[lxc-users] lxc-checkpoint failed when restore unprivileged containers

[Ocean Chen]

When restore an unprivilleged container from checkpoint, it failed with error "Error (image.c:318): Unable to open netns-9.img: Permission denied".


I run everything in root, and has below lines in lxc config file to have unprivilleged container.
  lxc.id_map = u 0 100000 65536
  lxc.id_map = g 0 100000 65536


The cmd to restore container is:
  lxc-checkpoint -n wily8 -D /var/lib/lxc/wily8/dump -r TRACE -v


Error in dump.log from ciru is:


(00.005616) Wait until namespaces are created
(00.006988) Running setup-namespaces scripts
(00.007010)      1: Calling restore_sid() for init
(00.007017)      1: Restoring 1 to 1 sid
(00.007091)      1: Mount procfs in crtools-proc.goosvl
(00.007154)      1: Restoring namespaces 1 flags 0x7c028000
(00.007196)      1: Error (image.c:318): Unable to open netns-9.img: Permission denied
(00.007374) Error (cr-restore.c:1306): 10779 exited, status=1


My env:
ubuntu 15.10 with 4.4.5-040405-generic
lxc 2.0.0~rc13
criu 2.0
checkpoint used to work in my env when I using lxc 2.0.0~rc10 for unprivileged containers, but not after I update to rc13.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20160323/27bb102e/attachment.html>