[lxc-users] unprivileged LXC and lxc-attach...

[Serge E. Hallyn]

On Sat, Jul 22, 2017 at 10:38:01AM +0200, Dirk Geschke wrote:
> Hi Serge,
> 
> > So the only difference is, that I have now to move the user shell
> > in the cgroup before starting lxc-attach. But with older version
> > of lxc/cgmanager this is not necessary...
> 
> I forgot, as root user I do not need to do a cgm movepid to use
> lxc-attach. There I only have to the the lxcpath to the location
> of the unprivileged container.

So I think all you need is to set up either libpam-cgm or libpam-cgfs,
to make sure you get cgroups created on login.