG    lxc_start -
start.c:setup_signal_fd:259 - sigchild handler set
lxc-start 1425375594.436 DEBUG    lxc_console -
console.c:lxc_console_peer_default:536 - no console peer
lxc-start 1425375594.436 INFO     lxc_start - start.c:lxc_init:451 - '
ubtr1' is initialized
lxc-start 1425375594.446 DEBUG    lxc_start - start.c:__lxc_start:1130 -
Not dropping cap_sys_boot or watching utmp
lxc-start 1425375594.456 DEBUG    lxc_conf -
conf.c:instantiate_veth:2675 - instantiated veth
'vethO5MB6Y/vethV1721A', index is '10'
lxc-start 1425375594.456 INFO     lxc_cgroup - cgroup.c:cgroup_init:65 -
cgroup driver cgmanager initing for  ubtr1
lxc-start 1425375594.483 INFO     lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1257 - cgroup limits have been setup
lxc-start 1425375594.500 DEBUG    lxc_conf -
conf.c:lxc_assign_network:3092 - move '(null)' to '6605'
lxc-start 1425375594.528 DEBUG    lxc_conf - conf.c:setup_rootfs:1273 -
mounted '/var/lib/lxc/ubtr1/rootfs' on '/usr/lib/x86_64-linux-gnu/lxc'
lxc-start 1425375594.529 INFO     lxc_conf - conf.c:setup_utsname:908 -
'ubtr1' hostname has been setup
lxc-start 1425375594.532 DEBUG    lxc_conf - conf.c:setup_hw_addr:2225 -
mac address '00:16:3e:d8:ad:51' on 'eth0' has been setup
lxc-start 1425375594.533 DEBUG    lxc_conf - conf.c:setup_netdev:2452 -
'eth0' has been setup
lxc-start 1425375594.533 INFO     lxc_conf - conf.c:setup_network:2473 -
network has been setup
lxc-start 1425375594.533 INFO     lxc_conf - conf.c:mount_autodev:1137 -
Mounting /dev under /usr/lib/x86_64-linux-gnu/lxc
lxc-start 1425375594.533 INFO     lxc_conf - conf.c:mount_autodev:1158 -
Mounted tmpfs onto /usr/lib/x86_64-linux-gnu/lxc/dev
lxc-start 1425375594.533 INFO     lxc_conf - conf.c:mount_autodev:1176 -
Mounted /dev under /usr/lib/x86_64-linux-gnu/lxc
lxc-start 1425375594.534 DEBUG    lxc_conf - conf.c:mount_entry:1718 -
remounting /sys/fs/fuse/connections
on /usr/lib/x86_64-linux-gnu/lxc/sys/fs/fuse/connections to respect bind
or remount options
lxc-start 1425375594.534 DEBUG    lxc_conf - conf.c:mount_entry:1733 -
(at remount) flags for /sys/fs/fuse/connections was 4096, required extra
flags are 0
lxc-start 1425375594.534 DEBUG    lxc_conf - conf.c:mount_entry:1742 -
mountflags already was 4096, skipping remount
lxc-start 1425375594.534 DEBUG    lxc_conf - conf.c:mount_entry:1768 -
mounted '/sys/fs/fuse/connections' on
'/usr/lib/x86_64-linux-gnu/lxc/sys/fs/fuse/connections', type 'none'
lxc-start 1425375594.534 DEBUG    lxc_conf - conf.c:mount_entry:1718 -
remounting /sys/kernel/debug
on /usr/lib/x86_64-linux-gnu/lxc/sys/kernel/debug to respect bind or
remount options
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1733 -
(at remount) flags for /sys/kernel/debug was 4096, required extra flags
are 0
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1742 -
mountflags already was 4096, skipping remount
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1768 -
mounted '/sys/kernel/debug' on
'/usr/lib/x86_64-linux-gnu/lxc/sys/kernel/debug', type 'none'
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1718 -
remounting /sys/kernel/security
on /usr/lib/x86_64-linux-gnu/lxc/sys/kernel/security to respect bind or
remount options
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1733 -
(at remount) flags for /sys/kernel/security was 4110, required extra
flags are 14
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1768 -
mounted '/sys/kernel/security' on
'/usr/lib/x86_64-linux-gnu/lxc/sys/kernel/security', type 'none'
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1718 -
remounting /sys/fs/pstore on /usr/lib/x86_64-linux-gnu/lxc/sys/fs/pstore
to respect bind or remount options
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1733 -
(at remount) flags for /sys/fs/pstore was 4110, required extra flags are
14
lxc-start 1425375594.535 DEBUG    lxc_conf - conf.c:mount_entry:1768 -
mounted '/sys/fs/pstore' on
'/usr/lib/x86_64-linux-gnu/lxc/sys/fs/pstore', type 'none'
lxc-start 1425375594.535 INFO     lxc_conf -
conf.c:mount_file_entries:2017 - mount points have been setup
lxc-start 1425375594.535 INFO     lxc_conf - conf.c:run_script_argv:345
- Executing script '/usr/share/lxcfs/lxc.mount.hook' for container '
ubtr1', config section 'lxc'
lxc-start 1425375595.187 INFO     lxc_conf - conf.c:fill_autodev:1204 -
Creating initial consoles under /usr/lib/x86_64-linux-gnu/lxc/dev
lxc-start 1425375595.192 INFO     lxc_conf - conf.c:fill_autodev:1215 -
