[lxc-users] LXD on Ubuntu 15.10 armhf

[Matthew Geddes]

Hi,

I'm running Ubuntu 15.10 on some armhf boxes (odroid XU4s) and I'm having
trouble starting containers. I'm not having the same trouble on my Intel
15.10 install. Both architectures are using 2.0.0rc9 from the PPA.

When I attempt to start (lxc start foo) a created container, it fails and
the seemingly-most-relevant log message is:

.... lxc_conf - conf.c:setup_caps.2058 - Operation not permitted - failed
to remove mac_admin capability

Poking around a little further, I can see that I'm able to use capsh to
start a shell and drop CAP_MAC_ADMIN when running as root. The lxd process
is running as root too.

I didn't see a lot of clues in the debug output, so I ran it under strace
and it is indeed failing with EPERM when it calls prctl(PR_CAPBSET_DROP,
0x21,0,0,0). The man page says that this fails when the caller doesn't have
CAP_SETPCAP, so I tried using setcap on the lxd binary as a test, and
restarted it, but to no avail.

Any thoughts?

Thanks in advance.

Cheers
Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20160408/46ef8412/attachment-0001.html>