Populating /dev under /usr/lib/x86_64-linux-gnu/lxc
lxc-start 1425375595.192 INFO     lxc_conf - conf.c:fill_autodev:1247 -
Populated /dev under /usr/lib/x86_64-linux-gnu/lxc
lxc-start 1425375595.192 INFO     lxc_conf -
conf.c:setup_ttydir_console:1519 -
created /usr/lib/x86_64-linux-gnu/lxc/dev/lxc
lxc-start 1425375595.193 INFO     lxc_conf -
conf.c:setup_ttydir_console:1565 - console has been setup on lxc/console
lxc-start 1425375595.193 INFO     lxc_conf -
conf.c:do_tmp_proc_mount:3548 - I am 1, /proc/self points to '1'
lxc-start 1425375595.195 DEBUG    lxc_conf -
conf.c:setup_rootfs_pivot_root:1115 - pivot_root syscall to
'/usr/lib/x86_64-linux-gnu/lxc' successful
lxc-start 1425375595.196 DEBUG    lxc_conf - conf.c:lxc_create_tty:3336
- allocated pty '/dev/pts/0' (9/12)
lxc-start 1425375595.197 DEBUG    lxc_conf - conf.c:lxc_create_tty:3336
- allocated pty '/dev/pts/1' (13/14)
lxc-start 1425375595.198 DEBUG    lxc_conf - conf.c:lxc_create_tty:3336
- allocated pty '/dev/pts/2' (15/16)
lxc-start 1425375595.199 DEBUG    lxc_conf - conf.c:lxc_create_tty:3336
- allocated pty '/dev/pts/3' (17/18)
lxc-start 1425375595.199 INFO     lxc_conf - conf.c:lxc_create_tty:3347
- tty's configured
lxc-start 1425375595.200 INFO     lxc_conf - conf.c:setup_tty:1060 - 4
tty(s) has been setup
lxc-start 1425375595.200 INFO     lxc_conf -
conf.c:setup_personality:1453 - set personality to '0x0'
lxc-start 1425375595.200 DEBUG    lxc_conf - conf.c:setup_caps:2136 -
drop capability 'mac_admin' (33)
lxc-start 1425375595.200 DEBUG    lxc_conf - conf.c:setup_caps:2136 -
drop capability 'mac_override' (32)
lxc-start 1425375595.200 DEBUG    lxc_conf - conf.c:setup_caps:2136 -
drop capability 'sys_time' (25)
lxc-start 1425375595.200 DEBUG    lxc_conf - conf.c:setup_caps:2136 -
drop capability 'sys_module' (16)
lxc-start 1425375595.200 DEBUG    lxc_conf - conf.c:setup_caps:2145 -
capabilities have been setup
lxc-start 1425375595.200 NOTICE   lxc_conf - conf.c:lxc_setup:3927 - '
ubtr1' is setup.
lxc-start 1425375595.203 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.deny' set to 'a'
lxc-start 1425375595.204 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c *:*
m'
lxc-start 1425375595.204 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'b *:*
m'
lxc-start 1425375595.205 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c 1:3
rwm'
lxc-start 1425375595.205 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c 1:5
rwm'
lxc-start 1425375595.205 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c 1:7
rwm'
lxc-start 1425375595.206 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c 5:0
rwm'
lxc-start 1425375595.207 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c 5:1
rwm'
lxc-start 1425375595.207 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c 5:2
rwm'
lxc-start 1425375595.208 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c 1:8
rwm'
lxc-start 1425375595.208 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c 1:9
rwm'
lxc-start 1425375595.209 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c
136:* rwm'
lxc-start 1425375595.209 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c
10:229 rwm'
lxc-start 1425375595.209 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c
254:0 rm'
lxc-start 1425375595.210 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c
10:200 rwm'
lxc-start 1425375595.210 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c
10:228 rwm'
lxc-start 1425375595.211 DEBUG    lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1253 - cgroup 'devices.allow' set to 'c
10:232 rwm'
lxc-start 1425375595.211 INFO     lxc_cgmanager -
cgmanager.c:cgm_setup_limits:1257 - cgroup limits have been setup
lxc-start 1425375595.211 INFO     lxc_apparmor -
lsm/apparmor.c:apparmor_process_label_set:178 - apparmor profile
unchanged
lxc-start 1425375595.213 NOTICE   lxc_start - start.c:start:1232 -
exec'ing '/sbin/init'
lxc-start 1425375595.219 NOTICE   lxc_start - start.c:post_start:1243 -
'/sbin/init' started with pid '6605'
lxc-start 1425375595.220 WARN     lxc_start - start.c:signal_handler:307
- invalid pid for SIGCHLD


> >  ExecReload=/usr/bin/lxc-restart -F -n %i
> 
> You're not going to want lxc-restart here - lxc-restart has to do with
> checkpoint/restart.  Not with restarting after a configuration change.
> 

Thanks!

> >  ExecStop=/usr/bin/lxc-stop -n %i 



More information about the lxc-users mailing list